Information on handling your data as an applicant

An obligation arising from the General Data Protection Regulation.

1. PRELIMINARY REMARK

The following points are intended to provide you with information about your data. The legislator has specified which information is necessary for this. If you want to know more about this, you will find it in the General Data Protection Regulation in Articles 12 to 22 and 34. The text of the General Data Protection Regulation is available on the Internet at the following https://dsgvo-gesetz.de/. If you have any further questions about the General Data Protection Regulation, you can contact the data protection officer and/or the administration at any time.

2. WHAT IS PERSONAL DATA?

All information relating to an identified or identifiable person. A person is identifiable if he or she can be identified directly or indirectly. This can be done, for example, by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special features.

3. BASIC INFORMATION

3.1 Who is responsible for processing my data?
The person responsible for data processing is
Consult-SK Ltd.
Simeonsplatz 2
32423 Minden
Tel. 0571/7834350
E-mail: datenschutz@consult-sk.de

3.2 How can I contact you?
Contact person: Mr. Stephan Kaup
E-mail: datenschutz@consult-sk.de

3.3 Which authority is responsible for control and compliance with data protection law?
Competent data protection supervisory authority
The State Commissioner for Data Protection of North Rhine-Westphalia
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Phone: 0211 384240
E-mail: poststelle@ldi.nrw.de

3.4 How can I contact the company's data protection officer?
The data protection officer of our company is Mr. Carsten Bruns.
The data protection officer can be reached as follows:

SK-Consulting Group GmbH
Osterweg 2, 32549 Bad Oeynhausen, Germany
E-mail: datenschutz@sk-consulting.com

4. OTHER IMPORTANT INFORMATION

4.1 Data collection in the application process (Why?)
Before you decide for us and us for you, we would like to get to know each other. For this purpose, in the first step, we regularly use the information and documents that you send us in writing or in text form. The next step is to get to know each other personally, during which we learn even more about each other. The purpose of this data collection is to make a well-founded decision for a long-term cooperation.

4.2 Why may we do this?
Data protection law permits (pursuant to Section 26 (1) Sentence 1 BDSG n.F. in conjunction with Article 88 (1) DSGVO) the collection of data that is necessary for the establishment of the employee relationship. If you voluntarily provide us with things about yourself that go beyond what is necessary, data protection law allows us to do so as part of a consent (pursuant to Article 6 (1) sentence 1 lit. a DSGVO). Version: 1 Information obligation for applicants pursuant to Art. 13 and 14 DSGVO The legal basis for the collection of the above-mentioned mandatory information is Section 26 (1) Sentence 1 BDSG n.F. in conjunction with Article 88 (1) DSGVO.

4.3 Who can receive data from me?
In the course of processing, your data may be transferred to: Persons within our company who are directly involved in data processing (e.g. Human Resources Department) Service providers who are contractually bound and obliged to maintain confidentiality and who perform partial data processing tasks External companies, if this is necessary. Examples include postal service providers for the delivery of letters.

4.4 Will you transfer data from me to countries outside the European Union?
This is not planned by us. An exception to this would only be conceivable if you were to initiate this, e.g. if you were to provide us with the account details of a bank outside the European Union to which we should transfer money. The legal basis for this is Article 6(1)(b) DSGVO, Section 24 BDSG n.F., Article 49(1)(b) DSGVO.

4.5 How long will you store my data?
We store your data for the time we need it to achieve the purposes outlined in 4.1 above. No later than six months after the decision, the paper documents will be returned or the digital documents deleted. This time limit results as protection against claims under the General Equal Treatment Act (AGG). However, there may be legal regulations (e.g. the German Fiscal Code § 147) that require us to retain certain documents for six or ten years. After the retention period has expired, we delete data that is no longer required.

4.6 Do I have to provide my data?
In order to achieve the reasons set out in point 4.1, it is necessary that you provide us with your personal data for pleasure. This is mandatory for a conclusion of the contract with you. In case of non-provision we cannot conclude a contract with you. In case of complaints, you can always contact the competent supervisory authority. For our company, the supervisory authority mentioned in point 3.3. is responsible. You have the right to have this judicially reviewed, according to Article 78 DSGVO, against a supervisory authority as well as, according to Article 79 DSGVO against our company.

4.7 Automated decision making / profiling
Automatic decision-making / profiling does not take place.

5. WHAT RIGHTS DO I HAVE?

5.1 Note on your rights
As a data subject of a data processing operation, you have, among others, the following rights under the General Data Protection Regulation (hereinafter also referred to as "data subject rights"):

5.2 Rights of access (according to Article 15 GDPR)
You have the right to request information about whether or not we are processing personal data relating to you. If we process personal data about you, you have the right to know which type of recipients receive or should receive data from you (see also point 4.3); how long we will store your data; if an indication of the storage period is not possible, we must inform you how it comes to the determination of the storage period (e.g. after the expiry of legal retention periods) (see also point 4.5); that you have a right to rectification and deletion of the data concerning you, including the right to restrict processing and/or the possibility to object (see also the following points 5.2, 5.3 and the following); whether your data is used for automated decision-making and, if this is the case, to find out which logic underlies the decision and what effects and scope the automated decision may have for you; that if data about you is transferred to a country outside the European Union, you have the right to information as to whether and, if so, on the basis of which guarantees an adequate level of protection is ensured at the data recipient; that you have the right to request a copy of your personal data. Copies of data are generally provided in electronic form. The first copy is free of charge; an appropriate fee may be charged for additional copies. A copy can only be provided insofar as the rights of other persons are not affected by this.

5.3 Right to rectify the data (according to Article 16 DSGVO)
You have the right to request that we correct your data if it is incorrect and/or incomplete. This right also includes the right to completion through supplementary statements or notifications. A correction and/or completion must be made without culpable hesitation.

5.4 Right to erasure of personal data (according to article 17 DSGVO)
You have the right to request that we delete your personal data if the personal data is no longer necessary for the purposes for which it was collected and processed; the data processing is based on your consent and you have revoked your consent; however, this does not apply if there is another legal authorization for the data processing; you have objected to data processing, the legal permission for which lies in the so-called "legitimate interest" (according to Article 6(1)(e) or (f)); however, deletion need not take place if there are overriding legitimate grounds for further processing; you have objected to data processing for the purpose of direct marketing; it is a child's data that is processed for information society services (=electronic service) on the basis of consent (pursuant to Art. Art. 8 (1) DSGVO) has been collected. There is no right to erasure of personal data if it is necessary for compliance with a legal obligation (e.g. legal retention obligations), for the performance of public duties and interests under applicable law (this includes "public health") or for archiving and/or research purposes; the personal data is necessary for the assertion, exercise or defense of legal claims. The deletion must take place immediately (without culpable delay). If personal data has been made public by us (e.g. on the Internet), we must ensure, as far as is technically possible and reasonable, that other data processors are also informed of the deletion request, including the deletion of links, copies and/or replications.

5.5 Right to restriction of data processing (according to Article 18 DSGVO)
You have the right to restrict the processing of your personal data in the following cases: If you have disputed the accuracy of your personal data, you may request that we do not use your data for any other purpose for the duration of the verification of the accuracy and thus restrict its processing.
In the event of unlawful data processing, you can demand the restriction of data use instead of data deletion; If you need your personal data to assert, exercise or defend legal claims, but we no longer need your personal data, you can demand that we restrict processing to the purposes of legal proceedings; If you have objected to data processing (pursuant to Art. 21 (1) DSGVO) (see also point 5.7) and it is not yet clear whether our interests in processing outweigh their interests, they can request that their data not be used for other purposes for the duration of the review and thus restrict its processing. Version: 1 Information obligation for applicants according to Artt. 13 and 14 DSGVO. Should a processing restriction be lifted, they will be informed of this in advance.

5.6 Right to data portability (according to Article 20 DSGVO)
You have the right to request the data you have provided to us in a common electronic format (e.g. as a PDF or Excel document). You may also request us to transfer this data directly to another (designated) company, if this is technically possible for us. The condition for you to have this right is that the processing is carried out by on the basis of consent or for the performance of a contract and is carried out with the aid of automated processes. The exercise of the right to data portability does not affect the rights and freedoms of other persons If you use the right to data portability, you still have the right to data erasure according to Article 17 GDPR.

5.7 Right to object to certain data processing (according to Article 21 GDPR)
If your data is processed for the performance of tasks in the public interest or for the performance of legitimate interests, you may object to this processing. To do so, you must provide us with the reasons arising from your particular situation for your objection. These may be, for example, special family circumstances or confidentiality interests worthy of protection. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless there are compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing is necessary for the assertion, exercise or defense of legal claims. You may object to the use of your data for direct marketing purposes at any time; this also applies to profiling insofar as it is related to direct marketing. In the event of an objection, we may no longer use your data for the purpose of direct advertising. Direct advertising and/or profiling will not be initiated or carried out by us in any case.

5.8 Prohibition of automated decisions/profiling (according to Article 22 GDPR)
Decisions by us that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data. This also includes profiling. This prohibition does not apply insofar as the automated decision is permitted on the basis of legal regulations, if these legal regulations contain appropriate measures to protect your rights and freedoms as well as your legitimate interests, or decisions based exclusively on automated processing of special categories of personal data (=sensitive data) are only permitted if they were made on the basis of and appropriate measures to protect your rights and freedoms as well as your legitimate interests.

5.9 Exercise of data subject rights
To exercise the data subject rights, please contact the office mentioned under point 3.2. Requests submitted electronically will generally be answered electronically. The information, notifications and measures to be provided in accordance with the GDPR, including "the exercise of data subjects' rights, are generally provided free of charge. Only in the case of manifestly unfounded or excessive requests are we entitled to charge an appropriate fee for processing or to refrain from taking action (according to Article 12(5) of the GDPR). If there are reasonable doubts about your identity, we may request additional information from you for the purpose of identification. If we are unable to identify you, we are entitled to refuse to process your request. If we are unable to identify you, we will - as far as possible - notify you separately. (see Article 12 (6) and Article 11 DSGVO). Requests for information and disclosure are usually processed without delay, within one month of receipt of the request. The deadline may be extended by a further two months where necessary, taking into account the complexity and/or number of requests; in the event of an extension of the deadline, we will inform you of the reasons for the delay within one month of receiving your request. If we fail to act on a request, we will promptly inform you of the reasons within one month of receipt of the request and inform you of the possibility to lodge a complaint with a supervisory authority or to seek judicial remedy. (see Article 12(3) and (4) GDPR). Please note that you may exercise your data subject rights only within the limits of restrictions and limitations provided for by the Union or the Member States. (Article 23 GDPR)