Source: https://bia-group.com/company/data_privacy/
Timestamp: 2020-01-25 08:29:25
Document Index: 684171795

Matched Legal Cases: ['§ 26', 'Art. 6', 'Art. 26', 'Art. 3', 'Art. 28', 'Art. 6', 'Art. 6']

BIA Datenschutz
BIA declaration of data protection
Data privacy and protection declaration of the BIA Kunststoff- und Galvanotechnik GmbH & Co. KG (referred to as BIA)
Tel.: +49 (0)212 22330-0
e-mail: dtnschtzbftrgtrb-knststffd
Website: www.bia-group.com
The website of BIA collects a series of general data and information when a data subject or automated system calls up the website. These general data and information are stored in the server log files. Collected may be
the website from which an accessing system reaches our website (referrer),
the sub-websites which are accessed by a controlling system on our website,
When using these general data and information, the BIA does not draw any conclusions about the data subject. Rather, this information is needed to
Therefore, BIA analyses anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
where possible, the envisaged period for which the personal data will be stored, or
if not possible, the criteria used to determine that period
If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.	•
This also applies to profiling based on these provisions.	BIA shall no longer process the personal data in the event of the objection, unless it can be demonstrated that there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.	If BIA processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing.
This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to BIA processing personal data for direct marketing purposes, the BIA will no longer process the personal data for these purposes.	In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the BIA for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
is not necessary for entering into, or the performance of, a contract between the data subject and a data controller, or
it is based on the data subject's explicit consent, BIA shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
7. Data protection regarding applications and application processes
In the following, we will explain how we use your personal data in connection with your application and provide you with other relevant information in this context.
(a) Who is in charge of processing your personal data?
The BIA Kunststoff- und Galvanotechnik GmbH & Co. KG, Lotharstraße 6, 42655 Solingen (hereafter referred to as “BIA”) is responsible for the processing of your data pursuant to the European General Data Protection Regulation (“GDPR”).
(b) Data protection officer
For all questions regarding the processing of your personal data and the exercising of your rights pursuant to the GDPR you may contact our data protection officer (for contact details please refer to Section 1 of this Privacy Policy).
(c) For what purpose and on which legal basis do we process personal data?
We process your personal data for the purpose of your application for employment, to the extent that this is necessary for the decision to establish employment with us. § 26 para. 1 in conjunction with para. 8, page 2 BDSG (German Federal Data Protection Act) form the legal basis for this processing of personal data.
Processing of your personal data is also lawful to the extent that this is required to reject asserted legal claims resulting from an application process against us. This is permitted pursuant to Art. 6 para. 1(f) GDPR. A legitimate interest is e.g. a burden of proof in proceedings pursuant to the German General Act on Equal Treatment (AGG).
In the event that an employment contract is concluded between you and us, we are entitled to process the personal data we received from you for the purpose of the employment relationship pursuant to Art. 26, para 1 BDSG (German Federal Data Protection Act), to the extent that this is required for the implementation or termination of the occupational relationship or for the execution or fulfilment of the rights and duties in connection with employee representation in accordance with the law or a wage, company or service agreement (collective agreement).
(d) Which categories of personal data do we process?
We process data which were collected in connection with your application. These may include general personal information (such as name, address and contact details), information regarding your professional qualifications and school eduction, or information on vocational training or other information you provide in connection with your application. In addition, we may process publicly available professional information, such as a profile in professional social media networks.
(e) Which categories of receiptients of personal data do we distinguish?
We are entitled to transmit your personal data to our affiliate companies to the extent that this is permitted for the purpose and legal bases stipulated in Art. 3. In addition, personal data are processed on our behalf in accordance with agreements pursuant to Art. 28 GDPR, especially by host providers or suppliers of application management systems (pls. refer to Section 9 of this Privacy Policy).
(f) How long will your personal data be stored?
We store your personal data for the duration required to take a decision regarding your application. If no employment contract is concluded between you and us, we are authorised to extend the data storage period, if this is required to defend ourselves against potential legal claims. The application documents will be deleted six months after the announcement of the declination, unless a longer storage is required due to legal disputes or because the applicant has provided express consent to a longer storage in the pool of applicants.
(g) What are your rights?
As an applicant, you have the following data protection rights depending on your specific case, and you may contact us or our data protection officer at any time using the contact data listed in Section 1 and 2 of this Privacy Policy:
You have the right to request information about your personal data we process and to request to access your personal data and/or ask for copies of the data. This includes information about the purposes of the processing for which the personal data are intended, the category of the data used, their recipients and the persons entitled to access the data as well as, if possible, the planned duration of the data storage or, if this is not possible, the criteria governing the determination of this duration.
(2) Right to rectification, erasure and restriction of processing
You have the right to ask us for an immediate rectification of any incorrect personal data we have stored about you. Taking into account the purpose of the processing of your data, you have the right to request the completion of incomplete personal data – also by means of an additional explanation.
In the event that the processing of your personal data takes place in accordance with Art. 6 Abs. 1 (f) GDPR, you have the right to object to the processing of your data based on legitimate grounds relating to your particular situation. We will then cease to object to the use of these personal data, unless we can provide compelling, legitimate grounds, which outweigh your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
If the processing is based on your consent, you have the right to revoke this consent at any time without affecting the legal grounds that had authorised us to process your data before the revocation. To do so, you may contact our data protection officer(s) at any time under the contact details provided above.
You have the right to ask us to erase any personal data without delay and we are required to erase your personal data immediately, if the following reasons apply:
The personal data are no longer required for the purpose for which they were collected or otherwise processed;
You object to the processing of the data pursuant to the above listed Section 8 c and there are no overriding grounds for their processing;
The erasure of your personal data is required to fulfil the legal obligations pursuant to EU legislation or pursuant to the laws of one of the member states, which we are goverened by;
This does not apply, if processing is required
- for the fulfilment of legal obligations which must be fulfilled pursuant to EU legislation or pursuant to the laws of one of the member states, which we are goverened by;
You have the right to ask us to restrict the processing of your data, if the following conditions apply:
You deny the acuracy of the personal data, for a period in which it is possible for us to verify the acuracy of the personal data;
The processing is unlawful and you decline the erasure of the personal data and request a restricted use of your personal data instead;
We no longer require the personal data for the purposes of processing, while you still require them for the the establishment, exercise or defence of legal claims, or
You have filed an objection against the processing in accordance with the above listed Section 8 c, as long as it has not been conclusively established that our legitimate reasons outweigh yours.
If the processing was restricted as per Section (6), these personal data may – with the exception of their storage – only be processed with your consent or for the establishment, exercise or defence of legal claims, or to protect the rights of another natural or legal person or for reasons of substantial public interest of the European Union or an EU member state.
If you have obtained a restriction of the processing, we will inform you, before cancelling the restriction.
(7) Right to complain
Notwithstanding any other administrative and legal remedy, you have the right to submit a complaint to a supervisory authority, in particular in the member state of your residence, your workplace or the place of the presumed breach, if you are of the opinion that the processing of your personal data constitutes a breach of the GDPR.
(8) Requirement to provide personal data
The provision of personal data is neither required by law nor by contract, nor are you obliged to provide personal data. The provision of personal data is, however, required to conclude an employment contract with us. This means that we will not employ you, unless you do not provide us with personal data when applying with us.
8. Data protection in case of applications and during the application process handled by DATEV as a third party supplier
The person responsible for processing collects and processes the applicants’ personal data to handle the application processes. The processing may also be done electronically. This applies in particular, if the applicant has submitted the application documents electronically, e.g. via e-mail or by uploading it using the web form, to the person responsible for processing. If the person responsible for the processing executes an employment contract with the applicant, the transmitted data will be stored for the implementation of the employment contract in accordance with the statutory provisions. If the person in charge of processing does not establish a contract with the applicant, the application documents will be deleted automatically six months after it was announced that the application was declined, unless the person in charge of the processing has no other legitimate interests justifying a non-deletion. Another justified interest in this sense is e.g. the burden of proof in proceedings pursuant to the German General Act on Equal Treatment (AGG).
On our website, you can subscribe to a complimentary newsletter. If you register for the newsletter, the data you insert on the registration form will be transmitted to us.
During the registration process, we request you to provide your consent to the processing of the data and you will be referred to the data protection declaration.
Your data will not be transmitted to third parties in connection with a subscription to a newsletter. The data will only be used for the mailing of newsletters.
If you subscribe to the newsletter, you will receive our newsletter several times a year (a maximum of 4 times a year).
In order for us to send you a newsletter, we require your last name, first name and your e-mail address. If you have subscribed to the newsletter only, your data will be used exclusively for the mailing of the newsletters. There will be no transmission of your data to third parties, unless you provide your consent.
After registration for the newsletter you will receive an e-mail, in which you can confirm that you really want to receive the newsletter and that you are the owner of this particular e-mail address. We inform you of the right of revocation regarding the use of the personal data you provided in connection with your subscription to the newsletter. By clicking on “unsubscribe to the newsletter” you can request the erasure of the data you provided for the subscription to the newsletter and ensure that no further newletters will be sent.
(b) Legal basis for the processing of data
The consent of the user pursuant to Art. 6 para. 1 (a) GDPR forms the legal basis for the processeing of data after registration for the newsletter.
The collection of the user’s e-mail address serves the purpose of mailing the newsletter. The collection of other personal data during the subscription process helps to address you personally. If you do not want this, you are expressly free to register using a pseudonym.
(d) Duration of the storage
The data will be erased as soon as the purpose for which they were collected has been reached. The user’s e-mail address will thus be stored as long as the newsletter subscription is active.
The user can cancel the subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. This also allows the revocation of the consent to store the personal data collected during the registration process.
(f) Newsletter mailing via an external provider
We use rapidmail to send out our newsletters. Your data is therefore transmitted to the rapidmail GmbH. The rapidmail GmbH may not use your data for any other purpose than for the mailing of the newsletter. A transmission or sale of your data by the rapidmail GmbH is not permitted. rapidmail is a German certified newsletter software supplier which has been carefully selected based on the requirements of the GDPR and the BDSG (German Federal Data Protection Act).
On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network.	A social network is a place for social meetings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or business-related information. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests.
During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.	If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject - and for the entire duration of their stay on our Internet site - which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the "Like" button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.
If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site - which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
16. Period for which personal data will be stored
Our Privacy Policy may be amended at random intervals in order to adapt them to the current statutory requirements or to implement changes of our services, e.g. to add new products and/or services. The updated Privacy Policy will automatically apply when you next visit our website. We recommend you read this Privacy Policy from time to time to keep up to date on how we protect your data and constantly improve our website content. If we make substantial changes to the collection, use and/or transmission of your personal data, we will make you aware of this by means of an explicit, clearly visible note on our website. By using our website you declare your consent to the stipulations of this Privacy Policy.
For any questions regarding this privacy policy or data protection as such, please send a message to dtnschtzbftrgtrb-knststffd stating “data protection” in the reference or contact the controller specified under Point 1.