We would like to take this opportunity to inform you about how your applicant data is handled by us and what you and we need to be aware of in this context.
General Notice:
If you are a minor (applicant under the age of 18), by submitting your application you are stating that your parent/guardian has consented to your application.
Who is responsible for data processing?
The responsible party within the meaning of data protection law is the
ENERPARC AG
Zirkusweg
220359 Hamburg
Contact: Stefan Müller, Management Board
Phone: 040 756644-90
Fax: 040 756644-965
E-mail: datenschutz@enerparc.com
You will find further information about our company, details of the persons authorized to represent us and also further contact options in our imprint on our website: https://www.enerparc.de/en/imprint
Which of your data do we process? And for what purposes?
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.
What is the legal basis for this?
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after completion of the application procedure, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. Our interest then consists in the assertion or defense of claims.
How long will the data be stored?
After completion of the application process, we will initially store the data you send us for six months in order to be able to answer any questions in connection with your application. Following this retention period, we will delete your data without further request. If your application is successful, we will use the data provided for personnel administrative tasks in the context of employment.
To which recipients is the data passed on?
In principle, only those persons have access to your data who require this for the proper course of our application procedure. Your application data will be reviewed by the HR department after receipt of your application. In addition, the department heads responsible for the job posting and, if applicable, team leaders will be given access to your application documents. The further procedure will then be coordinated.
Application portal
We use an online application portal. Your data is therefore stored and processed on the systems of our software partner, the company d.vinci HR-Systems GmbH ("d.vinci"), Nagelsweg 37-39, 20097 Hamburg. We have concluded an order processing agreement with d.vinci in accordance with Art. 28 DSGVO and have jointly undertaken the necessary organizational and technical measures to ensure the confidentiality of your application.
To simplify the application process, we also offer features where third-party vendors assist with data entry:
"Use XING profile": If you have set up a XING profile, XING will then transfer to us - if available - the data requested in the application form and specified by you on XING. The application form is then pre-populated with your data, but you can still make corrections and additions. XING also collects and processes data itself and may link it to the account you have set up if you use this option. The transfer of data to XING is based on Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in an attractive and simple design of our application process. In order to address as many applicants as possible and to lower the hurdles for submitting an application, we integrate the XING portal, which has a high degree of penetration as a professional and business network. Xing is a service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Information on data protection can be found at https://privacy.xing.com/de/datenschutzerklaerung.
"Use LinkedIn Profile": If you have set up a LinkedIn profile, LinkedIn will transmit the stored data to us at your instigation. LinkedIn collects and processes data itself and, if applicable, links it to your set-up profile if you use this option. The data transfer to LinkedIn is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in simplifying our application process by making ourselves more attractive to applicants through the integration of widely used services. LinkedIn [is an offer of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Information on data protection can be found at https://www.linkedin.com/legal/privacy-policy.
"Upload CV": CV parsing is a functionality that automatically captures application-relevant data from a resume you upload and inserts it into the input fields of the applicant questionnaire. d.vinci uses a product of Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, The Netherlands for the applicant tool and specifically for the CV parsing function. Textkernel BV is a subcontracted processor of d.vinci. For privacy information, please visit https://www.textkernel.com/privacy-policy/.
"Resume at Dropbox": Dropbox transmits the previously uploaded resume to us. Dropbox collects and processes data itself and may link it to your Dropbox account if you use this option. The data transfer to Dropbox is based on Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in simplifying our application process by making ourselves more attractive to applicants through the integration of widely available services. Dropbox is an offer of Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland. For information on Dropbox's privacy policy, please visit https://www.dropbox.com/privacy.
Where is the data processed?
In principle, your data is processed in Germany as well as in other countries within the EU. If your personal data is processed in a country outside the EU or if recipients of your personal data are located outside the EU where the level of data protection may not be equivalent to that of the EU, the following applies: we ensure that these are only countries for which the EU Commission has decided that they have an adequate level of data protection. In cases where the recipient country's level of data protection is not comparable to that of the EU, we comply with the requirements developed by the EU and use so-called standard contractual clauses. These are available upon request via one of the contact options mentioned above.
Your rights
You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require evidence from you that proves that you are the person you claim to be.
Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.
Furthermore, you have a right to object to the processing within the scope of the legal requirements. The same applies to a right to data portability.
Right of objection
Insofar as we process personal data as explained above in order to protect our legitimate interests which prevail in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time. If the processing is carried out for other purposes, you only have the right to object if there are grounds arising from your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the establishment, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.
Right of appeal
You have the right to complain about the processing of personal data by us to a data protection supervisory authority.
Our data protection officer
We have appointed an external data protection officer. This person can be reached at the above address of the data controller with the address addition "personal – confidential for the data protection officer" as well as at datenschutz@enerparc.com.
Last updated: Hamburg, 01.11.2022