Privacy

Information for applicants according to GDPR

Data protection notice

Information in accordance with Articles 13 and 14 of the General Data Protection Regulations (GDPR) concerning application processes

Thank you for your interest in working for our company. Craftview Software GmbH takes data protection very seriously. The protection and confidentiality of personal data is a very high priority for us. In the following, we inform you about the type, scope, and purpose of the collection and processing of your personal data in connection with your application according to the GDPR and the Federal German Data Protection Act (BDSG) as well as other applicable data protection regulations.

Who is responsible for data processing and who can I contact?

Responsible for data processing in the sense of Art. 4 item 7 GDPR:

Craftview Software GmbH Mainzer Landstr.178-190, D-60327 Frankfurt a. Main Germany

Telephone: +49 2823 4256 0 Email: info@craftview.de

You can contact our external data protection administrator at: Creditreform Compliance Services GmbH

Telephone +49 2131 109 1089 Hammfelddamm 13 41460 Neuss Germany

datenschutz@craftview.de

Where do we get your data from?

We collect your personal data for the application process from various sources to establish your suitability.

  • Data that you provide to us: We initially process the personal data that you provide us with as part of the application process. This applies particularly to your application documents.
  • Data obtained from third parties: We also process where necessary personal data that we have obtained from third parties (e.g. employment agency) in accordance with data protection regulations.
  • Data from publicly accessible sources: We process personal data that we have obtained permissibly from publicly accessible sources (e.g. social media, professional networks) insofar as this data is necessary to determine your suitability for a vacant post during the application process.

    Which data or data categories will we process?

    As part of the application process, we will use your personal data to the extent that is required to determine your suitability to fill the vacant posts. This processing of your data may affect the following data or data categories:

  • Personal information and contact details, such as name, email address and telephone number, private address, date of birth, national identity number, gender, marital status, and nationality
  • Information about schooling, performance, and employment, such as details of school and degree qualifications, employment experience and qualifications, and performance assessments
  • Other application documents that you make available to us, such as application letters, references, CVs, driving license, passport photos or other information such as references to hobbies or voluntary work
  • Special categories of personal data: If you disclose information in your application documents that falls into a special data category (such as information about your family status that could allow inference of your sexual orientation to be made, information about your health, inclusion of a photograph that could allow inference to be made about your ethnic background or perhaps your visual acuity and / or religion) we will also process this data to the extent allowed by law.

    What are the purposes for which we process your data and on what legal basis?

    We will only process your data as part of the application process to the extent allowed by applicable law, that is the regulations outlined in the GDPR, German Data Protection Act (BDSG) and other applicable regulations such as the Works Constitution Act (BetrVG). In doing so, the processing of your personal data will be according to the following legal basis:

  • For the decision regarding the establishment of an employment relationship (Art. 6 para. 1 item b GDPR)
  • To fulfil legal requirements (Art. 6 para. 1 item c GDPR)
  • On the basis of your consent (Art. 6 para. 1 item a GDPR)
  • To maintain legitimate interests (Art. 6 para. 1 item f GDPR)

    To whom will my data be transferred?

    Within the company, only those departments directly concerned with the preparation and execution of your application process will receive your data. This includes staff in the human resources department and the specialist departments where a vacant post is to be filled. We may additionally use service providers who can process the data on our behalf and according to our instructions for the aforementioned purposes. We will ensure by contract that your data will be transferred, protected, and processed in accordance with all applicable data protection regulations with respect to all transfers of your data to an external recipient who is to process the data on our behalf.

    How long will we keep your data?

    We will store your personal data in accordance with the legal regulations, in particular Art. 17 GDPR.

  • Storage during the application process: We will keep your personal data for the duration of the application process where necessary.
  • When an employment relationship is established: If at the end of the application process we establish an employment relationship with you, we will transfer your data into your personnel file and then keep it for as long as is prescribed by law.
  • If your application is rejected: If we do not enter into an employment relationship with you, the application process will end when you receive a letter of rejection. We reserve the right to retain the data for up to six months following rejection on the basis of § 61 para. 1 ArbGG (Employment Law) and § 15 AGG (Basic Law).
  • Storage due to legitimate interests: Under certain circumstances we may keep your data for the duration of the statute of limitations according to §§ 195 ff. German Civil Code (BGB).

    Are data transferred to a third country or to an international organization?

    No data is transferred to a third country.

    What are my rights as the data subject?

    Every data subject has the right to access according to Article 15 GDPR, the right to rectification according to Article 16 GDPR, the right to erasure according to Article 17 GDPR, the right to restriction of processing according to Article 18 GDPR, and the right to data portability according to Article 20 GDPR. The right to access and to erasure are restricted by the provisions of §§ 34 and 35 BDSG (German Data Protection Act).

    **Right to object: **You can object to the processing of your data at any time. In such case, we will no longer process your data.
Right to withdraw consent: To the extent that we process data based on your consent (compare Art. 6 para. 1 item a and Art. 9 para. 2 item a GDPR), you have the right to withdraw your consent for future processing at any time. This will also apply where special categories of personal data are concerned. The lawfulness of processing your data up to the time that you withdraw consent remains unaffected.
In addition to this you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR and § 19 BDSG).

The relevant State Regulating Authority for Data Protection is:

Representative for data protection for the State of Lower Saxony Kavalleriestr. 2-4, 40213 Düsseldorf Germany +49 221 38 424 0 +49 221 38424 10 Email: poststelle@ldi.nrw.de

**Am I obligated to provide data?**

We require the aforementioned personal data in order to determine whether we wish to enter into an employment relationship with you. We cannot complete the application process without this data. Nevertheless, you are not legally obligated to provide this data as part of the application process.