Data protection notice for applicants
This data protection information for applicants informs you about the processing of your personal data at Pilgrim Personal GmbH.
The following information is intended to give you an overview of how we process your personal data. We also inform you about your rights under data protection law. Which data is processed in detail and how it is used depends largely on the information (both in paper format and in digital form) that you have provided in your application.
Who is responsible for data processing and who can I contact?
The controller within the meaning of the GDPR is
Northcomp GmbH
Heinrich-Schicht-Straße 9
42499 Hückeswagen
You can contact our data protection officer or the person responsible for data protection at
MVK GmbH Unternehmensberatungsgesellschaft
Annika Mengede
Königsallee 34a
40212 Düsseldorf
kontakt@mvk-unternehmensberatung.de
What sources and data do we use?
We process personal data that we have received from you as part of the application process and for the purposes of recruitment.
Personal data includes in particular
- Personal details (e.g. name and address and contact details and date and place of birth and nationality)
- Family data (e.g. marital status and details of children)
- religious affiliation
- Health data (if relevant to the employment relationship, e.g. in the case of a severe disability)
- Identification data (e.g. ID card data)
- Tax identification number
- Information on qualifications and employee development (e.g. training and professional experience, language skills and further training)
as well as other data comparable to the categories mentioned.
What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):
Necessity of recruitment (Art. 88 GDPR in conjunction with Section 26 BDSG (new) and as part of the balancing of interests (Art. 6 para. 1 f GDPR)
Applicant data is collected and processed for recruitment and hiring purposes in order to determine the skills and suitability of applicants who have applied for a position.
Based on your consent (Art. 6 para. 1 a GDPR in conjunction with Art. 88 GDPR and Section 26 para. 2 BDSG)
If you have given us your consent to process your personal data, it will only be processed in accordance with the purposes and to the extent agreed in the declaration of consent. Any consent given can be revoked at any time with effect for the future. The revocation of consent only takes effect for the future and does not affect the legality of the data processed until the revocation. You will not suffer any disadvantages as a result of the withdrawal of your consent.
Due to legal requirements (Art. 6 para. 1 c GDPR as well as Art. 88 GDPR and § 26 BDSG)
As a company, we are subject to various legal obligations, i.e. legal requirements (e.g. social security law, occupational safety, tax laws). The purposes of processing include identity verification, the fulfilment of social security and tax law control, reporting or documentation obligations and the management of risks within the company.
Who receives my data?
Within the company, those departments that require your data to fulfil contractual, legal and supervisory obligations and to safeguard legitimate interests (e.g. HR department, representative body for severely disabled employees) will have access to your data.
With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. We may only pass on information about our applicants if this is required by law, if you have given your consent or if we are otherwise authorised to do so.
Data processing companies/service providers
Service providers used by us may receive your personal data for processing under appropriate instructions, insofar as this is necessary for the processing purposes. Certain third parties may receive your personal data for processing under appropriate instructions for the purpose of checking eligibility for funding and applying for any funding from the responsible Federal Employment Agency or the responsible job centre, insofar as this is necessary for the processing purposes. All service providers are contractually obliged to treat your data confidentially.
Client company
For the purpose of filling vacancies and in the course of the selection process, the data you provide will be passed on to client companies in the form of exposés.
Other data recipients may be those bodies for which you have given us your consent to transfer data or to which we are authorised to transfer personal data on the basis of a balancing of interests.
Is data transferred to a third country or an international organisation?
Data is transferred to organisations in countries outside the European Economic Area (so-called third countries) if
- it is required by law (e.g. reporting obligations under tax law)
- you have given us your consent or
- this is legitimised by the legitimate interest under data protection law and does not conflict with any higher interests of the data subject worthy of protection.
Beyond this, we do not transfer any personal data to bodies in third countries or international organisations.
However, for certain tasks we use service providers who may use sub-service providers who may have their registered office, parent company or data centres in a third country. A transfer is permitted if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR). If the Commission has not made such a decision, the companies or the service provider may only transfer personal data to service providers in a third country if suitable guarantees are provided (standard data protection clauses adopted by the EU Commission or the supervisory authority in a specific procedure) and enforceable rights and effective legal remedies are available.
We have also contractually agreed with our service providers that guarantees for data protection in compliance with the European level of data protection must always exist with their contractual partners as well. We will provide you with a copy of these guarantees on request.
How long will my data be stored?
We process and store your personal data for as long as this is necessary for the fulfilment of our contractual and legal obligations.
If the data processing is carried out in our legitimate interest or that of a third party, the personal data will be deleted as soon as this interest no longer exists. The same applies to data processing based on consent. As soon as you revoke this consent for the future, the personal data will be deleted.
If you have not received a confirmation from us after your application, we will store your application documents for 6 months. After these 6 months, all information will be deleted, unless it is required for further legal purposes or a lawsuit.
If we wish to include you in our applicant database, we will ask for your consent in our rejection letter. With your consent (Art. 6 para. 1 lit. a GDPR), we will then keep your application documents for a further year for reassessment and later available positions. If you do not give your consent, your data will be destroyed.
What data protection rights do I have?
Every data subject has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR).
You can withdraw your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.
Is there an obligation to provide data?
As part of the application process, you must provide the personal data that is required to establish a working relationship and to fulfil the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to conclude or fulfil the contract with you.
If data processing is based on consent, the provision of your personal data is voluntary. We will not use your personal data for the above-mentioned purposes without your consent.
To what extent is there automated decision-making?
We do not use fully automated decision-making in accordance with Article 22 GDPR to establish the working relationship. If we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, insofar as this is required by law.
Information about your right to object in accordance with Article 21 of the General Data Protection Regulation (GDPR)
Right to object on a case-by-case basis
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests).
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Recipient of an objection
The objection can be made informally with the subject "Objection", stating your name, address and date of birth, and should be addressed to
Northcomp GmbH
Heinrich-Schicht-Straße 9
42499 Hückeswagen