Data protection information for participants in the "WEmoveEU" project
ALPLA Werke Lehner GmbH & Co KG
We take the protection of the personal data of our participants in the "WEmoveEU" project and their confidential treatment very seriously. We, ALPLA Werke Lehner GmbH & Co KG, therefore provide you with this information letter to inform you about the processing of your personal data and the rights to which you are entitled during your employment with us. Your personal data will be processed exclusively within the framework of the applicable statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter "GDPR").
Who is responsible for data processing and who can I contact?
Responsible for data processing is
ALPLA Werke Lehner GmbH & Co
Legal representative of the company: Georg Pescher, Werner Lutz
Daimlerstrasse 4
88677 Markdorf
Tel: 07544-5080
e-mail: office-markdorf@alpla.com
If you have any questions or suggestions regarding data protection, you are welcome to contact the locally responsible Data Protection Coordinator (DPC). The data protection coordinator responsible for your location can be found in the data protection organisation chart, which is displayed in your plant.
You can also contact our Data Protection Officer (DPO) at any time. You can reach him as follows:
Attorney Boris Reibach
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn
Germany
Phone: (+49) 0228-227 226 0
Contact | Scheja & Partners Attorneys at
What is the subject of data protection?
The subject of data protection is personal data. This is any information relating to an identified or identifiable natural person (so-called data subject). This is information that is required for the application for the "WEmoveEU" project via the Videoask tool from Typeform S.L.. This includes, example, information such as name, place of residence, e-mail address or telephone number.
What data do we process from you?
In particular, we process the following data and data categories from you:
- Contact details, including your name, business email address, business telephone number and home address
- Date of entry or re-entry into the ALPLA Group
- Job-related information, including job title and place of work
- An assessment by your line manager of your strengths and performance
- Image and audio data of your application video
What purposes do we pursue with data processing and what is the legal basis for this?
As part of the ALPLA Group's "WEmoveEU" project, applicants' personal data is collected and processed to enable participation in the project. This data is required to verify the identity of the applicants, to assess their suitability for the project and to select the participants. The video recordings are used to assess the motivation and qualifications of the applicants. The data is analysed exclusively by the responsible employees, the HR WEEU department.
Data processing is carried out on the basis of Article 6 (1a) GDPR. Consent is given by the applicant during the application process. You can withdraw your consent at any time with effect for the future without affecting the lawfulness of processing based on consent before its withdrawal.
Sources
We only process the personal data that we have received directly from you as part of your application for the project.
How do we protect your data?
We maintain appropriate administrative, technical and organisational measures to protect the confidentiality and integrity of your data and to protect it from accidental or unlawful destruction, accidental loss, unauthorised alteration, disclosure or access, misuse and any other unlawful form of processing. If you have any questions about the measures we have taken, please contact the data protection manager. This can be found in the data protection organisation chart, which has been posted in your plant.
Is there automated decision-making and profiling?
No automated decision-making or profiling takes place.
Do I have to provide my employee data?
You must provide the personal data required for the application process for the "WEmoveEU" project. Otherwise you will not be able to participate in the project.
Who has access to your data and who receives it?
Within ALPLA Werke Lehner GmbH & Co KG, the personnel departments of the countries and the responsible managers of the region or countries have access to your application data. The access rights are graded according to necessity.
Which processors do we work with?
As part of this project, we are cooperating with the Spanish-based processor Typeform, S.L. The tool Videoask from Typeform S.L. is used. An order processing contract was concluded between ALPLA Werke Lehner GmbH & Co KG and Typeform S.L. in accordance with Art. 28 GDPR.
Transfer of data to third countries
As part of the employment relationship, your personal data will be transferred to organisations whose registered office or place of data processing is not located in a member state of the European Union or in another signatory state to the Agreement on the European Economic Area. Before the transfer, we ensure that the recipient has an adequate level of data protection (e.g. through an adequacy decision by the European Commission, through suitable guarantees or the agreement of so-called EU standard data protection clauses of the European Commission with the recipient), except in exceptional cases permitted by law. The Typeform processor works with sub-processors from third countries. The service provider contractually assures that sufficient data protection is in place. This is guaranteed by EU standard data protection clauses between Typeform S.L. and the sub-processors.
How long will my data be stored?
We only store your personal data for as long as this is necessary for the fulfilment of the purposes and you have not withdrawn your consent. We also delete your personal data if we are obliged to do so for legal reasons. This takes place after expiry of the various retention obligations to which we are subject . The final deletion takes place no later than six months after the application process.
What rights do I have as a data subject?
As a data subject, you have the following rights under the GDPR, provided that the respective legal requirements are met:
Information: You have the right to obtain information about the personal data processed about you.
Rectification: You can request the rectification of inaccurate personal data concerning you. You can also request the completion of incomplete data.
Erasure: In certain cases, you can request the erasure of your personal data.
Restriction of processing: In certain cases, you can request that the processing of your data be restricted.
Data portability: If you have provided data on the basis of a contract or consent, you may request that you receive the data you have provided in a structured, commonly used and machine-readable format or that it be transmitted to another controller.
Revocation consent: You can withdraw your consent to the processing of your data at any time with effect for the future. This does not affect the lawfulness of the processing of your data until you withdraw your consent.
Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful.
Questions / Contact
You can also contact us free of charge if you have any questions about the processing of your personal data, your rights as a data subject and any consent you have given. To exercise any of your aforementioned rights, please contact the Data Protection Manager (DSM) of Western Europe Miguel Díaz. (Miguel.Diaz-Ramirez@alpla.com ). He is listed by name in the data protection organisation chart, which is displayed at your location.
Alternatively, you can contact us by post at the address given in Section I above. When withdrawing your consent, you can also use the same contact method that you used when submitting your declaration of consent.