Information on data processing
1. Name and contact details of the person responsible
Van Waveren Saaten GmbH
Auf der Feldscheide 1
37124 Rosdorf
+49 551 99723 – 0
info@vanwaveren.de
2.Data Protection Officer:
The data protection officer of Van Waveren Saaten GmbH is
Mr Paul Maurer
Data & Privacy Data protection consulting
Tiestr. 2
37127 Bühren
05502 997 999 0
info@dataandprivacy.de
3.Purposes and legal bases of data processing:
We process your personal data that we receive from you or from third parties in the context of business relationships. This includes your contact details such as name, address, telephone number and e-mail address. We also process other data that you voluntarily provide to us as part of a contractual relationship or as part of the initiation of a contract or for the realisation or execution of a project.
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other relevant data protection laws. We have taken appropriate technical and organisational security measures (in accordance with Art. 32 GDPR) to ensure the protection of your personal data and regularly train our employees in data protection issues.
We process your personal data on the basis of the legal bases described below and for the purposes stated below
2. on the basis of your consent given to us (Art. 6 para. 1 lit. a GDPR),
3. due to legal requirements (Art. 6 para. 1 c GDPR), e.g. to fulfil retention obligations under commercial or tax law, to fulfil obligations to provide information to authorities, etc,
or: within the scope of our legitimate interests (Art. 6 para. 1 lit. f GDPR). In doing so, we strictly ensure that the processing of your personal data is necessary for us and that your interests as a data subject do not outweigh our interests in data processing.
Application procedure:
If we process your data for the purpose of the application process, we are authorised to do so in accordance with Art. 88 Para. 1 GDPR in conjunction with. § 26 para. 2 BDSG; and possibly Art. 9 para. 2 b) GDPR. Your personal data will only be passed on to persons who are involved in the processing of your application and who are required to process it.
Your application documents will be returned or destroyed at the end of the application process. If you agree to us retaining your data beyond this period in our pool of interested parties for further job advertisements, we ask for your consent by e-mail or post. We will store your contact details, information on any severe disability you may have, as well as the data on receipt of the application, confirmation of receipt, invitation to interview and rejection or withdrawal of the application and delete it 6 months after completion of the application process. If you are hired, this data will be stored in your personnel file and deleted after termination of the employment relationship in accordance with the statutory retention periods.
4.Categories of personal data
We only process data that is related to the establishment of the contract or the pre-contractual measures. This may be general data about you or persons in your company (name, address, contact details, etc.) as well as any other data that you provide to us in the context of establishing the contract.
5.Sources of thedata
We process personal data that we receive from you in the context of establishing contact or establishing a contractual relationship or in the context of pre-contractual measures.
6.Recipient of thedata
We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest. We may transfer your personal data to companies affiliated with us insofar as this is permitted within the scope of the purposes and legal bases set out in section 3 of this data protection information sheet. Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of internet service providers and providers of customer management systems and software. Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be, for example
- External tax consultant
- Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation,
- Recipients to whom the disclosure is directly necessary for the establishment or fulfilment of the contract.
7.Transfer to a third country
We will not transfer your data to a third country outside the European Economic Area (EEA) without your explicit consent.
8.Duration of datastorage
Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfilment of contractual purposes. This also includes the initiation and fulfilment of a contract. In addition,we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods stipulated there are two to ten years. Finally, the storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
9.Yourrights
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR ifyou believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements (see section 7 of this data protection information).
Right to object: If your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims. In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to processing for the purpose of such advertising. This also applies to profiling insofar as it is associated with this direct advertising. If you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes. To exercise your rights, you can contact us using the contact details provided in section 1.
10.Necessity of the provision of personal data
The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.
11. Automateddecisionmaking
In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to establish, fulfil or implement the business relationship or for pre-contractual measures.