Privacy Policy

The following privacy policy is designed to inform you about how and to what extent your personal data is processed when you visit our websites and as part of our application process.
 
As a rule, the personal data of yours that we collect is obtained directly from you. The specific legal bases are the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).

Version 2.6

Content

A. Websites
1. Controller within the meaning of Article 4(7) GDPR
2. Communication by e-mail/mail not relating to an application
3. Data processed when you visit this website
4. Cookies
5. Data processing when using the share/sharing functions
6. Embedded third party content
7. Our social media sites
B. Application process
1. Controller within the meaning of Article 4(7) GDPR
2. Application process
3. Employees recruit employees
4. Talent pool
5. Empathy
C. Your rights as a data subject
D. Data protection officer contact information

A. Websites

1. Controller within the meaning of Article 4(7) GDPR

The controller responsible for data processing within the meaning of Article 4(7) GDPR responsible for the processing of data described below is:

Schwarz Corporate Solutions KG
Stiftsbergstraße 1
74172 Neckarsulm, Germany

E-mail: recruiting@mail.schwarz

2. Communication by e-mail/mail not relating to an application

2.1. Purposes of the processing/legal basis

We treat all personal data that we receive from you by e-mail/mail confidentially. We use your data solely for the limited purpose of processing your inquiry. The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the interest in responding to your inquiries so that the satisfaction of our website users is ensured and promoted.

2.2. Recipients/categories of recipient

As a rule, we do not transfer the data to third parties. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.
    
Where necessary to process your inquiry, we transfer your data to Schwarz Group companies.

2.3. Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. However, if you do not provide us with the data required to process your request, we will not be able to process or respond to it.

2.4. Storage time/criteria for determining storage time

We delete or securely anonymize all personal data we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after a receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

3. Data processed when you visit this website

The information contained in this section applies equally to our websites as well as to the associated sub-domains and sub-pages. At present, this includes www.jobs.schwarz and our recruitment portal.

3.1. Purposes and legal basis of processing

When you visit this website, log files are generated containing the following information:

  • the website from which you visit our site;
  • the date and time of access;
  • the client request;
  • the browser you use to access our website;
  • the http response code;
  • the data volume transmitted;
  • the operating system.

The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from our interest in protecting our systems and preventing improper and/or fraudulent activity each time that a user accesses this website.

3.2. Recipients/categories of recipient

In exceptional cases, your personal data may be accessible to Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, for support and maintenance purposes because the website is operated on our behalf on servers provided by Schwarz IT KG.

In exceptional cases, your personal data may be accessible to SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany, for support and maintenance purposes because the recruitment portal is operated on servers provided by SAP Deutschland SE & Co. KG.

3.3. Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. However, such data will be processed for technical reasons as soon as you access our site. The only way to prevent your data from being processed is to stop using our website.

3.4. Storage time

We store the aforementioned data for a period of 10 days.

4. Cookies

We, Schwarz Corporate Solutions KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, are the controller with respect to data processing in connection with the use of "Cookies" and other similar technologies to process usage data on all (sub-)domains at www.jobs.schwarz and on our recruitment portal.

Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any harm to your end device, nor do they contain any viruses, trojans or other malware. The cookie stores certain information that results in connection with the specific end device deployed.

This does not, however, mean that we will immediately become aware of your identity.

You may also configure your browser to ensure that a warning appears every time a new cookie is placed. This makes the use of cookies more transparent for you. You may also configure your browser to refuse acceptance of all or some cookies from certain sources. Please be advised, however, that disabling cookies may limit the functionality of this website.

5. Data processing when using the share/sharing functions

You have the opportunity to share job advertisements published on our website www.jobs.schwarz, e.g. via social networks.

For reasons of data protection, we have deliberately decided against integrating the "share" function of the various social networks directly into this page as a social plug-in. Therefore, the "Share" functions integrated on this page are only implemented as a link. The link only refers to the pages of the social networks in a new window. Simply calling up this page therefore does not transmit any data to providers of social media services. Profiling by third parties is therefore excluded. However, we do not want to deny those visitors who would like to "share" the content of our website with their social network this opportunity. Data will only be transferred to the provider of the social network you have selected if you consciously click on the relevant "Share" button.

5.1. Purposes and legal basis of data processing

The legal basis for data processing when using the "Share" function is Art. 6 para. 1 lit. f) GDPR. The legitimate interest arises from the interest in being able to offer the user of our website this function as a voluntary option.

5.2. Recipients/categories of recipients

"Sharing" the content of our website will then result in certain data being transmitted to the provider of the social media service, e.g:

  • the address of the website
  • Date and time the website was accessed or the share button was clicked
  • Information about the browser and operating system used
  • Your current IP address
  • The content you shared

The shared content can then also be viewed by other users of the same social network, depending on the data protection settings you have made for your own account. If you are already logged in to the associated social media service at the time you click the share button, its provider will also be able to determine your user name and, if applicable, your real name from the above-mentioned data. This data may also be processed by the provider in countries outside the EU. We have no influence on the scope, type and purpose of data processing by the provider. Please note that providers of social media services are able to create pseudonymized and even individualized user profiles with the above-mentioned data.

5.3 Obligation to provide your data

You are neither contractually nor legally obliged to provide us with personal data or to transmit it by using the "Share" function. You are free to use the function shown and the associated data processing or not.

5.4 Storage period/criteria for determining the storage period

The duration of the display of the content shared by you depends on the data protection settings of your account with the respective social network, as well as on their data protection provisions. We have no influence on this

6. Embedded third party content

We may embed YouTube videos on our website, which are stored at http://www.YouTube.com and can be played directly from our website. All videos are embedded with "privacy-enhanced mode" enabled, which means that no data about you as the user is transferred to YouTube if you do not play the videos. Data is only transferred if you play the videos. We do not have any control over this transfer of data.

You will find further information on the purpose and scope of data collection and how YouTube processes data in the provider's privacy policy. You will also find further information there about your rights in this regard and settings to protect your privacy. YouTube's Address and privacy policies: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy/.

7. Our social media sites

7.1 Responsibilities

The party responsible for the collection and processing of data described below (the controller) is in some cases us, Schwarz Corporate Solutions KG, and in some cases the operator of the relevant social media platform. For certain types of processing, we and the platform operator act as joint controllers as defined in Article 26 GDPR.

We use the following social media sites:

LinkedIn:             https://de.linkedin.com/company/schwarz-corporate-solutions
Xing:                     https://www.xing.com/company/schwarz-corporate-solutions
Kununu:              https://www.kununu.com/de/schwarz-corporate-solutions
Facebook:           https://www.facebook.com/Schwarz-Dienstleistungen
Instagram:           https://www.instagram.com/schwarz_gruppe
YouTube:            https://www.youtube.com/channel/UCuEdgY9CyC8-BLg1MK-Dh0g?feature=emb_subscribe_title

7.1.1. The platform operator as controller

We have only limited control over the processing of data by the operators of social media platforms (e.g., the management of members and the information shared). In the situations in which we are able to have influence and can set parameters for the data processing, we endeavor to ensure within the confines of the options available to us that the social media platform operator deals with the data in accordance with data protection law requirements. In many cases, however, we are unable to influence the way in which social media platform operators process data and also do not know exactly which data they process.

Platform operators operate the entire IT infrastructure of the service, have their own privacy policies and maintain their own user agreements with you (where you are a registered user of the social media service). The operator is also solely responsible for all questions relating to the data that makes up your user profile, which we as a company have no access to.

You will find further information about the data processing performed by social media platform operators and your rights to object in the privacy policies of the operators.

LinkedIn: https://de.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy
Xing: https://privacy.xing.com/de/datenschutzerklaerung
Kununu: https://privacy.xing.com/de/datenschutzerklaerung
Facebook: https://www.facebook.com/privacy/explanation   
Instagram: https://help.instagram.com/519522125107875
YouTube: https://policies.google.com/privacy?hl=de&gl=de

7.1.2. Our responsibilities as Schwarz Corporate Solutions KG

7.1.2.1. Our social media sites

7.1.2.1.1. Purposes and legal basis of processing

We process data on our social media sites for the purpose of providing information to customers about services, promotions, prize draws, specific topics and latest company news, to interact with visitors to our social media sites on these topics, and to respond to relevant inquiries and positive or negative feedback.

We merely reserve the right to delete content if it becomes necessary to do so. We may share your content on our site if this is one of the functions of the social media platform, and communicate with you through the social media platform. Article 6(1)(f) GDPR is the legal basis for this. The processing is carried out for the purpose of our public relations work and communications. Operators have no ability to influence our processing of your data in connection with customer communications or prize draws.
As already mentioned, where social media platform operators give us the option, we make sure we design our social media sites to be as compliant as possible with data protection laws

7.1.2.1.2. Recipients/categories of recipient

The data entered by you on our social media sites, such as comments, videos, images, likes, public messages, etc., is published by the social media platforms and is not used or processed by us for other purposes at any time. We merely reserve the right to delete unlawful content if it becomes necessary to do so. This would be the case, for example, for posts that infringe rights or violate the law, comments that incite hatred, offensive comments (sexually explicit content) or attachments (e.g., images or videos), which may be in violation of copyright laws, moral rights/rights of publicity or criminal law.

We may share your content on our site if this is one of the functions of the social media platform, and communicate through the social media platform. If you post an inquiry on the social media platform, we may also, depending on the required response, refer you to other more secure modes of communication that guarantee confidentiality. You always have the option of sending confidential inquiries to us at our address listed under no. 1  above or in the "legal notice" section of our website.

7.1.2.1.3. Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. When you use our social media sites for purely informational purposes, we do not collect any personal data. You can still visit our sites even if you do not wish to provide us with any personal data, but you will not be able to use any enhanced features such as the news function and the function allowing you to post images or comments.

7.1.2.1.4. Storage time

We delete or securely anonymize all personal data we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after a receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

All public posts that you put on our social media sites remain in the timeline for an indefinite period, unless we delete them as part of updating the information on the topic, they violate the law or breach our guidelines or policies, or you delete the post yourself. We have no control over the deletion of your data by the operator itself. The privacy policy of the relevant operator therefore also applies in relation to the storage period.

7.1.2.2. Prize draws

7.1.2.2.1. Purposes of the processing/legal bases

Our social media sites offer a variety of prize draws in which you may participate. Unless otherwise provided in the given prize draw, or unless you have given us further explicit consent, the personal data you provide to us in the context of participating in the prize draw will be used solely for the purpose of conducting the prize draw (e.g., drawing and notifying winners, sending the prize, announcing winners anonymously, where applicable). If you use your real name on the relevant social media site or are recognizable in photos in your profile, we cannot rule out the possibility that you will be identified by other users.

The legal basis for the processing in the context of prize draws is generally Article 6(1)(b) GDPR. In the event that consent is given in the context of a prize draw, Article 6(1)(a) GDPR is the legal basis for any data processing carried out on the basis of such consent. Where you have given your consent in the context of a prize draw, you are entitled to withdraw that consent at any time with effect for the future..

7.1.2.2.2. Recipients/categories of recipients

Data is only transferred to third parties where this is necessary for conducting the prize draw or sending the prize (e.g., sending the prize via a logistics company) or where you have given us you explicit consent to do so. Please note that on some social media sites, you may also be able to participate directly on the publicly visible websites (e.g., on the wall or via comments), so that other users will be able to see that you are participating when you publicly interact with us. In these cases it will also be apparent on the social media site when you win the prize draw. If you use your real name on the relevant social media site or are recognizable in photos in your profile, we cannot rule out the possibility that you will be identified by other users.

7.1.2.2.3. Storage time/criteria for determining storage time

At the end of the prize contest and announcement of the winners, the personal data of participants will be deleted. In the event of non-cash prizes, the data of the winners will be stored for the duration of statutory warranty claims in order to initiate remedial steps or a replacement in the event of a defect, where relevant. If you participate in a prize draw on a social media site (e.g., by post or comment), we have no control over the deletion of your data by the operator. The privacy policy of the relevant operator of the social media site therefore also applies in relation to the storage period.

7.1.2.3. Social listening

7.1.2.3.1. Purposes of the processing/legal bases

In addition to the information you provide to us directly via social media platforms, we also use "social listening" tools to get a picture of how our employer brand, products and services are perceived and to identify any opportunities for improvement. These tools are used to monitor via search requests (e.g., for a job opening) and analyze posts on social media platforms. Only those posts are viewed which you have made freely available to the public.

The scope of the data collected is primarily determined by the type and content of the respective post; thus, for example, a post in text form or an uploaded image file may be affected. In some cases, the specific user ID may also be relevant, for instance when Schwarz Corporate Solutions wishes to offer assistance with any problems. Sometimes we also receive information from the respective platform operators about the coverage of the relevant posts.

The legal basis for processing personal data in the context of social listening is Article 6(1)(f) GDPR because we have a legitimate interest in being able to listen to what our audience is saying, identify any weaknesses in our employer brand, products and services and respond to them appropriately

7.1.2.3.2. Recipients/categories of recipients

Personal data processed in the context of social listening will not be disclosed to external third parties.

7.1.2.3.3. Storage time/criteria for determining storage time

The relevant data will not be stored permanently by Schwarz Corporate Solutions KG, it will only be analyzed for the specific purpose of identifying countermeasures that may need to be taken.

7.2. Processing as joint controllers

In some cases, we and the operator of the social media service act as joint controllers as defined in Article 26(1) GDPR:

We and the platform operator act as joint controllers with regard to the web tracking methods used by the social media platform operator. Web tracking can occur regardless of whether you are logged in or registered on the social media platform. As already explained, unfortunately we have almost no control over the web tracking methods used by social media platforms. We are unable, for example, to switch web tracking off.

The legal basis for the web tracking methods is Article 6(1)(f) GDPR. Optimizing social media platforms and the relevant fan pages is seen as a legitimate interest for the purpose of the above provision.

For further information about recipients and categories of recipients and the duration of data storage and the criteria for determining the storage period, please refer to the privacy policies of the platform operators. We do not have any control over this.

You will find information on the rights available to you to prevent these web tracking methods in the privacy policies of the platform operators. You can also contact the platform operators about this using the contact details provided in the legal notice section of their respective websites.

We have only a very limited ability to influence and prevent the provision of statistics to us by social media platform operators. However, we do make sure that we do not receive any additional optional statistics.

Please be aware that it is possible that social media platforms will use your profile and user behavior data in order to analyze, for example, your habits, personal relationships and preferences, etc. Schwarz Corporate Solutions KG has no control over the processing or disclosure of your data by social media platform operators.

B. Application process

1. Controller within the meaning of Article 4(7) GDPR

1.1. Controller

The controller responsible for data processing in connection with the application process is in each case

Schwarz Corporate Solutions KG
Stiftsbergstraße 1
74172 Neckarsulm, Germany

E-mail: recruiting@mail.schwarz

together with the company whose vacancy you are applying for. Schwarz Corporate Solutions KG processes applications together with the following companies:

GesellschaftAnschriftLand
Dieter Schwarz Stiftung Heilbronn gGmbHBildungscampus 9, 74076 HeilbronnDeutschland
IPAI Immobilienmanagement GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Lidl Digital International GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Lidl Digital Trading GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Lidl Digital FC GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Prodirekt Schadenservice GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Beschaffung GmbHStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Campus Service GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Digital GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Immobilien Service GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz IT KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Media Plattform GmbHStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Mobility Solutions GmbHStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Personal Services GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Restaurantbetriebe GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Unternehmenskommunikation GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
Schwarz Versicherungsvermittlung GmbH & Co. KGStiftsbergstraße 1, 74172 NeckarsulmDeutschland
SIV Dienstleistung GmbH & Co. KGBerliner Chaussee 13, 16559 Liebenwalde/ OT KreuzbruchDeutschland

Your application is for a position advertised at one of the companies listed above. Prior to submitting your application, you may opt to have your application forwarded to the other companies on the list.

In the case of applications for its own vacancies, Schwarz Corporate Solutions KG itself is the controller within the meaning of Article 4(7) GDPR.

If you want to be included in the talent pool, the joint controllers responsible for processing your personal data are all of the above companies, including Schwarz Corporate Solutions KG.

This applies mutatis mutandis to the "Employees recruit employees" program presented in the following (see C.3.) , and for the use of a shared database if you make your profile available for other companies (see C.2. 2.7.) .

1.2. Further information on Article 26 GDPR

Schwarz Corporate Solutions KG and the companies referred to above are in each case the controller(s) for the process, which they manage jointly, and as such they are jointly responsible for the protection of your personal data (Article 26 GDPR).

Within the scope of their joint responsibility, the above-mentioned companies have agreed which of them shall fulfill which obligations under the GDPR. This relates in particular to the fulfillment of the rights of data subjects and the information obligations under Articles 13 and 14 GDPR.

Prozessabschnitt der Datenverarbeitung/PflichtErfüllung der Pflichten durch
Informationspflichten gemäß Art. 13, 14 DSGVOSchwarz Corporate Solutions KG
Erhebung   Schwarz Corporate Solutions KG
Speicherung   Alle Gesellschaften
Übermittlung   Schwarz Corporate Solutions KG
NutzungAlle Gesellschaften
ÄnderungAlle Gesellschaften
SperrungAlle Gesellschaften
Löschung   Alle Gesellschaften
Auskunftspflicht gem. Art. 15 DSGVOAlle Gesellschaften

 

2. Application process

2.1. Purposes of the processing/legal basis

We process the personal data you provide in the context of the application process solely for the purpose of selecting and hiring candidates. The basis for this is section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
 
If you accept our offer of contract by means of digital signature (e.g., Adobe Sign), we process your data, such as in particular e-mail address, IP address as well as the time and date of any modifications you make to the respective contract document, for instance when you approved, displayed or digitally signed it. Our legitimate interest in this data processing pursuant to Article 6(1)(f) GDPR lies in ensuring that the process for signing contracts digitally is fast and efficient and that the signing process can be logged for verification purposes

2.2. Applications by mail or e-mail

Please do not submit your application by mail or e-mail. To handle all incoming applications as swiftly as possible, we need you to apply online via our recruitment portal directly for the advertised vacancy or initiative. Unfortunately, we are unable to process applications sent by post or e-mail, and these will be destroyed or deleted.

2.3. Online recruitment portal

Please use our online recruitment portal to apply for jobs at the above-mentioned companies (see C. 1. 1.1.). The online recruitment portal offers various ways to apply for vacancies via different channels, which we outline below.   

2.3.1. . Create a user profile and use the "Quick apply" feature

You can create a user profile and log in to your account to find out more about job openings at the aforementioned companies. However, please note that you will not automatically apply for a position merely by creating user profile. If you are interested in one or more vacancies at the aforementioned companies, you can apply for those positions using your user profile. Simply click the "Log in to apply" button. You can then log in to your account at any time to create, submit or withdraw your application(s). You can also change, add or delete information in your user profile at any time. In addition, you can view the status of your application(s), submit additional documents and make changes to your data.

You can click the "Quick apply" button to apply directly to your preferred position. To save you time, your user profile is automatically completed using your name, e-mail address, telephone number, and address (including country), provided that information is included in your CV. You can also log in to your account at any time to create, submit or withdraw other application(s). You can also view the status of your application(s), submit additional documents and make changes to your data. You can also change, add or delete information in your user profile at any time.

Regardless of which application method you choose, you will submit your application to us in the same way. The same data will be collected and transmitted to us. You can upload your CV (either as a PDF or Word file) to our online recruitment portal. The app automatically analyses your document on the basis of various criteria and uses this information to fill in the form. You can correct or delete this automatically entered information at any time before you send us your application. The app only reads and does not store your CV.

2.3.2. Applying via StepStone

You can also apply directly with us via our service provider StepStone. You can apply by logging into your existing StepStone account or as a guest. StepStone then creates an application form on our behalf that you will need to fill out with all of the necessary information for the position you are applying for. Click the "Apply" button to have StepStone transmit your data to us. A user profile and an application will then be created for you in our online recruitment portal. You may then use your user profile to generate as many applications as you wish.

Your application will then be sent to us in the same way as for the "Create user profile" and "Quick apply" options. A commissioned data processing agreement is in place with StepStone (StepStone Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf, Germany).

2.3.3. Uploading documents to the online recruitment portal

You can upload documents directly in your user profile as well as for a specific application from your computer or mobile device. You can also upload the documents directly from your dropbox in our online recruitment portal. The privacy policies of these service providers shall apply. The data transmission is encrypted.

2.4. Recipients/categories of recipient

If you apply for one of our job openings, the HR department of Schwarz Corporate Solutions KG and the company and/or department that advertised the position will have access to your data to the extent necessary. If one of the respective companies also has a works council, members of the works council will receive access to your data to the extent necessary during the application process.

This also applies if you send us a speculative application. If you do not limit your speculative application to a specific department or position, more than one company and/or department may receive access to your data in order to decide whether you should be offered a position.

In exceptional cases, your data may be accessible to SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany, for support and maintenance purposes because the recruitment portal is operated on servers provided by SAP Deutschland SE & Co. KG. The foregoing shall also apply mutatis mutandis to data that you transmit to us outside of our recruitment portal, e.g., applications submitted via e-mail or mail, as we assign your application and data to the corresponding position in our portal.

In the case of contracts executed by digital signature, your data is also accessible to all persons involved in the approval and signing of the contract, as they receive a log after the contract has been signed indicating all processing steps, including e-mail address, IP address, date and time. Your data may also be accessible to the respective service providers that we use for the relevant digital signature procedure. In the case of Adobe Sign, this would be Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West, Business Campus, Saggart D24, Dublin, Ireland.

As a rule, we do not transfer the data to other third parties. In exceptional cases, we will have a processor process the data on our behalf (e.g., processors that assist us with the technical implementation of our online recruitment portal). Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.

2.5. Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. However, without such data we will not be able to establish contact or conduct the recruitment process. The data will also be required in the event an agreement is entered into if we hire you.

2.6. Storage time/criteria for determining storage time

If your application is rejected, your application data will be stored for four months after you are informed thereof. Thereafter, the data from your application will be deleted. The same applies if you withdraw your application(s).
 
Your user profile and data stored in our online recruitment portal will continue to be stored in the portal regardless of whether you are in the process of applying for a specific position. This allows you to also apply for other positions online or to receive notifications once you have been successfully in our talent pool. Your account will be automatically deleted if it has been inactive for 12 months and you do not have any open applications. However, you yourself may delete your user profile or change or delete certain data in your profile at any time. If you delete your entire user profile, any applications you may have submitted will be withdrawn and your user profile will be deleted. In this case, your user profile will be deleted immediately, and your applications will deleted after four months (see above).

2.7. Providing consent for the "Make own profile visible for" setting

Your application is for a position advertised at the company to which you applied. Therefore, your application documents are generally only analyzed and considered for the specific position for which you have applied. By contrast, no one but you can view your profile, to which you are free to upload documents related to your application.
 
If you are interested in more positions at other Schwarz Group companies other than the one for which you have specifically applied, you can submit further applications to other companies from your user profile. You can also select whether your profile should be considered for other vacancies at other Schwarz Group companies.

Regardless of which application method under "2.3 Online recruitment portal " you choose, you have the option to decide, either when you create your user profile or at any time thereafter,

-    to decide to keep the default settings, which means that your profile will not be visible to anyone and your application(s) may only be viewed by the company for whose specific position you are applying.

Furthermore, you may allow your profile – including your name, your e-mail address, your uploaded documents, your currently active applications as well as all applications generated from your profile in the future – to be considered

-    for vacancies at the aforementioned companies in the same country in which you apply (see "1.1 Controller ") or
-    for vacancies at the Schwarz companies worldwide.

If you grant the Schwarz companies worldwide access to your profile, in addition to the companies mentioned above (see "C. 1. 1.1."), the following companies will also have access to your profile:

CompanyAddressCountry
Schwarz Global Services Barcelona, S.L.U.Calle Bergara n °13
E-08002 Barcelona
Spain
Schwarz Global Services Bulgaria EOOD51 Cherni vrah Blvd. Office X – Floor 11,
BG-1407 Sofia, Lozenets
Bulgaria
Schwarz Global Services HUB SOCIETATE ÎN COMANDITĂDimitrie Pompeiu Bd. 6E 2,3 u. 4,2
RO-020337 Bukarest
Romania
Schwarz Global Services S.R.L.Sectorul 2, Bd. Dimitrie Pompeiu 6E, Floors2, 3 u. 4
RO-020337 Bukarest
Romania

 

STo the extent that you also grant access to your profile for other job openings and are considered for these positions, we will, as part of the application process, transmit your data to the responsible department of the company that is advertising the position. Please note that this decision will apply to your entire profile, including your name, your e-mail address, your uploaded documents, your currently active applications as well as all applications generated from your profile in the future. Based on this decision, any active application you submit using your user profile may then be considered by other Schwarz Group companies.

Your consent is given voluntarily. You may withdraw your consent at any time by changing your profile settings directly or by e-mailing recruiting@mail.schwarz. Any such withdrawal of consent shall not affect the lawfulness of processing prior to receiving the notice of withdrawal. If you withdraw your consent, only the original application will continue to be considered. Your data will be processed on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with section 26 (2) BDSG.

To the extent your profile can be considered for vacant positions at Schwarz companies worldwide, the above-mentioned companies and the companies listed under C. 1. 1.1. are the joint controllers. The information under C. 1. 1.2. shall apply mutatis mutandis.

3. Employees recruit employees

3.1. Purposes of the processing/legal basis

As part of the "Employees recruit employees" program, employees at the aforementioned companies (see C. 1. 1.1.) who recruit new employees stand to receive a bonus if certain conditions are met. If you are recruited by an employee at one of the aforementioned companies, you can indicate this in your online application in our application form.

The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest lies in running the "Employees recruit employees" program for the purposes of HR marketing and the associated recruitment of new employees.

3.2. Recipients/categories of recipient

If you indicate that you were recruited by a specific employee, the recruiting employee will be notified that you named them as their recruiter and thus they will indirectly become aware that you have submitted an application. The recruiting employee's entitlement to a bonus is conditional on the recruit's employment relationship remaining in place after six months. For this reason, the recruiting employee will indirectly know whether your employment relationship continues to exist at this point in time or whether it will be/has been terminated, as their bonus will or will not be paid out on that basis.

3.3. Obligation to provide your data

You are under no statutory or contractual obligation to provide personal data to us. You are free to decide whether or not you wish to disclose the name of the employee who recruited you and whether or not to participate in the "Employees recruit employees" program. Whether or not you disclose the name of the employee who recruited you has no bearing on the outcome of your application process.

3.4. Storage time/criteria for determining storage time

We will delete your processed data after six months if after six months the employment relationship has been terminated. If your employment relationship remains in place at that time and the recruiting employee is eligible to receive a bonus, we will store the data for purposes of documenting the employee's eligibility to receive a bonus and payment thereof for 11 years, beginning at the end of the year in which your employment relationship exceeded six months for the first time.

4. Talent pool

4.1. Purposes of the processing/legal basis

If you consent to being included in our talent pool and already have created a user profile in our online recruitment portal, your profile can also be activated for our talent pool and we can consider you for future job postings based on your qualifications, as well as contact you by phone or e-mail. We will review your request prior to approving the activation.

The foregoing shall apply mutatis mutandis if you are a trainee, work student or the like and you would like to be included in our talent pool. In this case, a user profile is created from the data you provide when registering for the talent pool.

Your data will be processed in connection with the talent pool on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with section 26 (2) BDSG. The data that will be processed is the data that you provide in our profile.

4.2. Recipients/categories of recipient

Once you have been included in our talent pool, all of the aforementioned companies (see "1.1 Controller") will have access to your profile. Only the relevant companies will have access to your current applications.

4.3. Obligation to provide your data

Your consent to being included in our talent pool is given voluntarily. Withholding consent will not have any effect on any current applications for which Schwarz Corporate Solutions KG is the joint controller together with other companies or on any current applications with Schwarz Corporate Solutions KG itself.

You may withdraw your consent for the respective application processes at any time. Please direct any notices withdrawing consent to: recruiting@mail.schwarz. Any such withdrawal of consent shall not affect the lawfulness of processing prior thereto.

4.4. Storage time/criteria for determining storage time

You may withdraw your consent for the respective application processes at any time. Please direct any notices withdrawing consent to: recruiting@mail.schwarz. Any such withdrawal of consent shall not affect the lawfulness of processing prior thereto.

4.4. Storage time/criteria for determining storage time

The storage time of the data is based on the general erasure criteria for your profile. If you withdraw your consent to be included in the talent pool, your data as well as your user profile (to the extent no more open applications are linked to it) will be deleted immediately.

We will retain your declaration of consent for inclusion in our talent pool for 3 years in order to comply with our accountability obligations as defined in Article 5(2) GDPR.

5. Einfühlungsverhältnis

5.1. Zwecke der Datenverarbeitung/Rechtsgrundlage

Soweit wir mit dir im Zusammenhang mit der möglichen Begründung eines künftigen Arbeitsverhältnisses ein gegenseitiges Kennenlernen im Rahmen eines sog. Einfühlungsverhältnisses vereinbaren, verarbeiten wir deine Daten im erforderlichen Umfang zur Organisation und Durchführung des Einfühlungsverhältnisses sowie der damit verbundenen vertraglichen Vereinbarung. Rechtsgrundlage für die Datenverarbeitung ist Art. 6 Abs. 1 lit. b) DSGVO, § 26 Abs.1 S. 1 BDSG.

5.2. Empfänger/Kategorien von Empfängern

Im Rahmen des Einfühlungsverhältnisses erhalten der Personalbereich der Schwarz Corporate Solutions KG sowie die Gesellschaft bzw. der Fachbereich, in dem die ausgeschriebene Stelle angesiedelt ist und bei der du einen Schnuppertag o. ä. absolvierst, im erforderlichen Umfang Zugriff auf deine Daten.

5.3. Pflicht zur Bereitstellung deiner Daten

Du bist weder vertraglich noch gesetzlich verpflichtet, uns personenbezogene Daten zur Verfügung zu stellen. Ohne die Daten können wir jedoch die Organisation und Durchführung des Einfühlungsverhältnisses sowie die damit verbundene vertragliche Vereinbarung nicht vornehmen.

5.4. Speicherdauer/Kriterien für Festlegung der Speicherdauer

Deine im Rahmen des Einfühlungsverhältnisses verarbeiteten Daten speichern wir für vier Monate, beginnend mit dem Datum einer möglichen Zu- oder Absage zu deiner Bewerbung.

5. Empathy

5.1. Purposes of data processing / legal basis

Insofar as we agree with you to get to know each other in connection with the possible establishment of a future employment relationship within the framework of a so-called empathetic relationship, we will process your data to the extent necessary for the organization and implementation of the empathetic relationship and the associated contractual agreement. The legal basis for data processing is Article 6 (1) (b) GDPR, § 26 (1) sentence 1 BDSG.

5.2. Recipients / categories of recipients

As part of the empathy relationship, the HR department of Schwarz Corporate Solutions KG and the company or department in which the advertised position is located and where you complete a trial day or similar will have access to your data to the extent required.

5.3. Obligation to provide your data

You are neither contractually nor legally obliged to provide us with personal data. Without the data, however, we cannot organize and carry out the empathy relationship or the associated contractual agreement.

5.4. Storage duration / criteria for determining the storage duration

We store your data processed within the framework of the empathy for four months, starting with the date of a possible acceptance or rejection of your application

C. Your rights as a data subject

Pursuant to Article 15(1) GDPR, you have the right to request information, free of charge, on the personal data stored about you.

If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.

If the basis of processing is Article 6(1)(e) or (f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will no longer be processed thereafter, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests of the data subject in the objection.

If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.

If the data processing is carried out on the basis of consent granted under Article 6(1)(a) or Article 9(2)(a) GDPR, you may revoke that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

In the above-mentioned cases, or if you have questions or complaints, please write to or e-mail the data protection officer.

You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.

D. Data protection officer contact information

For further questions concerning the processing of your data or the exercise of your rights, please contact the controller's competent data protection officer.
 
Schwarz Corporate Solutions KG
- Data protection officer -
Stiftsbergstraße 1
74172 Neckarsulm, Germany

E-mail: datenschutz@mail.schwarz