Source: https://salt-and-pepper.eu/en/data-security
Timestamp: 2020-03-31 13:48:39
Document Index: 222436111

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 45', 'Art. 46', 'Art. 6', 'Art. 26', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 18', 'Art. 20', 'Art. 21']

SALT AND PEPPER: Data security
In order to ensure that you feel secure and at ease, below we would like to inform you about how we handle your data. Data protection in the SALT AND PEPPER Group conforms to regulatory data protection rules and is therefore subject to change. That is why we kindly request that you consult this page again at regular intervals concerning the latest version.
Your personal data is not disclosed to third parties other than for the purposes specified below. We only disclose your personal data to third parties if:
You have provided your express consent for this purpose (Art. 6 Sect. 1 Subsect. 1 a GDPR),
the disclosure is for establishing, exercising or defending legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (Art. 6 Sect. 1 Subsect. 1 f GDPR),
in the event that a legal obligation exists for the disclosure according to Art. 6 Sect. 1 Subsect. 1 c GDPR or
this is legally permissible and required for the settlement of contractual relationships with you (Art. 6 Sect. 1 Subsect. 1 b GDPR).
In order to structure our websites as needed, we use the web analysis tool, "Google Analytics". Google Analytics creates usage profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your user device and read out by us. This enables us to identify recurring visitors and to count them as such.
Data processing occurs on the basis of your consent pursuant to Art. 6 Abs. 1 Subsect. 1 a GDPR, to the extent you have provided your consent via our banner.
You can withdraw your consent at any time. To do so, please follow this link and adjust the relevant settings via our banner.
Within the scope of Google Analytics, Google supports us as a processor according to Art. 28 GDPR. In this, the data processing may also occur outside the EU or the EEA. With respect to Google, one can assume a reasonable level of data protection pursuant to Art. 45 Sect. 1 GDPR through participation in the privacy shield agreement, as well as pursuant to Art. 46 Sect. 2 lit c GDPR through the adoption of EU standard contractual clauses.
You have the opportunity to enter into contact with us via a web form. In order to use our contact form, we require your name and your e-mail address. You may provide us with addition details, but you are not required to do so.
The legal ground for processing is Art. 6 Sect. 1 lit. f GDPR. Your data are only processed in order to answer your enquiry and are erased upon completed handling. There is no forwarding to third parties.
7. Information for applicants
Compliance with data protection regulations is a high priority for our company. In the following we would like to inform you about the collection and processing of your personal data during the application process:
7.1 Responsible body
For data collection and processing of your application, the company within the SALT AND PEPPER Group where you have applied is the responsible body.
7.2 Purpose and nature of data
During the application, we process data from you that we require within the scope of the application. This may include contact data, all data in connection with the application (CV, certificates, qualifications, replies to queries etc.) as well as data concerning your banking coordinates (for the purpose of reimbursing travel costs).
The legal ground for this arises from Art. 26 Federal Data Protection Act.
To the extent that no statutory period of retention exists, the data will be erased as soon as storage is no longer necessary or if the legitimate interest in storage has expired. To the extent that no hiring occurs, this is normally the case no later than six months upon completion of the application process.
In individual cases, longer storage of individual data may occur (e.g. settlement of travel expenses). The duration of storage is then in accordance with statutory duties of retention, e.g. arising from the German Fiscal Code (6 years) or the German Commercial Code (10 years).
To the extent that hiring has not occurred, yet your application continues to be of interest to us, we will ask you whether we may keep your application for filling future positions.
7.5 Confidential treatment of your data
Naturally, we will treat your data confidentially. We only disclose data to third parties to the extent that this is absolutely necessary, and a legal basis exists, e.g. to companies of the SALT AND PEPPER Group for handling the application process. The individual companies have concluded agreements amongst themselves for the purpose of order processing.
Where necessary, we deploy service providers strictly bound to instructions, who assist us, i.e. in the areas of IT or in the archiving and destruction of documents and with whom separate agreements for order processing have in turn been concluded.
8. Information on recruiting
We also process personal data in the area of personnel recruiting. Below, we would like to inform you about the collection of data in this process.
For data collection and processing within the relevant job, the company within the SALT AND PEPPER Group which is carrying out the respective measure is the responsible body.
8.2 Purpose and nature of data
We participate in trade fairs, engage in active sourcing in social media and job exchanges and organise events and activities. The purpose for this is to recruit personnel. For the fulfilment of this purpose, it is necessary to process your data. The processing may include contact data and data required to substantiate an application process (CV, letters of reference, certificates, qualifications, replies to queries, etc.). To the extent that we have not obtained the data from you but rather from another source, we shall inform you about the data processing within a reasonable period, depending on the circumstances of the case.
8.3 Legal basis for data processing
In connection with our legitimate interest in implementing an application process, the legal basis arises from Art. 6 Sect. 1 Subsect. 1 f) GDPR.
To the extent that no statutory period of retention exists, the data will be erased as soon as storage is no longer necessary or if the legitimate interest in storage has expired.
To the extent that you have no interest in initiating further contact, we will promptly erase any data we have received up to that time. In doing so, however, we assume that we are allowed to store your name further with a note stating that you no longer wish to be contacted by us in the future. This reduces the likelihood that we will contact you again in the course of recruiting. To the extent this is not your wish, please inform us accordingly. To the extent you are interested in working for our company, this is subject to regulations concerning the duration of data processing in the application process.
8.5 Confidential treatment of your data
Naturally, we will treat your data confidentially. We only disclose data to third parties to the extent that this is absolutely necessary, and a legal basis exists, e.g. to companies of the SALT AND PEPPER Group for handling the recruiting process. The individual companies have concluded agreements amongst themselves for the purpose of order processing.
9. Information for contact persons of customers, prospects and suppliers
We wish to inform you below about the processing of your personal data in our company within the business relationship or the prospective business relationship with your employer.
9.1 Responsible body
The company within the SALT AND PEPPER Group is the responsible body with whom the contractual relationship or prospective contractual relationship exists.
9.2 Purpose and nature of data
We process the orders of our customers, enlist new customers, and solicit offers and information from suppliers. The purpose is to carry out and administer business. For the fulfilment of this purpose, it is necessary to process the personal data of you as the contact person. The data processed may include business contact data (organisation, position, name, business postal address, business e-mail address, business phone or cell phone number). To the extent that we have not obtained the data from you but rather from another source, we shall inform you about the data processing within a reasonable period, depending on the circumstances of the case.
In connection with our legitimate interest in implementing the contractual relationship, the legal basis arises from Art. 6 Sect. 1 Subsect. 1 b) and f) GDPR.
9.4 Data erasure
A legitimate interest exists hereby as long as a business relationship exists to your employer. Should we learn that you are not longer the contact person for the business relationship, we will also erase your data.
9.5 Confidential treatment of your data
Naturally, we will treat your data confidentially. We only disclose data to third parties to the extent that this is absolutely necessary, and a legal basis exists, e.g. to companies of the SALT AND PEPPER Group for processing of the agreement. The individual companies have concluded agreements amongst themselves for the purpose of order processing.
10.1 Right of access (Art. 15 GDPR):
10.2 Right to rectification and erasure (Art. 16 and 17 GDPR):
10.3 Right to restriction of processing (Art. 18 GDPR):
10.4 Right to data portability (Art. 20 GDPR):
10.5 Right to object (Art. 21 GDPR):