What does this policy cover?
1. The controller responsible for processing your personal data is
TDM Systems GmbH
Derendinger Straße 53
72072 Tübingen, Germany
Tel.: +49 (0) 7071 9492 760
E-mail: info (at) tdmsystems.com
2. Which personal data (categories) do we process?
We collect and save all data you provide us with as part of your application. This includes your contact details, your application documents (CV, cover letter, previous professional experience, training and certificates, as well as our notes from any interviews with you), your salary expectations, the type of employment required and the date you are available and, in exceptional cases, your identification documents. In addition, it covers all other data that you provide us with, including all correspondence you have with us during the application process. This may also include special categories of personal data that we collect, save and process as part of an examination prior to appointment, for example.
Where necessary, we will acquire the above data about you from other sources, including recruitment agencies, the references you provide us with, websites and other publicly accessible data on the Internet. This includes, for example, data made publicly accessible as part of any online profile. We may also obtain data that you submit to us via third party websites, e.g. social networks such as LinkedIn or Xing, or from job sites such as Stepstone or Monster.
3. For what purpose and on what legal basis will your data be processed?
We collect and process your personal data in order to offer job vacancies and implement the selection process. The data you provide us with will be used in order to process your application and, in the event that we enter into an employment contract, additionally in order to implement the employment contract. We will not process your data for any other purpose. The legal basis for this processing is Section 26(1) in conjunction with (8) sentence 2 BDSG (new) and Section 22(1b) BDSG (new), or for public profiles Art. 6(1f) GDPR in conjunction with Art. 9(2e) GDPR.
Furthermore, we may process your personal data if this is necessary in order to defend any legal claims asserted against us arising from the application process. Art. 6(1)(b and f) GDPR forms the legal basis for this. The legitimate interest here is, for example, the obligation to provide proof in a procedure in accordance with the German General Act on Equal Treatment (AGG).
Where an employment relationship is established between you and us, we may process the personal data you have already provided us with for employment-related purposes in accordance with Section 26(1) BDSG (new). This may be the case if this processing is required to implement or terminate the employment relationship or to exercise or satisfy rights and obligations of employees' representation laid down by law or a collective bargaining agreement, a works or service agreement (collective agreement).
4. Recipients or categories of recipients
Unless otherwise specified, we will not pass on your data to third parties. Your personal data may be processed on our behalf based on contracts in accordance with Art. 28 GDPR, in particular by providers of systems for applicant management and applicant selection processes.
Personal data will also be passed on to authorities and/or law enforcement agencies if this is required for the above purposes, if this is legally prescribed or if this is required for the protection of our legitimate interests in compliance with the applicable laws.
5. Rights of the data subject
You can request information about the data we hold that relates to you via the address above. Under certain circumstances, you may also request the rectification or erasure of your data. Furthermore, you may be entitled to exercise your right to restriction of processing of your data and your right to have the data that is provided by you produced in a structured, common and machine-readable format.
6. Duration of data storage
We will only store your personal data for as long as we need to for the legitimate interest of TDM Systems in accordance with applicable law unless you give us your consent to using your documents for other positions which become available. When data storage is no longer necessary, the data will be erased.
7. Data transfers to countries outside of the EU
If we transfer personal data to service providers or Group companies outside the European Economic Area (EEA), this transfer will only take place if the third country has been confirmed as having an appropriate level of data protection by the European Commission or other appropriate data protection guarantees (e.g. binding company-internal data protection guidelines or EU standard contractual clauses) exist.
8. Right to object
If we process your data in order to safeguard legitimate interests, you can object to such processing at any time for reasons related to your particular situation. We will then cease processing your personal data unless we can provide compelling legitimate reasons for doing so which outweigh your interests, rights and freedoms, or unless the processing is used to assert, exercise or defend legal claims.
If we have asked for your consent, you can withdraw this at any time. If you wish to withdraw your consent to the processing of your personal data by TDM Systems GmbH, this will have no influence on any processing that has already been carried out.
9. Right to complain
You can lodge a complaint directly with the supervisory authority. The state official for data protection and freedom of information, Königstrasse 10a, 70173 Stuttgart, Germany, tel.: +49 (0) 7 11 61 55 41 0, fax: +49 (0) 7 11 61 55 41 15