1. Objectives and responsibility
1. This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within our online offering and the associated websites, functions, and content (hereinafter collectively referred to as the "online offering" or "website"). This privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) on which the online offering is executed.
2. The provider of the online offer and responsible under data protection law is PMMG Process Solutions GmbH, Guerickestr. 25, 80805 Munich, email: info@pmmg.group (hereinafter referred to as "we" or "us"). For information about the legal representative and other contact options, please refer to our legal notice:
www.process-solutions.pmmg.group/impressum/
3. You can reach our data protection officer at the following email address: privacy@pmmg.group
4. The term "user" used below includes both applicants and other website visitors. All terms used, such as "applicant," are gender-neutral.
2. Basic information on data processing and legal bases
1. We only process users' personal data in compliance with the relevant data protection regulations. This means that users' data will only be processed if there is legal permission to do so. This means, in particular, if data processing is necessary to provide our contractual services (e.g., processing orders) and online services, or is required by law, if the user's consent has been obtained, or if it is based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation and security of our online offering within the meaning of Art. 6 (1) (f) GDPR, or, until the GDPR came into force, on the basis of Section 15 (3) TMG), in particular when measuring reach, creating profiles for advertising and marketing purposes, as well as collecting access data and using third-party services.
2. With regard to the processing of personal data on the basis of the General Data Protection Regulation (GDPR), we would like to point out that the legal basis for consent is Art. 6 (1) (a) and Art. 7 GDPR, the legal basis for processing to fulfill our services and implement contractual measures is Art. 6 (1) (b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) (c) GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 (1) (f) GDPR.
3. Security measures
1. We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.
4. Transfer of data to third parties and third-party providers
1. Data will only be shared with third parties within the scope of legal requirements. We only share user data with third parties if this is necessary, for example, for billing purposes or for other purposes that are necessary to fulfill our contractual obligations to users.
2. Data will only be shared with third parties within the scope of legal requirements. We only share user data with third parties if this is necessary, for example, for billing purposes or for other purposes that are necessary to fulfill our contractual obligations to users.
3. If, within the scope of this data protection declaration, content, tools or other means from other providers (hereinafter jointly referred to as “third-party providers”) are used and their stated headquarters are located in a third country, it can be assumed that data will be transferred to the countries in which the third-party providers are located.
4. Third countries are countries in which the GDPR is not directly applicable law, i.e., in principle, countries outside the EU or the European Economic Area.
5. The transfer of data to third countries takes place either if an adequate level of data protection is ensured, if the user has given his consent or if there is other legal permission.
5. Purpose and scope of processing applicant data
1. We process applicant data only for the purpose and within the scope of the application process in accordance with legal requirements. Applicant data is processed to fulfill our contractual obligations and based on our legitimate interests, as well as the applicants' interests in conducting a quick and effective application process.
2. The application process requires applicants to provide us with their application data. The required application data is marked as such in our online form. This includes personal information, postal and contact addresses, and the application documents, such as a cover letter, resume, and references. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the manner and scope set out in this privacy policy.
6. Disclosure of applicant data
1. We generally do not share applicant data with third parties. However, we may be assisted by external service providers or other companies within our group of companies in the application process. These service providers may also process applicant data. These service providers process applicant data only on our behalf and based on contractual obligations that stipulate compliance with the agreed organizational and technical measures.
2. Applicant data may also be passed on if a position has been expressly advertised by several companies within our group of companies, i.e. the application process is carried out by several companies.
3. In all other cases, we ask applicants for permission before sharing their data.
7. Method of submitting applications
1. Applicants can submit their applications using the contact form on our website. The data will be transmitted to us in encrypted form using state-of-the-art technology.
2. Alternatively, applicants can submit their applications via email. Please note, however, that emails are not encrypted. Therefore, we cannot assume any responsibility for the transmission of the application between the sender and its receipt on our server. We therefore recommend using the online form.
3. Instead of applying via the online form and email, applicants still have the option of sending us their application by post.
8. Storage and deletion of applicant data
1. The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application.
2. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.
3. Subject to a justified revocation by the applicant, the deletion will take place after a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the General Equal Treatment Act (AGG).
9. Contact us
1. When contacting us, the user's details are processed to process the contact request and its handling.
2. User data must be stored as business letters for 6 years due to legal requirements and for 10 years in the case of legal tax relevance.
10. User rights
1. Users have the right to request information about the personal data that we have stored about them In addition, users have the right to correct incorrect data, restrict the processing and deletion of their personal data, if applicable, to assert their rights to data portability and, in the event of the assumption of unlawful data processing, to lodge a complaint with the competent supervisory authority (Bavarian State Office for Data Protection Supervision, P.O. Box 606, 91511 Ansbach).
2. Users can also revoke their consent, in principle with effect for the future, without giving reasons.
11. Deletion of data
1. The data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the user's data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
2. In accordance with legal requirements, storage takes place for 6 years in accordance with § 257 para. 1 HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
12. Right of objection
Users may object to the future processing of their personal data at any time without giving reasons in accordance with the statutory provisions. In particular, the objection may be made against processing for direct marketing purposes.
13. Changes to the privacy policy
1. We reserve the right to amend this privacy policy to adapt it to changes in the legal situation, or to changes in the service or data processing. However, this only applies to statements regarding data processing. If user consent is required or if parts of the privacy policy contain provisions of the contractual relationship with users, the changes will only be made with the user's consent.
2. Users are asked to inform themselves regularly about the content of the data protection declaration.
Google Analytics
If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Scope of processing