We would like to take this opportunity to inform you about how your applicant data is handled by us and what you and we have to consider in this context.
General information:
If you are a minor (applicant under 18 years of age), you declare with your application that your parents/legal guardians have consented to your application.
Who is responsible for data processing?
The responsible party in terms of data protection law is
pvwerk GmbH
Kirchenpauerstraße 26
20457 Hamburg
Contact: Florian Gösch, Managing Director
Telephone: 040 756644-945
Fax: 040 756644-949
E-mail: info@pvwerk.de
You can find more information about our company, details of the authorized representatives and also other contact options in our imprint on our website: https://www.pvwerk.de/impressum
What data from you are processed by us? And for what purposes?
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.
What is the legal basis for this?
The primary legal basis for processing your personal data in this application process is Section 26 of the BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the conclusion of the application procedure, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. Our interest then consists of asserting or defending claims.
How long is the data stored?
After completion of the application process, we will initially store the data sent by you for six months in order to be able to answer any questions in connection with your application. Following this retention period, we will delete your data without further request. If your application is successful, we will use the data provided for personnel administrative tasks in the context of employment.
To which recipients will the data be disclosed?
As part of our recruiting processes, your personal data will be processed by a central office within our group of companies. In principle, only those persons have access to your data who require this for the proper course of our application process. After receipt of your application, your applicant data will be viewed by the HR department of Enerparc AG. In addition, the management associated with the job posting and the relevant department as the decision-maker will have access to your documents. Then the further procedure is coordinated.
Application portal
Enerparc AG uses an online application portal for the application process. Your data will therefore be stored and processed on the systems of the software partner, the company d.vinci HR-Systems GmbH ("d.vinci"), Nagelsweg 37-39, 20097 Hamburg. Enerparc AG has concluded an order processing agreement with d.vinci in accordance with Art. 28 DSGVO and has jointly undertaken the necessary organizational and technical measures to ensure the confidentiality of your application.
To simplify the application process, we also offer functions where third-party providers assist with data entry:
"Use XING Profile": If you have set up a XING profile, XING will thereupon - if available - transmit to us the data requested in the application form and provided by you to XING. The application form is then pre-populated with your data, but you can still make corrections and additions. XING also collects and processes data itself and may link it to the account you have set up if you use this option. The transfer of data to XING is based on Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in an attractive and simple design of our application process. In order to address as many applicants as possible and to lower the hurdles for submitting an application, we integrate the XING portal, which has a high degree of penetration as a professional and business network. Xing is a service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Information on data protection can be found at https://privacy.xing.com/de/datenschutzerklaerung.
"Use LinkedIn profile": If you have set up a LinkedIn profile, LinkedIn will transmit the stored data to us at your instigation. LinkedIn collects and processes data itself and may link it to your set up profile if you use this option. The data transfer to LinkedIn is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in simplifying our application process by making ourselves more attractive to applicants through the integration of widely used services. LinkedIn [is an offer of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Information on data protection can be found at https://www.linkedin.com/legal/privacy-policy.
"Upload CV": CV parsing is a functionality that automatically captures application-relevant data from a CV you upload and inserts it into the input fields of the applicant questionnaire. d.vinci uses a product of Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, The Netherlands for the applicant tool and specifically for the CV parsing function. Textkernel BV is a subcontracted processor of d.vinci. Privacy information can be found at https://www.textkernel.com/privacy-policy/.
"Resume at Dropbox": Dropbox transmits the previously uploaded resume to us. Dropbox itself collects and processes data and may link it to your Dropbox account if you use this option. The data transfer to Dropbox is based on Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in simplifying our application process by making ourselves more attractive to applicants through the integration of widely available services. Dropbox is an offer of Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland. Information on Dropbox's data protection is available at https://www.dropbox.com/privacy.
Where is the data processed?
In principle, your data is processed in Germany as well as in other countries within the EU. If your personal data is processed in a country outside the EU or if recipients of your personal data are located outside the EU where the level of data protection may not be the same as in the EU, the following applies: we ensure that these are only countries for which the EU Commission has decided that they have an adequate level of data protection. In cases where the recipient country's level of data protection is not comparable to that of the EU, we comply with the requirements developed by the EU and use so-called standard contractual clauses. These are available on request via one of the contact options mentioned above.
Your rights
You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require evidence from you that proves that you are the person you claim to be.
Furthermore, you have a right to correction or deletion or to restriction of processing, insofar as you are entitled to this by law.
Furthermore, you have a right to object to processing within the framework of the legal requirements. The same applies to a right to data portability.
Right of objection
To the extent that we process personal data as explained above in order to protect our legitimate interests that outweigh our legal interests in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time. If the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.
After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.
This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.
Right to complain
You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.
Our data protection officer
We have appointed an external data protection officer. This person can be reached at the above address of the person responsible with the address addition "personal - confidential for the data protection officer" as well as at datenschutz@enerparc.com.
Status: Hamburg, 01.11.2022
.