Job Candidates Privacy Policy
MMC Hartmetall GmbH’s POLICY ON USING PERSONAL DATA OF JOB CANDIDATES
published: 19/07/2023
updated: -
We, MMC Hartmetall GmbH, take your privacy seriously. When, upon your application for our job offers, we collect and use your personal data in our selection process, we undertake to comply with applicable data protection laws including EU General Data Protection Regulation (the “GDPR”) and Federal Data Protection Act (Bundesdatenschutzgesetz/BDSG). Below is our policy on how we collect, use and protect your personal data. You can obtain the latest version of this policy at the following link: https://www.mmc-hardmetal.com/job-candidates-privacy-policy
PERSON IN CHARGE (controller)
This privacy policy is issued by us, MMC Hartmetall GmbH. When we collect and use your personal data, we are the data controllers in the meaning of GDPR and are responsible for protecting your rights with personal data.
CATEGORIES OF PERSONAL DATA, PURPOSE AND LAWFUL BASIS (why and on what lawful ground we use your personal data)
We collect and use the following categories of your personal data, on the lawful basis that it is necessary in order implement necessary measures in the context of the initiation of an employment contract (Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG):
- basic personal information (name, address, date of birth, face photo, contact information etc.);
- if applicable, video and audio transmission in the course of job interviews via MS Teams or equivalent
- curriculum vitae, former education, certificates, qualifications, former employment history and background check information; and
- other information that are legitimate to collect and necessary for recruitment process, including disability, immigration status, citizenship, etc.
In addition, we may process your personal data on the basis of legal obligations to which we are subject (e.g. if you make use of our Internal Whistleblowing System, which we are required to set up under the German Whistleblower Protection Act/HinSchG), Art. 6 para. 1 lit. c GDPR.
SENSITIVE PERSONAL DATA
Where we collect and use sensitive categories of your personal data as defined in Articles 9 and 10 of the GDPR, we will obtain your prior and explicit consent. You may withdraw your consent at any time with effect for the future. An informal e-mail with this request is sufficient. The data processed before we receive your request may still be processed lawfully. Excepted from this consent is data where we are obliged to collect and use in order to fulfil our legal obligations or to protect vital interests of you or other persons in emergencies.
RETENTION (how long we retain your personal data)
For successful candidate, we will provide you with privacy notice for our employees pursuant to Article 13 of GDPR, which includes information on how long we retain your personal data.
On the other hand, when we decide we do not employ you or if you withdraw your application, we will discard your personal data without undue delay, but at the latest six months after such decision. If we would like to keep your data in order to consider offering you another opportunity later, we will ask you for your consent.
DISCLOSURE (who we share your personal data with)
As shown in the table below, we disclose certain categories of your personal data in so far as may be necessary for the purposes described above to the respective recipients.
Categories of personal data to be disclosed | Recipients |
Immigration status (only when applicable) | Immigration authorities |
As relevant | Our service providers including those providing us with human resource management tools, cloud computing, electronic mail and other network applications, courier, receptionist, etc. |
Personal data in connection with reports that may reach us via the Internal Whistleblowing System, if the proper and dutiful processing of these reports requires disclosure | MMC, competent authorities, service providers who may support the investigation of those reports, if necessary |
Where such service providers are “data processors” in the meaning of GDPR, we make sure that such data processors have in place appropriate data protection measures by virtue of data processing contracts between such processors and us in compliance with Article 28 of GDPR.
TRANSFER TO NON-EU COUNTRIES
We may share your personal data with other Mitsubishi Materials group companies located in countries outside the European Economic Area where data protection laws with a level of privacy and data protection equivalent to the GDPR are not in force. In cases of such data transfer, we protect your personal data through data transfer agreements with these data recipients in accordance with Article 46 of the GDPR. These agreements impose contractual obligations on the recipients to ensure an adequate level of data protection equivalent to the GDPR.
YOUR LEGAL RIGHTS
Provided that certain conditions are met, you have legal rights to request from us the following:
- Access to your personal data and to certain supplementary information covered by this notice;
- Correction of your personal data if inaccurate or incomplete;
- Erasure of your personal data in certain circumstances;
- Suspension of using your personal data in certain circumstances;
- Stopping processing your personal data in certain circumstances; and
- Obtaining your personal data in a structured, commonly used, and computer-readable format.
If you wish to exercise any of your rights or have any further questions regarding data protection, please contact us or our data protection officer, whose e-mail address can be found in the "INQUIRY" section below.
COMPLAINT
You may lodge a complaint with the data protection supervisory authorities about the way we process your personal data. In the event of a breach of data protection legislation, the data subject may lodge a complaint with the competent supervisory authorities. The competent supervisory authority for data protection matters is the data protection commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found under the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
INQUIRY
For further information and inquiry, please contact:
Person in charge:
MMC Hartmetall GmbH
Comeniusstraße 2
40670 Meerbusch
E-Mail:
Data protection officer:
E-Mail:
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).