Data protection information for applicants
This data protection information for applicants informs you about the processing of your personal data at Carpenter, its branches, group companies, departments and groups.
In accordance with Art. 4 (1) GDPR, your personal data includes all information relating to you or that can be related to you, in particular by means of assignment to an identifier such as a name or an organisational or personnel number with which you can be identified.
Personal information and personal data:
Carpenter collects and processes the following personal data (both in paper and digital form) that you have provided through your application (collectively, ‘applicant data’):
• Contact details, such as your name, address, telephone number and email address;
• Information about your professional experience and skills, as well as previous employment, language skills, performance reviews, evaluations and quotas;
• Photo (if voluntarily added).
It is not intended that special categories of personal data will be processed. However, if you provide such data, such as health data, this data will also be processed.
Data processing purposes, legal basis and consequences:
Applicant data is collected and processed for recruitment and hiring purposes in order to determine the skills and suitability of applicants who have applied for a position (collectively, ‘processing purposes’):
Carpenter relies on the following legal bases for data processing:
• Necessity of recruitment (Art. 88 GDPR in conjunction with Section 26 BDSG (new));
• Legitimate interest of Carpenter, its affiliated companies within the meaning of Section 15 of the German Stock Corporation Act (AktG) or third parties with a legitimate interest in special application management (Art. 6 (1) lit. f GDPR);
• Consent, if provided by you and recorded in accordance with the law (Art. 6 (1) lit. a GDPR in conjunction with Art. 88 GDPR and § 26 (2) BDSG (new));
• Compliance with legal requirements (Art. 6 (1) lit. c GDPR).
The provision of such data is voluntary. If this information is not provided, it may prevent the recruitment process from taking place, meaning that Carpenter will unfortunately not be able to consider your application.
Categories of recipients:
Carpenter will process personal data within the Human Resources department and in the relevant department. Carpenter may disclose the information to third parties for the following processing purposes:
• Within the group: Carpenter may disclose your personal data to other members of the group for as long as it is necessary for the position. Access to your personal data is restricted to those persons who need the information to perform their duties.
• Data processing companies: Certain third parties may receive your personal data for processing under appropriate instructions (‘data processors’) to the extent necessary for the processing purposes. The data processing companies are contractually obliged to implement appropriate technical and organisational measures to protect the personal data and to process it as specified in the contract.
Retention period:
The application data will be stored by Carpenter and our service providers for as long as necessary to fulfil our obligations and for no longer than is necessary to achieve the purposes in accordance with applicable data protection law.
If you have applied but have not been accepted, we will store your application documents for a further 6 months. After these 6 months, all information will be deleted unless it is required for further legal purposes or legal action. If we wish to add you to our applicant pool, we will ask for your consent in our rejection email. If you agree, we will retain your application documents for one year for re-evaluation and for any positions that become available. After this year, your data will be destroyed.
Automated decision-making:
Carpenter does not use automated decision-making in connection with the application process.
Responsible body for the processing of your personal data
The competent and responsible body for the collection, processing and use of your personal data is, unless otherwise agreed in a contract, Carpenter in the Federal Republic of Germany.
Applicant data is stored and processed in applicant management systems. The technical installation is designed in such a way that only a small group of specially authorised persons has access and any other access or knowledge of the data is excluded in accordance with the state of the art.
Your rights:
If you have given your consent, you have the option of revoking it at any time with effect for the future. This revocation will not affect the previous processing of data.
In accordance with applicable data protection laws, you have the right: a) to access your personal data; b) to request the correction of your personal data; c) to request the deletion of your personal data; d) to request restrictions on the processing of your personal data; e) request the transfer of your personal data; f) object to the processing of your personal data. Please note that the above rights may be restricted by national law.
a) Right to information: You have the right to request confirmation from us as to whether personal data relating to you is being processed; if this is the case, you have the right to obtain information about this personal data.
The right to information extends, among other things, to the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right, and the interests of other individuals may restrict your right to information.
You have the right to receive a copy of the personal data that is the subject of the processing. For any further copies you request, we may charge a reasonable fee based on administrative costs.
b) Right to rectification: You have the right to request that we rectify any inaccurate personal data concerning you. Depending on the purpose of the processing, you have the right to have incomplete personal data completed by means of an additional statement.
c) Right to erasure (right to be forgotten): Under certain circumstances, you have the right to erase personal data concerning you.
d) Right to restriction of processing: Under certain circumstances, you have the right to obtain from us restriction of the processing of your personal data. In these circumstances, the relevant data will be marked and only processed for a specific purpose.
e) Right to data portability: Under certain circumstances, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format and are entitled to transfer this data to another company without hindrance.
You also have the right to lodge a complaint with the competent supervisory authority.
Right to object pursuant to Art. 21 of the General Data Protection Regulation
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is based on Article 6(1)(e) or (f).
Since Carpenter processes and uses your personal data primarily for the purposes of the contractual relationship with you, Carpenter has a legitimate interest in processing your data, which will override your request for restriction.
To exercise your rights, please contact us as follows:
If you have any questions regarding this notice or your rights, please contact:
Ms Melissa Gudehus
Email: Melissa.Gudehus@carpenter.com
You can contact Carpenter's data protection officer at the following address: Mr Markus Zwingmann
Email: Markus.Zwingmann@carpenter.com
