We take the protection of your personal data very seriously. We always treat your personal data confidentially and in accordance with the statutory data protection regulations. Therefore, we would like to inform you here why we collect, use and process certain data from you and what rights you are entitled to.
The responsible party is:
06108 Halle (Saale), Germany
We process personal data that we have received from you insofar as this is necessary for the purposes of recruitment, fulfilment of the employment contract and termination of the employment relationship. In addition, we process personal data of our employees and other comparably affected persons that regularly arise in the context of the employment relationship.
The personal data we process include:
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):
To fulfil contractual obligations (Section 26 BDSG).
Data is processed for the purpose of establishing, implementing or terminating the employment relationship within the framework of the contract existing with you or for the purpose of implementing pre-contractual measures that are carried out upon request. If you make use of additional benefits (e.g. childcare subsidy, pension scheme), your data will be processed to fulfil these additional benefits, insofar as this is necessary.
Within the framework of the balancing of interests (Art. 6 para. 1 f GDPR)
Where necessary, we process your data beyond the actual performance of the contract to protect the legitimate interests of us or third parties. Examples of such cases are:
Based on your consent (Art. 6 para. 1 a GDPR in conjunction with Art. 88 GDPR and § 26 para. 2 BDSG)
If you have given us consent to process your personal data, processing will only take place in accordance with the purposes and to the extent agreed in the declaration of consent. Consent given can be revoked at any time with effect for the future. This also applies to the revocation of declarations of consent given to us prior to the application of the GDPR, i.e. prior to 25 May 2018. The revocation of consent only takes effect for the future and does not affect the lawfulness of the data processed until the revocation.
Use and, if applicable, publication of employee pictures, e.g. on the website
Due to legal requirements (Art. 6 para. 1 c GDPR as well as Art. 88 GDPR and § 26 BDSG).
As a company, we are subject to various legal obligations, i.e. legal requirements (e.g. social security law, occupational health and safety, professional code of conduct for lawyers, tax laws, if applicable) as well as supervisory requirements (e.g. of the bar associations). The purposes of the processing include, among others, identity verification, the fulfilment of social security and tax law control, reporting or documentation obligations as well as the management of risks in the company.tion.
Insofar as special categories of personal data are processed pursuant to Art. 9 (1) GDPR, this serves the exercise of rights or the fulfilment of legal obligations from labour law, social security law and social protection within the framework of the employment relationship (e.g. disclosure of health data to the health insurance fund, recording of severe disability due to additional leave and determination of the severe disability levy). This is done on the basis of Art. 9 para. 2 b GDPR in conjunction with. § Section 26 (3) BDSG. In addition, the processing of health data for the assessment of their ability to work pursuant to Art. 9 para. 2 h in conjunction with. § Section 22 (1) b BDSG. In addition, the processing of special categories of personal data may be based on consent pursuant to Art. 9 para. 2 a GDPR in conjunction with. § Section 26 para. 2 BDSG new (e.g. operational integration management).
Within the company, access to your data is granted to those offices that need it to fulfil contractual, legal and supervisory obligations as well as to safeguard legitimate interests, e.g. the HR department, representatives of the severely disabled.
Service providers and vicarious agents employed by us may also receive data for these purposes, insofar as they require the data to perform their respective services. These are, for example, companies in the categories of training providers and IT services. All service providers are contractually obliged to treat your data confidentially.
With regard to the transfer of data to recipients outside our company, it should first be noted that as an employer we only pass on necessary personal data in compliance with the applicable data protection regulations. As a matter of principle, we may only disclose information about our employees if this is required by law, if you have consented to it or if we are otherwise authorised to disclose it.
Under these conditions, recipients of personal data may be e.g:
Other data recipients may be those bodies for which you have given us your consent to transfer data or to which we are authorised to transfer personal data on the basis of a balancing of interests.
As a rule, data is not transferred to countries outside the European Economic Area (so-called third countries). Nevertheless, data may be transferred to third countries in individual cases, insofar as:
Beyond that, we do not transfer personal data to entities in third countries or international organisations.
However, we use service providers for certain tasks, most of which also use service providers that may have their registered office, parent company or data centres in a third country. A transfer is permitted if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR). If the Commission has not made such a decision, we or our service providers may only transfer personal data to a third country if appropriate safeguards are in place (e.g. standard data protection clauses adopted by the EU Commission or the supervisory authority in a specific procedure) and enforceable rights and effective remedies are available.
We have concluded appropriate contracts with our service providers and have also contractually agreed that data protection guarantees must always be in place with their contractual partners as well, in compliance with the European level of data protection.
We process and store your personal data as long as this is necessary for the fulfilment of our contractual and legal obligations. It should be noted that the employment relationship is a continuing obligation that is intended to last for a longer period of time.
If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - further processing is necessary for the following purposes:
If the data processing is carried out in the legitimate interest of us or a third party, the personal data will be deleted as soon as this interest no longer exists. The aforementioned exceptions apply here. The same applies to data processing based on consent given. As soon as this consent is revoked by you for the future, the personal data will be deleted, unless one of the exceptions mentioned applies. If the data is stored on the basis of a company agreement, the storage period is regulated there.
Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR).
You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the applicability of the General Data Protection Regulation, i.e. before 25 May 2018. Please note that the revocation only takes effect in the future. Processing that took place before the revocation is not affected.
Within the scope of the employment relationship, you must provide those personal data that are necessary for the establishment, implementation and termination of an employment relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to enter into or perform the contract with you.
We do not use automated decision-making pursuant to Article 22 of the GDPR for the establishment, implementation and termination of the working relationship. Should we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, insofar as this is required by law.
We do not process your data with the aim of automatically assessing certain personal aspects.
Individual right of objection.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) GDPR (data processing based on a balance of interests). This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Recipients of an objection
The objection can be made informally with the subject "Objection", stating your name, address and date of birth, and should be addressed to the contact details mentioned under point 1 or directly to your HR manager.
We revise this data protection notice in the event of changes to data processing or other occasions that make this necessary. You will always find the current version on this website.