We are pleased that you wish to apply to us. In the following we explain, how your personal data is processed in the framework of an application and give you further relevant information in this context.

1. Who is responsible for the processing of your personal data?

Maschinenfabrik Köppern GmbH & Co. KG, Ruhrallee 6, 45559 Hattingen (in the following referred to as „we“) is responsible within the meaning the European General Data Protection Regulation (“GDPR”).

2. Data protection officer

You may contact our data protection officer for all question regarding processing of your personal data and exercising of your rights within the meaning of the GDPR using the following contact options: +49 234 5887723 or datenschutz@koeppern.de.

3. For which purposes and on which legal basis do we process your personal data?

We process your personal data for your application to an employment, as long as it is necessary for the decision about the employment. Legal basis is § 26 Article 1 in connection with Article 8 (2) BDSG.

Furthermore, we can process your personal data as far as it is necessary for rejection of claims raised against us derived from the application process. Legal basis is Art. 6 (1) (f) GDPR. Legitimate interest is for example a burden of proof in proceedings according to the General Equal Treatment Act (GETA).

In the event of an employment relationship coming into force between you and us, we can process the personal data we received from you for employment-related purposes where necessary for hiring decisions, for carrying out or terminating the employment contract or to exercise or satisfy rights and obligations of employees’ representation laid down by law or by collective agreements or other agreements between the employer and staff council according to § 26 (1) GETA.

4. Which categories of personal data do we process?

Which categories of personal data do we procesWe process data related to your application. Those can be general data related to you such as name, address and contact information, information regarding your professional qualification, school education or professional development as well as further information you submit us in the context of your application.

Besides we can process professional data made available by you to the public, such as a profile in a professional social media network.

5. From which sources is the personal data collected when we do not collect them from you directly?

Insofar as we do not collect the data directly from you and you have an active profile in an online job exchange, or you reveal to us in the context of the application process an inactive or partly active profile, we can collect the personal data from that sources.

6. Who can receive your data?

We can transfer your personal data to associated companies, as far as it is allowed in the context of the purposes and legal basis derived from number 3. Besides personal data is processed by our order according to Art. 28 GDPA, especially by hosting providers or suppliers of applicant management systems.

7. Is transmission to a third country intended?

Transmission to a third country is not intended.

8. How long is your data stored?

We store your data as long as it is needed for the decision about your application. If no employment relationship is realized between you and us, we can furthermore store data insofar as it is necessary for possible claims of others. We delete application documents two months after notification of the rejection, unless a longer storage is needed due to legal disputes.

9. What rights do you have

As applicant, you have the following data protection rights, (see below). For the execution you can contact us or our data protection officer under the contact data noted in number 1 and 2 at any time.

a. Information

You have the right to be informed about your personal data processed by us, and to demand access to your personal data and/or receive copies of those data. This includes information about the purpose of use, the categories of the data used, the recipients and accessors, and, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.

b. Rectification, erasure, restriction of processing

You have the right to demand from us rectification of your inaccurate personal data without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c. Right to object

You have the right to object, on grounds relating your particular situation, at any time to processing of your personal data, which is based on point (f) of Article 6(1), including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

d. Right to revoke

If processing of your data is based on your consent, you have the right to object to the consent at any time. This is without prejudice to the lawfulness of the data processed based on your consent until the objection. You may contact our data protection officer in this regard at any time.

e. Right to erasure

You have the right to obtain from us the erasure of your personal data without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You object to the processing pursuant to point 9c and there are no overriding legitimate grounds for the processing.
• The personal data have been unlawfully processed.
• The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

This does not apply as long as processing is necessary:

• for compliance with a legal obligation which requires processing by Union or Member State law
• for the establishment, exercise or defence of legal claims.

f. Right to restriction of processing

You have the right to obtain from the controller restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
• You have objected to processing pursuant to point 9c pending the verification whether our legitimate grounds override yours.

Where processing has been restricted under letter f, such personal data shall, with the exception of storage, only be processed with the your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained restriction of processing, we will inform you before the restriction of processing is lifted.

g. Right to complain

Without prejudice to any other administrative or non-judicial remedy, you have the right complain at a supervisory authority, especially in the member state where you stay, work or where the possible infringement has happen, in case you are of the opinion that the processing of your personal data is not in compliance with the GDPR.

10. Necessity of provision of personal data

Provision of your personal data is neither statutory, nor contractual requirement, nor are you obliged to provide your personal data. However, provision of your personal data is required to enter into an employment contract. That means we will not enter into an employment contract if you do not provide personal data during your application.

11. No automated decisionmaking

No automated individual decisionmaking is carried out according to article 22 GDPR. That means the decision about your application is not exclusively based on automated processing.

Current status of our data protection guidelines

We reserve the right to change these data protection guidelines at any time in compliance with existing data protection regulations.

Current status is may 2018.