Information for the Processing of Applicant Data
Submitted application documents and other data collected in the course of the application procedure that can be personally assigned to you as an applicant are protected personal data within the meaning of Art. 4 No. 1 of the EU-General Data Protection Regulation (GDPR). We hereby inform you about the details of the processing of your applicant data in accordance with Art. 13 GDPR.
Your personal data is processed by our company exclusively within the scope of data protection regulations, in particular the GDPR and the German Federal Data Protection Act ('Bundesdatenschutzgesetz' - BDSG). Your personal data may only be collected, stored, disseminated or used (data processing, Art. 4 No. 2 GDPR) if this is expressly permitted or ordered by law or if you have given your effective consent (Art. 6 (1) subpara. 1 point (a), Art. 7 GDPR). Processing of your personal data is particularly permitted if this is necessary for the recruitment or after the establishment of an employment relationship for its performance or termination (Sec. 26 (1) BDSG, Art. 6 (1) subpara.1 point (b) GDPR). The same applies if data processing is necessary for the purposes of our legitimate interests other than the employment relationship and there is no reason to assume that your legitimate interests as data subject override our legitimate interests (Art. 6 (1) subpara.1 point (f) GDPR).
In cases where the applicant has no visa and sponsorship is needed, necessary personal data will be shared with a third party (localyze) to review eligibility of future work permit and residence permit.
Controller and Contact
Controller (Art. 4 No. 7 GDPR) for the processing of your personal data is Intersnack IT KG, Klaus-Bungert-Str. 8/8a, 40468 Düsseldorf.
If you have any questions regarding data protection, please do not hesitate to contact us:
Human Resources Management: hrservices@intersnack-it.com
or
our external Data Protection Officer: datenschutz@intersnack-it.com
Personal Data and Purposes of Processing
1. Application for an advertised Position
In order to be able to involve you in the application process for a specific position, we require application documents that are customary and meaningful, which inform us of your personality profile and qualifications. We only use your application documents to decide on filling the position for which you have expressly applied. For this purpose, we will evaluate your application documents in the HR department and forward them to your possible future supervisor. If you apply for a managerial position, the management will also receive your application documents. We process your application documents electronically in our email system, via Recruitee (recruiting platform) and, if necessary, additionally by using printouts or copies (paper form). During the application process, further personal data may be collected from you personally, from publicly available sources or from former employers and trainers for this purpose. The legal basis for data processing is Art. 6 (1) subpara.1 point (b) GDPR, Sec. 26 (1) BDSG. If the application procedure does not lead to your employment, we will delete and destroy your application data six months after you or our company has finally rejected your application.
Should an application procedure lead to an employment, we will include your application documents in your personnel file on the basis of Art. 6 (1) subpara.1 point (b) GDPR, Sec. 26 (1) BDSG in order to inform about your personality profile and qualifications for the purpose of the performance of the employment relationship. In this case, your application documents will not be deleted and destroyed until your employment has been terminated and until the legal retention period has expired since the end of the year of termination.
2. Unsolicited Applications
If you submit an unsolicited application that does not relate to a specific position, we can consult your application documents in the context of recruitment decisions for all possible positions. To this end, we will first evaluate your application documents in the HR department and then involve colleagues from the responsible department(s) within the Intersnack IT. We process your application documents electronically in our email system, via Recruitee and, if necessary, additionally by using printouts or copies (paper form). Once your application documents have been included in a recruitment process, we may collect additional personal data from you personally, from publicly available sources or from former employers and trainers to provide us with more detailed information about your personality profile and qualifications. We will regularly delete and destroy your application data after a period of one year from receipt of your application, but not earlier than six months following your or our company's final rejection of all application procedures to which your application documents have been consulted.
Should an application procedure lead to an employment, we will include your application documents in your personnel file on the basis of Art. 6 (1) subpara.1 point (b) GDPR, Sec. 26 (1) BDSG in order to inform about your personality profile and qualifications for the purpose of the performance of the employment relationship. In this case, your application documents will not be deleted and destroyed until your employment has been terminated and until the legal retention period has expired since the end of the year of termination.
3. Information about your career platform usage data
We place our job advertisements on career platforms, especially LinkedIn. If you find a job advertisement from us there and click on it, you will be forwarded to our job advertisement. The following data will be collected from you and forwarded to us:
Your device and browser
Your IP-address
requests and responsessent from and to your device
Source websites (https://recruitee.com/privacy)
We use your personal data for:
Learning more about the behaviour of the visitors of our careers website to improve our recruitment process and this website;
Improving and monitoring the performance of this website;
All processing of personal data of careers website visitors is based on our legitimate interest to facilitate recruitment (Art. 6 (1) subpara.1 point (f) GDPR).
You are furthermore free to decide in a next step, whether you would like to use your LinkedIn profile for your application with us. If you decide to do so, your profile information stored there will be linked to our offer via an interface and your profile data will be transferred to us. This is a voluntary offer to you, based on your consent and our legitimate interest (Art. 6 (1) subpara.1 point (a), (f) GDPR).
If you decide to use your profile from another career platform, this career platform might process your personal data as well. We are not informed about this and cannot influence such processing. For further information, please contact the third party:
LinkedIn Ireland Unlimited Company
4. If we contact you
It might be the case that we contact you via a career platform (LinkedIn). In this event we use your information offered within your profile on the career platform which we will store within our software offered by Recruitee (see no. 3.) and ask you whether you are interested in a pecific position. If this is the case, we will proceed as described above. If this is not the case, we will delete your contact data from our database immediately, unless you ask us to save your contact details for other interesting job offers (consent). This processing of personal data is based on our legitimate interest to facilitate recruitment (Art. 6 (1) subpara.1 point (f) GDPR). If you ask us to save your contact details, the processing is based on your consent, which you can revoke at any time (Art. 6 (1) subpara.1 point (a) GDPR).
4.1 Logfiles
For the purely informative use of the website, i.e. if you do not sign up or transmit any other information to us, only the data that your browser automatically transmits to the server on which the contents are hosted is stored in so-called logfiles and processed as required. If you view our website, we collect the following data, which is required technically by us in order to display our website to you and to ensure stability and security (the legal basis being Article 6 subs.1 (f) of the GDPR):
The IP address of the requesting computer
The date and time of the server request
The URL of the respectively accessed website
Where applicable, the URL of the website via which the user has gone to the accessed website
The name of the requested file
The page from which the file has been requested
The access status of the web server (file transferred, file not found, command not executed, etc.)
The browser type and version
The operating system of the terminal device used
The data volume transferred
The collection of this data takes place in an anonymized form only. The data collected therefore does not allow any conclusions to be drawn as to specific persons. There is no merging of this data with other data sources that could possibly create a reference to a person. At the most, the data is evaluated for statistical purposes and is automatically deleted after four weeks.
The servers on which www.intersnack-it.com is hosted, and on which the personal data processed during your visit to our website is stored, are located in Germany and are operated by CANCOM Pironet AG & Co. KG (Von-der-Wettern-Straße 27, 51149 Köln) in its capacity as the hosting service provider.
Our Cooperation with Third Parties
We also benefit from the advantages of a society based on the division of labour and the corporate world. In the area of data processing, this means that we do not carry out all data processing processes in-house, but in some cases work together with external service providers:
Career software: in order to offer and use the technical possibilities described above (connection to the career platforms), we work together with Recruitee (www.recruitee.com), a software and cloud provider that we have carefully selected and integrated in compliance with data protection law
Career platforms: in order to find you, we will also place our job advertisements on external career platforms (e.g. LinkedIn) via Recruitee. If you apply through them, they may forward/store your documents and usage data to us as described above (Personal Data and Purposes of Processing; 3. Information about your career platform usage data).
External (IT) service providers that we have contractually obligated as so-called processors to process data trictly according to our specifications and instructions and to protect this data comprehensively both technically and organisationally. For the cloud-based handling of the recruiting process we have concluded a data processing agreement with Recruitee B.V., Johan Huizingalaan 763A, 1066VH, Amsterdam, Netherlands.
Your Data Protection Claims and Rights
If we process your personal data, you are entitled to various data protection claims against us. You have the right,
To request information about the data stored about your person and its origin, the purpose of processing as well as the recipients or categories of recipients of the data (Art. 15 GDPR, Sec. 34 BDSG),
Under certain conditions, to request rectification, restriction of processing or erasure of your personal data (Art.16 - 18 GDPR, Sec.35 BDSG),
To request the transfer of your data to another controller (Art. 20 GDPR) and
To complain to us or to the competent supervisory authority about data processing (Art.77 GDPR).
You can also object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 (1) subpara. 1 point (f) GDPR). Since we do not process your data for advertising purposes, this requires a reason that arises from your particular situation. In the event of an objection, we will no longer process your personal data to which the objection relates from receipt during the subsequent verification and – in the event of a justified objection – delete it after completion of the verification (Sec. 36 BDSG, Art. 21 GDPR).
If you transmit your consent to data processing (Art. 6 (1) subpara. 1 point (a) GDPR) to us, you can withdraw it at any time for no reason; we will then not process your personal data further unless we have legal permission to do so.
A justified objection and a withdrawal of your consent have no influence on data processing processes that have already taken place.
We fulfil all rights to which you are entitled free of charge and without delay. If you have any further questions, please contact us directly or our data protection officer using the contact details provided at the beginning.
Imprint