Version: July 2021
This privacy policy applies for all visitors to the website and applicants (provided they do not apply through out assessment centre) to DES GmbH (hereinafter referred to as ‘we’ or ‘the Company’), who provide us with their personal data. We are the Controller in terms of processing your personal data.
This privacy policy explains how we use your personal data and the rights and options available to you.
Name: DES GmbH
Address: Gewerbegebiet Ost 8, 18258 Schwaan
Phone: +49 (0) 38 44 | 8 444-0
E-Mail: info@des.de
The following text provides information on how your personal data is processed on our website. We will provide information on the purposes and legal bases behind the processing of your personal data and how long your personal data will be stored for based on the type of personal data.
2.1 Website visits for purely informational purposes.
If you visit our website for solely informational purposes without actively providing data by registering or in any other manner, we will only process internet connection data that is transferred to our servers by your browser.
Type of personal data:
Server log files, Browser type and version, used operating system, Referrer URL, Date & time of the server request, IP address, address, Requested resources
Purposes and legal bases behind processing:
When you visit our website/online shop, we automatically process information in server log files, which are automatically sent to us by your browser. This data is collected to allow us to continue improving our website and for the purpose of privacy monitoring and data security.
This data is processed in accordance with Art. 6(1) lit. b or f GDPR.
Automatically collected log data will be deleted once the purpose for which it was collected has been fulfilled, generally 14 days after collection, provided it is not subject to a longer retention period in individual cases due to data and system security or for error identification and bug fix purposes.
The personal data listed under number 2.1 is automatically collected by our IT systems when you visit our website/online shop. If this personal data is not processed, this may prevent the optimal display of the website/online shop.
2.2 Applications (provided you do not apply through our assessment centre)
We process the following personal data for applications.
Type of personal data:
Personal information such as your
(i) name, private contact information (email address, phone number, postal address)
and other professional information provided by you during the application process such as your
(ii) curriculum vitae, letters of recommendation, cover letters, proof of your ability to work, previous positions, training history, spoken languages, skills and certificates relevant to the job
in addition to other information provided during the application process such as your
(iii) date and location of birth, marital status, number of children, driving license information and status as a person with disabilities, if applicable.
Purposes and legal bases behind processing:
The processing of the above personal data within the scope of an application sent either by email, via the company website or in the mail, is required to select suitable employees, notify you of our decision on your application, coordinate the application process (e.g. a personal interview) and establish an employment relationship.
This data is processed in accordance with Art. 26(1) sentence 1 BDSG.
We collect the personal data specified in section 2.3 directly from you as the applicant during the application process. If your application is unsuccessful, we will continue to store this personal data for an additional three months after we have notified you of this decision. The legal basis for this processing of your data is Art. 6(1) lit. f GDPR, in addition to the above. Our legitimate interest in this regard lies in the use of the personal data in connection with legal disputes related to applications, particularly in relation to the General Equal Treatment Act (AGG).
If you visit one of our company pages on Facebook, Instagram and LinkedIn by clicking on the media link or directly and use the contact information provided on the respective platform (including the comments function), we will process your personal data to the extent specified in Sections 2.2 and 2.3.
This data is processed on the legal basis of balancing interests as per Art. 6(1) lit. f GDPR. We process your personal data on the basis of our interest in providing our visitors/users with up-to-date information and the ability to interact on our company pages.
We are responsible for these company pages along with Facebook, Instagram and LinkedIn in accordance with the GDPR. As the (Co-)Controller of these company pages, we have concluded agreements with Facebook, Instagram and LinkedIn that govern the conditions for use of the company page, among other terms. If you visit our company pages on Facebook, Instagram or LinkedIn, the respective social media provider will process your personal data. We will be provided with part of the personal data collected and processed for the use of our company pages in aggregated form via insights (user statistics). The following generated user statistics are solely disclosed to us in anonymised form (in particular: Facebook: the number of visitors to our company page, the scope of interactions (‘Likes’, page subscribers, reactions to posts), information on videos (number of views, popularity of the videos), demographic information (information on the visitor’s age group, gender, education level, career and relationship status); Instagram: activity information (reactions: likes/hearts, comments, how the post has been shared or saved, how many people have visited our profile from a story, clicks on links on our profile), demographic information; LinkedIn: posts (number of times and how often a post is displayed, number of times and how often a post and the company are clicked on, likes, comments, shares), followers (whether organic or not, demographic information), visitors (how often the page is visited by the same visitor, demographic information)). We are not granted access to the underlying data. Please read the agreements for page controllers under data protection law to learn more about data processing, particularly with regard to user statistics.
For Facebook and Instagram:
https://www.facebook.com/legal/terms/page_controller_addendum
For LinkedIn:
https://legal.linkedin.com/pages-joint-controller-addendum
Learn more about the extent to which social media providers collect and process your personal data in relation to this processing in the privacy policies linked below. We do not have any influence over whether Facebook, Instagram or LinkedIn transfer your personal data to third parties. In particular, it may be the case that personal data is processed outside the European Union by Facebook Inc., Instagram Inc. or LinkedIn Inc., which are headquartered in the USA.
Facebook
Facebook is provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Privacy policy: https://www.facebook.com/about/privacy/
Instagram
Instagram is provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Privacy policy: https://help.instagram.com/519522125107875
LinkedIn
LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Privacy policy: https://www.linkedin.com/legal/privacy-policy
We do not use your personal data to make automated decisions regarding you or for profiling purposes.
We share your personal data with the following recipients:
5.1 We use data processors to process personal data for the specified purposes on our behalf. We maintain control over the personal data at all times and remain the Controller for the data processing.
5.2 In certain cases, we may transfer personal data to courts, law enforcement agencies, supervisory authorities, other authorities, tax consultants and lawyers when legally permissible and required.
6.1 Subject to deviating agreements, we will only store your personal data for the period required to perform the respective services, purchase our products or to provide information that you have requested from us in addition to the administration of our business relationship with you.
6.2 Furthermore, we are required to store personal data for the retention periods specified by law in accordance with the pertinent regulations (in relation to business transactions, for example).
6.3 Your personal data is erased without undue delay as soon as it is no longer required for the specified purposes.
7.1 In accordance with statutory provisions, you are entitled to the following rights:
• The right of access for your personal data: You are entitled to receive a copy of your personal data processed by us and to check whether we process this data in line with legal requirements; • The right to rectify your personal data processed by us: You can demand that incomplete or incorrect data is rectified; • The right to erase your personal data: You can request that we erase or remove personal data that we no longer have any reason to continue processing. Furthermore, you also remain entitled to demand the erasure or removal of your personal data after you have asserted your right to object to processing; • The right to object to the processing of your personal data where processing takes place on the legal basis of our legitimate interests (or those of a third party) and grounds arise from your personal circumstance on which you would like to base your objection to processing. In particular, your reserve the right to object to processing if your data is processed for the purpose of direct advertising; • The right to restrict processing of your personal data; You are entitled to request that processing of your personal data is suspended if you would like us to determine the legality or contractual bases for the processing, for example; and • under certain circumstances, the right to transmit your personal data to another Controller.
7.2 If you have granted us consent to process your personal data, you reserve the right to withdraw this consent at any time. This will not have any effect on the legality of the processing carried out one the basis of your consent prior to the withdrawal thereof.
7.3 You are also entitled to lodge a complaint with a competent supervisory authority.