Our use of your data and your rights – Information in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Welcome to the online job-applicant management system of the GAZPROM Germania Group (hereinafter “GPG” or “we”). When you upload your application documentation or send it via e-mail to email@example.com, you are making personal data available to GPG as part of your application. By uploading or sending your application documentation to firstname.lastname@example.org, you are granting your consent to this Data Privacy Statement and thereby agree to the following data collection, processing and storage. Hereafter we inform you about the processing of your personal data (Article 4 No. 2 GDPR) in connection with your application.
The controller responsible for processing your personal data is:
GAZPROM Germania GmbH
Phone: +49 (0)30 20195-0
Fax: +49 (0)30 20195-383
2. Data Protection Officer
You can contact our Data Protection Officer at:
GAZPROM Germania GmbH
Data Protection Officer
3. What data do we process and from what sources?
We process personal data that you provide us voluntarily as part of your application. These personal data include the following data or categories of data:
- Master data (mandatory information: title, last name, first name, e-mail address, telephone number; voluntary information: postal code and city)
- Application data (notice period; voluntary information: desired salary)
- Data on how you became aware of us
- Data on your education
- Data on your non-professional interests (optional)
- Other data that you voluntarily provide us in the application process when you upload them or send them to us via e-mail, such as those included in your letter of application, curriculum vitae or in job references
- Communication data: contents of personal or telephone discussions and other data that may arise when we communicate with you (e.g. follow-up questions by us, when you use the contact form, etc.)
- Data privacy statements:
- statements of revocation of any consent you have given; statements of objection to the processing of personal data
- statements asserting your rights to access, rectification, erasure, restriction of processing, and data portability, including the information that you provide to us when asserting your rights
We do not process personal data that we have received from third parties.
4. For what purpose do we process your data and what is the legal basis for that?
We process your personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and German Data Protection Act (BDSG), for various purposes. In principle, the purposes for which we process your data are: for processing of data relating to employment relationship (Section 26 BDSG), to perform contractual obligations (Article 6 paragraph 1 point (b) GDPR) subject to your prior consent (Article 6 paragraph 1 point (a) GDPR) and/or to comply with statutory obligations (Article 6 paragraph 1 point (c) GDPR).
We process your personal data in accordance with the following legal regulations for the following purposes:
|Purpose / Legitimate interest||Processed data or category of data||Legal basis|
|Use of the application data / contract initiation including communication with the data subject||Master data; application data; data on how you became aware of us; data on your education; data on your non-professional interests; other data that you voluntarily provide us in the application process; communication data||Section 26 BDSG, Article 6 paragraph 1 point f GDPR|
|Transfer to the personnel file of the data subject. This serves as a review for abuse and as a basis for the subsequent professional development of the data subject||Master data; application data; data on how you became aware of us; data on your education; data on your non-professional interests; other data that you voluntarily provide us in the application process; communication data||Section 26 BDSG, Article 6 paragraph 1 point f GDPR|
|Assert legal claims and defend against legal disputes||Master data; all personal data that are the subject of the legal claim or the legal dispute||Article 6 paragraph 1 point f GDPR|
|Objection management (administration of notices of objection related to data privacy matters)||Master data, data privacy statements||Article 6 paragraph 1 point c GDPR|
|Management of the rights of the data subjects (processing of data subjects’ requests for information, rectification, erasure, restriction of processing and data portability in order to fulfil the data privacy rights of the data subjects)||All data or categories of data that are the subject of the respective request.||Article 6 paragraph 1 point c GDPR|
5. Who obtains my data?
The people within GPG who obtain access to your data during the application process include the employees of the human resources department, the respective functional department and the responsible committee (works council, if appropriate also the severely handicapped employee representative). All GPG employees are obliged to maintain confidentiality about personal data as part of their employment relationship. Data are processed taking into account the general standards for data security in accordance with state-of-the-art technology.
Service providers whom we engage to work on our behalf (termed “processors”; cf. Article 4 No. 8 GDPR) may obtain personal data. We use the following processors or processor categories:
- IT service providers
We do not pass on personal data to third parties who process personal data under their own responsibility (termed “controllers”; cf. Article 4 No. 7 GDPR).
6. Data retention
We process and store your personal data to the extent necessary for the duration of the application process. If you start a job at GPG, your personal data will be added to your personnel file. However, if you have received a negative decision about your job application, your personal data or application documents will be erased 5 months after the application process is completed. You will not be notified separately about the erasure of the data.
This does not apply if your data are processed and stored in order to assert or exercise legal claims, or to defend against legal claims (duration of litigation).
7. Your rights
Every data subject has the right to access personal data and obtain information (Article 15 GDPR), the right to rectification of data (Article 16 GDPR), the right to erasure of data (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), and the right to data portability (Article 20 GDPR). You can get in touch with us under the contact data specified under No. 1 and No. 2, to exercise the aforementioned rights.
If you have given us consent to process your data, you can revoke it at any time without using a special form. Where possible, notice of revocation should be sent to us using the contact data specified under No. 1 or No. 2.
Furthermore, you have a right to issue a complaint with a data protection supervisory authority (Article 77 GDPR). The supervisory authority responsible for GAZPROM Germania is:
- Berlin Commissioner for Data Protection and Freedom of Information
You also have a right to object to the processing of your data, as explained in more detail at the end of this Data Privacy Statement.
Information on your right to object to processing in accordance with Article 21 of the General Data Protection Regulation (GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 paragraph 1 point (f) GDPR (data processing based on a weighing of interests), including any profiling based on those provisions within the meaning of Article 4 No. 4 GDPR.
If you object, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Your objection can be submitted without using a special form and, where possible, should be sent using the contact data specified under No. 1 and No. 2 of this Data Privacy Statement.