Data protection information regarding our processing of customer and supplier data pursuant to Article 12 et seq. of the General Data Protection Regulation (GDPR)
HTM GmbH & Co. KG
In accordance with the requirements of Articles 12 et seq. of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data collected by us and your corresponding rights under data protection law. To ensure that you are fully informed about the processing of your personal data in the context of the establishment, execution, and termination of a business relationship with our company, please take note of the following information.
HTM GmbH & Co. KG
Brüsselstraße 4
54516 Wittlich
Tel: +49 (0) 6571 95896 60
info@htm-wartung.de
Internet: www.htm-wartung.de
ffp digital consulting GmbH
Anne Fischer
Building 890
Hahn Airport
Tel: +49 (0) 6543 - 500 886 0
Email: datenschutz@htm-wartung.de
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, performance or termination of a contractual relationship with us. In this case, the lawfulness of the processing of personal data is based on Article 6(1), first sentence, point (b) of the GDPR.
Furthermore, we may process your personal data, provided that this is necessary, in accordance with Article 6(1), first sentence, point (c) of the GDPR, to fulfil legal obligations, or in accordance with Article 6(1), first sentence, point (f) of the GDPR, to defend against and assert legal claims arising from the contractual relationship. A legitimate interest may, for example, be the obligation to provide evidence in the context of legal proceedings.
Where you give us your explicit consent to the processing of personal data for specific purposes, the lawfulness of such processing is based on your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR. Consent that has been given may be withdrawn at any time with effect for the future (see section 9 of this privacy notice).
We only process data that is relevant to the specific business relationship. This may include general personal data (name, address, contact details, etc.), as well as, where applicable, further data required to fulfil contractual, accounting and other legal obligations. In addition, we process technically necessary communication data that is transmitted to us in the course of electronic communication (e.g. IP address, email address, telephone number, etc.).
We process personal data that has been provided by you for the purpose of establishing and performing the contractual relationship. Furthermore, we process personal data that we collect ourselves in the course of performing the contractual relationship or that is transmitted to us by third parties.
We only disclose your personal data within our organisation to those departments and individuals who require this data in order to fulfil contractual and legal obligations or to pursue our legitimate interests.
Your personal data is processed on our behalf on the basis of data processing agreements in accordance with Article 28 of the GDPR. In such cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are our IT partners, our SaaS providers and communication service providers.
Otherwise, data is only passed on to recipients outside the company if legal provisions permit or require it, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may include, for example:
When you contact us by email or via the contact form on the website, and in the course of fulfilling the contract, data may be transferred to the USA by the email and SaaS provider (Microsoft Corp.). In this case, the transfer is carried out on the basis of standard data protection clauses in accordance with Article 46(2)(c) of the GDPR.
When you contact us via social media (Facebook, Instagram, LinkedIn), your data is transferred to the USA. In this case, the transfer is carried out on the basis of standard data protection clauses in accordance with Article 46(2)(c) of the GDPR.
We do not intend to transfer your personal data to a third country for any other purpose, nor does such a transfer take place.
We process your personal data for as long as is necessary for the establishment, performance or fulfilment of the business relationship, or for the exercise or fulfilment of the rights and obligations arising from a contractual relationship, or for the exercise or fulfilment of the rights and obligations arising from legislation.
In addition, we are subject to various retention and documentation obligations arising, inter alia, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods prescribed therein for retention and documentation range from two to ten years.
Finally, the retention period is also determined by the statutory limitation periods, which, for example, under Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but may in certain cases be as long as thirty years.
Right of access under Article 15 of the GDPR:
You have the right, upon request and free of charge, to be informed as to whether any data concerning you is held, what data is held, and for what purpose it is being held.
Right to rectification under Article 16 of the GDPR:
You have the right to request that the data controller rectify any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed — including by means of a supplementary statement.
Right to erasure („right to be forgotten") pursuant to Art. 17 GDPR:
You have the right to request that the data controller erases your data without delay. The data controller is obliged to erase personal data without delay if any of the following grounds apply:
Right to restriction of processing in accordance with Art. 18 GDPR & § 35 BDSG:
You have the right to request the restriction of processing if one of the following conditions is met:
Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the data you have provided from the controller in a structured, commonly used and machine-readable format. We must not hinder the transmission of this data to another controller.
Right to object pursuant to Art. 21 GDPR:
Insofar as the processing of your personal data is based on Article 6(1) sentence 1 lit. f GDPR for the purposes of safeguarding legitimate interests, you have the right, pursuant to Article 21 GDPR, to object to the processing of such data at any time for reasons arising from your particular situation.
Right to lodge a complaint with a supervisory authority pursuant to Article 13(2)(d), 77 GDPR in conjunction with Section 19 BDSG:
If you believe that the processing of your data contravenes the GDPR, you have the right to lodge a complaint with the supervisory authority. To do so, please contact the relevant supervisory authority.
Withdrawal of consent pursuant to Article 7(3) of the GDPR:
If the processing is based on your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR or Article 9(2)(a) of the GDPR (processing of special categories of personal data), you are entitled at any time to withdraw the consent given for the relevant purpose, without this affecting the lawfulness of the processing carried out on the basis of that consent prior to its withdrawal.
The provision of personal data for the proper performance of a contractual relationship or for the implementation of pre-contractual measures is voluntary. You are therefore not obliged to provide personal data. However, we can only conclude or perform an effective contractual relationship with you if you provide such personal data upon conclusion of the contractual relationship as is necessary for the establishment and performance of the contractual relationship.
No automated decision-making within the meaning of Article 22 of the GDPR is used in relation to decisions on the establishment, performance or termination of a contractual relationship.
Data protection information regarding our processing of applicant data pursuant to Article 12 ff. of the General Data Protection Regulation (GDPR)
HTM GmbH & Co. KG
We are delighted that you have taken an interest in our company. In accordance with the provisions of Articles 12 et seq. of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you have provided as part of the application process, as well as any personal data we may have collected, and your rights under data protection law in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the information below.
HTM GmbH & Co. KG
Brüsselstraße 4
54516 Wittlich
Tel: +49 (0) 6571 95896 60
info@htm-wartung.de
Internet: www.htm-wartung.de
ffp digital consulting GmbH
Anne Fischer
Building 890
Hahn Airport
Tel: +49 (0) 6543 - 500 886 0
Email: datenschutz@htm-wartung.de
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on whether to enter into an employment relationship with us. In this case, the lawfulness of the processing of personal data is governed by Article 6(1), first sentence, point (b) of the GDPR. The lawfulness of the processing of special categories of personal data within the meaning of Article 9(1) of the GDPR is determined in accordance with Article 88 of the GDPR in conjunction with Section 26(3) of the BDSG.
Furthermore, we may process your personal data, provided that this is necessary, in accordance with Article 6(1), first sentence, point (c) of the GDPR, to fulfil legal obligations, or in accordance with Article 6(1), first sentence, point (f) of the GDPR, to defend against and assert legal claims arising from the employment relationship. An example of a legitimate interest is the burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you grant us explicit consent to process personal data for specific purposes, the lawfulness of such processing is given on the basis of your consent pursuant to Article 6(1) sentence 1 lit. a of the GDPR in conjunction with Section 26(2) of the BDSG. Consent that has been granted may be revoked at any time with effect for the future (see section 9 of this data protection information).
Should an employment relationship be established between you and us, we may, in accordance with Article 6(1), first sentence, point (b) of the GDPR and Article 88 of the GDPR in conjunction with Section 26(3) of the BDSG, we may continue to process the personal data already received from you, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of rights and obligations arising from law.
We only process data that is relevant to your application. This may include general personal details (name, address, contact details, etc.), information on your professional qualifications and educational background, details of any further professional training, and, where applicable, any other data you provide to us in connection with your application. Furthermore, when you submit your application electronically via email or through our applicant portal, so-called server log data is processed, which includes, for example, your IP address and information about the device you are using. In addition, technically necessary communication data transmitted to us as part of electronic communication (e.g. IP address, telephone number, etc.) is processed.
We process personal data that we receive from you by post, via our applicant portal or by email when you contact us or apply.
We only disclose your personal data within our organisation to those departments and individuals who require this data in order to fulfil contractual and legal obligations or to pursue our legitimate interests.
Your personal data is processed on our behalf on the basis of data processing agreements in accordance with Article 28 of the GDPR. In such cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are our IT partners, our SaaS providers and communication service providers.
Otherwise, data is only passed on to recipients outside the company if statutory provisions permit or require it, the transfer is necessary to fulfil legal obligations, or we have your consent.
Where applications are submitted by email or via the application form on the website, data may be transferred to the USA by the email provider (Microsoft Corp.). In this case, the transfer is carried out on the basis of standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. No other transfer of your personal data to a third country is intended and does not take place.
We process your personal data for as long as is necessary to make a decision on your application. Your personal data and application documents will be deleted no later than six months after the end of the application process (e.g. notification of a rejection), unless longer retention is required or permitted by law. Furthermore, we will only store your personal data to the extent that this is required by law or, in a specific case, to establish, exercise or defend legal claims for the duration of any legal proceedings. In the event that you have consented to the longer-term storage of your personal data (e.g. for the purposes of inclusion in the candidate pool or consideration in a future recruitment round), we will store this data in accordance with your declaration of consent.
If the application process results in an employment contract, your data will, where necessary and permissible, initially continue to be stored and subsequently transferred to your personnel file.
Right of access under Article 15 of the GDPR:
You have the right, upon request and free of charge, to be informed as to whether any data concerning you is held, what data is held, and for what purpose it is being held.
Right to rectification under Article 16 of the GDPR:
You have the right to request that the data controller rectify any inaccurate personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed — including by means of a supplementary statement.
Right to erasure („right to be forgotten") pursuant to Art. 17 GDPR:
You have the right to request that the data controller erases your data without delay. The data controller is obliged to erase personal data without delay if any of the following grounds apply:
Right to restriction of processing in accordance with Art. 18 GDPR & § 35 BDSG:
You have the right to request the restriction of processing if one of the following conditions is met:
Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive the data you have provided from the controller in a structured, commonly used and machine-readable format. We must not hinder the transmission of this data to another controller.
Right to object pursuant to Art. 21 GDPR:
Insofar as the processing of your personal data is based on Article 6(1) sentence 1 lit. f GDPR for the purposes of safeguarding legitimate interests, you have the right, pursuant to Article 21 GDPR, to object to the processing of such data at any time for reasons arising from your particular situation.
Right to lodge a complaint with a supervisory authority pursuant to Article 13(2)(d), 77 GDPR in conjunction with Section 19 BDSG:
If you believe that the processing of your data contravenes the GDPR, you have the right to lodge a complaint with the supervisory authority. To do so, please contact the relevant supervisory authority.
Withdrawal of consent pursuant to Article 7(3) of the GDPR:
If the processing is based on your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR or Article 9(2)(a) of the GDPR (processing of special categories of personal data), you are entitled at any time to withdraw the consent given for the relevant purpose, without this affecting the lawfulness of the processing carried out on the basis of that consent prior to its withdrawal.
The provision of personal data as part of the recruitment process is voluntary. You are therefore under no obligation to provide personal data. However, we can only make a decision on entering into an employment relationship with you, or only enter into such a relationship, if you provide the personal data required for the application.
For the decision on your application, we generally do not use fully automated individual decision-making pursuant to Art. 22 GDPR.