Information on personal data processing

In compliance with art. 13 of GDPR *, the following is information related to the data processing by BREITTNER GmbH, based in Voltzstraße 8, 86720 Nördlingen, of the personal data you have provided, in connection with a job application:

1. The personal data controller is BREITTNER GmbH, based in Voltzstraße 8, 86720 Nördlingen, registered under number HRB 36525 by the Augsburg Local Court (Amtsgericht Augsburg).
2. Contact with the Controller is possible through the following channels: telephone: +49 9081 2900 777, e-mail: info@breittner.de.
3. The personal data you have provided will be processed for the purpose of participating in the recruitment process for the position for which you are applying, and, if you give separate consent, also for the purpose of future recruitments.
4. The legal basis for the processing of the personal data provided is the consent you have given (Article 6(1)(a) of the GDPR), the need to take action at your request (Article 6(1)(b) of the GDPR) and the purposes arising from the legitimate interests pursued by the Controller (Article 6(1)(f) of the GDPR).
5. If, in connection with a job application, you voluntarily provide personal data of a special category as referred to in Article 9(1) of the GDPR, the Controller will process such data on the basis of your consent (pursuant to Article 9(2)(a) of the GDPR).
6. Consent may be withdrawn at any time, and its withdrawal shall not affect the legality of the processing carried out on its basis. Withdrawal of consent will make your participation in the recruitment process impossible.
7. Personal data will be transferred, to the extent necessary to carry out the aforementioned purpose of processing, to employees and associates of the Controller who are bound to secrecy, including entities that provide consulting and legal assistance services to the Controller.
8. Personal data may be transferred outside the European Economic Area, provided that an adequate level of protection of personal data is ensured, which shall be established in particular through cooperation with processors of personal data in countries:
   1. for which an applicable European Commission decision has been issued,
   2. standards of contractual clauses issued by the European Commission are applied,
   3. binding corporate rules approved by the relevant supervisory authority are applied,
   4. in the case of transfer of data to the US, cooperation with entities participating in the Privacy Shield program approved by the European Commission.
9. Personal data shall be processed for the duration of the recruitment process in which you participate, and in the event that you give separate consent for future recruitment, for recruitment purposes for a period of 5 years from their collection. Once the recruitment objectives have been completed, the data will be kept for the period of time necessary for the establishment, investigation or defense of claims.
10. At any time you have the right to withdraw your consent to the processing of personal data and to object to the processing of personal data.
11. According to the GDPR, you also have the right to: access your personal data and receive a copy of it, correct (rectify) your data, request erasure of your data, limit or object to its processing, data portability, lodge a complaint to a supervisory authority.
12. Providing personal data is voluntary, nevertheless it is a requirement for your participation in the recruitment process.
13. The Controller does not profile personal data and does not make decisions by automated means.

*GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).