Information according to Art. 13 of the General Data Protection Regulation (GDPR) for applicants

Information according to Art. 13 of the General Data Protection Regulation (GDPR) for applicants

Compliance with data protection regulations is very important to our company. We would like to inform you below about how we collect your personal data:

Responsible:

IFA Insel Ferien Anlagen GmbH & Co.KG, Industriestr. 3, 23769 Fehmarn [it-support.de@lopesan.com] is responsible for data processing.

Data required for the decision on the establishment of the employment relationship:

As part of the application process, we process data from you that we need to decide on the establishment of the employment relationship.

This includes, in particular, your contact details, such as your name and address, as well as all data related to the application, such as your CV, certificates, qualifications. If you submit an application for reimbursement of travel expenses, we also require your bank details. The legal basis for the processing of your data is Art. 88 GDPR in conjunction with Section 26 Paragraph 1 Sentence 1 BDSG.

We also process personal data that is not required for the application (e.g. a photo of you). This data is processed on the basis of your revocable consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a, Art. 7 GDPR in conjunction with Section 26 Para. 2 BDSG.

Sources of data:

We only process the personal data that you provide to us as part of the application process.

Data deletion:

Unless there is a statutory retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. If no employment takes place, this is usually the case no later than three months after completion of the application process or after the rejection has been sent. We also delete data if you revoke your consent to the processing of your data.

In individual cases, individual data may be stored for a longer period (e.g. travel expense reports). The storage period is then based on the statutory retention periods, e.g. from the Tax Code (6 years) or the Commercial Code (10 years). Further storage of your data is also permitted if further processing is necessary for us to assert, exercise or defend legal claims after weighing up the interests.

talent pool

If you have not been hired but your application is still of interest to us, we may ask you whether we may keep your application for future vacancies. This longer retention period is based on your revocable consent in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a, Art. 7 GDPR in conjunction with Section 26 Paragraph 2 BDSG. Inclusion in our talent pool is voluntary and failure to grant the corresponding consent has no effect on other ongoing application processes.

We store applications that we have included in the talent pool for one year. After that, the documents are deleted. We keep your declaration of consent to be included in our talent pool for 3 years in order to comply with our accountability obligations within the meaning of Art. 5 Para. 2 GDPR.

Recipients of your data:

We will of course treat your data confidentially and will not pass it on to third parties.

If necessary, we use service providers who are strictly bound to our instructions and who support us, for example, in the areas of IT or document destruction and with whom separate contracts for order processing have been concluded.

Your rights:

As a data subject, you have the right to information about the personal data concerning you (Article 15 GDPR) and to rectification of incorrect data (Article 16 GDPR) or erasure if one of the reasons stated in Article 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. You also have the right to restrict processing if one of the conditions stated in Article 18 GDPR applies and, in the cases of Article 20 GDPR, the right to data portability. If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Article 7 GDPR. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to fulfill legal requirements despite your revocation (see “Data deletion” for more information).

right of objection

In cases where we process your personal data on the legal basis of Art. 6 Paragraph 1 Sentence 1 Letter e or f of GDPR, you have the right to object at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.