(Article 13, 14 of General Data Protection Regulation (GDPR))

We are pleased that you would like to apply for an employment in our company. As data protection is especially important to the WITRON Group, we would like to give you a comprehensive overview of how we process your personal data with this Privacy Policy.

The entire recruitment process is, of course, carried out in compliance with the applicable data protection regulations of the EU General Data Protection Regulation (GDPR) and will in any case be treated with absolute confidentiality. By agreeing to this declaration, you consent to the use of the personal data you provide as specified below. If you do not give your consent, participation in the online application procedure is not possible.

This consent can be withdrawn from the WITRON Group at any time with future effect.

1 Responsible Authority

For the personal data transmitted by you in the online application, WITRON Service GmbH & Co. KG is the responsible authority for processing these data.

This Privacy Policy informs you about the processing of your personal data during the application process by companies of the WITRON Group. In accordance with Art. 4 no. 1 of the GDPR, your personal data includes all information that relates or can be related to your person.

2 Personal information and data

During the application process, we collect and process information (both in paper and digital form). This data may includes the following:

• Name
• Address
• Date of birth
• Place of birth
• Religious confession
• Marital status
• Salary and wage data
• Pay scale classification
• Qualification details
• Evaluations

It may also include information on the severely disabled status and other health data.

By submitting your application, you confirm that you have provided all information truthfully and to the best of your knowledge. If you knowingly and intentionally provided false information, this may lead to the termination of any employment relationship that may have been established.

Once you start a job with a company of the WITRON Group, your personal data, or an excerpt of it, will be included in your personnel file.

3 Purposes for collected and processed information

The WITRON Service GmbH & Co. KG processes your personal data on behalf of the companies of the WITRON Group exclusively for the purpose of employee recruitment and for business purposes related to this. The responsible person collects and processes the personal data of applicants for the purpose of handling the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant sends corresponding application documents to the responsible person electronically, for example by e-mail or via a web form on the website. If responsible person concludes an employment contract with an applicant, the transmitted data will be stored and processed for the purpose of processing the employment relationship in compliance with the statutory provisions.

4 Comparison with terrorist list

As part of a background check, we compare an AEO (Authorized Economic Operator) terror list with applicant data. Based on these regulations, terror lists are drawn up and updated, from which a ban on concluding employment contracts with persons on the list derives. The legal basis for this specific processing is Article 6 paragraph 1 clause 1 lit. c and f GDPR and Article 26 paragraph 1 of the Federal Data Protection Act (compliance with a legal obligation or the protection of justified interests).

5 Your privacy rights (Art. 15-22 GDPR)

As an applicant, you have the following rights concerning your personal data:

• Right of access
• Right of correction or deletion
• Right to restriction of processing
• Right to object to the processing
• Right to data portability

In case of questions regarding your rights and the exercise of your rights, please contact the human resources department or the company data protection officer.

6 Legal basis for the processing of your personal data

The legal basis for the processing of your personal data for the purposes of the employment relationship is § 26 of the Federal Data Protection Act , Art. 6 para. 1 lit. b GDPR (fulfilment of contract) and on Art. 6 para. 1 lit. f GDPR (justified interest of the company). A justified interest may arise, for example, from internal organizational and administrative purposes. In this case, your data may only be processed if the protection of your interests does not prevail fundamental rights and freedoms. We can also obtain the applicant's consent to the processing or transmission of your data in special cases. In such cases, your consent is voluntary and can be revoked by you at any time in the future, unless otherwise agreed.

7 Duration of storage and deletion

We will only store and use your data for as long as it is necessary to decide on the establishment of an employment relationship with you. In case you have not agreed storing your data for other interesting job offers, your applicant data will be deleted 6 months after completion of the application process. If you have agreed to the storage of your data, your applicant data will be deleted 12 months after the end of the application year at the latest.

8 Applicant pool

When submitting an online application, you have the option of explicitly agreeing that we may process your data beyond the current application procedure. With this consent, we may then notify you of new job advertisements or vacancies interesting to you.

9 Disclosure of your Data

Since all job advertisements of the WITRON Group are recorded centrally, your data may also be forwarded to our subsidiaries. Your data will not be passed on to companies or persons outside the WITRON Group or used for other purposes.

10 Data security

The technical handling of the online application procedure is performed by the company Cornerstone in terms of order processing (Art. 28 GDPR). This service provider is solely responsible for the technical implementation and has no influence on the application process, nor can data be viewed by them. We have, of course, verified that Cornerstone has taken all necessary technical and organizational measures to ensure data protection for the online application process. Moreover, all employees of the personnel department are obliged to maintain confidentiality regarding personal data within the terms of their employment contracts. The data you entered or submitted online and the attached documents as well as all processing steps involved in your application are stored safely on a server of this service provider exclusively in the EU/EEA. The data is transmitted in encrypted form (SSL encryption). For security reasons, you will be logged out of the online application system after 60 minutes of inactivity. Therefore, it is necessary to use a session cookie that stores small text files on your computer and automatically deletes them after the session has ended. These text files contain, for example, information on how many minutes ago you were active the last time in the online applicant tool.

11 Questions

If you have any concerns or questions regarding the processing of your personal data, please contact your human resources department, the data protection officer or the data protection supervisory authority.

External data protection officer:

Mr Michael Gruber
BSP-SECURITY
Franz-Mayer-Str. 1
93053 Regensburg
E-mail: michael.gruber@bsp-security.de

Data protection supervisory authority:

edpb.europa.eu/about-edpb/board/members_en

Further information on our general privacy policy can be found at www.witron.de/en/footer/data-privacy-statement