Notes on Data Processing

1. Name and contact details of the data controller and contact details of the company data protection officer

This privacy policy applies to data processing by:

Data Controller:

P&I Personal & Informatik AG

Kreuzberger Ring 56

65205 Wiesbaden

Tel.: +49 (0) 611 7147-0

The Data Security Officer at P&I Personal & Informatik AG can be contacted by e-mail: 
DSB Email

  

2. Collection and storage of personal data as well as type and purpose and their use

2.1     Visitors to the website

For every query, our web server processes a number of data items, which your browser automatically transmits to our web server. These consist of the IP address which is currently assigned to your device, the date and the time of the query, the time zone, the specific page or file which is accessed, the http-status code and the volume of data transmitted. In addition, the website where your query originated, the browser which is used, the operating system of your end device and the language setting. The web server utilises those data in order to display the content of this website in an optimal manner on your device.

2.1.1     The purpose of the data processing is to present the corporate group and communicate with job applicants, interested parties and customers as well as to provide a registration form for seminars that we offer.

2.1.2     The legal basis for the processing is Art. 6 no. 1 lit. f) of the General Data Protection Regulation - GDPR (legitimate interest in presenting the company and providing options for establishing contact). In cases where the contact is established in order to procure offers, to apply for a job or to register for seminars, the legal basis is Art. 6 no. 1 lit. b) GDPR possibly in combination with Section 26 BDSG Federal Data Protection Law [Bundesdatenschutzgesetz (BDSG)] (Contract initiation).

2.1.3     Messages that are sent to us via the contact form are forwarded internally for processing to the employee who is responsible. In the absence of special circumstances, log and communication data are not disclosed to third parties. If a criminal offence is suspected or a criminal investigation has been initiated, data can be transmitted to the police and the public prosecutor. Service providers that operate within the scope of commissioned data processing pursuant to Art. 28 GDPR are deployed for data processing.

2.1.4     IP addresses are rendered anonymous within 24 hours at the latest. Communication content is deleted after six calendar years. Posting-relevant data are deleted ten years after the final posting.

2.1.5     Using the website is not possible without disclosing data that can be connected to a person, such as the IP address. Communication or registration for seminars via the website is not possible without providing information.

 

2.2     Job applicants for an employment relationship

2.2.1     The purpose of the data processing is the selection of job applicants for an employment relationship.

2.2.2     The legal basis for the data processing is the initiation of an employment contract pursuant to Section 26 BDSG in combination with Art. 6 no. 1 lit. b) and Art. 88 GDPR. If you have consented to the processing of your data, the legal basis for the processing is your declaration of consent pursuant to Art. 6 no.1 lit. a) in combination with Art. 7 GDPR.

2.2.3     Job applicant data are disclosed internally to the employees who are in charge and responsible for making the decision. Transmission to other companies of the P&I Group can occur with the consent of the data subject (person concerned).

2.2.4     The data are deleted six months after the end of the job application process. If a job applicant is also interested in other positions, the data remain stored for up to 24 months. You can also request that your data be erased before the time limit has expired. 

2.2.5     The disclosure of personal data is necessary for the evaluation of the job application and possibly for subsequent conclusion of an employment contract. A job application cannot be taken into consideration without disclosure of personal data. However, the job application can be submitted without disclosing the information that is designated as voluntary.

2.2.6     If the job applicant has commissioned a recruitment agency to transmit the job application documents to us, we receive all of the information provided in the job application from the recruitment agency.

 

2.3     Service providers, business partners and their employees

2.3.1     The purpose of the processing is the establishment, performance and termination of the respective existing contract or order as well as the fulfilment of statutory obligations.

2.3.2     The legal basis for the processing are Art. 6 no. 1 lit. b) GDPR (contract, order) in the case of contracts with natural persons, Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely communication with contractual contact partners) in the case of contracts with legal persons as well as invariably Art. 6 no. 1 lit. c) GDPR (statutory obligations, especially tax and commercial law regulations). In the case of evaluation, assertion or rejection of claims, the legal basis is Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely assertion of claims or defence against claims). If we send information about our products and that is not necessary for performance of the contract, our legitimate interest is set out in Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely information for contractual contact partners).

2.3.3     Contact and contractual information can be transmitted to other service providers, business partners as well as public offices and authorities, to the extent that is necessary for the performance of the contract or order. Transmission to other companies of the P&I Group can occur with the consent of the data subject (person concerned). Service providers that operate within the scope of commissioned data processing pursuant to Art. 28 GDPR are deployed for data processing.

2.3.4     Data of contract partners and service providers shall be deleted 10 calendar years after termination of the contract or order.

2.3.5     In the case of service providers and business partners, the processing of contact information is necessary in order to perform the contract or fulfil the order. If the information is not provided, communication can be impaired substantially.

 

2.4     Customers and their employees

2.4.1     The purpose of the processing are performance of the contract as well as support and liaison for the customers and interested parties. 

2.4.2     The legal basis for the processing are Art. 6 no. 1 lit. b) GDPR (contract performance) in the case of contracts with natural persons, Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely communication with contract-relevant contact partners) in the case of contracts with legal persons as well as invariably Art. 6 no. 1 lit. c) GDPR (statutory obligations, especially tax and commercial law regulations). In the case of evaluation, assertion or rejection of claims, the legal basis is Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely assertion of claims or defence against claims). If we send information about our products and that it is not necessary for performance of the contract, the legal basis is our legitimate interest Art. 6 no. 1 lit. f) GDPR (namely our interest in providing information to contractual contact partners).

2.4.3     Data of customers and interested parties can be transmitted to other service providers, business partners as well as public offices and authorities, to the extent that is necessary for the conclusion or performance of the contract. Service providers that operate within the scope of commissioned data processing pursuant to Art. 28 GDPR are deployed for data processing.

2.4.4     Data of customers shall be deleted 10 calendar years after termination of the contract or order.

2.4.5     The processing of the data of customers and interested parties is necessary for preparation and performance of the contract. If the information is not provided, no contract can be concluded.

  

3. Disclosure of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

The data processing is carried out at your request and is required according to Art. 6 para. 1 no. 1 lit. b GDPR for the purposes stated for the appropriate processing of the employment contract and for the mutual fulfilment of obligations arising from the employment contract.

The personal data collected by us for the above-mentioned purposes will be stored until the expiry of the statutory storage obligation (see details in the respective procedure) and then deleted, unless we are obliged to store them for a longer period of time pursuant to Article 6 para. 1 no. 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from ’HGB’, ‘StGB’ or ‘AO’) or you have consented to storage going beyond this pursuant to Article 6 para. 1 no. 1 lit. GDPR.

  

4. Rights of the data subject

You have the right:

  • to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future;
  • to request information about your personal data processed by us. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, limitation of processing or opposition, the existence of a right of appeal, the origin of your data if it has not been collected from us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details;
  • to immediately request the correction of incorrect or incomplete personal data stored by us;
  • to demand the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • to demand the restriction of the processing of your personal data if the correctness of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection against the processing pursuant to Art. 21 GDPR;
  • to receive any personal data you have provided to us in a structured, common and machine-readable format or request it to be transferred to another responsible person;
  • to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.

  

5. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 no. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR if there are reasons for doing so which arise from your particular situation.

If you wish to make use of your right to object, an e-mail is sufficient to presse@pi-ag.com.

 

as at November 5th

 

Diese Website verwendet Cookies. Cookies gewährleisten den vollen Funktionsumfang unseres Angebots, ermöglichen die Personalisierung von Inhalten und können zu Analysezwecken gesetzt werden.

Weitere Informationen      |      Zustimmen und Fortfahren