1. Responsible person for data processing and contact details of the data protection officer
Dieffenbacher GMBH Maschinen- und Anlagenbau
Heilbronner Straße 20
Phone: +49 (0) 7262 / 65-0
Data protection officer
Email to data protection officer at the mailing address above.
2. For what purposes and on what legal basis is the personal data processed?
We process personal data in compliance with data protection laws, in particular the
General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
a) In the context of the fulfillment of a contract or for the implementation of pre-contractual measures (Article 6 (1) S. 1 lit. b GDPR), in particular the employment relationship (§ 26 BDSG)
The legal basis of data processing is the data processing for pre-contractual measures or for initiating a contract (Article 6 (1) S. 1 lit. b GDPR, § 26 BDSG).
b) In the context of a consent (Article 6 (1) S. 1 lit. a GDPR)
In addition, you have the opportunity to give us your consent for data processing, which is not necessary for the purpose of processing your application for a specific job. Specifically, this concerns the consent to the processing of your data:
- in case of rejection, in order to be able to consider you for other jobs in the future or
- as part of submitting your application to affiliated companies in order to allow consideration for jobs within the group.
This consent is voluntary for you, which means you can refuse it without consequences and revoke it at any time with effect for the future.
3. Recipients of the personal data
In general, the company only grants access to your data to entities that need to work with your data (“need-to-know” principle), which means they need to have access to this data to fulfill a contractual or legal obligation. A transfer of data to third parties takes place only with your explicit consent or within the framework of the fulfillment of the pre-contractual measures required.
4. Is data transmitted to a third country or to an international organization?
Fundamentally, transfers of data to entities in countries outside the European Union (third country) do not take place. In certain situations, we use or reserve the right to use service providers that may either be located in a third country or that may have service providers located in a third country. Data transfer to a third country is permissible under Art. 45 GDPR if the European Commission has decided that an adequate level of protection exists in the third country. In the absence of such a decision, data transmission to a third country is permitted if the responsible entity has provided appropriate guarantees (e.g., so-called standard data protection clauses issued by the European Commission) and enforceable rights and effective remedies are available to the person in question (Art. 46 GDPR). In principle, we work only with entities in a third country that meet the listed criteria.
5. Storage duration of data
We process and store your personal data as long as it is necessary for the fulfillment of the purpose of the contract. If the storage of personal data to fulfill the purpose is no longer necessary, they will be deleted, unless there are statutory storage obligations, in particular for the preservation of evidence in the context of statutory limitation rules, or you have given your express consent for further storage.
6. Rights of the persons concerned
You have the following rights toward us with respect to the personal data related to you:
- Right to information
- Right to correction or deletion
- Right to limitation of processing
- Right to object to processing
- Right to data transferability
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
You may also contact our company data protection officer at any time, confidentially if preferred.
Insofar as you have given us consent (Article 6 (1) S.1 lit. a GDPR), you may revoke it at any time with effect for the future. Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 (1) S. 1 lit. f GDPR), you can object to the processing. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on the basis of which we continue the processing.
7. Obligation to provide data
Within the framework of starting an employment relationship, you must provide the personal data required to fulfill the pre-contractual actions and the related obligations. Without providing this information, we will not be able to conclude a contract with you.
8. Does automated decision-making or profiling take place?