Heubach Privacy Notice for Job Candidates
This privacy notice for job candidates describes what personal data Heubach Group collects about persons applying for positions via www.heubach.com, or otherwise, how such data is used and what privacy rights Candidates have in respect to their personal data.
HEUBACH is committed to respecting and safeguarding your privacy by handling your personal data in accordance with applicable data protection laws. This Privacy Notice for Job Candidates (“Privacy Notice”) describes what personal data Heubach Group GmbH, Brüningstr. 50, 65929 Frankfurt/ Germany, as controller (hereinafter “HEUBACH”, us”, or “we”) collects about persons applying for positions (“Candidates”) via www.heubach.com, or otherwise, how such data is used and what privacy rights Candidates have in respect to their personal data. For further information regarding the operator of this website, please refer to our imprint.
For further information about how your personal data collected through this website is processed by HEUBACH, please consult our Website Privacy Policy.
We may change or update this Privacy Notice from time to time in response to changing legal, regulatory, or operational requirements and notify you by posting a new Privacy Notice on this website.
1. What personal data do we collect about you?
To support the recruitment and, where applicable, the employment process, HEUBACH may collect, process, and use personal data. Such data is either obtained from you when you apply for a job or from certain third parties (e.g., recruiters) or from trusted public sources (collectively, “personal data”). Please note that where your personal data is processed by external companies over which HEUBACH has no control, the privacy policies of such companies apply. Following applicable laws and to the extent possible, the information we collect may include general information, identification and contact information that you voluntarily provide, information from your interviews, and information from reviews or background checks. Special categories of data will only be collected to a limited extent and only if required by applicable local laws and if the processing of such data is relevant for the purposes intended. Finally, usage data is automatically collected when you visit our website (for further information, please consult our Website Privacy Policy.
For more detailed information, please click here
HEUBACH may collect the following personal data about you:
- General, identification and contact information, that you voluntarily provide to us, such as:
- Details included in your CV and other information, including your contact details (your name, work, and home address, telephone numbers, and email address); country of origin or residence, nationality, date of birth, gender, civil status, information on partners, family members and dependents; images or recordings of you (optional), employment and education history, professional qualification, work experiences, and skills;
- If applicable, your letter of motivation, certificates, and letters of references, if you submit this information voluntarily;
- Communication details including language, email content, and chat;
- LinkedIn and other social media profiles or a link to a professional website (optional);
- Your function, degree and job title, work location, hire and termination date including the reason for leaving, information about the employment contract;
- Information about your compensation and benefits including equity;
- References and work permit;
- Information necessary to complete background checks (subject to your explicit consent).
- Information derived from your interviews, such as notes from the interviews or information from recruitment agencies;
- Information from assessments or background checks, subject to your explicit consent, such as information obtained by asking for references and confirmations of your background (education, work experience) and criminal record;
- Special categories of data: During the recruitment process, we may collect and transfer special categories of data, only if required and permissible by applicable local laws and necessary in connection with the application and hiring process. Such data may include information about your religion for tax purposes, ethnicity, and origin for diversity reporting purposes; information about children and family allowances, and in particular cases, health related data.
- In addition, when visiting our website, and subject to your consent, personal data is automatically collected, such as website usage data, geolocation data and other information collected through cookies and other tracking technologies. For further information, please consult our Website Privacy Policy and Cookie Policy.
If you are an employee of a HEUBACH company, we may gather further information about you via our internal HR management systems, including your personnel number, current position, and performance details).
The provision of personal data as described in this Candidates Privacy Notice is necessary for the processing purposes described above unless the provision is marked as optional. While the provision of your personal data is generally voluntary, you may not be able to benefit from the processing purposes if you do not provide the personal data.
2. For what purposes do we use your personal data and why is it justified?
By submitting your application via our website, by email, by post or by any other means, you give your consent to the processing of your personal data to the extent necessary to manage your application. If applicable, we may further process your personal data as far as necessary to potentially carry out the recruitment process and conclude an employment contract. In addition, HEUBACH may process your personal data only if required or permitted by law or if the processing is justified by legitimate business interests. The data collected will be processed for managing your application and recruitment process, assessing your professional competences for the job, and, subject to an additional specific consent, and ensuring compliance with applicable laws and regulations.
For more detailed information, please click here
Your personal data may be processed to:
- manage your application and recruitment process, and in particular, subject to your consent, to process specific requests via contact forms, to contact you for a job interview, to verify your identity, academics or qualifications, to share your information with the hiring manager, to conduct job interviews in person or via phone and electronic communication channels, including video conferences, and to potentially perform the selection and hiring process;
- assess your professional competences for the job: HEUBACH may, subject to your consent, conduct background checks and carry out competence tests via assessment centres and in this context process your personal data;
- ensure compliance with applicable laws and regulations, such as for archiving, record keeping and reporting purposes.
You have the right to withdraw your consent to receive communications from us at any time by contacting us as described in section 7.
3. Who might HEUBACH share your personal data with?
In the course of our activities and for the same purposes as those listed in this Privacy Notice, your personal data may be accessed by or transferred to HEUBACH Group companies, service providers such as IT service providers, cloud hosting providers, or recruiters (i.e., SmartRecruiters), certain acquiring or acquired entities or other third parties such as professional advisors, regulators or governmental authorities on a need-to-know basis. All personal data collected shall be hosted in Frankfurt, Germany.
For more detailed information, please click here
- Within the HEUBACH Group: HEUBACH may share your personal data with HEUBACH Group affiliates in the EEA, the United States, India, Switzerland, or any other country with a Heubach location, as necessary for managing your application and carrying out the selection and hiring process. This may be the case, for example, if certain knowledge or skills of other HEUBACH Group affiliates are required for the fulfilment of a specific purpose, e.g., for assessing your application. Any access to your personal data within the HEUBACH Group is restricted to those individuals who have a need-to-know authorization in order to fulfil their professional responsibilities.
- With certain acquiring or acquired entities: If HEUBACH is sold or transferred in whole or in part, or if another entity is being acquired by or integrated into HEUBACH (or any similar transaction is being contemplated), your personal data may be transferred to the other entity prior to or after the transaction, subject to any rights provided by applicable law, including in jurisdictions where the other entity is located.
- With data processors: Certain service providers such as IT support providers, cloud hosting provider, or recruiters (“processors”) may receive your personal data to process such data on our behalf and under appropriate instructions as necessary for the processing purposes, in particular to provide IT and other administrative support, to assist with compliance with applicable laws, to assist during the selection process of successful Candidates, to calculate the recruiter’s fees, and for other activities in connection with the recruitment and hiring process. The processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard your personal data, and to process the personal data only as instructed. For more information about our service providers, please contact us as described in section 7.
- With certain other third parties: HEUBACH may share your personal data with professional advisors, regulators or governmental authorities as far as required by applicable laws or in our legitimate business interest.
If we transfer or provide access to the personal data stored in the data centers in Frankfurt to third countries, we ensure that appropriate safeguards, as legally required, will be implemented. Before transferring any personal data from the EEA, to third countries that do not ensure the same level of data protection like in your country (such as the US), we ensure that appropriate safeguards, such as entering into Standard Contractual Clauses (“SCCs”) as approved by the EU Commission, are in place. For further information about these safeguards or to receive a copy, please contact us as described in section 7.
4. How do we protect your personal data?
We take appropriate technical and organizational measures to secure your personal data from unauthorized access, loss, and misuse. These measures include instructions to employees, access regulations and restrictions as well as the encryption of data carriers.
5. How long do we store your personal data?
In the event of successful recruitment, we will retain your personal data in your personnel file for the duration of your employment and beyond for as long as required by law. In the event of an unsuccessful application, we will delete your personal data within a period of six months, unless a longer retention period is required to meet legal or regulatory requirements.
If you have provided your consent to HEUBACH to retain your CV and other information and to be informed about future open positions, your personal data shall be stored as long as you do not withdraw your consent.
6. What are your rights and how can you exercise them?
According to applicable data protection law and under the conditions and within limits outlined in the law, you have the right to (i) request access to your personal data; (ii) request rectification of your personal data; (iii) request erasure of your personal data; (iv) request restriction of processing of your personal data; (v) request data portability; and/or (vi) object to the processing of your personal data. Further, you have the right to withdraw consent at any time for future processing. Please note that these rights might be limited under the applicable local data protection law.
For more detailed information, please click here
- the right to withdraw your consent to manage your application, to perform assessments and competence tests, and contact you via electronic communications. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. You can withdraw your consent at any time with respect to future processing by using the methods mentioned in the original or any related communication or otherwise by contacting our Data Protection Officer via email, mail or phone as described in section 7 of this Privacy Notice;
- the right to request access to your personal data, respectively to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data;
- the right to request rectification of inaccurate personal data concerning you;
- the right to request erasure of your personal data, under certain conditions;
- the right to request restriction of processing, under certain conditions. In this case, the respective data will be marked and may only be processed for specific purposes as defined by law;
- the right to request data portability: As provided by applicable data protection law, you may – in cases where processing is based on consent or the performance of a contract, and the processing is carried out through automated means – have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us;
- the right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us based on our legitimate interest, and in such circumstances, we are required to cease processing your personal data.
Please note that these rights are not absolute, and we reserve the right to enforce the restrictions imposed by law.
To exercise your rights, please contact us as described in section 7 below. You also have the right to lodge a complaint with the competent supervisory authority in your country (for example, the place where you live or work – contact details of competent supervisory authorities in the EU can be found here).
7. How can you contact us?
If you have any questions about this Privacy Notice, wish to contact HEUBACH’s Data Protection Officer, or if you wish to exercise your rights or withdraw your consent as mentioned above, please contact us at:
By email: DELH.Data-Protection@heubach.com
By mail: Heubach GmbH, Data Protection Officer, Heubachstraße 7, 38685 Langelsheim
By phone: +49 5326 52 – 0