Processing of (personal) data by the entity in charge of the online application process

Information on data privacy regarding our processing of applicant data in accordance with Articles 13, 14 and 21 of the GDPR through BRUSA Elektronik (München) GmbH

Thank you for your interest in BRUSA Elektronik (München) GmbH. Before you send us your application, we would like to inform you with this data privacy information in accordance with Art. 13, 14 and 21 GDPR about how we process your personal data within the application procedure.
This data privacy information also applies analogously to applications we receive from recruiters and the processing of the personal data of the respective contact persons. The recruiter is obliged to bring this data privacy information to the attention of the respective applicant.

1. Responsible authority in the sense of data protection law

BRUSA Elektronik (München) GmbH
Hollerithstraße 7a
81829 München
Germany

Represented by: Thomas Nindl

2. Purposes and consent for processing

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis is Art. 88 GDPR in conjunction with Art. 26 BDSG for the purposes of the employment agreement if this is necessary for the decision on the establishment of an employment.
By registering with BRUSA Elektronik (München) GmbH, you provide the company with your personal data about a specific application for the purpose of job search. Your data will be stored and processed on the systems of our software partner Personio GmbH & Co. KG. The lawfulness of this processing is based on your consent according to Art. 6 sect. 1 lit. a GDPR. A granted consent can be revoked at any time with effect for the future.
Furthermore, we may process your personal data if this is necessary to fulfil legal obligations (Art. 6 sect. 1 lit. c GDPR) or to defend or assert legal claims. The legal basis for this is Art. 6 sect. 1 lit. f GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the AGG.
In the event of an employment agreement between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Art. 26 BDSG, process the personal data already received from you for the purposes of the employment agreement, insofar as this is necessary for the implementation or termination of the employment agreement.

3. Data protection and confidentiality

BRUSA Elektronik (München) GmbH and the software partner Personio GmbH & Co. KG have taken the necessary organisational and technical measures to ensure the confidentiality of your application. All employees of BRUSA Elektronik (München) GmbH and our software partner Personio GmbH & Co. KG are bound to secrecy about all personal data within the scope of their employment or contractual relationship.

4. Categories of data and recipient of the data

The subject of data protection is personal data (Art. 4 No. 1 GDPR). This is individual information about personal or factual circumstances, such as name, address, e-mail address or telephone number, which you provide to us as part of the application process.
The decision on your application is not based solely on automated processing. Therefore, no automated decision is made in individual cases within the meaning of Art. 22 GDPR.

The data we collect and the application documents submitted will be stored, evaluated, processed or forwarded internally as part of your application. They are only accessible to employees of the human resources department responsible for filling the vacancy in question and the persons responsible for the selection.
Public authorities in the case of overriding legal provisions.
External service providers or other contractors, including for data processing and hosting as well as HR software.
In addition, in selected cases, application documents may be forwarded to employees of our parent or sister companies for internal review (in particular if the applicant (m/f/d) is suitable).
Other external agencies insofar as the data subject has given his or her consent or a transfer is permissible for overriding interest, including when appointments for the job interview are selected or tests are conducted via a service provider.
The data may be processed for statistical purposes (e.g. evaluations). No conclusions can be drawn about individual persons.
Your personal data is processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR. In these cases we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR.

5. Transmission to a third country

In selected cases, the application documents may be forwarded for internal review (in particular if the applicant (m/f/d) is suitable) to employees of companies in the joint association, including companies based in Switzerland. The transfer of personal data to Switzerland is generally permitted by an EU adequacy decision pursuant to Art. 45 GDPR.
If personal data is processed by companies abroad, the data protection regulations of the respective country in which your data is processed also apply. Should BRUSA Elektronik (München) GmbH transfer your data to a country in which national regulations provide for less protection of your data, contractual, technical and organisational measures will ensure that your personal data is protected adequately and in accordance with the law.

6. Duration of data storage

We store your personal data as long as this is necessary for the decision on your application.
If you take up a job with BRUSA Elektronik (München) GmbH, your personal data, or an excerpt thereof, will be added to your personnel file. In the applicant system, the data will be made anonymous and will only be available for evaluation purposes. It is not possible to draw any conclusions about your person.
If no contract of employment is concluded with you, your personal data will be automatically deleted or made anonymous after a period of six months at the latest. With your separate consent, however, we will store your personal data for up to twelve months if we are currently unable to offer you a position, but would like to keep your application pending for any future vacancies in our talent pool.

7. Further information and Contact data

You have the right to information in accordance with Art. 15 GDPR, the right to correction in accordance with Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to notification in accordance with Art. 19 GDPR and the right to data transferability in accordance with Art. 20 GDPR.
You have the right to update the personal data provided by you at any time by notifying the recipient or requesting its deletion. You can determine yourself which information you make available to us. Fields marked with an * are mandatory fields, which we require for the application procedure. Fields not marked with an * can be filled in voluntarily by you. You are responsible for all contents of your online application, such as photos, and must take personal responsibility for compliance with legal requirements, such as trademark, copyright, personal or other rights of third parties.
They have the right to data transferability and the right to complain to a data protection supervisory authority.

Right of objection
Insofar as the processing of your personal data pursuant to Art. 6 sect. 1 lit. f GDPR is carried out to safeguard legitimate interests, you have the right pursuant to Art. 21 GDPR to object to the processing of such data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for processing worthy of protection. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.
You are entitled to revoke your consent to the use of personal data at any time. In order to protect your rights, you can contact us using the contact details given in section 1 or through e-mail: datenschutz_muc@brusa.biz.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.