Pursuant to the provisions of the EU General Data Protection Regulation 679/2016 (hereinafter referred to as the "GDPR") and the applicable national regulations (hereinafter jointly referred to as the: "Privacy Regulations"), EPN Electroprint GmbH (hereinafter referred to as the “Company”) hereby informs you that it will process the personal data concerning you contained in your curriculum vitae during the recruitment process.
1. Purpose of processing
Your personal data will be collected, processed and used for the following purposes:
- personnel recruitment,
- exercising or defending a right in legal proceedings,
- compliance with statutory requirements, regulations and European regulations.
EPN Electroprint GmbH will use your contact details, including your e-mail address, to confirm your application.
Providing your personal data is necessary for the purposes linked to personnel recruitment; your refusal would prevent us from continuing the recruitment process involving your application.
2. Legal basis of processing
The Company bases the collection, processing and use of personal data that concern you on the following legal bases:
- fulfilment of pre-contractual and contractual measures you are part of, as well as the legitimate interest of the Data Controller.
- legitimate interest of the Company,
- consent, where required by the applicable regulations
- compliance with legal obligations, particularly labour law.
3. Data processing methods and data retention period
The personal data concerning you will be processed using electronic or hard-copy tools at the Company’s offices, for a maximum of 24 months from the date of registration in the database. Should you believe that the purpose of processing personal data concerning you by the Company has ceased, since it is no longer necessary, please notify the Company so that your data can promptly be deleted.
The Company will process your personal data according to the logics and procedures functional to the purposes set out above and in compliance with the Privacy Regulations, including issues relating to the security and confidentiality of the information. Since it is part of the recruitment process, the Company may check the information you provide in reference, for instance, to: academic titles, professional qualifications and previous employers. The Company may contact your previous employer only if your employment has terminated or before it has terminated only upon your express authorisation. The verification activities are carried out in accordance with the applicable Privacy Regulations and only where strictly functional to the recruitment process. Only authorised personnel may access your data and limited to what is strictly necessary.
4. Transfer of personal data
The Company may disclose personal data concerning you to professionals, consultants, also in aggregate form. Your data will be kept at the company’s headquarters and will only be disclosed to the competent subjects for the provision of the services necessary for the correct management of employment, guaranteeing the protection of the data subject’s rights. Your data will be processed solely by personnel expressly authorised to do so by the Data Controller. Your personal data will not be disclosed to third parties. Your personal data will not be disseminated in any way.
5. Nature of data processed
The Company collects, processes and uses the following categories of personal data concerning you: (i) identification data, such as your name, citizenship, passport, date of birth; (ii) contact details, such as your work and home address, phone number, e-mail addresses and emergency contacts; (iii) information about your previous work experience, such as your qualification, professional role, employment start and end date, training background, personal interests tied to the product/company.
The Company processes your personal data and possibly sensitive and legal data, for instance a criminal record and certificate of pending proceedings, only where required by laws, regulations, collective employment contracts and European regulations (e.g. sensitive data relating to protected categories, legal data required by collective employment contracts). Other sensitive and legal data not required for the recruitment process that may be contained in your curriculum vitae or otherwise provided by you or by third parties will not undergo further processing.
6. Your rights
In regard to the processing described in the disclosure herein, in your capacity as Data Subject, you may exercise the rights set out in art. 15 to 21 of the GDPR and in particular the following rights:
- right of access – art. 15 of the GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in that case, obtain access to the personal data, including a copy thereof;
- right of amendment – art. 16 of the GDPR: right to obtain without undue delay the amendment of inaccurate personal data concerning you and/or integration of incomplete personal data;
- right of cancellation(right to be forgotten) – art. 17 of the GDPR: right to obtain without undue delay the cancellation of personal data in accordance with the terms specified in EU Regulation no. 679/2016;
- right to processing limitation – art. 18 of the GDPR: right to obtain limitation of processing when:
- the data subject objects to the accuracy of the personal data;
- the processing is illegal and the data subject objects to the cancellation of the personal data and instead requests that their use be limited;
- although the Data Controller no longer requires them for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in legal proceedings;
- the data subject has objected to the processing, as specified herein, while pending the verification of any legitimate reasons on the part of the Data Controller prevailing over those of the data subject;
- right to data portability – art. 20 of the GDPR: right to receive, in a structured format, of common use and legible on an automatic device, the personal data concerning you provided to a Data Controller and the right to transmit them to another Data Controller should the processing be based on the consent or on a contract and also performed using automated means. What’s more, the right to obtain the transmission of your personal data from one Data Controller to another if this is technically feasible;
- right to object – art. 21 of the GDPR: right to object at any time to the processing of the personal data concerning you based on the condition of legitimate interest, including profiling, provided legitimate reasons continue to apply for the Data Controller to continue processing which prevail over the interests, the rights and the freedom of the data subject or to ascertain, exercise or defend a right in legal proceedings;
- revoke consent provided previously;
- lodge a complaint with the Data Protection Authority.
7. Identity of the Data Controller
The Data Controller, pursuant to law, is EPN Electroprint GmbH - In den Grupenäckern 2 - 07806 Neustadt an der Orla (Germany), e-mail info@epn.de, tel. +49 36481 5950, in the person of its Legal Representative Pro tempore.