Dear Sirs and Madams
Through this Privacy Policy we wish to inform you about the processing of your personal data by the company HOFFMANN Maschinen- und Apparatebau GmbH as well as about your rights according to the new EU General Data Protection Regulation (GDPR) and the new Federal Data Protection Act (BDSG-new), which is granted to you as the data subject from 25 May 2018.
Responsible for processing your personal data:
HOFFMANN Maschinen- und Apparatebau GmbH
Hauerstr. 2-4
38268 Lengede - Germany
Phone: 05344-9009-0
Business Fax: 05344-5773
Data protection officer:
Anna Bauer
Company LINET Services GmbH
Hinter dem Turme 12a
38112 Braunschweig - Germany
E-mail: datenschutz[at]hoffmann-filter.de
Purposes and legal basis of data processing
We process your personal data exclusively in accordance with the legal requirements of the EU General Data Protection Regulation (GDPR), the new Federal Data Protection Act (BDSG) and the relevant area-specific laws if applicable. Therefore, we only process your data if there is a contractual basis for this, if you have given us your consent to the processing of the data, or if a law allows or requires us to process your data.
The legal basis for the processing of data for the performance of a contract and the implementation of pre-contractual measures is generally Article 6 (1) Lit. b GDPR.
Data processing for the purpose of fulfilling a contract or implementing pre-contractual measures
We process your personal data as far as necessary for the conclusion of the contract, the execution of the contract and the termination of the contractual relationship. This includes your first name, your surname, your serial number and your address.
In order to enable you to handle the contract correctly and for us to be able to contact you as quickly as possible, for example in case of questions or problems, we also process your telephone and/or mobile phone number and/or fax number and/or your e-mail address.
Data processing for the purpose of safeguarding the legitimate interests of the person responsible or of a third party
We also process your data in so far as this is necessary to protect our legitimate interests or the legitimate interests of a third party.
Data processing to fulfil a legal obligation
We also process your data, if necessary to comply with a legal obligation which we are subject to. The obligations to be fulfilled by us include, in particular, the duties to preserve records, as imposed by tax-law, commercial law and product liability law.
Data processing on the basis of a consent and for other purposes
Should we ever, in the future, process your personal data for other purposes than listed in this Privacy Policy, we will inform you separately in accordance with the legal requirements.
Categories of recipients of personal data
External service providers
Our external service providers, who carry out data processing on our behalf, are contractually obligated to treat any personal data in accordance with the applicable rules within the meaning of Article 28 GDPR. As far as these companies come into contact with your personal data, we have ensured through legal, technical and organisational measures that they comply with the regulations of the data protection laws. The following processes are carried out by service providers on our behalf:
Applicant Management System, ERP System, Homepage Administration, Mailing Tool
Authorities
We may provide your personal data to the authorities if this is required under our legal notification requirements.
Data processing for the purpose of fulfilling a contract or implementing pre-contractual measures
Applicant
We process the personal data that you provide us with as part of the application process to the extent necessary to complete the application process. This includes your contact data (Surname, first name, postal address, phone number, e-mail address), all of your application documents (e.g. photo, curriculum vitae, certificates, references) as well as all data which you disclose to us in the course of the application process. The legal basis for data processing for the purpose of the employment relationship is in general Art. 6 Para. 1 lit. b GDPR, Art. 88 GDPR in conjunction with § 26 BDSG (German Federal Data Protection Act).
Duration of data storage
We will only store your personal data for the period of time during which it is required within the scope of the above-mentioned purposes as well as for the period in which we may have to reckon with the assertion of legal claims against us. The statutory limitation period for such claims may be between three to thirty years in individual cases.
In addition, we store your personal data as far as we are obligated to do so within the scope of statutory proof and retention obligations (e.g. according to the Commercial Code, the General Fiscal Code or Money Laundering Act). The statutory retention periods may be up to ten years. In exceptional cases, there may also be special obligations to demonstrate that the retention of your personal data is necessary over a longer period of time.
Rights of the data subject
According to Article 15 et seqq. GDPR, as a data subject you have the following rights against us:
Right to information
You have the right to request information on whether we are processing personal data relating to you. If this is the case, you have the right to request disclosure of this personal data.
Right to correction
You have the right to correction of any inaccurate personal data relating to you.
Right to deletion
In certain cases, you have the right to require us to delete any personal data relating to you immediately.
Right to restriction of processing
In certain cases, you have the right to require us to restrict the processing.
Right to data transfer
You have the right to have the personal data relating to you, which you have provided to us, transferred from us to you.
Right to object against the processing
You have the right, for reasons arising from your particular situation, to object to the processing of personal data relating to you at any time, if such processing is based on Article 6 (1) Lit. e or f GDPR. As far as we use your data for direct advertising, you can object to this at any time.
Right of withdrawal
If you have given us permission to use your personal data, you can withdraw it at any time.
Data Protection Supervisory Authority
In addition, you have the option to file a complaint to the Data Protection Supervisory Authority about our data processing of personal data. The competent Data Protection Supervisory Authority is:
Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover
If you have any further questions or comments, please do not hesitate to contact us or our data protection officer.
Lengede, 02. January 2024