Rubin Mühle GmbH
Postanschrift/Büro:  Hugsweierer Hauptstraße 32
77933 Lahr-Hugsweier
Germany

Postal address/Office : 
Telephone: 07821 5804 0 
Facsimile: 07821 5804 85 99
E-Mail:  info@rubinmuehle.de

The Data Protection Officer of Rubin Mühle GmbH, Mr. Christian Noll, is available via  datenschutz@rubinmuehle.de.

We process personal data about you only insofar as this is necessary for the purpose of deciding whether to establish an employment relationship (including training relationship) with us. The legal basis for this is Art. 88 GDPR in conjunction with § 26 para. 1 sentence 1 Federal Data Protection Act 2018 (“Bundesdatenschutzgesetz 2018 (BDSG 2018”), insofar as it concerns information which we request from you within the application procedure (name, contact data, date of birth, information on your professional qualification and school education or information on further professional training). If you voluntarily provide us with further information, we will process it on the basis of your consent (Art. 6 para. 1 letter a GDPR).   

Furthermore, we may process personal data about you insofar as this is necessary to defend against legal claims asserted against us in the application process. The legal basis is Art. 6 para. 1 letter f GDPR, the legitimate interest is for example a duty of proof in a procedure according to the General Equal Treatment Act ("Allgemeines Gleichbehandlungsgesetz (AGG)").   

 If we establish an employment relationship between you and us, we can process the personal data already received from you for the purpose of the employment relationship in accordance with § 26 para. 1 sentence 1 BDSG 2018, if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of the employees resulting from a law or a collective agreement, a company or service agreement (collective agreement).

We process data in connection with your application. This is general information about you (such as your name, address and contact details, date of birth), information about your professional qualification and school education or information about further professional training. We also process the application photos provided.  

Your personal data will not be transferred to third parties for purposes other than those listed below. We transfer your personal data that we have collected via this website to third parties only if:

• you have given your express consent for such a transfer in accordance with Article 6, para. 1, sent. 1, letter a GDPR, § 26 para. 2 BDSG 2018 ,
• the transfer is necessary in accordance with Article 6, para. 1, sent. 1, letter f GDPR for the establishment, exercise or defense of claims under the law and there is no reason to assume that you have a justified overriding interest in not allowing your data to be transferred. 
• if we are legally obligated to transfer the data in accordance with Art. 6, para. 1, sent. 1, letter c GDPR, and
• the transfer is permitted by law and in accordance with Art. 6, para. 1, sent. 1, letter b GDPR, § 26 para. 1, sentence 1 BDSG 2018, for the handling or settlement of contractual relationships with you.

Furthermore, on the basis of Art. 28 GDPR, your data will be passed on to technical service providers who use your data exclusively on our behalf and under no circumstances for their own business purposes. These are IT service providers, hosting providers or providers of application management systems.   

 Your data will not be transferred to third countries outside the EU or the European Economic Area.

We store your personal data for as long as this is necessary for the decision on your application. If an employment relationship between you and us is not established, we may also further store data, insofar as this is necessary to defend against possible legal claims. The application documents will be deleted six months after notification of the rejection decision, unless longer storage is necessary due to legal disputes or has been expressly agreed with you in individual cases.

You have the right:

• under Art. 15 GDPR to request information concerning your personal data processed by us. In particular, you can request information on the purpose of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned length of time the data will be retained, your right to the correction, erasure, restriction of processing, your right to contest, your right to file a complaint, the origin of your data if it was not originally collected by us, and the potential existence of automated decision-making, including profiling, and, if so, reliable information on the details of such processes;  
  We may only refuse to disclose information to you if and to the extent that such information would reveal information which must be kept secret in accordance with a legal provision or its nature, in particular because of the overriding legitimate interests of a third party (§29 para. 1 sentence 2 BDSG 2018), the responsible public authority has established to us that the disclosure of the data would endanger public security or order or otherwise adversely affect the welfare of the Federal Government or a federal state (§34 para. 1 No. 1 BDSG 2018 in conjunction with § 33 para.1 No. 2 letter b BDSG 2018), or the data are stored only because they may not be deleted due to legal or statutory storage regulations, or exclusively serve purposes of data backup or data protection control and the provision of information would require a disproportionate effort and processing for other purposes is excluded by suitable technical and organizational measures (§ 34 para.1 No. 2 BDSG 2018).
• under Art. 16 GDPR to demand the immediate correction of incorrect or incomplete personal data retained by us;    
• under Art. 17 GDPR to demand the erasure of your personal data retained by us, unless the processing of this data is necessary to exercise the right of freedom of expression and information that is required to comply with legal requirements for reasons of public interest or for the establishment, exercise or defense of legal claims; 
• under Art. 18 GDPR to demand the restriction of processing of your personal data if you contest its accuracy, the processing is unlawful, the data subject opposes the erasure of the personal data and we no longer need the data, although you require it for the establishment, exercise of defense of legal claims, or you have contested its processing under Art. 21 GDPR.
• under Art. 20 GDPR to receive your personal data that you have provided to us in a structured, standard and machine-readable format or to demand its transfer to another authorized person;
• under Art. 7, para. 3, to retract your previously given consent at any time. If you do, we will no longer be able to continue any data processing that was based on this consent,   if your personal data is processed on the basis of justified interests in accordance with Art. 6, para. 1, sentence 1, letter f GDPR, under Art. 21 GDPR you can contest the processing of your personal data if grounds exist that are related to your particular situation or your objection is directed toward direct marketing. In the latter case you have a general right to contest processing of your personal data by us without having to describe your particular situation.

You also have a general right to file a complaint with the Data Protection Supervisory Authority having jurisdiction for you. The authority responsible for Rubin Mühle GmbH is the „Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“. 

To exercise your right to retract your consent or to contest the processing of your personal information, just sent an e-mail to datenschutz@rubinmuehle.de.

The provision of personal data is neither prescribed by law nor by contract, nor are you obliged to provide us with your personal data. However, personal data must be provided in order to conclude an employment contract with us. This means that if you do not provide us with any personal data in an application, we cannot and will not be able to enter into an employment relationship with you. Such an application would be unpromising.

There is no automated decision-making in an individual case within the meaning of Art. 22 GDPR, i.e. we evaluate your application personally, and the decision on your application is not based exclusively on automated processing.

status: Mai 2018