Wet bescherming persoonsgegevens
In the following, we inform you about the collection of personal data when using our career website and in the application process. Personal data in the sense of Art. 4 No. 1 of the EU General Data Protection Regulation (GDPR) is all information that can be related to you personally, such as name, address, e-mail addresses, user behavior.
If translations of this privacy notice have been made in languages other than German or English, the German or English version shall prevail.
I. Name and contact details of the data controller and the data protection officer
Due to the structure of our group of companies, some corporate functions involving the processing of applicant data are performed centrally by Cabka Group GmbH as the parent company for the respective employing company and the other affiliated companies. This also concerns the application process including the provision and administration of this career website.
The controller for these aforementioned data processing activities within the meaning of the GDPR is solely the
CABKA Group GmbH
Wintersteinstraße 22
10587 Berlin
Germany
[email protected]
Individual processing activities are provided internally by your potential employer. The controller for these internal data processing activities within the meaning of the GDPR is solely the subsidiary named in the job advertisement.
(hereinafter: "Employer"; together with Cabka Group "we" or "us").
You can reach the data protection officer of our group of companies at:
Christian Krösch, Attorney
SLK Compliance Services GmbH
Königsbrücker Str. 76
01099 Dresden
Germany
Phone: +49 351 89676360
E-mail: [email protected].
II. Collection and processing activities of personal data
1. Visiting our career website
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, Cabka Group only collect the personal data that your browser transmits to our server and that are technically necessary for the presentation of our website and the guarantee of stability and security. These are the IP address, the request of your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. Cabka Group also collect product and version information about the browser used and the operating system of your system. We further record from which website our page was accessed.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your browser. For this purpose, your IP address must remain stored for the duration of the session. The processing activities of the remaining data are carried out to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the stability and security of our systems. The legal basis is Art. 6 (1) (f) GDPR, based on a weighing of our legitimate and overriding interests mentioned above.
Cabka Group transfers the collected data to external service providers (hosting provider, IT service provider, web agency), which support us in data processing for the above-mentioned purposes.
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Otherwise, deletion takes place at the latest within 7 days after calling up the website.
2. Cookies
When you use our website, we may collect information through the use of cookies or similar technologies ("cookies"). Cookies are small text files that are placed on your terminal device by your browser to store certain information. If you later visit our website again using the same terminal device, the information stored in Cookies is subsequently sent back either to our website or to another website to which the Cookie belongs. Through the stored and returned information, the respective website recognizes that you have already called up and visited it with the browser of your end device. Only the cookie itself is identified on your end device. We use cookies to improve our website, to store information about your preferred activities on the website and thus to tailor our website to your individual interests, as well as to comply with legal requirements.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Necessary cookies
Web analytics
Necessary cookies are cookies without which you would not be able to use our website as intended or without which we would not be able to provide our website to you. These include functions such as setting and saving your privacy preferences, filling in and saving user input, and security functions. These cookies are used without your consent. However, you have the option to disable these cookies via your browser settings. The legal basis for the processing of personal data using strictly necessary cookies is Art. 6 (1) c) GDPR or Art. 6 (1) (f) GDPR, based on a consideration of our legitimate and overriding interests in the technically smooth provision of our website and the services offered through it.
Functional cookies allow us to store functions you have requested or information you have provided and, based on this, to offer you a better or more individualized use of our website. The legal basis for the processing activities using functional cookies is your consent according to Art. 6 (1) (a) GDPR.
We use web analytics to understand how visitors use our website, in particular which areas they visit and how much time they spend on the website. In addition, we collect information and register error messages with the aim of improving our website. The legal basis for the processing activities using performance cookies is your consent according to Art. 6 (1) (a) GDPR.
You have the option via your browser to delete all cookies once they have been set. In addition, you can set your browser so that websites are prevented from storing and reading cookies. You can revoke your given consent to the use of cookies, unless they are strictly necessary, at any time with effect for the future. You will find the link to the cookie settings in the footer of our website.
3. Consent Management
We use a Consent Management Platform (CMP) for the central management of your consents and the associated control of cookies. In doing so, we collect your consent or revocation of consent (cookie preferences), communication data (e.g. IP address, browser information) and usage data (e.g. date and time of visit).
We use the CMP to obtain, manage and document your consent to store certain cookies on your terminal device. The legal basis for the processing activities is Art. 6 (1) (c) GDPR.
We transfer the collected data to external service providers (e.g. platform, hosting, support service providers) for processing activities according to the purposes mentioned above (performance of cookie consent management).
The personal data collected will be deleted as soon as they are no longer needed for the processing purposes. As long as processing activities to which the consent relates take place, the collected data will be stored for the purpose of fulfilling the accountability obligation pursuant to Art. 5 (2) GDPR. Insofar as the data provided is subject to retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of up to ten years and then deleted, as far as you have not consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three years, § 195 BGB, accountability according to Art. 5 (2) GDPR).
4. Job application
We collect your personal data as an applicant only if you provide it to us voluntarily via this career site, by e-mail or by mail. This applies both to applications for job offers and to unsolicited applications. We then record the information provided in the application. This includes in particular name, date of birth, contact data, interests, qualification data as well as educational and professional background. This may also include special categories of personal data such as health data.
In certain constellations, your personal data may also be collected from other bodies due to legal requirements. In addition, we process personal data that we have permissibly obtained from publicly accessible sources (e.g. professional networks).
Your potential employer processes your personal data under its sole responsibility for the performance of the application activities with the aim of establishing an employment relationship. The Cabka Group processes your personal data under its sole responsibility for the management of general business processes and the performance of applicant management, as well as for the provision of the necessary work tools such as IT systems, and for IT security purposes.
Primarily, the data processing serves the performance of the application process. The legal basis for this is Art. 6 (1) (b) GDPR in conjunction with the respective national employee data protection law. In addition, your separate consent pursuant to Art. 6 (1) (a), 7 GDPR may be used as a permission provision under data protection law. We also process your data in order to be able to fulfill our legal obligations as an employer, in particular in the area of tax and social security law. This is done on the basis of Art. 6 (1) (c) GDPR. Furthermore, we process your data in order to protect legitimate interests of us or of third parties. Such a legitimate interest exists in particular for an intra-group data exchange for administrative purposes or, in the case of centralized corporate functions, or is necessary to maintain operational safety and order, the prevention of legal violations or law enforcement. The legal basis for this is Art. 6 (1) (f) GDPR.
As far as special categories of personal data are processed pursuant to Art. 9 (1) GDPR, this serves the purpose of exercising rights or fulfilling legal obligations arising from labor law, social security law and social protection law in the context of the initiation of the employment relationship. This is done on the basis of Art. 9 (2) (b) GDPR in conjunction with the respective national employee data protection law.
In the case of an online application, your data will be passed on to the provider of the online application system REXX (rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg) commissioned by us.
You are not obliged to provide the aforementioned personal data. The data provided may be necessary for a future conclusion of a contract after completion of the application process. Without the provision of the data, communication, performance of the application procedure or conclusion of a contract may not be possible.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. We therefore retain your data after performance of the application procedure in the event of rejection for six months after you have been notified of the rejection decision. If you have consented to longer storage, the storage period is regularly one year. After that, we will either delete your data or obtain your consent again. You have the option of revoking your consent to the processing activities of personal data at any time.
5. Web Analytics
On our website, we collect data using the Matomo software to measure and evaluate the use of our website. In the process, anonymized usage profiles are created using cookies. The data collected using Matomo technology, including your anonymized IP address, is transmitted to our server and stored for analysis purposes in order to optimize the website.
We use Matomo to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is your consent according to Art. 6 para. 1 a) GDPR.
We transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (performance and support of web analysis).
The collected personal data is deleted as soon as it is no longer needed for the processing purposes, which is regularly the case after 13 months from the collection of the data.
IV. Objection or revocation against the processing activities of your data
If you have given your consent to the processing activities of your data, you may revoke it at any time. Such revocation will affect the permissibility of the processing activities of your personal data after you have expressed it to us.
As far as we base the processing of your personal data on the balance of interests, you may object to the processing activities. This is the case if the processing activities are not necessary, in particular, for the performance of a contract with you, which will be presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as performed by us. In the event of your justified objection, we will review the situation and either discontinue or adjust the processing activities or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to advertising by using the contact details provided in section I above.
V. Your rights
In accordance with Article 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected from us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
Pursuant to Art. 16 GDPR, you may request the correction of incorrect or incomplete personal data stored by us without undue delay. In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, as far as the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller.
In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.
You also have the right under Article 77 GDPR to lodge a complaint about the processing of your personal data by us with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you believe that the processing activities of the personal data concerning you violate the GDPR.
