Version of Mai 2021
A. Processing of (personal) data by the person responsible for the online application procedure
1. Data processing
We offer you the possibility to apply for open positions in our company via our websites and by email. For this purpose we use as software partner the Lever, Inc. The software partners are contract processors in the sense of data protection law and are obligated by corresponding contracts to handle your data in manner compliant to data protection.
2. Data security and confidentiality
Data protection is an important concern for us. Vimcar GmbH and our software partner have taken the necessary organizational and technical measures to ensure the confidentiality of your application.
All employees of the personnel department as well as our software partners are bound to secrecy regarding personal data within the scope of their employment contract. Thanks to an automatically activated 128-bit encryption, a secure transmission of your data is ensured. During data processing, the general standards for data security are taken into account in accordance with the current state of the art.
3. Use of your personal data
During the application procedure, in addition to the form of address, surname and first name, the usual correspondence data such as postal address, e-mail address and telephone numbers are stored in the applicant database. In addition, application documents such as letters of motivation, curriculum vitae, vocational, education and training qualifications and references are recorded. These data are stored, evaluated, processed or forwarded internally exclusively in the context of your application. They are only accessible to employees of the personnel department and the persons responsible for selection at Vimcar GmbH. Under no circumstances will your data be disclosed to companies or persons outside Vimcar GmbH. Furthermore, our employees are strictly bound by instructions and are not allowed to process the data for their own purposes. The data may be processed for statistical purposes (e.g. reporting). No conclusions can be drawn about individual persons.
If you apply to us, we process the information we receive from you in the course of the application procedure, e.g. through letters of application, CV, certificates, correspondence, telephone or oral information. In addition to your contact details, information about your education, qualifications, work experience and skills are of particular relevance to us.
We do not require any special categories of personal data within the meaning of art. 9 GDPR (e.g. health data within the meaning of severe disability or similar) for the application process. We ask you not to send us any such information in advance. If, exceptionally, such information is relevant to the application process, we will process it together with your other applicant data. This may, for example, relate to information about a severe disability which you may provide us voluntarily and which we then have to process in order to fulfil our special obligations with regard to severely disabled persons. In these cases, the processing serves to exercise rights or to fulfil legal obligations arising from labour law, social security law and social protection. The legal basis for data processing is then Art. 9 Para. 2 it. b GDPR, §§ 26 Para. 3 BDSG, 164 SGB IX. Exceptionally, it may be necessary to obtain information about your health or disability or information from the Federal Central Register, i.e. about previous convictions, in order to assess your suitability for the intended job. The legal basis for this is § 26 BDSG.
Your data will not be used by us for automated decision-making or profiling, nor will it be passed on to third parties.
4. Right of access
You have the right of correction (art. 16 GDPR) and deletion (art. 17 GDPR). In addition, you have the right of transferability of data (art. 20 GDPR) and restriction of data processing (art. 18 GDPR). If processing of the data is based on your consent, you can revoke this consent at any time with future effect (art. 21 GDPR).
As a rule, you can assert your rights informally and without giving reasons.
With a request for information in accordance with art. 15 GDPR, you can request information about which of your data is being processed. To do so, please contact our personnel department (e-mail: email@example.com, address: Warschauer Straße 57, 10243 Berlin).
5. Data retention and deletion
If you take up a job with Vimcar GmbH, your personal data, or an extract thereof, will be added to your personal file.
If you have applied but received a negative reply, your details will be stored on the basis of your consent for around 3 months after completion of the application process and then deleted (profile and application). There will be no notification about the deletion of the data.
If you have applied but we are unable to offer you a suitable position at this time, we reserve the right to assign your application to our talent pool (Vimcar Connect). In this case, you will receive a message by e-mail. You give us your consent to store your data for 12 months and delete it afterwards.If you no longer agree or are no longer interested, you can object to further data processing.
After the storage period has expired, the data is anonymised and can no longer be directly assigned to them. However, if you reapply for a job with the same email address, your profile will be reactivated and we can also view data from previous applications.
B. Processing of (personal) data by the operator of the recruiting page
1. General information
On behalf of Vimcar GmbH, applicant data will be processed using a system from Lever Inc. The use of the software enables us to map an effective, systematic application process. Applicants also benefit from it through rapid feedback. Both integrated ATS and CRM functions are used for this purpose. The data is processed in data centres within the EU.
Both we as a company, any employees involved in the application process, as well as involved third-party companies such as Lever, are instructed to take appropriate organizational and technical measures to protect personal data from misuse, unauthorized disclosure and loss. These measures at least meet the requirements of § 64 BDSG. The legal basis for processing in the case of applications for vacant positions and unsolicited applications is Art. 6 Para. 1 Sentence 1 lit. b and Art. 88 Para. 1 GDPR in conjunction with Section 26 Para. 1 Sentence 1 BDSG. In the case of inclusion in the talent pool, we rely on your consent and thus on Art. 6 para. 1 p. 1 lit. a GDPR.
We have concluded a contract with Lever for commissioned processing in accordance with Art. 28 as well as supplementary SCCs.
2. Data controller
For data processing in the context of the application process via Lever, the responsible entity in terms of data protection law is:
1125 Mission Street
San Francisco, CA 94103
If there are any questions regarding data processing and/or data subject rights, Lever's Data Protection Officer can be contacted at firstname.lastname@example.org. The EU-based representative for the purposes of Article 27 GDPR VeraSafe can be reached via the contact form, by telephone on +44 (20) 4532 2003 or by writing to VeraSafe Ireland at North Point Business Park, Unit 3D North Point House, New Mallow Rd, Co. Cork, T23 AT2P, Ireland.
3. The useage of cookies
Lever, Inc. uses first-party cookies for website analytics purposes, such as collecting information about website activity, including session duration, website content accessed and interactions and user interface - clicks related to such content, the Internet Protocol (IP) address of the device from which the websites were accessed, the browser used, its version and language preferences (i.e. locale), and the territory from which you accessed the websites.
4. Your rights as a data subject
Under Article 7 (3) GDPR, you have the right to revoke the consent you have given to us at any time. This means that we will no longer process the data based on this consent in the future. In this way, you can prevent further storage in our Talent Pool. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. You may object to data processing based on our legitimate interests within the meaning of Art. 6 (1) f GDPR at any time under Art. 21 GDPR. You may object to the future processing of data relating to you at any time under Art. 21 GDPR. In addition, you may request information according to Art. 15, correction according to Art. 16 or deletion according to Art. 17 of the GDPR. To exercise your data protection rights, please send an informal message describing your request to the contact details provided at A.4. Subject to the applicable provisions of Art. 21 of the Data Protection Regulation, you may also exercise your right of access. Subject to applicable law, you have the right to complain by your local data protection authority according to Art. 77 GDPR.
5. Final provisions