Data protection for applicants

Information on data protection in accordance with Art. 13 GDPR – Application process

We attach great importance to the protection of your personal data. Since the protection of your privacy as well as your business data is of particular importance to us, we will comply with the data protection regulations applicable in Germany.

In the following, we inform you about the collection of personal data at the time this data is collected.

1. controller pursuant to Art. 4 para. 7 GDPR

INDOORBAU Röhricht GmbH
August-Rost-Str. 8 D-99310 Arnstadt

Data protection officer:
Dr. Thomas Häring
Triapila GmbH
Torgauer Straße 231
04347 Leipzig
Mail: datenschutz@triapila.de

2. collection and use of personal data

(1) We collect, store and process your personal data in order to process your application and the application process.

(2) When you contact us, the personal data actively transmitted by you will be stored and processed insofar as this is necessary for the application process.

This involves the following data: Surname, first name, address, date of birth, e-mail address, telephone number, the contents of your application documents, such as cover letter, CV, certificates, proof of qualifications and your photo.

The collection and use of our users’ personal data only takes place regularly with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

Insofar as we obtain the consent of the applicant for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
Art. 6 para. 1 lit. b GDPR serves as the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the applicant do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

(3) Your registered data is protected in our systems against access by unauthorized third parties. This prevents data misuse.

(4) The applicant’s personal data will be deleted or blocked as soon as the application process is completed, the decision was not made in your favor and provided there are no statutory retention obligations.

3. right to information

You can request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing has taken place, you can request the following information from us:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by us or a right to object to such processing
(6) the existence of the right to lodge a complaint with a supervisory authority;
(7) any available information as to the source of the data if the personal data are not collected from the applicant;
(8) the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you are transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

4. right to rectification

You have a right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete. We will make the correction without delay.

5. right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you if:
(1) you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or
(4) you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours. 21 (1) GDPR and it has not yet been determined whether our legitimate grounds override your grounds.
If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored – with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

6. right to erasure

a) Obligation to erase
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:
(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
(6) The personal data concerning you were collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
b) Information to third parties
If we have made the personal data concerning you public and we are obliged to delete it in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.
c) Exceptions
The right to erasure does not exist if the processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
(3) for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(5) for the establishment, exercise or defense of legal claims.

7. right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against us to be informed about these recipients.

8. right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly by us to another controller, insofar as this is technically feasible. This must not adversely affect the freedoms and rights of others.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

9. right of revocation and objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services by means of automated procedures using technical specifications.

Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

10. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

11. confidentiality

(1) We shall maintain secrecy about all information to be treated confidentially which has come to our knowledge in the run-up to and within the framework of the contractual relationship and shall only use such information vis-à-vis third parties – for whatever purpose – with the prior consent of the respective other contractual partner. Information to be treated as confidential includes information expressly designated as confidential by the party providing the information and information whose confidentiality is clearly evident from the circumstances of its provision. In particular, your personal data and the data used must be treated confidentially by us should we become aware of this.

(2) The obligations under para. 1 shall not apply to such information or parts thereof for which we can prove that they are

were known to us or generally accessible to us prior to the date of receipt;
were known or generally accessible to the public before the date of receipt;
become known or generally accessible to the public after the date of receipt, without us being responsible for this.

(3) Public declarations by the parties on cooperation shall only be made by prior mutual agreement. .

(4) The obligations under para. 1 shall continue to exist beyond the end of the contract for an indefinite period of time, as long as an exception pursuant to para. 2 is not proven.