Thank you for your interest in our online job advertisement. The protection of your personal data is very important to us. Therefore, we inform you in accordance with Art. 13 GDPR about the processing and use of your data in the context of the online application at CRS medical.
Data protection information for online applications
Version 1.1 from 15.03.2024
1. General information
We provide you with this privacy policy, which relates exclusively to the data collected as part of the online application process, to inform you about how we handle your personal data collected as part of the application process.
Responsible body
The controller within the meaning of data protection law is
CRS medical GmbH
Loherstraße 6
35614 Asslar
Phone: +49 6441 38331-0
Fax: +49 6441 38331-29
E-mail: info(at)crs-medical.com
Web: www.crs-medical.com
Entry in the commercial register
Local court Wetzlar
HRB number: 4969
UST ID: DE 814024929
Data protection officer:
Mr. Fabio Pastars
DPN Datenschutz GmbH & Co. KG
Helmholtzstraße 26
41747 Viersen
Phone: +49 (2162) 361 86 90
E-mail: datenschutz(at)crs-medical.com
www.dpn-datenschutz.de
2. purposes of processing
2.1 Operation of a recruiting funnel
2.1.1 Provision of the online offer
We use an external service provider for the provision of our online offer: Perspective Software GmbH, Müggelstraße 22, D-10247 Berlin (hereinafter referred to as "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to institutions in the United States of America, as Perspective uses sub-processors based in the USA.
As the Commission of the European Union has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, through the conclusion of standard contractual clauses between Perspective and the sub-processors.
I. Description and scope of data processing
Perspective processes your data for us so that we can provide you with our online services. For this purpose, your IP address is automatically transmitted to Perspective in order to transmit the content and functions of our online services to your browser or device.
The following data may be collected:
Information about the browser type and version used
The operating system of your computer
The internet service provider you use
The IP address of your device
The date and time you accessed the funnel
Websites from which you came to our website ("referrer")
II. legal basis for data processing
Perspective stores the data mentioned under I. in so-called log files. This is done to ensure
ensuring a smooth connection to the website,
to ensure a comfortable use of our website
the evaluation of system security and stability and
for other administrative purposes.
The temporary storage of the IP address by the system is also necessary to enable the website to be delivered to your computer. For this purpose, the IP address of your computer must remain stored for the duration of the session.
Our legitimate interest in data processing also lies in these purposes. The legal basis for data processing is therefore Art. 6 para. 1 sentence 1 lit. f GDPR.
III Duration of the processing
The personal data processed by Perspective will be deleted as soon as it is no longer required to achieve the purpose for which it was collected:
In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of the IP address in log files, this is the case after 7 days at the latest.
2.1.2 Contact and inquiry management
We use an external service provider to provide contact, inquiry or application forms: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter referred to as "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to institutions in the United States of America because Perspective uses sub-processors based in the USA. As the Commission of the European Union has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, through the conclusion of standard contractual clauses between Perspective and the sub-processors.
I. Description and scope of data processing
When using Perspective's contact, inquiry or application forms, the following data is transmitted to Perspective's servers
Date and time of access
Websites from which you came to our website ("referrer")
Context information (e.g. button clicks on the pages, selections made on the pages)
Contents of all completed text fields (e.g. contact details, such as your name or address, or other personal data, depending on the question shown in the specific text field)
Files uploaded by you
II Purpose Legal basis for data processing
The purpose of this data processing is to ensure the communication you have recorded.
The processing of your data from contact, inquiry or application forms is therefore initially based on your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. If a contract is initiated via an inquiry form, the legal basis is also Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of data in an application form may be Art. 88 GDPR in conjunction with 26 BDSG in addition to Art. 6 para. 1 sentence 1 lit. f GDPR.
III Duration of the processing
Your personal data will be kept for as long as it is necessary to fulfill the purpose of processing or until you withdraw your consent. Exceptions to this principle are data that Perspective must retain due to legal obligations. These include, for example, retention obligations under commercial and tax law. These retention periods are - currently - up to ten years
2.2 Personal data as part of the application process via our online application portal
Personal data is information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as your name, your address, your telephone number and your date of birth, but also data about your specific career, etc., which can be assigned to a specific person with reasonable effort. However, information that is not (in)directly associated with your real identity is not personal data.
Principles and purposes of processing personal data for applications and in the application process
If you apply to us electronically, i.e. by e-mail or via our web form, we will collect and process your personal data for the purpose of handling the application process and implementing pre-contractual measures.
By submitting an application on our recruiting page, you express your interest in taking up employment with us. In this context, you provide us with personal data that we use and store exclusively for the purpose of your job search/application.
In particular, the following data will be collected
- Name (first name and surname)
- e-mail address
You also have the option of uploading informative documents such as a cover letter, your CV and references. These may contain further personal data such as date of birth, address, etc.
Only authorized employees from the HR department or employees involved in the application process have access to your data.
Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.
Your data will be stored for a period of 150 days after the end of the application process. This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymize your data. In this case, the data will only be available to us as so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of women or men in applications, number of applications per period, etc.).
In addition, we reserve the right to store your data for inclusion in our "talent pool" for 150 days after the end of the application process in order to identify any other interesting positions for you. This also applies, for example, to applications for an apprenticeship or internship. By accepting the privacy policy, you consent to any further storage of your data and inclusion in our "talent pool".
If you receive an offer of employment with us during the application process and accept it, we will store the personal data collected during the application process for at least the duration of the employment relationship.
Disclosure of data to third parties
The data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is our processor in this context in accordance with Art. 28 GDPR. The basis for the processing is an order processing contract between us as the controller and Personio.
Rights of data subjects
If personal data is processed by us as the controller, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing, in particular the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to withdraw this data protection consent in accordance with Art. 7 III GDPR.
To assert your rights as a data subject with regard to the data processed in this online application process, please contact our data protection officer (see section 2).
Final provisions
We reserve the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to reflect changes to the application process or similar. The new privacy policy will then apply when you visit this recruiting page again or submit a new application.
In addition to this privacy policy, you can view our general privacy policy at www.crs-medical.de/datenschutz/.