Online catalogue

Information according to Articles 13 and 14 of the General Data Protection Regulation (GDPR) 

Dear applicants,

We would like to inform you in accordance with Articles 13 and 14 GDPR about the processing of your personal data by our company and about the claims and rights accruing to yourself under the provisions of the data protection legislation.

Who is responsible for data processing and who can you contact in this regard?

The responsible data controller is:

Herth+Buss Fahrzeugteile GmbH & Co. KG
Dieselstraße 2-4
63150 Heusenstamm, Germany
Phone: +49 (0) 6104 608-0
Fax: 06104 608-333
E-mail: verwaltung@herthundbuss.com

If you have any questions about data protection, you can contact our data protection officer, Mr Manfred Schlitt, in confidence at any time at: datenschutz@herthundbuss.com.

What sources and data do we use?

We process personal data that we receive from you in the course of your application.

In addition, we - to the extent necessary - process personal data that we have obtained from other companies or other third parties (e.g. from offices and job agents).

However, we also process personal data that we have obtained from publicly accessible sources (e.g. professional networks, the press, media). In these cases, we are permitted to obtain and process such data.

Why do we process your data (purpose of processing) and on what legal basis?

We process personal data in conformity with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

a) To implement pre-contractual measures (Art. 6 (1) (b) GDPR) initiation of an employment relationship, in connection with Section 26 of the German Federal Data Protection Act (BDSG),

The processing of personal data (Art. 4 (2) GDPR) is carried out during the course of the application procedure.

b) In the framework of the evaluation and balancing of interests (Art. 6 (1) (f) GDPR)

Where necessary, we process your data in order to safeguard our legitimate interests or those of third parties. Examples:

  • Assertion of legal claims and defence in the event of legal disputes
  • Preventing and solving criminal offences;
  • Video surveillance for the collection of evidence in criminal offences. This data is therefore used to protect customers and employees.
  • Building and plant security measures (e.g. access controls);
  • Measures to safeguard property rights;

c) On the basis of your consent (Art. 6 (1) (a) GDPR)

If you have given us consent to process personal data for specific purposes (such as storing the application in an applicant pool), the lawfulness of such processing shall be deemed to exist on the basis of your consent. Where consent has been given, it can be revoked at any time.

Please note that such revocation will only apply with effect for the future. Any processing performed prior to revocation will not be affected here.

d) On the basis of legal requirements (Art. 6 (1) (c) GDPR), or in the public interest (Art. 6 (1) (e) GDPR)

In addition, we are subject to various juridical obligations, i.e. legal requirements (e.g. commercial legislation, tax legislation, etc.). If data is processed for such ends, this exclusively takes place as defined by these regulations.

Who receives your data?

Your personal data is passed on within the company solely to persons or departments involved in the application process.

The following must be noted with regard to the transfer of data to recipients outside the company: we only pass on your data where legal provisions permit or command us to do so, if you have consented to this or where we are authorised to provide the information in question.

For what period of time is your data stored?

We store your personal data for as long as it is necessary to make the decision regarding your application. If an employment relationship between you and us is not established, we may also store data if this is necessary to defend any legal claims. The application documents are deleted six months after notification of the rejection decision, unless a longer storage duration is required due to legal disputes or you have explicitly consented to a longer storage duration.

We are also subject to various retention and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention or documentation periods specified there are two to ten years.

Is the data is transferred to a third country or to an international organisation?

No transfer of data to third countries takes place (countries outside the European Economic Area - EEA).

What data protection rights do you hold?

Each data subject has the right to information pursuant to Art. 15 GDPR, the right to report pursuant to Art. 16 GDPR, the right to delete pursuant to Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to data portability from Art. 20 GDPR and the right to object under Art. 21 GDPR. The right to access and the right of erasure are subject to the restrictions under Sections 34 and 35 BDSG. There furthermore exists a right to lodge a complaint with a supervisory authority for data protection (Art. 77 GDPR within the meaning of Section 19 BDSG).

Are you under an obligation to provide data?

As part of your application, you must provide only such personal data that is required for the application procedure or which we have a legal obligation to collect. Failure to provide this data may result in the applicant being unable to participate in the application process.

To what extent does automated decision-making take place in individual cases?

We do not generally use fully automated decision-making in accordance with Art. 22 GDPR in connection with the application procedure. Should we make use of such procedures in individual cases, we will inform you of this separately where required to do so by law.

To what extent is your data used for profiling (scoring)?

We do not process your data with the objective of evaluating specific personal characteristics (profiling). Profiling is therefore not conducted.