Source: https://www.harrys.de/en/data-protection/
Timestamp: 2019-04-23 21:56:07+00:00

Document:
Due to the legal regulations of the European General Data Protection Regulation (“GDPR”), we are obliged to provide you with comprehensive information about the processing of your personal data in the context of your application process, which we are very happy to provide.
Data protection and the handling of your personal data is very important to us, so that we always pay attention to a proper processing of your personal data.
In the event that you have questions about your application data and their processing, our data protec-tion officer is at your disposal at any time. This officer is not subject to any instructions, is independent in his position and legally obliged to maintain secrecy and confidentiality, so that you can turn to him with confidence.
Generally, we process your personal data only insofar as this is necessary for the establishment, implementation and termination of the employment relationship. The further processing of your personal data takes place regularly only if we have obtained your prior consent. An exception ap-plies to cases in which prior consent cannot be obtained due to practical reasons or the pro-cessing of your personal data is permitted by law.
Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) lit. a GDPR, Art. 88 (1) GDPR in connection with § 26 (2) BDSG provides as a legal basis.
In the processing of personal data, which is necessary for the establishment, exe-cution or termination of the employment contract, Art. 6 (1) lit. b GDPR, Art. 88 (1) GDPR in connection with § 26 (1) BDSG, § 611a BGB provides as a legal basis.
Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR provides as a legal basis.
In the event that vital interests of you or another natural person require the pro-cessing of personal data, Art. 6 (1) lit. d GDPR provides as a legal basis.
If the processing is necessary for the protection of a legitimate interest of us or of a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 (1) lit. f GDPR provides as a legal basis for processing.
Insofar as we obtain your consent to the processing of special categories of per-sonal data (Art. 9 (1) GDPR), such as religious belief, ethnic origin and data concern-ing health, Art. 9 (2) lit. a GDPR provides as a legal basis.
If the processing of special categories of personal data is necessary in order for us to exercise our rights under labor law and social security and social protection legis-lation and to fulfill our obligations in this regard, the legal basis results from Art. 9 (2) lit. b GDPR, Art. 88 (1) GDPR in connection with § 26 (3) BDSG.
If the processing of special categories of personal data is necessary for the protec-tion of vital interests, the legal basis for processing originates from Art. 9 (2) lit. c GDPR.
If the processing relates to particular categories of personal data which you have manifestly made public, the legal basis originates from Art. 9 (2) lit. e GDPR.
If the processing of special categories of personal data is required for the purpose of health care, occupational medicine or for the assessment of the working capacity of the employee, the legal basis originates from Art. 9 (2) lit. h GDPR.
The processing of your personal data takes place for the purpose of entering, performing and terminating the employment relationship, in particular for the fulfillment of employ-ment contractual, statutory, if applicable collective agreements, as well as social security obligations.
Your personal data will be erased or restricted as soon as the purpose of the storage has lapsed. Provided that it is foreseen by the European or national legislator in EU regula-tions, laws or other regulations to which we are subject the data may moreover be stored. Restriction or erasure of the data also takes place when a storage period pre-scribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
The processing of your personal data in the context of the application process is absolutely necessary for entering, performing and terminating the application process. Consequent-ly, there is no possibility of objecting for you. If the processing of your personal data takes place on the basis of your consent, you have the option of revoking your consent at any time.
The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 (1) lit. f GDPR or Art. 9 (2) lit. f GDPR.
The purpose of the processing of your personal data in the context of defending and en-forcing legal claims is the defense of unjustified suits and the legal enforcement of claims and rights. This purpose also forms the basis of our legitimate interest in the data pro-cessing pursuant to Art. 6 (1) lit. f GDPR.
The purpose of the processing of your personal data in the context of defending and en-forcing legal claims is the defense of unjustified suits and the legal enforcement of claims and rights. Consequently, you cannot object to this.
You may request confirmation from us as to whether personal data concerning you is be-ing processed by us.
(8) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on you.
You have the right to request information about whether your personal data was trans-ferred to a third country or an international organization. Where personal data is trans-ferred to a third country or to an international organization, you have the right to be in-formed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and / or the right to have incomplete personal data com-pleted.
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate grounds override yours.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of the establishment, exercise or defense of legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
informed by the controller before the restriction of processing is lifted.
(1) Personal data concerning you are no longer necessary in relation to the pur-poses for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing acc. Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR was based and there is no other legal basis for pro-cessing.
(3) You object to the processing acc. to Art. 21 (1) GDPR and there are no over-riding legitimate grounds for the processing, or you submit an objection to the processing pursuant to acc. to Art. 21 (2) GDPR.
(5) Your personal data have to be erased for compliance with a legal obligation under Union or national law to which we are subject.
(6) Your personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
Where we have made the personal data concerning you public and we are obliged to erase these data acc. to Art. 17 (1) GDPR, we, taking into account available technology and costs of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, have requested the erasure by such controllers of any links to, or copy or replications of those personal data.
We have to communicate any rectification or erasure of your personal data or restriction of processing carried out to each recipient to whom your personal data have been dis-closed, unless this proves impossible or involves disproportionate effort.
We inform you about those recipients in case of your request.
The right to data portability shall not apply to processing of personal data which is neces-sary for the performance of a task carried out in the public interest or in the exercise of of-ficial authority vested in us.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of the personal data concerning you which is based on Art. 6 (1) lit. e or f GDPR; this also applies to profiling based on these provisions.
Where the personal data concerning you is processed for direct marketing purposes you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such di-rect marketing.
Where you object to processing for direct marketing purposes the personal data concern-ing you shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the right to object by automated means using technical specifica-tions.
In the event that you have questions about your personal data and their processing, our data protection officer is at your disposal at any time. This officer is not subject to any instructions, is independent in his position and legally obliged to maintain secrecy and confidentiality, so that you can turn to him with confidence.
Generally, we process your personal data only insofar as this is necessary for the fulfill-ment of our services. The further processing of your personal data takes place regularly for the performance of a contract or to take steps prior to entering into a contract.
Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) lit. a GDPR provides as a legal basis.
In the processing of personal data, which is necessary for the performance of the con-tract, Art. 6 (1) lit. b GDPR provides as a legal basis. This also applies to steps prior to en-tering into a contract.
In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR provides as a legal basis.
If the processing is necessary for the protection of a legitimate interest of us or of a third party and if your interests, fundamental rights and fundamental freedoms do not out-weigh the former interest, then Art. 6 (1) lit. f GDPR provides as a legal basis for pro-cessing.
The legal basis for the processing of your personal data in the context of direct marketing by postal service is Art. 6 (1) lit. f GDPR.
The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. This purpose also forms the basis of our legiti-mate interest in the data processing pursuant to Art. 6 (1) lit. f GDPR.
Your personal data will be erased as soon as it is no longer necessary to achieve the pur-pose of the processing; this is the case in particular when the objection is received.
You have the right to object to the processing of your personal data in the context of di-rect marketing by mail at any time in the future.
The legal basis for the processing of your personal data in the context of receiving your e-mail is Art. 6 (1) lit. f GDPR. When the e-mail conversation is conducted in order to con-clude a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.
The purpose of processing your personal data in the context of contact via e-mail is solely the processing of your e-mail request.
Your personal data will be erased as soon as it is no longer necessary to achieve the pur-pose of the processing. When receiving personal data through e-mail contact this is the case when the particular conversation has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clar-ified between you and us.
You have the right to object to the processing of your personal data in the context of con-tacting us by e-mail at any time for the future. In such a case the conversation between you and us cannot be continued. All personal data stored in the course of contacting us will be erased in this case.
The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 (1) lit. f GDPR.
In case the processing of personal data is necessary for the performance of a contract which the data subject is party, Art. 6 (1) lit. b GDPR provides as a legal basis. This also applies to processing in order to take steps prior to entering into a contract.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR provides as a legal basis.
If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and freedoms do not override the aforementioned interest, then Art. 6 (1) lit. f GDPR provides as a legal basis for the processing.
The legal basis for the processing of your personal data in the context of your registration is Art. 6 (1) lit. b GDPR.
Your registration allows enables the simplified conclusion of contracts between you and us. The processing of your personal data during registration is therefore necessary to fulfill a contractual obligation between you and us or to carry out pre-contractual measures.
The legal basis for the processing of your personal data, which is transmitted in the event of contact by you via the contact form or by e-mail, is Art. 6 (1) lit. f GDPR. If the establishment of contact via the contact form or by e-mail aims to conclude a contract Art. 6 (1) lit. b GDPR is an additional legal basis for the processing.
Your personal data will be erased as soon as it is no longer necessary to achieve the purpose of the contact request. For the personal data sent via the contact form or by e-mail this is the case when the conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has finally been clarified between you and us.
You have the opportunity to object at any time to the processing of your personal data in the context of contacting us via the contact form or by e-mail at any time in the future. In such a case, the conversation between you and us cannot continue. All personal data stored in the course of contacting will be erased in this case.
This website uses Google Analytics, the web analysis service of Google Inc. (hereafter “Google”). Google Analytics uses so-called “cookies”, text suggestion files, which are stored on your computer and which allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
Your personal data will be erased as soon as it is no longer needed for our aforementioned purposes. In our case, this is the case after 4 weeks.
Browser and operating system updates may result in the deactivation add-on no longer working as envisaged. Further information about managing add-ons for Chrome can be found here. If you do not use Chrome, ask your browser’s manufacturer directly whether add-ons work properly in the browser version that you use.
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons.
(2) You revoke your consent upon which the processing acc. Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR was based and there is no other legal basis for processing.
(3) You submit an objection to the processing acc. to Art. 21 (1) and there are no overriding legitimate grounds for the processing, or you submit an objection to the processing pursuant to acc. to Art. 21 (2) GDPR.
(5) The erasure of your personal data is necessary for compliance with a legal obligation under Union or national law to which we are subject.

References: Art. 6
 Art. 88
 § 26
 Art. 6
 Art. 88
 § 26
 § 611
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9
 Art. 88
 § 26
 Art. 9
 Art. 9
 Art. 9
 Art. 6
 Art. 9
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21