Data protection declaration for Heidelberg Materials AG’s job application portal
Responsible for the processing of data in this job application portal is:
Heidelberg Materials AG (in the following „us“)
Represented by
Dr. Dominik von Achten, Chairman
René Aldach
Kevin Gluskie
Hakan Gurdal
Roberto Callieri
Axel Conrads
Dr. Nicola Kimm
Dennis Lentz
Jon Morrish
Chris Ward
Berliner Straße 6
D-69120 Heidelberg
Phone: +49 6221-481-0
Fax: +49 6221-481-13217
E-Mail: info@heidelbergcement.com
Data Protection Officer (DPO):
Mrs. Silviya Yankova
datenschutz@heidelbergcement.com
We collect an process personal data on these website insofar you provide us with via an entry form or within the job application portal. Moreover we collect and process data that arises during the use of our website. The processing of your data is made in accordance with the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telemedia Act (Telemediengesetz – TMG). Personal data means any information relating to an identified or identifiable natural person. Below we inform you in detail about which data we process in which way and on which legal basis. Moreover we inform you about your rights and about the duration of storage of your data.
On our job application portal applicants may apply for jobs or unsolicited and may request to store their data for a period up to 12 months in our applicant’s pool. Applications may be submitted not only for jobs with Heidelberg Materials AG and their affiliates in Europe but also for jobs with the Lithonplus GmbH und Co. KG.
When using our job application portal applicant will be provided with an account which allows him to follow up his application and to provide us with new or changed documents, information and data.
Any data given within the registration process and the job application portal will be used by Heidelberg Materials AG as described below:
Applications for Heidelberg Materials AG and affiliates in Europe except Lithonplus GmbH und Co. KG (Heidelberg Materials Group); CONSENT to transfer to these affiliates
Any personal data and application documents you provide us with within the job application portal or on any other way are processed on the legal basis of sec. 26 Federal Data Protection Act (BDSG) in the version valid from 25th 2018. According to this provision processing of data which is necessary in the context of a decision about an employment is allowed.
If we need your data after completing the application process we may continue to process your data if it is necessary for the enforcement of our rights. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if we have a legitimate interest to enforce or defend against claims.
In case of refusal we delete your data after 3 months. This does not apply if you consent to the storage of your data in our applicant pool (see below).
When submitting your application you give our express consent that we transfer your data to the company for whose job offer you apply.
Information mentioned above about the purpose, legal basis and scope of data processing is applicable to any Heidelberg Materials AG affiliate you which to apply for.
Applications for Lithonplus GmbH und Co. KG; CONSENT to transfer to Lithonplus GmbH und Co. KG
Any personal data and application documents you provide us with within the job application portal or on any other way are processed on the legal basis of sec. 26 Federal Data Protection Act (BDSG) in the version valid from 25th 2018. According to this provision processing of data which is necessary in the context of a decision about an employment is allowed.
When submitting your application for Lithonplus GmbH und Co. KG you give your express consent that we transfer your data to Lithonplus GmbH und Co. KG.
Information mentioned above about the purpose, legal basis and scope of data processing is applicable to Lithonplus GmbH und Co. KG. Lithonplus GmbH und Co. KG may continue to process your data if it is necessary for the enforcement of their rights. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if Lithonplus GmbH und Co. KG has a legitimate interest to enforce or defend against claims.
In case of refusal we delete your data after 3 months. This does not apply if you consent to the storage of your data in the applicant pool (see below).
CONSENT to storage and processing of data in the applicant pool and transfer to personal data to companies with job offers
If you consent to store your data in our or in Lithonplus GmbH und Co. KG’s applicant pool, you expressly consent in the processing of your personal data as described below:
If you give your express consent to storage of your data in our and our affiliates’ in Europe except Lithonplus GmbH und Co. KG applicant pool your data will be stored there for a period up to 12 months and will then be deleted insofar there is no obligation or right for us to continue to store these data. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if the period for enforcing or defending against claims continues after the 12 month period. Even if you applied successfully for a job we will delete your data only after 12 months of the applicant pool because deletion is processed as a matter of routine. Moreover you expressly consent that we may transfer your data to all our affiliates in Europe except Lithonplus GmbH und Co. KG for the purpose of searching an appropriate job offer respectively applicant.
If you give your express consent to storage of your data in Lithonplus GmbH und Co. KG’s applicant pool your data will be stored there for a period up to 12 months and will then be deleted insofar there is no obligation or right for Lithonplus GmbH und Co. KG to continue to store these data. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if the period for enforcing or defending against claims continues after the 12 month period. Even if you applied successfully for a job we will delete your data only after 12 months of the applicant pool because deletion is processed as a matter of routine. Moreover you expressly consent that we may transfer your data to Lithonplus GmbH und Co. KG for the purpose of searching an appropriate job offer respectively applicant.
CONSENT to transfer of data to our service provider Haufe Service Center GmbH
When using our job application portal you give your express consent in the storage of your personal data and application documents on the server of our service provider Haufe Service Center GmbH. We have concluded a Data Processing Agreement with Haufe Service Center GmbH to keep control of your data.
NOTE: Processing of special categories of personal data
Please note that your job application may include special categories of personal data in the meaning of Art. 9 para. 1 GDPR. This may be for example information about your religious beliefs or data concerning health, but also your image which may show your ethnic origin. We process these data on the legal basis of sec. 26 para. 2 Federal Data Protection Act (BDSG) in the version valid from 25th 2018. Insofar you give us your express consent according to the information mentioned above your consent does include these special categories of personal data, too.
WITHDRAWAL of your consent
You may withdraw all or single consents at any time without giving reason by contacting us (see contact details on the beginning of this Data Protection Declaration). If you withdraw your consent, this does not affect the lawfulness of processing based on consent before its withdrawal. Within the application portal you have the possibility to withdraw from your application or to delete your account. If you do so we delete your personal data within two weeks. This does not apply if you submitted more applications but withdraw not from all of them.
However, please note that dependent on the scope of your withdrawal, we, our affiliates and Lithonplus GmbH und Co. KG will not be allowed anymore to use your data for the application process and therefore will have to suspend you. If you have any doubt about that please do not hesitate to contact us (see contact details on the beginning of this Data Protection Declaration).
Please see also further information on your rights and the storage of our data in sec. 6 and 7 of this Data Protection Declaration.
In accordance with Art. 6 (1) sent. 1 point (b) GDPR, our job application portal uses so-called cookies in order to provide you with all functionalities of our job application portal. A cookie is a small file which stores certain information about a user’s access device (PC, Tablet, Smartphone etc.) on such device. When such device accesses our server’s website, the server communicates with such cookies. The server can evaluate the information stored in the cookie by different methods.
You may accept or disable cookies via your browser settings. However, please note that you may not fully use our job application portal if you prevent cookies.
Moreover, in accordance with Art. 6 (1) sent. 1 point (f) GDPR, every single web page uses log files, i.e. for every page impression, the access data are saved to the server log. The saved data record contains the following details:
• The date, the time, the file accessed, the status, the request that your browser sent to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
• The product and version information of the browser used, your operating system and your country of origin.
We use the log data only in anonymized form (i.e. without any allocation to or indications about your person) for statistical analyses, e.g. to find out on which days and at what times the offers of our webpages are most popular and how much data volume is generated on our webpages. Moreover, the log files enable us to detect possible errors, e.g. faulty links or software bugs. Thus, we can use the log files for the further development of our webpages. We never associate the page impressions and use that are stored in the server log with individual persons. We reserve the right to use data from log files if certain facts give rise to the suspicion that users use our websites and/or our services in an unlawful or non-contractual way. In this case, we may have to store IP addresses temporarily but delete them when we do not need them anymore.
Data you insert on our website is transferred in encrypted form (SSL). We take technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
Service providers and auxiliary agents used by us in connection with the website, p.ex. host provider, agencies and IT service providers may have access to your personal data. However, insofar these service providers and auxiliary agents process data on our behalf they only act according to our instructions and we concluded adequate contracts with them. This applies accordingly to service providers which have their legal seat in a third country (outside the EU/EEA).
According to Art. 15 GDPR you have the right free of charge of access to your personal data and information about processing. Moreover, according to Art. 16 to 18 GDPR you have the right of rectification of inaccurate personal data as well as of erasure of personal data or restriction of processing.
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance.
Moreover, according to Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) sent. 1 GDPR including profiling based on those provisions. We shall comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws. Where personal data are processed for direct marketing purposes, according to Art. 21 (2) GDPR, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Please direct any request regarding your personal data to our contact details as mentioned at the beginning of this Data Protection Declaration or in the imprint of our website.
Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement.
Insofar nothing else is explicitly stated above we process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing does not apply anymore or the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.
Responsible for the processing of data in this job application portal is:
Heidelberg Materials AG (in the following „us“)
Represented by
Dr. Dominik von Achten, Chairman
René Aldach
Kevin Gluskie
Hakan Gurdal
Roberto Callieri
Axel Conrads
Dr. Nicola Kimm
Dennis Lentz
Jon Morrish
Chris Ward
Berliner Straße 6
D-69120 Heidelberg
Phone: +49 6221-481-0
Fax: +49 6221-481-13217
E-Mail: info@heidelbergcement.com
Data Protection Officer (DPO):
Mrs. Silviya Yankova
datenschutz@heidelbergcement.com
1. Collection and processing of data
We collect an process personal data on these website insofar you provide us with via an entry form or within the job application portal. Moreover we collect and process data that arises during the use of our website. The processing of your data is made in accordance with the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the German Telemedia Act (Telemediengesetz – TMG). Personal data means any information relating to an identified or identifiable natural person. Below we inform you in detail about which data we process in which way and on which legal basis. Moreover we inform you about your rights and about the duration of storage of your data.
2. Processing of personal data when using our job application portal; CONSENT to the transfer of data to other companies and CONSENT to storage in an applicant pool
On our job application portal applicants may apply for jobs or unsolicited and may request to store their data for a period up to 12 months in our applicant’s pool. Applications may be submitted not only for jobs with Heidelberg Materials AG and their affiliates in Europe but also for jobs with the Lithonplus GmbH und Co. KG.
When using our job application portal applicant will be provided with an account which allows him to follow up his application and to provide us with new or changed documents, information and data.
Any data given within the registration process and the job application portal will be used by Heidelberg Materials AG as described below:
Applications for Heidelberg Materials AG and affiliates in Europe except Lithonplus GmbH und Co. KG (Heidelberg Materials Group); CONSENT to transfer to these affiliates
Any personal data and application documents you provide us with within the job application portal or on any other way are processed on the legal basis of sec. 26 Federal Data Protection Act (BDSG) in the version valid from 25th 2018. According to this provision processing of data which is necessary in the context of a decision about an employment is allowed.
If we need your data after completing the application process we may continue to process your data if it is necessary for the enforcement of our rights. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if we have a legitimate interest to enforce or defend against claims.
In case of refusal we delete your data after 3 months. This does not apply if you consent to the storage of your data in our applicant pool (see below).
When submitting your application you give our express consent that we transfer your data to the company for whose job offer you apply.
Information mentioned above about the purpose, legal basis and scope of data processing is applicable to any Heidelberg Materials AG affiliate you which to apply for.
Applications for Lithonplus GmbH und Co. KG; CONSENT to transfer to Lithonplus GmbH und Co. KG
Any personal data and application documents you provide us with within the job application portal or on any other way are processed on the legal basis of sec. 26 Federal Data Protection Act (BDSG) in the version valid from 25th 2018. According to this provision processing of data which is necessary in the context of a decision about an employment is allowed.
When submitting your application for Lithonplus GmbH und Co. KG you give your express consent that we transfer your data to Lithonplus GmbH und Co. KG.
Information mentioned above about the purpose, legal basis and scope of data processing is applicable to Lithonplus GmbH und Co. KG. Lithonplus GmbH und Co. KG may continue to process your data if it is necessary for the enforcement of their rights. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if Lithonplus GmbH und Co. KG has a legitimate interest to enforce or defend against claims.
In case of refusal we delete your data after 3 months. This does not apply if you consent to the storage of your data in the applicant pool (see below).
CONSENT to storage and processing of data in the applicant pool and transfer to personal data to companies with job offers
If you consent to store your data in our or in Lithonplus GmbH und Co. KG’s applicant pool, you expressly consent in the processing of your personal data as described below:
If you give your express consent to storage of your data in our and our affiliates’ in Europe except Lithonplus GmbH und Co. KG applicant pool your data will be stored there for a period up to 12 months and will then be deleted insofar there is no obligation or right for us to continue to store these data. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if the period for enforcing or defending against claims continues after the 12 month period. Even if you applied successfully for a job we will delete your data only after 12 months of the applicant pool because deletion is processed as a matter of routine. Moreover you expressly consent that we may transfer your data to all our affiliates in Europe except Lithonplus GmbH und Co. KG for the purpose of searching an appropriate job offer respectively applicant.
If you give your express consent to storage of your data in Lithonplus GmbH und Co. KG’s applicant pool your data will be stored there for a period up to 12 months and will then be deleted insofar there is no obligation or right for Lithonplus GmbH und Co. KG to continue to store these data. The legal basis may be for example Art. 6 (1) sent. 1 point (f) GDPR if the period for enforcing or defending against claims continues after the 12 month period. Even if you applied successfully for a job we will delete your data only after 12 months of the applicant pool because deletion is processed as a matter of routine. Moreover you expressly consent that we may transfer your data to Lithonplus GmbH und Co. KG for the purpose of searching an appropriate job offer respectively applicant.
CONSENT to transfer of data to our service provider Haufe Service Center GmbH
When using our job application portal you give your express consent in the storage of your personal data and application documents on the server of our service provider Haufe Service Center GmbH. We have concluded a Data Processing Agreement with Haufe Service Center GmbH to keep control of your data.
NOTE: Processing of special categories of personal data
Please note that your job application may include special categories of personal data in the meaning of Art. 9 para. 1 GDPR. This may be for example information about your religious beliefs or data concerning health, but also your image which may show your ethnic origin. We process these data on the legal basis of sec. 26 para. 2 Federal Data Protection Act (BDSG) in the version valid from 25th 2018. Insofar you give us your express consent according to the information mentioned above your consent does include these special categories of personal data, too.
WITHDRAWAL of your consent
You may withdraw all or single consents at any time without giving reason by contacting us (see contact details on the beginning of this Data Protection Declaration). If you withdraw your consent, this does not affect the lawfulness of processing based on consent before its withdrawal. Within the application portal you have the possibility to withdraw from your application or to delete your account. If you do so we delete your personal data within two weeks. This does not apply if you submitted more applications but withdraw not from all of them.
However, please note that dependent on the scope of your withdrawal, we, our affiliates and Lithonplus GmbH und Co. KG will not be allowed anymore to use your data for the application process and therefore will have to suspend you. If you have any doubt about that please do not hesitate to contact us (see contact details on the beginning of this Data Protection Declaration).
Please see also further information on your rights and the storage of our data in sec. 6 and 7 of this Data Protection Declaration.
3. Processing of Data via Cookies and Logfiles
In accordance with Art. 6 (1) sent. 1 point (b) GDPR, our job application portal uses so-called cookies in order to provide you with all functionalities of our job application portal. A cookie is a small file which stores certain information about a user’s access device (PC, Tablet, Smartphone etc.) on such device. When such device accesses our server’s website, the server communicates with such cookies. The server can evaluate the information stored in the cookie by different methods.
You may accept or disable cookies via your browser settings. However, please note that you may not fully use our job application portal if you prevent cookies.
Moreover, in accordance with Art. 6 (1) sent. 1 point (f) GDPR, every single web page uses log files, i.e. for every page impression, the access data are saved to the server log. The saved data record contains the following details:
• The date, the time, the file accessed, the status, the request that your browser sent to the server, the amount of data transmitted and the webpage from which you accessed the requested page (referrer) as well as
• The product and version information of the browser used, your operating system and your country of origin.
We use the log data only in anonymized form (i.e. without any allocation to or indications about your person) for statistical analyses, e.g. to find out on which days and at what times the offers of our webpages are most popular and how much data volume is generated on our webpages. Moreover, the log files enable us to detect possible errors, e.g. faulty links or software bugs. Thus, we can use the log files for the further development of our webpages. We never associate the page impressions and use that are stored in the server log with individual persons. We reserve the right to use data from log files if certain facts give rise to the suspicion that users use our websites and/or our services in an unlawful or non-contractual way. In this case, we may have to store IP addresses temporarily but delete them when we do not need them anymore.
4. Encryption
Data you insert on our website is transferred in encrypted form (SSL). We take technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
5. Categories of recipients of the personal data; data transfer to a third country
Service providers and auxiliary agents used by us in connection with the website, p.ex. host provider, agencies and IT service providers may have access to your personal data. However, insofar these service providers and auxiliary agents process data on our behalf they only act according to our instructions and we concluded adequate contracts with them. This applies accordingly to service providers which have their legal seat in a third country (outside the EU/EEA).
6. Your Rights
According to Art. 15 GDPR you have the right free of charge of access to your personal data and information about processing. Moreover, according to Art. 16 to 18 GDPR you have the right of rectification of inaccurate personal data as well as of erasure of personal data or restriction of processing.
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance.
Moreover, according to Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) sent. 1 GDPR including profiling based on those provisions. We shall comply with the aforementioned requests if and to the extent such compliance is required by the applicable statutory laws. Where personal data are processed for direct marketing purposes, according to Art. 21 (2) GDPR, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Please direct any request regarding your personal data to our contact details as mentioned at the beginning of this Data Protection Declaration or in the imprint of our website.
Each data subject has the right to lodge a complaint with a supervisory authority of the alleged infringement.
7. Period of Data Storage and routine deletion
Insofar nothing else is explicitly stated above we process and store personal data only for the period, which is required to meet the purpose of processing, or as long and to the extent as statutory laws require us to process and/or store such data.
If the purpose of processing does not apply anymore or the applicable statutory retention requirement expires, we will as a matter of routine erase data or restrict the processing of data in accordance with the applicable statutory laws.