Source: https://www.htr-bau.biz/data-privacy/
Timestamp: 2019-04-23 20:09:51+00:00

Document:
As a business we take privacy very seriously and want you to feel secure when visiting our website.
As a person affected, you can assert the following rights at any time.
Within the framework of the applicable legal provisions, you have the right to access the personal data stored by us. This includes the right to information about the origin of the data, the recipients and the purpose of the data processing.
Furthermore, you have the right to erase or block your data stored by us and to correct personal data. If due to legal obligations your data may not be deleted, you have the right to restrict the processing of your personal data.
You can object to the data processing by us at any time.
You can revoke consent at any time informally with effect for the future.
You also have the right to have the data processed by us on the basis of a contract or your consent transferred to yourself or to third parties.
In case of a violation of data protection regulations, you can contact the responsible supervisory authority. The competent authority for you depends on the country of your place of residence, your place of work or the place of the alleged infringement.
The processing of your personal data takes place only for the purposes stated in this declaration.
The legal basis for the processing of personal data arises on the one hand from the fulfillment and implementation of a contract in accordance with. Art. 6 para. 1 lit. b EUDataP. This includes among others the billing of services, the sending of invoices as well as the corresponding communication by mail, telephone or by post. Thus, for example contact details (name, address, telephone number, email address) and data for business processing (such as banking and payment data processed).
In addition, the processing of other personal data according Art. 6 para. 1 lit. a EUDataP based on your consent. The granted consent can be withdrawn at any time with effect for the future.
Another admissibility of data processing lies in the protection of our legitimate interests according Art. 6 para. 1 lit. f EUDataP, among others to enforce legal claims, to defend against legal disputes or to implement IT security measures.
Furthermore, the processing is carried out by virtue of legal regulations according Art. 6 para. 1 lit. c EUDataP, for example for the fulfillment of commercial and tax retention obligations and for the fulfillment of reporting or disclosure obligations to authorities etc.
Within our organization, only the entities will have access to your data for the above purposes.
We transmit your data to authorities/public authorities, if required by law.
If necessary, we will transfer your data to companies in our group if this is necessary to fulfill the stated purposes of data processing.
For various business transactions, we use external service providers as processors in accordance with Art. 28 EUDataP. Processing contracts have been concluded with these service providers.
A transfer to third countries does not take place.
The principle of data minimization is our top priority. We only process your data for as long as necessary to achieve the stated purposes or adhere to statutory retention periods. A deletion or blocking of the data takes place after completion of the purpose or expiration of the statutory retention periods.
• Evaluation of system security and stability.
This information does not allow us to make any conclusions about your person.
Storage of the IP address by the provider takes place for detection and defense against attacks for a maximum of 7 days.
The legal basis for data processing is Art. 6 para. 1 lit. b EUDataP, according to which the data processing for the implementation of pre-contractual measures is permitted for example by request for our services. Furthermore, there is a legitimate interest for the aforementioned purposes for collecting data pursuant to Art. 6 para. 1 lit. f EUDataP.
We use encryption procedures over HTTPS to protect transmission and security. Data transmitted by you is therefore illegible by third parties.
If you have questions of any kind, contact us by e-mail or contact form, give us your consent for the purpose of establishing contact.
In order to be able to process your request, the transmitted data is stored. This information is used to assign your request and the subsequent answer.
The processing of your data is based on Art. 6 para. 1 lit. a EUDataP, which allows data processing based on the consent of the data subject. The consent can be withdrawn at any time with effect for the future.
surname, first name, address, telephone number, mailaddress, application documents (letter of application, CV, certificates, etc.).
The collection and processing of your personal application data is exclusively earmarked for the filling of positions within our company. As a matter of principle, your data will only be forwarded to the internal offices and specialist departments of our company responsible for the specific application process.
A transfer of your personal application data to other companies of the HTR Bau Group will not take place without your prior, express consent. If you would like to test an assignment in a company of our corporate group, please let us know.
Any further use or transfer of your application data to third parties will not take place.
A deletion of your personal application data takes place automatically six months after completing the application process. This does not apply insofar as statutory provisions preclude deletion, further storage is necessary for the purpose of providing evidence or you have expressly consented to a longer storage period.
If we are unable to provide you with a vacancy, but your profile suggests that your application may be of interest for future job postings, we will store your personal application information for a period of twelve months, unless you expressly consent to such storage and use.
The provision of personal data is neither legally nor contractually required, but partly technically necessary.
You are not required to provide us with this personal information. We point out that without the provision of personal data for example the retrieval of the website, the establishment of contact or a contract are not possible.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6