The protection of your privacy is of the utmost importance to us. We collect and use your data for our own purposes in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The entity responsible for data processing is

Mühlen Sohn GmbH & Co KG
Lindenstr. 16/1
89134 Blaustein
Phone: +49 (7304) 801 – 0
Fax: +49 (7304) 801 – 23
E-mail: info@muehlen-sohn.de

If you have any questions about the collection and processing of your personal data, as well as questions about the rights to which you are entitled as a data subject, you can contact our data protection officer Dr Anke Thiedemann, RWT Anwaltskanzlei GmbH, who can be reached at: anke.thiedemann@rwt-gruppe.de.

We process your personal data for the purpose of carrying out the application procedure, insofar as this is necessary. The data processing takes place on the legal basis of Art. 6 paragraph (1) lit. b) GDPR.

After completion of the application process, we process your personal data on the basis of our legitimate interest in order to defend ourselves against possible legal claims. The legal basis for data processing in this respect is Art. 6 paragraph (1) lit. f) GDPR.

Data processing based on your consent: If you have given us your consent to process your personal data beyond the end of the application process, the legal basis for data processing is Art. 6 paragraph (1) (a) GDPR in conjunction with Section 26 paragraph (2) BDSG. We store any consent given to us in order to be able to prove that the consent was given to us. The legal basis for processing for the purpose of proving consent is Art. 6 paragraph (1) lit. c) in conjunction with Art. 5 paragraph (2), Art. 7 paragraph (1) and Art. 24 paragraph (1) GDPR and Art. 6 paragraph (1) lit. f) GDPR.

We process the following categories of data from you:

• Name,
• address,
• other contact details,
• date and place of birth,
• data on professional qualifications (e.g. CV, references, certificates, details of training and professional experience, etc.),
• results of the personnel selection process.

Your personal data is generally collected from you yourself, unless it is provided to us by another body, in particular by authorities, or by third parties that you may have named to us as references.

Within our company, your data is processed by the HR department, the management, the IT department, as well as the responsible department heads or direct superiors and the works council.

Data is not passed on to external organisations.

Your personal data will not be transferred to a country outside the European Economic Area (EEA) or to an international organisation.

We generally store your personal data for the duration of the application process and for a further six months thereafter.

If you have consented to your personal data being considered for further vacancies beyond the end of the application process, we will store your data until such time as consent is withdrawn or – if consent is not withdrawn – for a period of one year from the end of the application process. We store your consent for a period of four years, calculated from the time of its revocation or expiry. If your application leads to employment with us, your application data will continue to be stored and processed for the purpose of establishing, implementing and terminating the employment relationship. In this case, you will be informed separately about this change of purpose.

You are entitled to the following statutory data subject rights, provided that their requirements are met:

• Right to information about your data stored by us in accordance with Art. 15 GDPR,
• Right to rectification of inaccurate data in accordance with Art. 16 GDPR,
• Right to erasure of the data stored by us in accordance with Art. 17 GDPR,
• Right to restrict the processing of data stored by us in accordance with Art. 18 GDPR,
• Right to data portability pursuant to Art. 20 GDPR,
• Right to object pursuant to Art. 21 GDPR,
• Right to revoke at any time pursuant to Art. 7 paragraph (3) GDPR any consent given to us pursuant to Art. 6 paragraph (1) lit. a) GDPR; this has the consequence that we may no longer continue the data processing based on this consent in the future;

Right to lodge a complaint with a competent supervisory authority pursuant to Art. 77 GDPR if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.

In accordance with Art. 21 para. (1) GDPR, you have the right to object at any time to the processing of your personal data, which is carried out on the basis of a legitimate interest (Art. 6 para. (1) lit. f) GDPR). If you object to the processing pursuant to Art. 21 (1) GDPR, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. The objection can be addressed informally to the controller, e.g. to their email address.

You can revoke your consent to the processing of personal data in whole or in part at any time. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The revocation can be made in writing or by e-mail to the controller.