1. Who is responsible for processing your personal data?
Newline Europe Versicherung AG
Schanzenstraße 38
Gebäude 81
51063 Köln
info@newlinegroup.de
(hereinafter referred to as “we”) is the controller within the meaning of the EU General Data Protection Regulation (“GDPR”).
You can contact our data protection officer by post at the above address, adding “Data Protection Officer” or by email at:datenschutz@newlinegroup.de .
2. For what purposes and on what legal basis do we process personal data?
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and all other relevant laws (e.g. BetrVG, ArbZG, etc.). We process personal data about you for the purpose of your application for employment, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Section 26 (1) in conjunction with (8) sentence 2 BDSG. Furthermore, we may process personal data about you to the extent necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Art. 6 (1) (f) GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If an employment relationship is established between you and us, we may, in accordance with Section 26 (1) BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of employee representation resulting from a law or a collective agreement, a works or service agreement (collective agreement).
3. What categories of personal data do we process?
We process data related to your application. This may include general personal data (such as your name, address and contact details), information about your professional qualifications and school education, information about your professional development, or other information that you provide to us in connection with your application. In addition, we may process professionally related information that you have made publicly available, such as a profile on professional social media networks.
4. What categories of recipients are there?
We may transfer your personal data to companies affiliated with us by contract, insofar as this is permissible within the scope of the purposes and legal bases set out in section 2. If we transfer data to group companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g. EU standard contractual clauses) are in place. You can request these from one of the above contact addresses.
Otherwise, personal data is processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by host providers.
5. How long will your data be stored?
We store your personal data for as long as is necessary to decide on your application. If an employment relationship between you and us does not come about, we may continue to store data beyond this period if this is necessary to defend against possible legal claims. In this case, the application documents will be deleted two months after notification of the rejection decision, unless longer storage is necessary due to legal disputes.
6. What are your rights?
As an applicant, you have the following data protection rights, depending on the individual situation, which you can exercise at any time by contacting us using the
details provided in section 1:
a. Information
You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and authorised persons with access to it and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration.
b. Rectification, erasure or restriction of processing
You have the right to request that we rectify any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
c. Right to object
Insofar as the processing of personal data concerning you is based on Article 6(1)(f) GDPR, you have the right to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
d. Right of withdrawal
If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until withdrawal. To do so, you can contact us at any time using the above contact details.
e. Right to erasure
You have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay if one of the following reasons applies:
- The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You object to the processing in accordance with point 6.c above and there are no overriding legitimate grounds for the processing.
- The personal data has been processed unlawfully.
- The deletion of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject.
This does not apply if the processing is necessary:
- to comply with a legal obligation which requires processing under Union or Member State law to which we are subject
- for the establishment, exercise or defence of legal claims.
f. Right to restriction of processing
You have the right to request that we restrict processing if one of the following conditions applies:
- the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
- we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
- you have objected to the processing in accordance with point 7.c above, as long as it is not yet clear whether our legitimate reasons outweigh yours.
Where processing has been restricted pursuant to this letter f, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained a restriction on processing, we will inform you before the restriction is lifted.
g. Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR, the BDSG or other data protection provisions. The data protection supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
7. Necessity of providing personal data
The provision of personal data is neither required by law nor contractually stipulated, nor are you obliged to provide personal data. However, the provision of personal data is necessary for the conclusion of an employment contract with us. This means that if you do not provide us with personal data when applying for a job, we will not enter into an employment relationship with you.