Data Protection Information For Applicants
INFORMATION ACCORDING TO ART. 13 GDPR ON DATA PROTECTION FOR APPLICANT DATA:
1. Name and contact details of the person responsible for processing
This data protection notice applies to data processing by:
Outsourcing4work GmbH
Breslauer Str. 1A
64521 Groß-Gerau
Tel.: +49 (0) 6151 906 990-0
Email: info@outsourcing4work.de
2. Collection and storage of personal data as well as type and purpose as well as legal basis
a) If you commission us, we collect the following information that is necessary to find a job or the collection of which is in our legitimate interest:
• Salutation, first name, last name, title if applicable
• Address
• Contact details (such as email address, telephone number)
• All information related to your application (e.g. CV, certificates, qualifications, questions for answers, etc.) .
• Consent data, if given.
b) After successful placement, we also collect the following data:
• Placed employer
• Information about your gross salary including additional payments and non-cash benefits
• Information about the start of employment
c) This data is collected,
• to be able to identify you as our contractual partner;
• to be able to refer you to employers in the best possible way, even if this is done through our cooperation partners, as this achieves a greater reach
• to be able to comply with our legal obligations
• to correspond and communicate with you;
• for the purposes of permissible direct advertising, in particular for the purpose of offering you new/additional positions
d) Data processing in accordance with lit necessary for the stated purposes, in particular the mediation. The data according to lit. b) is used to calculate our remuneration; Data processing is required in accordance with Article 6 Paragraph 1 Letter f) GDPR.
If the CV or other documents contain sensitive data, we will not evaluate or have them evaluated. Such evaluations are not processed explicitly.
3. Duration of processing
a) If we have successfully placed you, your contact details and the information related to your application (according to Section 2 a) will be deleted after 3 years from the start of your contractual relationship with the employer you placed.
b) If we were unable to place you, all of your data will be deleted after 6 months of notification that no contractual relationship has been established with the employer you placed, unless you consent to further storage. In this case, the data will only be deleted when you revoke your consent.
c) The other personal data (name, address, as well as the data mentioned in section 2 b) will be stored until the statutory retention period expires (6 years after the end of the calendar year in which the paid employment relationship with your employer began). will then be deleted, unless we are obliged to store it for a longer period of time in accordance with Article 6 Paragraph 1 Sentence 1 Letter c) GDPR due to tax and commercial law retention and documentation obligations (from HGB, StGB, AO).
4. Disclosure of data to third parties
a) Your personal data will not be transferred to third parties for purposes other than those listed below.
b) To the extent that this is necessary for the placement of the applicant in accordance with Article 6 Paragraph b) GDPR, your personal data will be passed on to third parties in accordance with Section 2) a). This includes in particular the passing on of
• Potential employers
• Xing (New Work SE, Dammtorstr. 30, 20457 Hamburg), for the purpose of placing applicants via Xing as a recruiting platform
c) Furthermore, as part of our processing, your data will be passed on to the following recipients:
• Microsoft 365 from Microsoft Corp. (for communication via email)
• Telekom AG and Vodafone AG (for telephone communication)
• Recruitee from Recruitee BV (applicant management software)
• Tax advisor xy
The data transfer is based on Art. 6 Paragraph 1 Letter f) GDPR. The legitimate interest lies in the need for document/customer management as well as in communication with the applicant. In addition, we must archive certain data for tax purposes; The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter c) GDPR.
d) The data passed on may only be used by the third party for the stated purposes.
5. Data transfer to third countries
a) In some cases we use external service providers based in non-European economic areas to process your data. We use Microsoft 365 from the US company Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA, www.microsoft.com for email communication.
b) Microsoft itself states that it will not use the data for anything other than providing the service. No data would be scanned or used for any purpose other than its intended purpose.
c) The legal basis for our use of MS Teams is Article 6 Paragraph 1 Letter b) GDPR. Microsoft itself has created data protection standard contractual clauses that have been approved by the EU’s Article 29 Data Protection Working Party; these are still based on the former data protection directive 95/46/EC. Furthermore, we will ensure the guarantees in accordance with Art. 46 GDPR. For further information on data protection at Microsoft, see https://www.microsoft.com/de-de/trust-center/privacy?rtc=1 .
6. Rights of those affected
a) You have the right to request information from us at any time about the personal data we have stored about you (Article 15 GDPR). This also applies to the recipients or categories of recipients to whom this data is passed on and the purpose of storage.
b) You also have the right to request the correction of incorrect or incomplete data under the conditions of Art. 16 GDPR and/or the deletion of stored data under the conditions of Art. 17 GDPR. Deletion is only possible if processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
c) You have the right to request the restriction of processing under the conditions of Article 18 GDPR if you dispute the accuracy of your data, the processing is unlawful and we refuse to delete it, you need the data to assert legal claims or if you have objected to the processing.
d) Furthermore, you can request data transfer at any time under the conditions of Article 20 GDPR.
e) If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, you have the right to object to the processing of your personal data at any time in accordance with Article 21 GDPR with effect for in the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless
(1) there are compelling, legitimate reasons for processing that outweigh your interests, rights and freedoms, or
(2) processing is necessary to assert, exercise or defend legal claims.
f) If the data processing is based on your consent, you can revoke the data processing at any time in accordance with Art. 7 Para. 3 GDPR.
g) Please send all requests for information, requests for information, revocations or objections to data processing to us by email (see section 1). For further information we refer to the full text of the GDPR. You also have the option of complaining to the responsible supervisory authority about data protection issues. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, www.datenschutz.hessen.de . Alternatively, you can lodge a complaint with the supervisory authority in your country of residence or at the location of the alleged violation.
