Mandatory information on the recruitment process

Information for data subjects (applicants) when data is collected directly (Art. 13 GDPR)

We are pleased that you are applying for a position with us, whether in response to a job posting or on your own initiative. As part of the application process, we process personal data and documents relating to you that you have provided to us or may provide to us in the future. The General Data Protection Regulation (GDPR) sets out certain requirements regarding how such data must be handled and how we must inform you in this regard. Under Art. 13 GDPR, you have the right to be informed about certain matters at the time your personal data is collected. For this reason, we are providing you with the following information.

Who is responsible?

The controller responsible for processing your personal data in the application process is SKion Water GmbH, Seedammweg 55, 61352 Bad Homburg v.d. Höhe (Germany), telephone: +49 6172 404-534, email: info@skionwater.com.

Our company is represented by the managing directors Dr. Reinhard Hübner and Dr. Dirk Brusis.

Who should I contact regarding data protection?

We have not appointed a data protection officer. If you have any questions, please contact our data protection contact at: datenschutz-skion@gqh.de

For what purposes is my data processed?

We process your personal data in order to carry out the application process, review and evaluate your documents, and assess you in this context. We also use your personal data to communicate with you and, where applicable, to arrange an appointment for a personal interview.

What is the legal basis for the processing?

The processing of your personal data is expressly permitted by law for the purpose of carrying out the application process (Section 26 (1) BDSG in conjunction with Art. 6 (1) lit. b GDPR). This applies to all processing activities specifically related to your application (e.g., storing your master personal data, communicating with you, assessing your performance and qualifications, and evaluating your suitability for our company). In addition, the processing of your personal data is permitted for the purposes of our legitimate interests (Art. 6 (1) lit. f GDPR). These consist of digitizing the application process, complying with contractual provisions with the personnel service providers we use, and providing evidence in the event of legal proceedings. In individual cases, the lawfulness of the processing may also be based on your consent (Art. 6 (1) lit. a GDPR) (e.g., inclusion in an applicant pool and longer storage of your application).

Must I provide my personal data?

Providing the information we request when advertising a position is necessary in order for you to participate in the application process. Without this data, you cannot be considered. In the case of an unsolicited application or where processing is based on your consent, providing the data is, of course, voluntary.

To whom will my personal data be disclosed?

Your application documents are received either directly by us or by an external personnel service provider and forwarded to the responsible department heads and managing directors (depending on the position for which you have applied). Our secretariat is responsible for coordinating appointments with you and receives the information necessary for this purpose. We also use other service providers who may become aware of your personal data in the course of providing their services (e.g., when maintaining our IT systems, hosting our database, scheduling appointments, or destroying paper forms). The disclosure of or access to your personal data always takes place on the basis of a legal permission or is based on proper commissioned processing. If we plan to transfer your data to another group company or include it in an applicant pool, we will obtain your consent in advance.

There is no planned transfer to third countries.

How long will my personal data be stored?

Your personal data is initially stored when your application is received. If it concerns an application for an advertised position or an unsolicited application, the documents will be retained for a maximum of 3 or 6 months, respectively, in the event of rejection. After this period, they will be deleted automatically.

If we have received your application documents from a personnel service provider, we will retain them for up to 12 months, even in the event of rejection. We are obligated to do so due to contractual obligations towards our personnel service providers. After this period, the documents will be destroyed.

If you have given your consent to inclusion in our applicant pool, your application documents will be retained for a longer period (until you withdraw your consent or for a maximum of 2 years).

If you have consented to the transfer of the data to another group company, the receiving company is independently responsible, within the meaning of the GDPR, for processing your data.

If you are hired by us, the application documents will be placed in your personnel file and stored for a longer period. Further information on data protection will be provided to you upon hiring.

Does automated decision-making take place?

No automated decision-making or profiling takes place.

What rights do I have?

You have the right to obtain information from the controller about the personal data concerning you (pursuant to Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 (1) GDPR). Furthermore, you have the right to object to processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR). Please note that you may assert these rights at any time. However, this does not necessarily mean that they must be fulfilled in every case. In particular, the right to erasure may be opposed by our interest in the establishment, exercise, or defense of legal claims.

You have the right to withdraw your consent at any time with effect for the future.

If you wish to exercise your rights, please contact the data protection contact named above.

You have the right to lodge a complaint with the competent supervisory authority. A list of the state data protection authorities can be found here: Liste der Landesschutzbehörden