Source: https://www.roderuk.com/data-privacy-policy.html
Timestamp: 2019-04-23 16:28:11+00:00

Document:
Further details or additions to the purposes of data processing can be found in the respective contract documents, in forms, in a declaration of consent and/or other information provided to you (e.g., in the context of the use of our website or in our terms and conditions). This Data Protection Information may be updated from time to time and is available on our website https://roderuk.com/data-privacy-policy.html.
The processing of personal data is performed at your request for the performance of our contracts with you and for the performance of your orders, as well as for the performance of measures and activities within the scope of precontractual relationships, e.g., with interested parties. The collection of these data is performed mainly in connection with the provision of services in connection with the delivery, assembly, dismantling of tents, mobile structures, warehouses and riding halls as well as accessories, according to your orders and wishes. This essentially includes contract-related communication with you, the corresponding billing and associated payment transactions, the traceability of transactions, orders and other agreements as well as quality control through appropriate documentation, goodwill procedures, measures to control and optimise business processes and to fulfil general duties of care, statistical evaluations for corporate management, cost recording and management, reporting, internal and external communication, emergency management, accounting and tax assessment of operational services, risk management, assertion of legal claims and defence in legal disputes; guarantee of IT security (including system and plausibility tests) and general security, including building and facility security, securing and exercising domiciliary rights (e.g. through access controls); ensuring the integrity, authenticity and availability of data, prevention and investigation of criminal offences; monitoring by supervisory bodies or monitoring authorities (e.g. auditing).
Your personal data may also be processed for certain purposes (e.g., use of company communication systems for private purposes; photographs/videos of you for publication in the Intranet/Internet) including as a result of your consent. As a rule, you may revoke this consent at any time. This also applies to the revoking of declarations of consent that were issued to us before the GDPR went into effect, i.e., prior to May 25, 2018. You will be informed separately about the consequences of revocation or refusal to provide consent in the respective text of the consent. Generally, revocation of consent only applies to the future. Processing carried out prior to consent being issued is not affected and remains lawful.
We will not otherwise pass on your data to third parties. Insofar as we commission service providers within the scope of processing an order, your data will in this case be subject to the same security standards as our own. In all other cases, recipients may only use the data for the purposes for which they were provided.
In addition, we are subject to various storage and documentation obligations including those set out in the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods for storage or documentation specified therein extend up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.
Furthermore, special legal regulations may require a longer storage period, e.g. the preservation of evidence within the scope of the legal statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), the regular limitation period is three years, but limitation periods of up to 30 years may also apply.
If the data is no longer required for the fulfilment of contractual or statutory obligations and rights, it is regularly deleted, unless its - limited - further processing is necessary for the fulfilment of the purposes listed under 2.2 for reasons of overriding legitimate interest. Such a predominant legitimate interest also exists, for example, if deletion is not possible or only possible with disproportionate effort due to the special type of storage and processing for other purposes by suitable technical and organisational means is impossible.
7.9 In addition, you have the right to complain to a data protection supervisory authority (Art. 77 GDPR). recommend, however, that complaints should always initially be sent to our Data Protection Officer.
You have the right to file an objection at any time against processing of your data carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a weighing-up of interests) or Art. 6(1)(e) GDPR (data processing in the public interest). The precondition for this is, however, that there are grounds for your objection emanating from your special personal situation. This also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
We also process your personal data in order to perform direct advertising. If you do not want to receive any advertising, you have the right to file an objection against this at any time. This also applies to the profiling to the extent that it is connected with such direct advertising. We will respect this objection with effect for the future.
You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Please enter your e-mail address to subscribe to our newsletter, after which you will receive a registration receipt via e-mail. To help prevent misuse, your subscription will be only activated when you have confirmed our e-mail.
You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: By a log-out link in the newsletter.
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz), as well as other applicable data protection regulations. Details can be found below. Further details or additions to the purposes for data processing can be found in the relevant contractual documentation, in forms, or in a declaration of consent and other information provided to you.
Processing of your personal data is performed for the handling of your application based on a specific job advertisement or an unsolicited application, and in this connection only for the following purposes: examination and assessment of your suitability for the position to be filled, performance and conduct analysis within the legally permitted scope, if applicable for registration and authentication of an application via our website, if applicable for drafting an employment agreement, traceability of transactions, orders, and other agreements, as well as for quality control by means of appropriate documentation, measures for meeting the general duties of care, statistical evaluations for corporate management, travel and event management, travel bookings and travel cost invoicing, rights and credential management, cost recording, and controlling, reporting, internal and external communications, invoicing and tax evaluation of operational services (e.g., canteen food), invoicing via company credit cards, workplace security and health protection, communications relating to contracts (including appointments) with you, assertion of legal claims and defense in case of legal disputes; guaranteeing of IT security (including system or plausibility tests) and general security, including building and plant safety, securing and safeguarding of internal rules by means of corresponding measures, as well as, if applicable, by means of video surveillance for the protection of third parties and our employees, and to prevent and secure evidence in case of offenses; guarantees of integrity, prevention and solving of criminal acts; authenticity and availability of data, monitoring by supervisory boards or supervisory bodies (e.g., auditing).
Beyond the actual fulfillment of the (preliminary) contract, we will process your data if necessary to safeguard either our justified interests or those of third parties. Processing of your data will only take place if and insofar as no predominant interests on your part are opposed to such processing, for the following purposes in particular: measures for further processing of existing systems, processes and services; comparisons with European and international anti-terror lists, if they exceed the legal obligations; enhancement of our data, including through the use or researching of publicly accessible data if necessary; benchmarking; development of scoring systems or automated decision-making processes; building and plant security (e.g., by means of access control and video surveillance), if this exceeds the general duties of care; internal and external investigations, security investigations.
Processing of your personal data may also take place for certain purposes (e.g., to obtain references from previous employers or use of your data for future vacancies) on the basis of your consent. In general, you may revoke your consent at any time. You will be informed of the purposes and the consequences of revocation or failure to give consent in the corresponding text of the consent.
In principle, revocation of consent only affects the future. Any processing carried out prior to the revocation remains unaffected and legal.
Like all players in business life, we are also subject to a large number of legal obligations. These are primarily statutory requirements (e.g., Works Constitution Act, Social Code, Commercial Code, and Tax Code), but also if applicable supervisory law or other requirements set out by government authorities (such as employers’ liability insurance associations). The purposes of processing may also include identity and age checks, prevention of fraud and money laundering (e.g., comparisons with European and international anti-terror lists), compliance with control and notification obligations under tax law as well as the archiving of data for the purposes of data protection and data security, as well as for purposes of audits by tax advisors/auditors, fiscal and other government authorities. In addition, it may be necessary to disclose personal data within the framework of official government/court measures for the purposes of collecting evidence, law enforcement and criminal prosecution or the satisfaction of civil law claims.
Where necessary for the contractual relationship with you and the application you have submitted, we process any data received from other bodies or from other third parties in a permissible manner. In addition, we process personal data that we have obtained, received, or acquired in a permissible way from publicly accessible sources (such as commercial and association registers, civil registers, press, internet, and other media), where required and where we are allowed to process such data in accordance with the statutory provisions.
if you have given us consent for transmission to third parties.
We will likewise not pass on your data to a third party without notifying you thereof separately. If we commission service providers to perform processing, your data will be subject to the security standards that we have stipulated in order to protect your data in an appropriate manner. In the aforementioned cases, the employees may only use the data for the purposes for which they were transmitted.
In principle, we process and store your data for the duration of your application, as well as if you provide us with your data for incorporation into our pool of applicants. This also includes the initiation of a contract (precontractual legal relationship).
In addition, we are subject to various storage and documentation obligations, arising among other things from the German Commercial Code and the German Tax Code. The durations prescribed there for storage of documentation are up to ten years after the end of the contractual relationship or the precontractual legal relationship. The original of your application documentation will be returned to you if you have not been recruited after six months. Electronic data will accordingly be erased after six months. You will be notified of details in connection with the process in question.
If the data are no longer necessary for the fulfillment of contractual or legal obligations and rights, they will be erased on a regular basis, unless it is necessary to continue processing them for a limited period in order to fulfill the purposes listed under item 2.2 based on our overriding justified interests. An overriding justified interest of this kind will exist, for example, if erasure is not possible due to the particular type of storage or is only possible at disproportionately high expense. In these cases, we may also store and if necessary use your data within a limited scope after the end of this contractual relationship for a duration agreed upon along with the purposes. In principle, in these cases, instead of the data being erased, processing will be restricted. In other words, the data will be blocked against the otherwise usual use by means of corresponding measures.
Data are transmitted to parties in countries outside the European Economic Area EU/EEA (third countries) whenever such is necessary to meet a contractual obligation towards you (e.g., application for a position in another country) or where such is in the legitimate interests of us or a third party, or if you have issued us with your consent to such.
At the same time, your data may be processed in a third country, including in connection with the involvement of service providers within the framework of contract processing. If no decision has been issued by the EU Commission regarding the presence of an appropriate level of data protection for the respective country, we warrant that your rights and freedoms will be reasonably protected and guarantied in accordance with EU data protection requirements through contractual agreements to this effect. Information on the suitable or appropriate guarantees and about how and where you can obtain a copy of these may be requested from the operational data protection officer or the human resources department responsible for you.
Each data subject has the right of access in accordance with Art. 15 GDPR, the right to rectification in accordance with Art. 16 GDPR, the right to erasure in accordance with Art. 17 GDPR, the right to restrict processing in accordance with Art. 18 GDPR, as well as the right to data portability under Art. 20 GDPR. The restrictions in accordance with Sections 34 and 35 Federal Data Protection Act) will apply to the right of access and the right to erasure. In addition, you have a right to complain to a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 Federal Data Protection Act).
Your requests to exercise your rights should ideally be sent in writing to the address listed above or directly to our Data Protection Officer.
You are only required to provide data that are necessary for the processing of your application or a pre-contractual relationship, or that we are obligated to collect by law. Without such data we will generally not be able to continue to perform the application and selection process. If we request further information from you, you will be notified separately that the information is voluntary.
We do not use any purely automated decision-making procedures pursuant to Article 22 GDPR. If we do, however, use a procedure of this kind in the future in individual cases, we will notify you separately thereof if we are legally obligated to do so.
You have the right to file an objection at any time against processing of your data carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a weighing-up of interests) or Art. Art. 6(1)(e) GDPR (data processing in the public interest). The precondition for this is, however, that there are grounds for your objection emanating from your special personal situation. This also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
You may, of course, withdraw your application at any time.
We do not intend to use your personal data for purposes of direct marketing. Nevertheless, we are required to inform you that you have the right to file an objection to advertising at any time. This also applies to profiling to the extent that it is connected with such direct advertising. We will respect this objection with effect for the future.
Our information on data protection in accordance with Articles 13, 14, and 21 GDPR may change from time to time. We will publish all changes on this site.

References: Art. 6
 Art. 6
 Art. 4
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 6
 Art. 4