General
We provide you with this Privacy Policy, which relates exclusively to data collected within the scope of the online application process, to inform you about how we handle your data collected within the scope of the application process.

Controller and data protection officer
The controller within the meaning of data protection law is:
Hemro International AG, Länggenstrasse 34, 8184 Bachenbülach, Switzerland
Phone: +41 44 864 18 00
Entry in the Commercial Register
Swiss Commercial Register No: CHE-102.510.347

Data protection officer:
krupna LEGAL, Am Sandtorkai 77, 20457 Hamburg
E-Mail: office@krupna.legal

Personal data within the scope of the application process
Personal data is information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as your name, address, telephone number, and date of birth, but also data about your specific career, etc., which can be assigned to a specific person with reasonable effort. On the other hand, information that is not (directly or) indirectly associated with your real identity is not personal data.

Principles and purposes for the processing of personal data in applications and within the scope of the application process
If you apply to us electronically, i.e., by e-mail or via our website form, we collect and process your data to execute the application procedure and carry out any necessary pre-contractual actions. The legal basis for data processing is Art. 88 (1) GDPR in conjunction with Section 26, para. 1, sentence 1 of the German Federal Data Protection Act (BDSG). If special categories of personal data are involved, the processing is based on Art. 88 (1) GDPR in conjunction with Section 26, para. 3 BDSG. In the event of a collective agreement, the legal basis for data processing is Art. 88 GDPR in conjunction with the collective agreement; if and to the extent that the collective agreement addresses the processing of special categories of personal data, the processing is based on Art. 88 (1) GDPR in conjunction with Section 26, para. 4 BDSG and the collective agreement.

By applying to our recruiting page, you express your interest in entering an employment relationship with us. In this context, you provide us with personal data that we use and store exclusively for h/application. The provision of certain data is required for the establishment and implementation of a potential employment relationship. If you do not provide this data, which is specifically marked as mandatory, your application is incomplete and cannot be considered any further within the scope of the application process.

You also have the option to upload relevant documents, such as a cover letter, your CV, and certificates. These may potentially include additional personal data, such as your date of birth, address, etc. As long as you only provide mandatory information, you incur no disadvantages in terms of your application.
Your data may only be accessed by authorized employees from the HR department or employees involved in the application process.
Personal data is stored exclusively to fill the vacant position you have applied for.
Your data is stored for 90 days after the end of the application process. As a rule, this is done to fulfill legal obligations or to defend against potential claims arising from legal regulations. After the expiry of this period, we are obliged to delete or anonymize your data. In the latter case, the data is only available to us as so-called metadata – i.e., data that cannot be assigned directly to a physical person – for statistical evaluation purposes (for example, so that we can determine the ratio between female/male applicants, the number of applications for a given period, etc.).

If you receive an offer of employment at our company within the scope of the application process and you accept this offer, we store the personal data collected within the scope of the application process for at least the duration of the employment relationship.

Transfer of the data
The data transferred within the scope of your application is transmitted via a TLS-encrypted connection and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). In this context, Personio is our data processor within the meaning of Art. 28 GDPR. The basis for data processing here is a contract for commissioned data processing services between us as the controller and Personio.

Rights of the data subject
If personal data is processed by us as the controller, you as the data subject have, depending on the legal basis and purpose of data processing, certain rights under Chapter III of the EU General Data Protection Regulation (GDPR) that include, in particular (if applicable), the right to information (Art.15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), the right to object (Art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to revoke this consent under the data protection law by Art. 7 (3) GDPR. Please contact our data protection officer to assert your rights as a data subject about the data processed in this online application procedure.

Final Provisions
We reserve the right to update this Privacy Policy at any time to ensure that it always complies with the current legal requirements or to reflect changes in the application process or similar circumstances. Any new visits to this recruiting page and any new applications will then be governed by the new Privacy Policy. In addition to this Privacy Policy, you can also view our General Privacy Policy by visiting https://www.mahlkoenig.de/de/pages/privacy-policy.

Master Data Specialist

We look forward to you.

Documents