We are glad about your visit to the German website of AuE Kassel GmbH (hereinafter “AuE Kassel GmbH” or ”we”) at https://www.aue-kassel.de (hereinafter the “Website”).
The processing of personal data on, and through, the Website is made in compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (GFDPA). In this data privacy statement, we inform you of the collection of personal data from data subjects on, and through, the Website in accordance with Article 13 GDPR. In this data privacy statement, the definitions in Article 4 GDPR apply.
1. Name and contact details of the controller
The controller for the processing of personal data in accordance with this data privacy statement is:
AuE Kassel GmbH
Phone: +49 561 5895-0
Fax: +49 561 5895-100
2. Contact details of the data protection officer
3. Purposes and legal bases of the processing of personal data
If you visit or use the Website, AuE Kassel GmbH will collect, process and use your personal data for the following purposes.
3.1 Collection and processing of personal data upon a visit to the Website
Upon a visit to the Website, we collect and process only that information and those personal data which are automatically transmitted to us by your Internet browser such as:
- date and time of your access to the Website
- your browser type and version, as well as the browser settings
- name and version of your operating system
- the page last visited by you
- the transmitted data volume and the access status
- your IP address
That information and those personal data are required to correctly deliver the contents of the Website, to optimise the contents of, and advertising for, the Website, as well as to warrant network and information security, and to protect the Website against attacks and damage.
The personal data and information collected on that basis are evaluated by AuE Kassel GmbH statistically and for the purpose of enhancing data protection and data security in order to warrant a level of protection for the personal data processed by us which is adequate given the risk. The personal data collected when you access the website, in particular, the user’s IP address, will be deleted, at the latest, seven days from their collection, unless an attack or a threat by the user was discovered.
To the extent that we collect and use personal data of the user such as, in particular, the user’s IP address, upon an access to the Website, the legal basis therefor is Article 6(1)(f) GDPR, as that processing is necessary to safeguard the legitimate interests of AuE Kassel GmbH. The legitimate interests of AuE Kassel GmbH pursued thereby are the enhancement of data protection and data security in order to warrant a level of protection for the personal data processed by AuE Kassel GmbH which is adequate given the risk, to warrant network and information security, and to optimise the Website and protect the Website against attacks and damage.
3.2 Contracting through the Website
You can contact AuE Kassel GmbH while providing your personal data. You can send messages to us to the email addresses stated on the Website. In that case, we will receive your email address and (if applicable) personal data contained in the email.
If a contact form is provided on the Website, through which you can contact us, the personal data transmitted by you to AuE Kassel GmbH in that respect will result from the relevant contact form on the Website.
The personal data so transmitted to AuE Kassel GmbH will be collected and processed to process your contact request.
The legal basis for the processing of those personal data is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract between AuE Kassel GmbH and the data subject or in order to take steps at the request of the data subject prior to entering into a contract.
3.3 Online application with AuE Kassel GmbH through the online job portal
You can file a job application through our online job portal. That portal enables you to file job applications with the enterprises of the Strama Group. The enterprises of the Strama Group are Strama-MPS GmbH & Co. KG, AuE Kassel GmbH and F & K Delvotec Bondtechnik GmbH.
In the online application, personal data will only be collected and stored if they are entered manually or if you upload documents. Therefore, the provision of personal data is absolutely voluntary. By those details, you enable us to satisfy your requests for information or to process your online application.
After the storage of your data in our applicant management system, we will send you the access data for your personal user account. You can log in to that account and track the status of your job application. If you register for the “job subscription”, we will notify you of new job offers through the contact details provided by you.
The following application details will be collected and stored in connection with the online application:
· First name
· Last name
· Street and street number
· Postcode and town
· Email address
· Phone/mobile phone number
· Free field for the application letter
· Upload of annexes to the application letter and the application documents such as date and place of birth, nationality, marital status, number of children, details regarding school education/vocational training/university studies, foreign language skills, IT skills, details regarding additional employment relationships/university studies (if applicable), social skills (if applicable), ability to work in a team, reliability, other soft skills, CV, copies of certificates.
You have the option to supplement or update your personal data transmitted to us during the applicant selection procedure.
We do not require from you any information which may not be used pursuant to the German General Equal Treatment Act (e.g., racial or ethnic origin, religion or beliefs, age, sexual identity). Please do not transmit any details regarding a pregnancy, political views, philosophical or religious convictions and trade union memberships, either. The same applies to any contents which might infringe third-party rights (e.g., copyrights, press law or general third-party rights).
The personal data collected in connection with the applicant selection procedure are necessary to identify you as an applicant, to communicate with you, to take a decision on the establishment of an employment relationship, to perform the rights and duties regarding a representation of interests (in particular, the works council) by operation of law or under collective bargaining and works agreements.
In the Strama Group, vacant positions will be filled in cooperation with the employees of the HR department and the executives of the respective company of the Strama Group. Unsolicited applications will be processed centrally by our HR department and will be forwarded to the relevant companies of the Strama Group in accordance with your profile.
The collection and processing of the data is necessary for the aforementioned purposes and the implementation of the applicant selection procedure. The legal bases are § 26 GFDPA, Article 88 GDPR, the first sentence of Article 6(1)(b) GDPR and Article 9(2)(b) GDPR.
Your online application will only be processed and reviewed by the competent contacts. All employees in charge of the data processing are obliged to preserve the confidentiality of your data. With the exception of the companies of the Strama Group, no third parties will obtain knowledge of your details. The data will be processed exclusively in Germany.
In the event of a rejection or a negative reply to your application, the transmitted data will be deleted six months from the end of the application procedure, at the latest, unless statutory provisions conflict with a deletion, or the continued storage is necessary in order to preserve evidence, or you have consented to a longer storage period.
If we employ you, the data collected by us in the applicant selection procedure will be stored for the duration of the employment relationship and for a period of three years thereafter and will then be deleted. Document which are relevant for a company pension will be stored for a period of 30 years. You have, of course, the right to withdraw your application at any time.
Owing to the sensitivity of the data, the transmission will be in encrypted form. After the sending, no data will remain on the Website.
In using the Website, cookies will be used. The purpose of cookies is the personalisation of the Website for your visit and the facilitation of the use of the Website. Cookies” are small text files which the Website transmits to the cookies file of the Internet browser on your terminal device and which are kept there for a later retrieval, so that the Website can, inter alia, remember who you are. Typically, a cookie will include the name of the domain from where it was set, the “lifetime” of the cookie and a unique identifier. The following types of cookies are used on the Website:
- Session Cookies: These are temporary cookies, which are kept in the cookies file of your browser until you leave the Website and which are necessary, in particular, in order that you can use the Website and, for example, file job applications through the applicant portal. Session cookies will be deleted once you leave the Website.
- Web Beacons: These are electronic characters (also referred to as “Clear GIFs” or “Web Bugs”) which allow us to count the number of users who visited the Website.
If you do not want to accept cookies or Web Beacons of the Website, you can deactivate them and object to the access to information stored before by setting your Internet browser accordingly. The settings of your browser which allow you to do this vary from browser to browser and can normally be found under “Data Protection” or “Cookies” of the “Internet Options” or “Settings” menu of your browser. If you need help to deactivate or delete cookies, you should use the “Help” menu in your browser. Details regarding the management and deletion of cookies, as well as relevant instructions for the most common browsers, are available, for example, at www.meine-cookies.org. Please note, however, that you may not be able to use all of the interactive features and functions of the Website if cookies and/or Web Beacons are blocked or deleted.
Where cookies are used with your consent, and if personal data of the user are collected and processed thereby, the legal basis therefor will be the first sentence of Article 6(1)(a) GDPR, and in other respects the first sentence of Article 6(1)(f) GDPR, as that processing is necessary to safeguard our legitimate interests. The legitimate interests pursued by us thereby are the personalisation of the Website for the visit by the user and to make the use of the Website easier.
4. Recipients of personal data / Transmission to a third country
Within our organisation, only those departments or employees will have access to the user’s data who require them to perform their contractual and statutory duties or to safeguard our legitimate interests.
Personal data of users will only be transmitted to third parties (a) in connection with the performance of a contract, or (b) to comply with statutory requirements, according to which we are obliged to provide information, to make a notification or to transmit data, or (c) if the data transmission is in the public interest, or (d) if external service providers process the data on our behalf or by way of an assumption of functions, or (e) on the basis of our legitimate interest or the legitimate interest of a third party, or (f) if you have given your consent to a transmission to third parties.
Your personal data will not be transmitted to a third country.
5. Duration of the storage of personal data
We will process and store your personal data for the duration of the business relationship between you and us. This also includes the initiation of a contract (pre-contractual legal relationship) and the settlement of a contract.
In addition, we will process and store the personal data if this is necessary as a result of statutory retention and documentation duties. Those duties result, inter alia, from the German Commercial Code and the German Fiscal Code. The retention, or documentation, periods provided therein are up to 10 years after the end of the business relationship or the pre-contractual legal relationship.
Furthermore, other statutory provisions may require a longer retention period such as, for example, the preservation of evidence in connection with statutory limitation rules. Pursuant to §§ 195 et seq. German Civil Code, the regular limitation period is three years; in certain cases, however, limitation periods of up to 30 years may apply.
If the data are no longer necessary to perform contractual or statutory duties and rights, they will be deleted, unless their further processing is necessary for purposes which are justified by an overriding legitimate interest within the meaning of the first sentence of Article 6(1)(f) GDPR. We will, for example, have an overriding legitimate interest if a deletion, owing to the special type of storage, is impossible, or only possible at disproportionately high expense, and if the processing for other purposes is excluded by appropriate technical and organisational measures.
6. Your rights as a data subject
You have the following rights:
- Right of access to the relevant personal data (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to object to the processing if the processing is made on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR (Article 21 GDPR); see also the note regarding the right to object pursuant to Article 21 GDPR at the end of this document
- Right to data portability (Article 20 GDPR)
- Right of the data subject to revoke a granted consent at any time, without this affecting the lawfulness of the processing made before the revocation, if the processing is based on a consent in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR
- Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
7. Your duty to provide personal data and potential consequences of a failure to provide personal data
The provision of personal data is necessary to use the Website. If the personal data are not provided, it will be possible that the Website cannot be used, or can only be used with limited functionality. When using the online job portal, the entry of the data specified in the portal will be necessary in order that you can create a user account for you and participate in the application procedure.
8. No automated decision-making
We do not carry out automated decision-making within the meaning of Article 22(1) GDPR which will be legally effective as against you or will substantially impair you in another manner.
9. Modifications of this data privacy statement
On a case-by-case basis, it will be necessary to adapt and modify the contents of this data privacy statement. Therefore, AuE Kassel GmbH reserves the right to modify this data privacy statement and will provide the modified version on the Website and inform the data subject in advance, if AuE Kassel GmbH intends to process the personal data for a different purpose.