Data Protection – Data processing applicants

A Data transfer

The protection of your personal data is very important to us. We would therefore like to inform you transparently about our data protection principles and the processes for using your data as part of your application via our e-recruiting system. By applying to evoila GmbH, you are applying to an innovative company with modern IT and HR processes and systems.

By completing the registration and sending your application, you consent to

the inclusion in the applicant database of evoila GmbH (this includes evoila GmbH and the group of companies belonging to it within the meaning of Art. 4 No. 19 GDPR [these can be found at https://evoila.com/company/locations/] )
the possibility of access by our managers and recruiters of evoila GmbH (this includes evoila GmbH and the group of companies belonging to it within the meaning of Art. 4 No. 19 GDPR [these can be found at https://evoila.com/company/locations/] ) for the purpose of applicant selection

You can object to the processing of your data at any time, but you will then no longer be considered in selection procedures. Details can be found in the privacy policy.

You also confirm that you have read the privacy polic:

B – Privacy Policy

1. privacy policy with information on the handling of applicant data

The protection of your personal data is very important to us. We would therefore like to inform you about our data protection principles and the procedures for using your data as part of your application via our e-recruiting system.

evoila uses both technical and organisational security measures to protect your data from manipulation, loss, destruction or unauthorised access and reviews the security measures in line with technological developments.

evoila GmbH uses the Workday service to process applications. This privacy policy informs you about the processing of your data.

1.1. Responsible for data processing

The person responsible for the processing of personal data in the context of the application procedure within the meaning of the General Data Protection Regulation (GDPR) is

Name of the responsible organisation:

evoila GmbH
Robert-Bosch-Str. 36
55129 Mainz
Phone: +49 6131 – 95 07 444
info@evoila.de

1.2. Data protection officer

We have appointed a data protection officer for our company. The data protection officer is available to answer any questions you may have regarding the processing of your personal data:

DEUDAT GmbH
Zehntenhofstraße 5b
65201 Wiesbaden
Phone: +49 611 950008-40
E-mail: kontakt@deudat.de

1.3. Data categories, purpose of data processing and legal basis

We store the personal data you provide as part of the application process. This applies both to applications for specific job advertisements and to unsolicited applications.

By registering on our careers page, you are either applying for a specific job advertisement or making an unsolicited application for employment with us. The data requested from you will be used by the evoila group of companies exclusively for the purpose of filling vacancies.

The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

The data you provide will be divided into the following categories for processing:

Contact details (name, address, email, telephone/mobile phone number)
Files and documents provided via upload (CV, in particular details of professional experience and training)
Information details (how did you hear about us?, Availability Date, Salary Expectation, work permission)

In addition, we create data on the assessment and evaluation in the application process and document the application process as a history.

The legal basis for data collection and processing as part of the application process is Art. 6 (1) (b), (f) GDPR and Section 26 (1) BDSG.

Please note that you yourself are responsible for the accuracy of your data.

1.4 Data transfer within the evoila group, data transfer to third countries

In detail, at evoila GmbH and the subsidiaries of evoila GmbH:

employees in the HR departments,
employees in the units in which a position is to be filled,
managers and potential supervisors
employees in administrative areas, as part of the onboarding process, after a successful application, for the purpose of creating the necessary documents and access authorisation cards access to your data.

The data will be passed on exclusively for the purpose of checking your qualifications and as part of the handling of current and subsequent application procedures and recruitment processes, insofar as this is necessary for processing the applications received.

Your data will only be received by those departments that are entrusted with the preparation and implementation of the application and recruitment process and are required for this purpose.

A restriction in relation to your application for a specific position you have applied for is therefore not made.

(You can find an overview of the group of companies within the meaning of Art. 4 No. 19 GDPR at https://evoila.com/company/locations/] )

For the technical implementation of the eRecruiting process, we use a service provider as a processor within the meaning of Art. 28 GDPR. This processor processes personal data for these purposes on our behalf and in accordance with our instructions.

1.5 Storage of data

If there is no statutory retention period, your data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. If you or the recruiter are not hired, this is usually the case no later than six months after completion of the application process or after six months of inactivity by you or the recruiter.

In individual cases, individual data may be stored for longer (e.g. travel expense reports). The duration of storage then depends on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years).

There will be no message before the profile is deleted and no confirmation of deletion. If you are still waiting to hear back about a vacancy, please contact the recruiter responsible.

1.6 Your rights as a data subject as an applicant

As a data subject, you have the following rights:

the right of access under Art. 15 GDPR,
the right to rectification under Art. 16 GDPR,
the right to erasure under Art. 17 GDPR,
the right to restriction of processing under Art. 18 GDPR,
and the right to data portability under Art. 20 GDPR.

The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure.

In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR in conjunction with Art. 19 BDSG. § Section 19 BDSG if you are of the opinion that your personal data is being processed unlawfully.

2. use of Workday

Applicant data is processed via the cloud-based applicant management system Workday. The provider is Workday, Inc, 6110 Stoneridge Mall Road, Pleasanton, CA 94588, USA. This system enables the structured collection, storage and processing of application documents, communication with applicants and the management of application processes. The data is stored in data centres within the EU, whereby certain support and maintenance services can also be provided by Workday from third countries (e.g. USA)

You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests). You can object to the data processing at any time with effect for the future. An objection will result in the termination of your application process.

To object, please send us a message to jobs@evoila.de .

4. no automated decision-making

Automated decision-making in individual cases within the meaning of Art. 22 GDPR does not take place.