Processing of personal data

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), requires data subjects to be informed about the processing of personal data. VTG Aktiengesellschaft (“controller”) intends to subsequently process your personal data and hereby informs you (“data subject”) accordingly. 

Information acc. to Art. 13 GDPR

Identity and the contact details of the controller

VTG Aktiengesellschaft
Nagelsweg 34
20097 Hamburg
Bundesrepublik Deutschland (Federal Republic of Germany)

Tel.       +49 40 2354-0
Fax       +49 40 2354-1199
Email    info@vtg.com

Member of the Board: Dr. Heiko Fischer (Chairman), Günter-Friedrich Maas, Mark Stevenson
Headquarters: Hamburg
Registration court and Commercial Registry number: Hamburg HRB 98591

Contact details of the data protection officer

VTG Aktiengesellschaft
Datenschutzbeauftragter
Nagelsweg 34
20097 Hamburg
Bundesrepublik Deutschland (Federal Republic of Germany)

Tel.       +49 40 2354-0
Fax       +49 40 2354-1199
Email    datenschutz@vtg.com

Purposes of the processing

 Execution of application procedures for filling vacancies, recruitment of new employees, performance of potential analyses and management audits for personnel selection

Legal basis for the processing

Consent:
Consent by submitting an application for the applicant pool (check box); by declaration of participation in potential identification procedures; by voluntary provision of contact data

Performance of a contract, taking steps prior to entering into a contract:
Execution of pre-contractual measures (application procedure) for a possible employment contract with the person concerned

Compliance with a legal obligation:
AGG

Categories of personal data

Surname, first name, title, academic degree

• Occupational, industry or business name, company
• Address data
• Contact data (e.g. telephone number, Email)
• Date of birthReport data (by third parties)
• CV data (education, job experience)
• Special categories of personal data:

Data relating to criminal convictions and offences: Criminal record (only in special cases for a background check for senior management positions)

Categories of recipients of the personal data

• Third-party processors
• Group companies of controller’s group

Intent of the controller to transfer personal data to a third country or international organisation

☒  A transfer to a third country or an international organisation does not take place and is not planned.
☐  A transfer to a third country or an international organisation takes place or is planned:

Period for which the personal data will be stored or criteria used to determine that period

Your personal data will be stored until the purpose is fulfilled and your personal data will be deleted as follows:

☐  immediately after fulfilment of the purpose
☒  after a period of 12 (twelve) months from fulfilment of the purpose at the end of the month:
     Data on applicants in the applicant pool
☐  condition being met:
☒  deletion taking place acc. to legal retention periods:
     rejected applicants: 6 (six) months from the date of rejection
data of accepted applicants: 3 (three) years after the person leaves the company

Existence of automated decision-making, including profiling

☒  Automated decision making (including profiling) is not performed.
☐  Automated decision making (including profiling) is performed as follows:

Necessary provision of personal data

The provision of your personal data is necessary for the implementation of pre-contractual measures.

Possible consequences of failure to provide such data

 If you do not provide your personal data, this results in

☐  no consequences.
☒  these consequences:

The application procedure is not possible.x

Information on rights of the data subject acc. to Art. 12 et seqq. GDPR

Subject to legal requirements, you have the right to

☒  obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information;
☒  obtain from the controller the rectification of inaccurate personal data;
☒  obtain from the controller the erasure of personal data concerning him or her;
☒  obtain from the controller restriction of processing;
☐  object, on grounds relating to the particular situation of the data subject;
☒  receive the personal data concerning the data subject, which the data subject has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (data portability).

You can exercise your rights at any time orally, by e-mail, fax or letter to the controller.

Right to withdraw the consent

☒  You have the right to withdraw your consent at any time via email, fax or letter. The withdraw of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawing.

Right to lodge a complaint with a supervisory authority

You have the right to complain to a supervisory authority, in particular in the Member State of your place of residence or the place of suspected infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR. Furthermore, you have the right to a judicial remedy.

Supervisory authority responsible for the controller:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Kurt-Schumacher-Allee 4
20097 Hamburg
Bundesrepublik Deutschland (Federal Republic of Germany)
Tel.       +49 40 42854-4040
Fax       +49 40 4279-11811
Email     mailbox@datenschutz.hamburg.de