privacy

1. Processing purposes and legal basis

Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act BDSG and other relevant data protection regulations. The processing and use of the individual data depends on the agreed or requested service. In our contract documents, forms, declarations of consent and the other information made available to you (e.g. on the website or in the terms and conditions) you can find further details and supplements on the processing purposes.

1.1 Consent (Article 6 (1) (a) GDPR)
If you have given us your consent to the processing of personal data, the respective consent is the legal basis for the processing mentioned there. You can revoke your consent at any time with effect for the future.

1.2 Fulfillment of contractual obligations (Article 6 (1) (b) GDPR)

We process your personal data to carry out our contracts with you, in particular as part of our order processing and use of services. Furthermore, your personal data will be processed to carry out measures and activities within the framework of pre-contractual relationships.

1.3 Fulfillment of legal obligations (Art. 6 Para. 1 c GDPR)

We process your personal data if this is necessary to fulfill legal obligations (e.g. commercial, tax laws).

The fulfillment of tax control and reporting obligations as well as the archiving of data for the purposes of data protection and data security as well as examination by tax and other authorities. In addition, the disclosure of personal data may become necessary as part of official/judicial measures for the purposes of gathering evidence, criminal prosecution or enforcing civil claims.

1.4 Legitimate interest of us or third parties (Art. 6 Para. 1 f GDPR)

We may also use your personal information based on a balance of interests to protect our legitimate interests or those of third parties. This is done for the following purposes:

• for advertising or market research if you have not objected to the use of your data
• for obtaining information and exchanging data with credit agencies if this goes beyond our economic risk
• for the limited storage of your data if deletion is not possible or only possible with disproportionate effort due to the special type of storage
• for enriching our data by using or researching publicly available data
• for the assertion of legal claims and defense in legal disputes that are not directly attributable to the contractual relationship

We continue to process personal data from public sources (e.g. Internet, media, press, commercial and association registers, population registers, debtor directories, land registers). If it is necessary for the provision of our service, we process personal data that we have lawfully received from third parties (e.g. address publishers, credit bureaus)

2. Categories of personal data processed by us

The following data is processed:

• Personal data (name, profession/industry and comparable data)
• Contact details (address, email address, telephone number and comparable data)
• supplier history

3. Who receives your data?

We pass on your personal data within our company to those areas that need this data to fulfill contractual and legal obligations or to implement our legitimate interest.

In addition, the following bodies may receive your data:

• Processors used by us (Art. 28 GDPR), service providers for supporting activities and other persons responsible within the meaning of the GDPR, especially in the area
  (e.g. IT services, external data centers, support/maintenance of EDP/IT applications, document processing, data destruction, purchasing/procurement, risk controlling, billing, telephony, auditing services, banks, printers or data disposal companies, courier service)
• Public bodies and institutions in the event of a legal or official obligation, according to which we are obliged to provide information, report or pass on data or the data transfer is in the public interest
• Bodies and institutions based on our legitimate interest or the legitimate interest of the third party for the purposes specified under Section 3.5 (e.g. to authorities, credit agencies, debt collection, lawyers, courts, experts, group companies and committees and supervisory bodies)
• other bodies for which you have given us your consent to data transfer

4. Transfer of your data to a third country or to an international organization

Data processing outside the EU or the EEA does not take place.

5. How long do we store your data?

If necessary, we process your personal data for the duration of our business relationship, this also includes the initiation and execution of a contract.
In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the Fiscal Code (AO), among other things. The storage and documentation periods specified there are up to ten years after the end of the business relationship or the pre-contractual legal relationship.
Ultimately, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch – BGB), can usually be three years, but can also be up to thirty years in certain cases.

6. To what extent is there automated decision-making in individual cases (including profiling)?

We do not use any purely automated decision-making processes in accordance with Article 22 GDPR. If we use these procedures in individual cases, we will inform you separately if this is required by law.

7. Your data protection rights

You have the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art 20 GDPR. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR). According to Article 21 GDPR, you have the right to object to the processing of personal data by us. However, this right of objection only applies if there are very special circumstances in your personal situation, whereby the rights of our company may conflict with your right of objection. If you wish to assert one of these rights, please contact our data protection officer ( datenschutz@novazoon.de ).

8. Extent of your obligations to provide us with your data

You only need to provide the data that is necessary for establishing and conducting a business relationship or for a pre-contractual relationship with us or that we are legally obliged to collect. Without this data, we will generally not be able to conclude or execute the contract. This can also refer to data required later in the context of the business relationship. If we request additional data from you, you will be informed separately that the information is voluntary.

9. Information about your right of objection Art. 21 GDPR

You have the right at any time to object to the processing of your data, which is based on Art. 6 para. 1 f GDPR (data processing on the basis of a balance of interests) or Art. 6 para. 1 e GDPR (data processing in the public interest) to file an objection if there are reasons for this that arise from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be sent informally to the e-mail address datenschutz@novazoon.de take place.

10. Your right to lodge a complaint with the competent supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

For NOVAZOON GmbH
The State Commissioner for Data Protection and Freedom of Information
https://www.baden-wuerttemberg.datenschutz.de/

1. Processing purposes and legal basis

Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act BDSG and other relevant data protection regulations. In our contract documents, forms, declarations of consent and the other information made available to you (e.g. on the website or in the terms and conditions) you can find further details and supplements on the processing purposes.

1.1 Consent (Article 6 (1) (a) GDPR)

If you have given us your consent to the processing of personal data, the respective consent is the legal basis for the processing mentioned there. You can revoke your consent at any time with effect for the future. To revoke your consent, please send a declaration of revocation to datenschutz@novazoon.de .

1.2 Fulfillment of contractual obligations (Article 6 (1) (b) GDPR)

We process your personal data for the purpose of handling the application process. The processing can also take place electronically. This is particularly the case if you send us your application documents electronically, for example by e-mail or via a web form on the website.

1.3 Fulfillment of legal obligations (Art. 6 Para. 1 c GDPR)

We process your personal data if this is necessary to fulfill legal obligations.

1.4 Legitimate interest of us or third parties (Art. 6 Para. 1 f GDPR)

We may also use your personal information based on a balance of interests to protect our legitimate interests or those of third parties. This is done for the following purposes:

• for the limited storage of your data if deletion is not possible or only possible with disproportionate effort due to the special type of storage

2. Categories of personal data processed by us

The following data is processed:

• Name first Name
• Contact details (e.g. email address, address, telephone number)
• Complete application documents (e.g. CV, certificates, references)

3. Who receives your data?

We pass on your personal data within our company to those areas that need this data to fulfill contractual and legal obligations or to implement our legitimate interest. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We only pass on your personal data to affiliated companies and not to third parties, unless you have consented to the data being passed on or we are obliged to pass on data on the basis of legal provisions and/or official or court orders.

4. Transfer of your data to a third country or to an international organization

Data processing outside the EU or the EEA does not take place.

5. How long do we store your data?

If the person responsible for processing concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the person responsible for processing does not conclude an employment contract with the applicant, the application documents will be automatically deleted three months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the person responsible for processing. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

6. To what extent is there automated decision-making in individual cases (including profiling)?

We do not use any purely automated decision-making processes in accordance with Article 22 GDPR. If we use these procedures in individual cases, we will inform you separately if this is required by law.

7. Your data protection rights

You have the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art 20 GDPR.

In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR). According to Article 21 GDPR, you have the right to object to the processing of personal data by us. However, this right of objection only applies if there are very special circumstances in your personal situation, whereby the rights of our company may conflict with your right of objection. If you wish to assert one of these rights, please contact our data protection officer ( datenschutz@novazoon.de ).

8. Extent of your obligations to provide us with your data

You only need to provide the data that is required for the application process. Without this data, we will generally not be able to conclude an employment contract with you. If we request additional data from you, you will be informed separately that the information is voluntary.

9. Your right to lodge a complaint with the competent supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

For NOVAZOON GmbH
The State Commissioner for Data Protection and Freedom of Information
https://www.baden-wuerttemberg.datenschutz.de/

1. Processing purposes and legal basis

Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act BDSG and other relevant data protection regulations. In our contract documents, forms, declarations of consent and the other information made available to you (e.g. on the website or in the terms and conditions) you can find further details and supplements on the processing purposes.

1.1 Consent (Article 6 (1) (a) GDPR)

If you have given us your consent to the processing of personal data, the respective consent is the legal basis for the processing mentioned there. You can revoke your consent at any time with effect for the future.

1.2 Fulfillment of contractual obligations (Article 6 (1) (b) GDPR)

We process your personal data on the basis of our employment contracts with you. We need the data to maintain the employment relationship.

1.3 Fulfillment of legal obligations (Art. 6 Para. 1 c GDPR)

We process your personal data if this is necessary to fulfill legal obligations. Furthermore, we may process your data for identity checks, comparisons with European and international anti-terrorist lists, the fulfillment of tax control and reporting obligations and the archiving of data for the purposes of data protection and data security as well as examination by tax and other authorities. In addition, the disclosure of personal data may become necessary as part of official/judicial measures for the purposes of gathering evidence, criminal prosecution or enforcing civil claims.

2. Categories of personal data processed by us

The following data is processed:

• Name first Name
• Contact details (e.g. email address, address, telephone number)
• Complete application documents (e.g. CV, certificates, references)
• Social security data (e.g. date of birth, place of birth, name at birth, SV number, health insurance company, DEUEV data, marital status)
• Accounting data (e.g. salary, wages, working hours, sick leave, holiday entitlement, bank details)

We continue to process personal data from public sources (e.g. internet, media, press).

3. Who receives your data?

We pass on your personal data within our company to those areas that need this data to fulfill contractual and legal obligations or to implement our legitimate interest.

In addition, the following bodies may receive your data:

• Processors used by us (Art. 28 DS-GVO), service providers for supporting activities and other persons responsible within the meaning of the DS-GVO, especially in the area
  (e.g. IT services, external data centers, support/maintenance of EDP/IT applications, call center services, billing, telephony, auditing services, credit institutions, printers or data disposal companies, courier services)
• Public bodies and institutions in the event of a legal or official obligation, according to which we are obliged to provide information, report or pass on data or the data transfer is in the public interest
• Bodies and institutions based on our legitimate interest or the legitimate interest of third parties (e.g. to authorities, lawyers, courts, experts, affiliated companies and supervisory bodies)
• other bodies for which you have given us your consent to data transfer

4. Transfer of your data to a third country or to an international organization

We only transmit data to secure third countries for which the EU Commission has decided that there is an appropriate level of protection (e.g. Switzerland) in a third country (Article 45 GDPR).

If the Commission has not taken such a decision, personal data may only be transferred if appropriate safeguards are in place (standard safeguard clauses) and enforceable rights and effective legal remedies are available (Art. 46 GDPR).

5. How long do we store your data?

If necessary, we process your personal data for the duration of our employment relationship.

In addition, we are subject to various storage and documentation obligations, which result from the legal framework, among other things. The deadlines specified there for storage and documentation are up to ten years after the end of the employment relationship.

Ultimately, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch – BGB), can usually be three years, but can also be up to thirty years in certain cases.

6. To what extent is there automated decision-making in individual cases (including profiling)?

We do not use any purely automated decision-making processes in accordance with Article 22 GDPR. If we use these procedures in individual cases, we will inform you separately if this is required by law.

7. Your data protection rights

You have the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art 20 GDPR. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR). According to Article 21 GDPR, you have the right to object to the processing of personal data by us. However, this right of objection only applies if there are very special circumstances in your personal situation, whereby the rights of our company may conflict with your right of objection. If you wish to assert one of these rights, please contact our data protection officer ( datenschutz@novazoon.de ).

8. Extent of your obligations to provide us with your data

You only need to provide the data that is necessary for the establishment and execution of an employment relationship with us or that we are legally obliged to collect. Without this data, we will generally not be able to conclude an employment contract with you. If we request additional data from you, you will be informed separately that the information is voluntary.

9. Your right to lodge a complaint with the competent supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

For NOVAZOON GmbH
The State Commissioner for Data Protection and Freedom of Information
https://www.baden-wuerttemberg.datenschutz.de/