Pflichtinformationen gemäß Artikel 13 DSGVO

Im Falle des Erstkontakts sind wir gemäß Art. 12, 13 DSGVO verpflichtet, Ihnen folgende datenschutzrechtliche Pflichtinformationen zur Verfügung zu stellen: Wenn Sie uns per E-Mail kontaktieren, verarbeiten wir Ihre personenbezogenen Daten nur, soweit an der Verarbeitung ein berechtigtes Interesse besteht (Art. 6 Abs. 1 lit. f DSGVO), Sie in die Datenverarbeitung eingewilligt haben (Art. 6 Abs. 1 lit. a DSGVO), die Verarbeitung für die Anbahnung, Begründung, inhaltliche Ausgestaltung oder Änderung eines Rechtsverhältnisses zwischen Ihnen und uns erforderlich sind (Art. 6 Abs. 1 lit. b DSGVO) oder eine sonstige Rechtsnorm die Verarbeitung gestattet. Ihre personenbezogenen Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z.B. nach abgeschlossener Bearbeitung Ihres Anliegens). Zwingende gesetzliche Bestimmungen – insbesondere steuer- und handelsrechtliche Aufbewahrungsfristen – bleiben unberührt. Sie haben jederzeit das Recht, unentgeltlich Auskunft über Herkunft, Empfänger und Zweck Ihrer gespeicherten personenbezogenen Daten zu erhalten. Ihnen steht außerdem ein Recht auf Widerspruch, auf Datenübertragbarkeit und ein Beschwerderecht bei der zuständigen Aufsichtsbehörde zu. Ferner können Sie die Berichtigung, die Löschung und unter bestimmten Umständen die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten verlangen. Details entnehmen Sie unserer Datenschutzerklärung (https://www.henn-group.com/disclaimer/). Unseren Datenschutzbeauftragter erreichen Sie unter datenschutz@henn-group.com oder +49 151 730 44 032.

Mandatory information according to Article 13 GDPR

In the event of initial contact, we are obliged under Articles 12 and 13 of the GDPR to provide you with the following mandatory data protection information: If you contact us via email, we will process your personal data only to the extent that there is a legitimate interest in processing (Article 6(1)(f) of the GDPR), you have given consent to the processing (Article 6(1)(a) of the GDPR), the processing is necessary for the initiation, establishment, content-related design, or modification of a legal relationship between you and us (Article 6(1)(b) of the GDPR), or another legal provision permits the processing. Your personal data will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completing the processing of your inquiry). Mandatory legal provisions, especially those regarding retention periods for tax and commercial purposes, remain unaffected. You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, under certain circumstances, you may request the rectification, erasure, or restriction of the processing of your personal data. For details, please refer to our privacy policy (https://www.henn-group.com/disclaimer/). You can reach our data protection officer at datenschutz@henn-group.com or +49 151 730 44 032.

Leadfeeder

At the same time as using Google Analytics, our website uses the Leadfeeder service, which is operated by Liidio Oy / Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland. Leadfeeder accesses the list of IP addresses of website visitors provided by Google Analytics in the analysis and links the list of IP addresses with information about the companies that can be found on the Internet under these IP addresses. As the IP addresses of website visitors are already truncated when Google Analytics is used, no direct personal reference is established. A personal reference can be presumed when reviewing the linked company information. For more information on Leadfeeder and the data collected, please see: www.leadfeeder.com/privacy/, information on Leadfeeder and compliance with the General Data Protection Regulation: https://www.leadfeeder.com/leadfeeder-and-gdpr/.

LinkedIn

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
Further information on this can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Objection to data collection

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Order data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Applicant Data

We offer you the opportunity to apply to us (e.g., via email, postal mail, or using our online application form). If you send us an application, we process your associated personal data (e.g., contact and communication details, application documents, interview notes, etc.) insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is Art. 6(1)(b) GDPR (general steps prior to entering into a contract) and – if you have given your consent – Art. 6(1)(a) GDPR. Consent can be revoked at any time. Within our corporate group, your personal data will only be disclosed to individuals involved in processing your application. In addition, we use service providers for our recruitment processes to whom your data is transmitted. We have concluded data processing agreements with these service providers. Your data will not be shared with third parties outside our corporate group beyond this.

If the application is successful, the data you provided will be stored in our data processing systems on the basis of Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship.

If we are unable to offer you a position, you reject an offer, or you withdraw your application, we reserve the right to retain the data you submitted based on our legitimate interests (Art. 6(1)(f) GDPR) for up to 4 months after the conclusion of the application process (rejection or withdrawal of application). After this period, the data will be deleted and any physical application documents destroyed. This retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 4-month period (e.g., due to a pending or threatened legal dispute), deletion will only take place once the purpose for continued storage no longer exists. Longer retention may also occur if you have given your consent (Art. 6(1)(a) GDPR) or if legal retention obligations prevent deletion.

If we do not offer you a position, we may offer to include you in our applicant pool. In this case, all documents and information from your application will be stored in the applicant pool so we can contact you if suitable positions become available.

Inclusion in the applicant pool is based solely on your explicit consent (Art. 6(1)(a) GDPR). Granting consent is voluntary and not related to the ongoing application process. You can revoke your consent at any time. In this case, the data from the applicant pool will be permanently deleted unless legal retention obligations apply. The data in the applicant pool will be permanently deleted no later than two years after consent is granted.

Your Data Subject Rights

Right to Withdraw Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may withdraw any consent already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THOSE PROVISIONS.
THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

Right to Lodge a Complaint with a Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability
You have the right to receive data that we process on the basis of your consent or in fulfillment of a contract in a structured, commonly used, and machine-readable format. You also have the right to request the direct transmission of this data to another controller, where technically feasible.

Right to Access, Rectification, and Erasure
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of the data processing. You may also have a right to rectification or erasure of this data. For this and any other questions regarding personal data, you can contact us at any time.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing applies in the following cases:

• If you contest the accuracy of your personal data stored with us, we typically need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.

• If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of deletion.

• If we no longer need your personal data but you require it to assert, exercise, or defend legal claims, you have the right to request restriction of processing instead of deletion.

• If you have filed an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data has been restricted, such data – apart from storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.