Data protection information for the applicant management system
Information according to Art. 13 of the General Data Protection Regulation (DSGVO)
Thank you for your interest in our company. The protection of your privacy and your personal data is of great importance to us, which we also observe in our applicant management system in particular.
These data protection provisions inform you about the processing of your personal data in connection with the use of the online application portal of the Hawesko Group. Please read and accept our data protection statement.
1. person responsible
WirWinzer GmbH is the data protection controller for the applicant management system. You can address questions about the processing of your data to the data protection officer at any time. You can reach our data protection officer at:
Hanseatisches Wein- und Sekt- Kontor HAWESKO GmbH.
Data Protection Officer
Friesenweg 4, House 14
22763 Hamburg
datenschutz@wirwinzer.de.
2. purpose of processing
We collect and use your personal data in accordance with the EU General Data Protection Regulation (DSGVO) and the new Federal Data Protection Act (BDSG) exclusively for the purpose of the application process or the decision on the establishment of an employment relationship.
The relevant basis for processing your data for these purposes is Section 26 (1) of the BDSG as well as for processing for the initiation of contractual relationships Art. 6 (1) lit. b DSGVO and for the protection of legitimate interests Art. 6 (1) lit. f DSGVO. If there is no legal basis for the processing of personal data, we will obtain your consent on the basis of Art. Para. 1 lit a DSGVO, we obtain your consent. For the reimbursement of expenses, the legal basis is Art. 6 para. 1 lit. c, f DSGVO.
By giving your consent for the application process, you agree that WirWinzer GmbH may store your data in an applicant management system and save, process and use it for the purpose of reviewing and deciding on your application and, if applicable, for employment purposes after you have been hired.
You can revoke your consent at any time at datenschutz@wirwinzer.de. If you do not consent or revoke your consent, your data will not be processed in our applicant database and you cannot be considered in the application process.
3. data collection
We process your personal data when you visit our website and use the online application system or contact us in any other way. Specifically, this may include the following data:
Mandatory personal data (marked in the input form):
- First name, last name
- E-mail address
- Application documents (e.g. cover letter, CV, references, certificates) uploaded by applicants
Voluntary personal data is data that you can provide in addition to the application documents. There is no obligation to do so:
- Postal address (country, city, street)
- Telephone number
- Highest educational qualification
- Vocational training
- Studies
- Earliest possible start date
- Salary requirement
- Application photo
You are responsible for the accuracy of the data you enter.
3 (a) Storage of the application and the personal data contained therein
Your personal data will be stored solely for the purposes of
- filling the vacant position for which you have applied and/or
- filling other (relevant) vacancies within the companies of the Hawesko Group, provided you give your consent to this and do not revoke it and/or
- to contact you and inform you about interesting vacancies within the companies of the Hawesko Group, provided you give your consent and/or do not revoke it. This "contacting you to inform you about interesting job vacancies within the Hawesko Group" means that we will contact you
- from time to time, usually not more often than once a quarter,
- by means of various communication channels, usually by e-mail or telephone,
- information about vacancies within the companies of the Hawesko Group that are open and potentially suitable for you. You can find an overview of the companies of the Hawesko Group here. This overview may change in the meantime, but will always represent the current status of the companies of the Hawesko Group at the time of retrieval. You can revoke your consent at any time at datenschutz@wirwinzer.de. If you do not consent to this or revoke your consent, your data will not be processed in our applicant database and you will not receive any information about other positions.
3 (b) Deletion of personal data
We process and store your personal data as long as it is necessary for the application process. Subsequently, they will be deleted or their processing restricted in accordance with Art. 17 and Art. 18 DSGVO. Unless expressly stated otherwise within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations or other legal obligations to which we are subject.
When applying for a specific job, we only store your data until the application process has been completed. The application process ends with the receipt of the rejection. We will delete your data no later than five months after the application process has ended or immediately after you have revoked your application.
In the case of a speculative application, we store your data for a maximum of five months after receipt in order to inform you of suitable positions, if applicable.
If your application is successful, your data may be further used as part of the recruitment process. If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its implementation or termination. The legal bases for the data processing described are Art. 6 para. 1 letter b DSGVO and Section 26 para. 1 sentence 1 BDSG.
If the data is not deleted because it is required for other and legally permissible purposes (e.g. for the duration of a legal dispute), its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
3 (c) Disclosure of personal data
Personal data will only be made available to authorised employees involved in the application process. We also pass on your personal data
- to our application management service provider d.vinci HR-Systems GmbH
- if applicable, to our service provider for personality analysis Predictive Index, LLC
- to our hosting provider
- to our e-mail service provider
- as well as to companies of the Hawesko Group, in particular Hanseatisches Wein- und Sekt- Kontor HAWESKO GmbH
insofar as you give your consent to this and do not revoke it. You can find an overview of the companies in the Hawesko Group here. This overview may change in the meantime, but will always represent the current status of the companies of the Hawesko Group at the time of retrieval.
In order to protect your personal information and data, we have concluded contractual agreements with our service providers (order data processing agreement). This obliges them to comply with German and European data protection regulations (BDSG, EU-DSGVO). They are also prohibited from using your personal data for purposes other than those specified in the contract.
Unless you consent to the transfer of data to d.vinci HR-Systems GmbH or Hanseatisches Wein- und Sekt- Kontor HAWESKO GmbH or revoke your consent, your data will not be passed on to these companies. Please note that the application process cannot be continued afterwards.
Data will not be transferred to a third country, with the exception of the USA. Even though we have contractually agreed with service providers based in the USA (standard contractual clauses of the European Union) that they must observe the standards of European data protection and guarantee a level of protection equivalent to the European level of data protection, we would like to point out that the USA is assessed by the European Court of Justice and the European Union as a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedy.
4. Security of your personal data
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. Both we, our employees involved in the application process, and involved third-party companies or companies of the Hawesko Group are instructed to take appropriate organisational and technical measures to protect personal data from misuse, unauthorised disclosure and loss.
The measures include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and separation thereof. We also have procedures in place to ensure the exercise of data subjects' rights, deletion of data and response to data compromise. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 DSGVO). The security measures include in particular the encrypted transmission of data between your browser and our server.
5. your rights
You can contact us at any time to exercise the following rights:
- Information: you can request information about your personal data processed by us, Art. 15 DSGVO.
- Correction: If your information is not or no longer accurate, you can request that your data be corrected. If your data is incomplete, you can request that it be completed, Art. 16 DSGVO.
- Objection: You have the right to object to the processing of your data. If the objection is based on a legitimate interest, we will no longer process your data.
- Revocation: You have the right to revoke consent given to us to process your data at any time with effect for the future, Art. 7 (3) DSGVO.
- Restriction of processing: You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate ground.
- Data transfer: you may receive your provided data in a structured, commonly used and machine-readable format and transfer this data to another controller, provided that you have given your consent to the processing, Art. 20 DSGVO.
To exercise these rights, please contact WirWinzer GmbH or by email at datenschutz@wirwinzer.de.
You also have the right to lodge a complaint with a data protection supervisory authority in connection with the processing of your personal data.
6. Validity and changes to the data protection regulations for the application system
Due to the further development of our application process or the implementation of new functions or technologies and/or due to legal requirements, it may become necessary to change this data protection policy. We reserve the right to make appropriate changes at any time.
Status: June 2021
In all other respects, our general data protection provisions apply.