Processing of (personal) data by the entity in charge of the online application process

Information on data protection

Thank you for your interest in our job advertisement. Data protection is important to us!
That is why we only ever collect and process your personal data within the framework of the statutory provisions. With these explanations, we would like to comply with our information and transparency obligations with regard to the collection and processing of your personal data within the scope of the application process.

With regard to the collection of personal data when using our website and the functions provided on it, we refer to our separate data protection declaration, available at https://www.rna.de/datenschutz.

1. Name and contact details of the data controller and the company data protection officer

This privacy notice applies to data processing by:

Rhein-Nadel Automation GmbH

Reichsweg 19-23

52068 Aachen

Germany

(hereinafter referred to as RNA),

Phone: +49 241 5109-187

Email: DV@RNA.de

Website: www.RNA.de

The company data protection officer of RNA can be contacted at:

DATAIX GmbH

z. Hd. Mr. Sebastian Hinze, LL.M.

Bishop-Hemmerle-Weg 9

52076 Aachen

Tel: 0241 / 510 555 00

Fax: 0241 / 510 555 50

Email: rna@dataix.gmbh

2. collection and storage of personal data as well as the type and purpose of such data and their use

a. We generally collect your data directly from you. When you send us an application, we collect the following information:

1) Salutation, first name, last name,

2) a valid e-mail address,

3) Address,

4) Telephone number (landline and/or mobile)

5) Information provided by you as part of the application process and necessary for its implementation (such as curriculum vitae, references, certificates),

6) if applicable, special categories of personal data pursuant to Art. 9 DSGVO (e.g. a photo that reveals ethnic origin, information on severely disabled status, etc.), whereby these are not taken into account in the application process unless - in particular in the case of severely disabled persons - there is a legal obligation to do so.

b. The collection of this data takes place,

1) to be able to identify you as an applicant;

2) to correspond with you.

c. On the other hand, we may also process personal data that we have permissibly obtained from publicly accessible sources (e.g. the Internet, other media, etc.) and are allowed to process.

d. We collect and process your data in accordance with the statutory provisions, in particular the EU General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG), as well as other legal bases (such as the Telemedia Act (TMG) in the area of electronic communication) for the following purposes / due to:

1) to establish an employment relationship (Art. 6 para. 1 b DS-GVO)

2) within the framework of the balancing of interests (Art. 6 (1) f DS-GVO) To the extent necessary, we process your data beyond the actual implementation of the application process in order to protect the legitimate interests of us or third parties. Examples:

- Assertion of legal claims and defence in legal disputes

- Ensuring IT security

- Prevention and investigation of criminal offences

3) your consent (Art. 6 para. 1 lit. a DS-GVO)

Insofar as you have given us consent to process personal data as part of the application process, the lawfulness of the processing is based on your consent. Consent given can be revoked at any time. Please note that a revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Obligation to provide personal data

As part of your application, you only need to provide the personal data that is required for the application process. If you do not provide this personal data, we will not be able to consider your application as part of the application process. You are not required to provide consent with respect to the special categories of personal data. Instead, you can submit an application that has been cleansed of the special categories of personal data without this having any effect on your chances in the application process.

4. disclosure of data to third parties

a. Within our company, access to your data is granted to those departments that need it to fulfil the above-mentioned purposes. Data will only be passed on to recipients outside the company if this is required or permitted by law or if you have given your consent.

b. A data transfer to third countries (countries outside the European Economic Area - EEA) does not take place.

retention period

Your personal data will generally be deleted six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage.

Data subject rights

You have the right:

- to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future. If you wish to exercise your right of objection, simply send an e-mail to DV@RNA.de.

- in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;

- in accordance with Art. 16 DSGVO to demand the immediate correction of incorrect or completion of your personal data stored by us;

- in accordance with Art. 17 DSGVO to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

- in accordance with Art. 18 DSGVO to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO to object to the processing; - pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and - pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller.

- complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.