Additional Data Protection Statement for Employees

Before you join our company and/or during the recruitment process, we will only process your personal data for the purposes and within the scope of the contractual relationship to be established.

1.1.Which personal data do we process?

We will first process the data you have sent to us in connection with your application.

1.2.For which purposes do we use these data?

We use these data to implement the application procedure. This takes place particularly to determine your suitability for the position you have applied for or to check for other vacancies within our company.

If we should offer you an employment contract, we will also store the data from your application in our staff information system.

1.3.  What is the legal basis for data processing?

The legal basis for processing your personal data is Section 26 of the Federal Data Protection Act (BDSG). This legal basis permits us to process the data required for decision-making regarding your employment contract.  Where data should be required for legal proceedings resulting from the conclusion of the recruitment process, such data processing will take place on the basis of legitimate interests in accordance with Article 6 Paragraph 1 (f) of the GDPR. Our legitimate interest in further processing will then include the establishment and defence of claims.

1.4.How long do we store the data?

Application data will be deleted 6 months after the application procedure is concluded, unless you have explicitly consented to a longer storage period.

1.5.To whom do we forward the data?

Your data will only be accessed by the parties who require these data to implement the application procedure.  This includes staff of the human resources department of the  VILA  VITA Group. The staff will review and process your application on receipt thereof. Moreover, the departmental head responsible for the relevant position will have access to your application data.

1.6.Where are the data processed?

Application data are always processed in computer centres within the Federal Republic of Germany or the European Economic Area. Processing of personal data outside the European Economic Area (EEA) will only take place where a third country has been confirmed by the European Commission as having appropriate data privacy laws according to Article 44 and following of the GDPR or other appropriate guarantees regarding the protection of personal data

1.7.What are my rights?

You have the right to:

□access in accordance with Article 15 of the GDPR

□rectification in accordance with Article 16 of the GDPR

□erasure in accordance with Article 17 of the GDPR

□restriction of processing in accordance with Article 18 of the GDPR and

□ data portability in accordance with Article 20 of the GDPR

The restrictions of Sections 34 and 35 of the GDPR apply to the rights to access and erasure. In addition, in accordance with Section 77 of the GDPR you have the right to submit a complaint to a data privacy supervisory authority in accordance with Section 19 of the Federal Data Protection Act.

You also have the right to object to processing within the limits of statutory regulations.

1.8. Is there automated decision-making in individual cases?

There will be no automated decision-making in connection with your application.


Back to Data Protection