Information for handling applicant data

1. General Information

We look forward to receiving your application. You can send us your application electronically via e-mail. Please note that unencrypted e-mails are not protected against unauthorised access. Applications are made on a voluntary basis. To process your application, we require as a minimum the information listed in the position description. Automated decision-making/profiling: We do not use artificial intelligence or profiling in processing your personal application data.

2. Who we are (Data Protection Controller)

The Data Protection Controller for our website pursuant to the General Data Protection Regulation (GDPR) is:

CMR Container Maintenance Repair Hamburg GmbH, Represented by the Executive Director Christian Duggen, Witts Weide 9, 21107 Hamburg.

Contact details of our company data protection officer: info@cmr-hamburg.de.

3. For what purposes and on what legal basis do we process applicant data?

We will only use your documents and details to process your application and will not pass them on to third parties. This data processing is permitted for the initiation of an employment contract in accordance with Section 26 German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).

4. Recipients of the data

Inhouse, only the human resources department and the management of the department for which we have advertised the position have access to your applicant data. The accounting department receives the reports required for tax processing. We work with reviewed service providers for the hosting of our website and our means of communication. We have concluded a data processing agreement with each of these service providers. We do not transfer your requests to third countries or organisations outside the European Union.

5. Retention period

We will delete your personal data according to the following criteria: Your application data will be deleted after the application process has been concluded or after a duration of a maximum of 6 months, unless you give your consent to retaining your information for a longer period, and no employment contract has been signed. If we have committed to paying your travel costs to and from the interview, we are obliged to retain your travel data for the full retention period. We delete this personal data at the latest after the end of the statutory data (Section 147(3) German Fiscal Code: Abgabeordnung – AO), which means a period of 10 years, dated from the day of departure. If you grant us consent to retain your application data or a limited retention period, we will retain your data until that consent has been withdrawn or you apply for the data to be deleted

6. When do we ask for your consent?

We may ask you for your consent to save your application data beyond the completion of the application process in order to use it for future application processes. We will use the data and documents collected from your consent exclusively for the purposes of future application procedures. This data processing is justified based on your consent in accordance with Art. 6(1)(a) GDPR. Once you have granted your consent, you can withdraw that consent at any time with future effect via email or by using our online contact form. We will delete all your application data on receipt on your withdrawal of consent. However, the lawfulness of the processing carried out until the revocation is not affected by this. Your declaration of consent is recorded electronically for the purposes of verification. You can view the declarations of consent you have granted us at any time.

7. Your rights

You have the following rights:

The right of access (Art. 15 GDPR),
The right of rectification (Art. 16 GDPR),
The right to erasure (right to be forgotten) (Art. 17 GDPR), The right to restriction of processing (Art. 18 GDPR),
The right to notification (Art. 19 GDPR),
The right to data portability (Art. 20 GDPR).

In addition, you have the right to object in the cases regulated by Art. 21 GDPR.

There is also a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 FDPA).

The competent authority for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Ludwig-Erhard-Str. 22, 20459 Hamburg, Tel.: 040/42854-4040, Fax: 040/42854-4000, E-mail: mailbox@datenschutz.hamburg.de).

A list of the data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.