Controller for data processing
Company name according to Section 17 (1) HGB including contact details of the controller (MD)
BBC Group
Behr Bircher Cellpack BBC AG
Anglikerstrasse 99
5612 Villmergen
Switzerland
Represented by Mr Kurt Zaugg, QHSE Manager
Contact:
Telephone +41 56 618 12 00
Email info@bbcgroup.com
Contact details of the data protection officer
Helbig Datenschutz GmbH
Harald Helbig
Bergstraße 11
91207 Lauf an der Pegnitz
+49 9123 70275-15
harald.helbig@helbig-datenschutz.de
Type of data processed:
In connection with the decision on establishing an employment relationship (application process), we process data which you send to us as part of your application. In particular, this includes your master data, your curriculum vitae, your photo, your references and qualifications as well as certificates.
Purposes and legal bases of data processing
The personal data is processed for the purpose of establishing the employment relationship.
The legal bases are provided by Art. 6 GDPR and Section 26 BDSG (new) (data processing for the purposes of employment). This also includes relevant company agreements and contractual provisions as well as internal company guidelines/rules of the controller and
consent to further data processing following completion of the application process and execution of a hiring test, where applicable.
Processing serves to uphold the legitimate interests of the controller or a third party
To the extent necessary, we process your data beyond the actual fulfilment of the contract in order to uphold the legitimate interests of ourselves or third parties. This includes:
- Applicant management
- Assertion of legal claims and defence in the case of legal disputes
- Measures for building and plant security (e.g. access controls) and to uphold internal rules
Categories of recipients of personal data (data transmission)
Within the European Union or European Economic Area:
Affiliated companies (BBC Group) as well as other public bodies for the fulfilment of statutory obligations and for requested certificates.
Companies of the BBC Group:
List of the BBC Group in the EU/EEA
Third country including adequacy decision
The personal data of applicants is transmitted within the BBC Group. The EU Commission determined an adequate level of data protection in a formal decision for Switzerland (2000/518/EC).
List of the BBC Group in Switzerland
List of the BBC Group outside the EU/EEA
Storage period
The respective purposes arise from statutory requirements and from pertinent provisions specific to the sector. The personal data is deleted after fulfilment of the purpose.
Sources of personal data
As a rule, we are provided or sent your personal data from you directly by email, post or the online application process.
Moreover, it is possible that we receive your personal data including application documents via temporary employment agencies, online job portals, placement services and head hunters.
Rights of data subjects
You can use the contact details above to exercise your rights at any time. If your personal data is processed, you are considered a data subject within the meaning of the GDPR and are entitled to the following rights towards the controller:
Information regarding the rights of data subjects
The data subject has the right to request confirmation from the controller about whether their personal data is processed; if this is the case, the data subject has the right to information about this personal data and the information listed in Art. 15 GDPR.
The data subject has the right to request from the controller the prompt rectification of incorrect personal data and the completion of incomplete personal data (Art. 16 GDPR).
The data subject has the right to request from the controller that their personal data be deleted without delay, insofar as one of the reasons individually listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the pursued purposes (right to erasure).
The data subject has the right to request from the controller the restriction of processing if one of the requirements listed in Art. 18 GDPR is met, e.g. if the data subject raises an objection to processing, for the period of review by the controller.
The data subject has the right to object to the processing of their personal data at any time for reasons arising from their special situation. In this case, the controller may no longer process the personal data unless it can demonstrate mandatory reasons for processing worthy of protection, which prevail over the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defence of legal claims (Art. 21 GDPR).
Rights of data subjects
Insofar as you have provided us with consent to the processing of personal data for certain purposes (e.g. processing of images of data subjects), the lawfulness of this processing is based on your consent.
Consent issued may be revoked at any time. This also applies to the revocation of declarations of consent which we received prior to the entry into effect of the GDPR, i.e. before 25 May 2018.
Please note that revocation only has effect for the future. Processing carried out prior to revocation is not affected thereby.
Right to lodge a complaint with a supervisory authority
Irrespective of other administrative or judicial remedies, each data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data violates the GDPR (Art. 77 GDPR). The data subject can exercise this right at a supervisory authority in the member state of their place of residence, place or work or place of the alleged violation.
The list of competent supervisory authorities is available here
Provision of personal data
In connection with the application process, you are only required to provide the personal data that is necessary for the establishment of the employment relationship or which we are legally obliged to collect. As a rule, we will be unable to establish the employment relationship without this data.
Change of purpose
We reserve the right to amend this privacy policy in compliance with data protection provisions. The respectively valid version can be found under “Privacy Policy” on our website (www.bbcgroup). In addition, you can request the current version at any time using the contact details above. If we intend to process your data for purposes other than those for which the data was collected, we will inform you accordingly in advance in compliance with statutory provisions.