Skip to main content

Information duties pursuant to Art. 13 GDPR for applicants according to Section 26 (8) BDSG 2018

Controller for data processing

Company name according to Section 17 (1) HGB including contact details of the controller (MD)

BBC Group
Behr Bircher Cellpack BBC AG
Anglikerstrasse 99
5612 Villmergen

Represented by Mr Kurt Zaugg, QHSE Manager 

Telephone  +41 56 618 12 00

Contact details of the data protection officer

Helbig Datenschutz GmbH
Harald Helbig
Bergstraße 11
91207 Lauf an der Pegnitz
+49 9123 70275-15 

Type of data processed:
In connection with the decision on establishing an employment relationship (application process), we process data which you send to us as part of your application. In particular, this includes your master data, your curriculum vitae, your photo, your references and qualifications as well as certificates. 

Purposes and legal bases of data processing

The personal data is processed for the purpose of establishing the employment relationship.

The legal bases are provided by Art. 6 GDPR and Section 26 BDSG (new) (data processing for the purposes of employment). This also includes relevant company agreements and contractual provisions as well as internal company guidelines/rules of the controller and

consent to further data processing following completion of the application process and execution of a hiring test, where applicable.

Processing serves to uphold the legitimate interests of the controller or a third party

To the extent necessary, we process your data beyond the actual fulfilment of the contract in order to uphold the legitimate interests of ourselves or third parties. This includes:

  • Applicant management
  • Assertion of legal claims and defence in the case of legal disputes
  • Measures for building and plant security (e.g. access controls) and to uphold internal rules 

Categories of recipients of personal data (data transmission)

Within the European Union or European Economic Area:

Affiliated companies (BBC Group) as well as other public bodies for the fulfilment of statutory obligations and for requested certificates. 

Companies of the BBC Group: 
List of the BBC Group in the EU/EEA

Third country including adequacy decision

The personal data of applicants is transmitted within the BBC Group. The EU Commission determined an adequate level of data protection in a formal decision for Switzerland (2000/518/EC).

List of the BBC Group in Switzerland
List of the BBC Group outside the EU/EEA

Storage period

The respective purposes arise from statutory requirements and from pertinent provisions specific to the sector. The personal data is deleted after fulfilment of the purpose.

Sources of personal data

As a rule, we are provided or sent your personal data from you directly by email, post or the online application process. 

Moreover, it is possible that we receive your personal data including application documents via temporary employment agencies, online job portals, placement services and head hunters.

Rights of data subjects

You can use the contact details above to exercise your rights at any time. If your personal data is processed, you are considered a data subject within the meaning of the GDPR and are entitled to the following rights towards the controller:

Rights of data subjects

Insofar as you have provided us with consent to the processing of personal data for certain purposes (e.g. processing of images of data subjects), the lawfulness of this processing is based on your consent. 

Consent issued may be revoked at any time. This also applies to the revocation of declarations of consent which we received prior to the entry into effect of the GDPR, i.e. before 25 May 2018. 
Please note that revocation only has effect for the future. Processing carried out prior to revocation is not affected thereby.

Right to lodge a complaint with a supervisory authority

Irrespective of other administrative or judicial remedies, each data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the GDPR (Art. 77 GDPR). The data subject can exercise this right at a supervisory authority in the member state of their place of residence, place or work or place of the alleged violation.

The list of competent supervisory authorities is available here

Provision of personal data

In connection with the application process, you are only required to provide the personal data that is necessary for the establishment of the employment relationship or which we are legally obliged to collect. As a rule, we will be unable to establish the employment relationship without this data.

Amendment to the privacy policy

Change of purpose

We reserve the right to amend this privacy policy in compliance with data protection provisions. The respectively valid version can be found under “Privacy Policy” on our website (www.bbcgroup). In addition, you can request the current version at any time using the contact details above. If we intend to process your data for purposes other than those for which the data was collected, we will inform you accordingly in advance in compliance with statutory provisions.