Privacy Notice for Applicants

Who is responsible for data processing and how can I reach the data protection officer?

Responsible for data processing is

AM GmbH

Feldstraße 34

59872 Meschede

Tel.: 0291 20256-0 

Fax: 0291 20156 - 119 

info@am-gmbh.de

You can reach our data protection officer at the above contact details or at:

datenschutz@am-gmbh.de

For what purposes and on what legal basis is data processed?

The collection of this data is carried out,

• to be able to identify you as an applicant

• to contact you

• to carry out the application procedure

• to initiate a contractual relationship

• to handle enquiries after the end of the application process

Data processing is carried out on the basis of the European Data Protection Regulation (DSGVO), Article 6 (1), letters b and f DSGVO and on the basis of the Federal Data Protection Act new (BDSG neu), Section 26 BDSGneu. Processing may also take place on the basis of consent pursuant to Article 6 (1) (a) DSGVO.

What data is processed?

We process data related to your application. This includes, in particular, your contact details (such as first name, surname, name affixes, private address, (mobile) telephone number, e-mail address) as well as other data about your career (e.g. curriculum vitae, qualifications and degrees, professional experience) and your person (e.g. covering letter, personal interests). This may also include special categories of personal data (e.g. details of a severe disability) if you provide them.

Who receives my data?

Within the scope of the application procedure, your data will be processed exclusively within our company. Only the persons directly involved in the application process have access to the personal data. No further transmission of your personal data to third parties will take place.

How long will my personal data be stored?

Your personal data collected for the application process will be deleted six months after a rejection has been sent, unless we have received your consent to keep your data longer, e.g. for inclusion in an applicant pool. 

Under certain circumstances, personal data may have to be stored for a period of time in individual cases because we have to defend ourselves against asserted claims. These statutory limitation periods are between three and thirty years. In addition, we may be obliged to retain your data for 10 years due to tax and commercial law retention requirements.

What privacy rights can I assert as a person affected?

As long as there are no professional regulations to the contrary, you have the right to:

• In accordance with Article 7(3) of the General Data Protection Regulation (GDPR), revoke your consent given at any time. This means that we may no longer continue processing the data based on this consent for the future.

• Request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage duration, the existence of the right to rectify, erase, restrict processing, or object, the existence of the right to lodge a complaint, the origin of your data, if it was not collected from us, as well as the existence of automated decision-making, including profiling (Article 22 of the GDPR), and, if applicable, meaningful information about its details.

• Promptly request the correction of incorrect or completion of your personal data stored with us in accordance with Article 16 of the GDPR.

• Request the deletion of your personal data stored with us in accordance with Article 17 of the GDPR, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.

• Request the restriction of the processing of your personal data in accordance with Article 18 of the GDPR, in cases where the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing in accordance with Article 21 of the GDPR.

• Receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or request its transmission to another controller in accordance with Article 20 of the GDPR.

• Lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. In most cases, you can contact the supervisory authority at your usual place of residence or work, or at our company's registered office for this purpose.

Can I object to the processing of my personal data?

You have the right to object at any time to the processing of your data that is based on Article 6(1) sentence 1 lit. f of the General Data Protection Regulation (GDPR) (processing based on a legitimate interest) or Article 6(1) sentence 1 lit. e of the GDPR (processing in the public interest). However, the condition for your objection is that there are reasons arising from your particular personal situation. This also applies to profiling based on this provision as defined in Article 4(4) of the GDPR.

If you wish to exercise your right to object, sending an email to karriere@am-gmbh.de or datenschutz@am-gmbh.de is sufficient. We reserve the right to continue processing your personal data even if you have withdrawn your consent, provided that another legal basis allows us to do so.

Do I have the opportunity to file a complaint?

If you believe that the processing of your personal data by us is unlawful or may violate data protection law for other reasons, you can file a complaint with the supervisory authority responsible for us:

Data Protection and Information Security Officer for North Rhine-Westphalia

Kavalleriestraße 2-4

40213 Düsseldorf

Will my personal data be transferred to a third country?

If your personal data is transferred to a service provider outside the European Economic Area (EEA), we will only do so if the European Commission has confirmed an adequate level of data protection for this third country or if other appropriate data protection guarantees (e.g., EU standard contractual clauses) are in place. You can request detailed information on this matter using the contact details provided above. There are no plans for a third-country transfer.