Information on the processing of your personal data in the context of your application in accordance with Article 13 of the EU General Data Protection Regulation (GDPR)

1.What information does this document provide for you?

As part of your application to a TK Elevator group company, or when you visit our website, we process your personal data. We ensure that we comply with the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws and regulations.

In the following, we would like to give you a detailed overview of how we process your personal data and what rights you have in relation to your personal data.

2. Who is responsible for data processing and who is the Data Protection Officer (DPO)?

2.1. The Data Controller is: The company that publishes the job offer for which you are applying (hereinafter referred to as TKE; See footnote [1] ). Furthermore, the name of the company can be found in the job offer.

2.2. You can contact our Data Protection Officer at the following address:

TK Elevator GmbH

E-Plus-Straße 1

40472 Düsseldorf

Germany

Phone: +49 211 5400413-0

Email: dpo@tkelevator.com

3. Scope and Changes to this Privacy Policy.

3.1. This Privacy Policy applies solely to the use of our website, and to job offers published by TKE on Talentlink.

3.2. We reserve the right to amend this Privacy Policy from time to time in order to adapt it to future changes in relation to the collection and processing of personal data.

4. What categories of data do we use and where does this data come from?

The personal data processed on our website is collected from the following sources:

4.1. By default, when you visit our website, our web servers store the IP address (a sequence of numbers that is automatically assigned to a computer when you use the Internet), the website from which you access our website, the files you access on our website, the date of your visit and general information about your browser (version and type).

4.2. From cookies when you visit our website and the cookies identifiers are provided with your online identifiers from your connected devices. In these cases, you will be informed of the purpose of use and, if necessary, asked for your consent to install cookies on your devices. For more information, please see our Cookie Policy.

4.3. Directly from you when you fill out a contact form. We process personal data that you provide to us as part of your application. This also includes the processing of the following data if provided in the application: first name, last name, email address, telephone number, salary expectations, current notice period, cover letter, CV, information about the entitlement to severely disabled protection and any other information you attach to your application. The information marked as “required” is necessary to evaluate your application and to contact you. Without this data, we will not be able to evaluate your profile and start the application process.

4.4. In addition, our recruitment team may review social media profiles and other publicly available information about applicants. The information to be verified is limited to verifying the information you have already provided in your application (work experience and employment information), as well as social media profiles and/or information sources related to business and professional purposes.

5. For what purpose and on what legal basis is your data processed?

The personal data may be processed for the following purposes:

5.1. Security purposes. The information collected from your devices (see point 4.1) is processed to ensure the stability and security of the web server and to display our website to you (e.g. your phone, laptop, or other device). This data may only be evaluated in anonymised form for statistical purposes. 

5.2. We process the data you provide to us in connection with your application in order to check your suitability for the position you have applied for and to carry out the application process.

5.3. Contact forms. If you contact us via the contact forms or the contact addresses provided on our website, we will process your personal data in order to respond to your inquiries and fulfill your requests, including to contact you if necessary. The personal data that you voluntarily provide to us and/or that are requested in the contact forms are processed: e.g. name, surname and email contact details street, zip code, city, country, telephone number, work experience, cover letter, CV and any other information you add.

5.4. If you arrange an appointment via our contact form, the processing is necessary for the preparation, implementation of the interview, or for the preparation of a training contract or for the implementation of measures that are carried out at your request before the conclusion of a contract (Art. 6 (1) (b) GDPR) in conjunction with Art. 88 (1) GDPR). If special categories of personal data within the meaning of Article 9 (1) GDPR are processed, this serves the purpose of exercising rights or fulfilling legal obligations in labour law, social security law and social protection framework in the context of the application process. The legal basis for this processing is Article 9 (2) (b) GDPR in conjunction with Article 26 (3) German BDSG (Bundes-Datenschutz-Gesetz) new version.

5.5. Lawfulness of processing: When applying for a specific job offer, the legal basis for the processing is the performance of a contract and/or taking steps at your request prior to entering into a contract (Art. 6 (1) (b) GDPR). When sending unsolicited applications, the legal basis for the processing is your consent (Art. 6 (1) (a) GDPR). If you apply for a specific position or send us an unsolicited application, your personal data will be processed in order to manage your application for our vacancies and/or to find job offers that match your experience. The personal data that you provide to us or that is requested in the job advertisement is processed: e.g. first name, last name, email address, street, zip code, city, country, telephone number, work experience, cover letter, CV and any other information that you attach to your application.

5.6. If further data is processed in the ongoing application process, we will inform you separately.

5.7. Automated individual decisions that could have legal effects on you or similarly significantly affect you do not take place in connection with your use of this website (applicant management).

6. How long will your data be stored?

 6.1. Your application will be deleted six (6) months after the completion of the application process, unless a longer or shorter storage is required for legal or statutory reasons. The deadline begins with the receipt of the rejection of your application.

7. Who receives your data?

 7.1. Depending on the position(s) you have applied for and the company(s) to which you have applied, the people within the relevant company(s) who are required to fill positions, such as recruiters, will have access to your candidate profile. Unless the disclosure is required by law.

7.2. Only the persons and departments within the company that are necessary for the application process or the fulfilment of their legal obligations receive your personal data, such as the human resources department, specialist department, works council, representation for severely disabled people.

7.3. If you apply for a specific job offer published on our website, your application will be accepted by the TKE legal entity that publishes the job offer. If the job offer you are applying for is published by a TKE entity based outside the EU/EEA, your personal data will be transferred to the third country where the TKE entity is established. In these cases, the transfer is necessary in accordance with Article 49 (1) (b) of the GDPR for the implementation of pre-contractual measures taken at the request of the data subject (the applicant). As a result of the data transfer, the requirements set out in local data protection regulations may apply. Nonetheless, the TKE Group has put in place appropriate protective measures to ensure compliance with the GDPR across the Group and to ensure that the level of protection required by the GDPR for natural persons is not undermined, regardless of where the various TKE entities are located.

7.4. In addition, we sometimes make use of external service providers who are obliged by data protection agreements to fulfil their data protection obligations (e.g. server providers in the following areas: IT services and infrastructure, customer service, etc.). Some service providers may be located outside the EU/EEA. This is done in compliance with data protection requirements, in particular the guarantee of an appropriate level of data protection. The safeguarding is provided by a suitable guarantee (e.g. in the form of standard contractual clauses in accordance with Article 46 (2) (c) GDPR or on the basis of an adequacy decision in accordance with Article 45 GDPR).

8. What data protection rights can you assert as a data subject?

8.1. You have the right to access the personal data concerned and the right to rectification, erasure, restriction of processing and data portability and, in the case of processing in accordance with Art. 6 (1) (e) and (f) GDPR, the right to object to processing.

8.2. Insofar as you has given us your consent to the processing of your personal data in accordance with Art. 6 (1) (a) GDPR, you can revoke this consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

8.3. If you wish to exercise any of these rights, please submit a written request explicitly stating your request to the Data Protection Officer (see contact details under point 2.2).

8.4. You have the right to complain to the supervisory authority. The data protection authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information

(Landesbeauftragter für Datenschutz und Informationsfreiheit)

North Rhine-Westphalia

Postfach 20 04 44

40102 Düsseldorf

Phone: 0211/38424-0

Email: poststelle@ldi.nrw.de