Dear applicant,
Section 1 contains information about processing of personal data in connection with job applications to ARRK Engineering GmbH, and section 2 below that contains information about processing of personal data in connection with job applications to ARRK Research & Development S.R.L..
1. ARRK Engineering GmbH
We are delighted that you are interested in applying for a job with ARRK Engineering GmbH. To enable us to consider your application, we will need to process personal data. This data processing notice explains how your data is processed during the application process.
This notice concerns the processing of personal data in connection with applications to ARRK Engineering GmbH only. If you apply for a position with another ARRK Group company, please note that that company’s own privacy notice will apply.
1. Data controller contact details
ARRK Engineering GmbH
Frankfurter Ring 160
80807 Munich
Germany
Telephone: + 49 89 31857510
Email: info@arrk-engineering.com
2. Data protection officer contact details
ARRK Engineering GmbH
Datenschutzbeauftragter
Frankfurter Ring 160
80807 Munich
Germany
Email: datenschutzbeauftragter@arrk-engineering.com
3. Purposes of and lawful basis for data processing
We will process the data and documents you send to us in connection with your application for the purpose of processing your application and carrying out the application process only.
As a general rule, applications should be submitted online via a website and an applicant profile set up for this purpose using an online form. Once you have created your applicant profile, you can use it to submit applications to us. When you apply online via your applicant account in this way, we will also process the data collected in connection with that account for the purposes of the application process.
Before creating your applicant profile, you can also consent separately to the continued storage of your data in our Talent Pool. The ARRK Engineering Talent Pool is a database which the HR department and managers can use to identify potential candidates for vacancies even if those roles have not been advertised.
Should your application result in employment, your data will also be processed for purposes related to that employment.
The legal basis for processing of your application data is Article 6(1)(b) of the GDPR and section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) (new).
If your application data is added to our Talent Pool, that data will be processed on the basis of the consent you gave when setting up your applicant profile (Article 6(1)(a) GDPR).
It may also be necessary to process data after completion of the application process in order to pursue legitimate interests in accordance with Article 6(1)(f) GDPR. We may need to do this if any legal claims are filed in connection with an unsuccessful application, for example. In that case, we would have a legitimate interest in the establishment or defence of legal claims.
If we are required to disclose personal data to a public or private body in order to comply with a legal obligation, the legal basis for this is Article 6(1)(c) GDPR.
4. Recipients/categories of recipients of personal data
When your application details are received, they will be viewed by the HR department. Suitable applications will be forwarded internally to the manager of the department with the vacancy concerned. Next steps will then be agreed.
If you have consented to the inclusion of your data in our Talent Pool, please see point 3 (third paragraph).
Your data will only be accessed by individuals who need to do so for the purposes of the application process. Alongside members of the HR department, these also include managerial staff in the department you are applying to join.
If you submit a speculative application, the staff members who may access your data include, alongside members of the HR department, managerial staff in departments with suitable vacancies.
If we use external service providers or contractors in connection with the recruitment process (currently we only use providers or contractors within the EU/EEA and in particular our affiliated company ARRK Research & Development SRL Romania in Romania), their activities, and the activities of any subcontractors engaged by them with our authorisation, may include the processing of personal data.
In this case, we will enter into a specific contractual agreement concerning processing on our behalf in accordance with Article 28 GDPR. This will oblige those service providers to comply with the same data protection rules as us, and they will only process your personal data on our instructions.
We may also be required to disclose personal data to public or private bodies in order to comply with a legal obligation.
5. How long your personal data will be retained
Applicant data is normally erased no later than six months following final rejection of an application.
If you have agreed that your data can be added to our Talent Pool, that data will be erased no later 12 months after you create your applicant profile and send us your application data.
Once these periods have expired, or if you delete your applicant profile yourself or withdraw consent to continued storage of your data, the data you have provided will be anonymised and the documents you have sent to us will be erased.
Aside from this, your data may be processed for longer than six months if necessary in order to pursue legitimate interests after completion of the application process (see also point 3).
In addition, we may need to retain your data to comply with legal obligations (such as retention periods laid down in commercial or tax law) even if you delete your profile or withdraw your consent.
We may also need to process your data for longer than six months if we have a legal obligation to disclose personal data to a public or private body. If your application is successful, we will transfer your data from the application data system into our HR information system.
6. Your rights in relation to processing of personal data
(1) You have the right to access personal data concerning you that we process (Article 15 GDPR).
If you request access to your personal data in a manner other than in writing, please note that we may need to ask you to provide proof that you are the person entitled to access the data.
(2) In the circumstances provided for in law, you also have the right to rectification of inaccurate data concerning you (Article 16 GDPR).
(3) You have right to erasure in particular if you withdraw your consent to processing of your data and there is no other legal basis for storage of that data. You also have this right if we have a legal obligation to erase your data (“right to be forgotten”, Article 17 GDPR).
(4) You have the right to obtain restriction of processing of your data (Article 18 GDPR).
(5) You can withdraw your consent to processing of your data at any time.
However, please note that in this case we will not be able to consider your application further. It will not affect the application process in any way if you withdraw your consent to storage of your data in our Talent Pool.
(6) You have the right to data portability (Article 20 GDPR) as set out in data protection law.
(7) You have the right to right to lodge a complaint with the appropriate data protection supervisory authority at any time.
7. Voluntary nature of the choice to provide personal data
Provision of personal data for recruitment purposes is voluntary and you are not legally or contractually obliged to do so. However, please note that we may not be able to process your application without this necessary information.
If we need any specific personal data or documents in order to continue considering your application (i.e. data or documents which are necessary for the application process), this will either be stated in the job advertisement or we will let you know during the online application process.
Storage of your applicant data in the Talent Pool is always voluntary. Your application will be considered regardless of whether or not you consent to inclusion in the Talent Pool.
2. ARRK Research & Development S.R.L.
We are delighted that you are interested in applying for a job with ARRK Research & Development S.R.L. To enable us to consider your application, we will need to process personal data. This data processing notice explains how your data is processed during the application process.
This notice concerns the processing of personal data in connection with applications to ARRK Research & Development S.R.L. only. If you apply for a position with another ARRK Group company, please note that that company’s own privacy notice will apply.
1. Data controller contact details
ARRK Research & Development S.R.L.
Str. Fabricii de Chibrituri 13-21, Cladirea ICPIAF
400254 Cluj-Napoca, Romania
Email: info@arrk-engineering.com
2. Purposes of and lawful basis for data processing
We will process the data and documents you send to us in connection with your application for the purpose of processing your application and carrying out the application process only.
As a general rule, applications should be submitted online via a website and an applicant profile set up for this purpose using an online form. Once you have created your applicant profile, you can use it to submit applications to us. When you apply online via your applicant account in this way, we will also process the data collected in connection with that account for the purposes of the application process.
Before creating your applicant profile, you can also consent separately to the continued storage of your data in our Talent Pool. The ARRK Talent Pool is a database which the HR department and managers can use to identify potential candidates for vacancies even if those roles have not been advertised.
Should your application result in employment, your data will also be processed for purposes related to that employment.
The legal basis for processing of your application data is Article 6(1)(b) of the GDPR.
If your application data is added to our Talent Pool, that data will be processed on the basis of the consent you gave when setting up your applicant profile (Article 6(1)(a) GDPR).
It may also be necessary to process data after completion of the application process in order to pursue legitimate interests in accordance with Article 6(1)(f) GDPR. We may need to do this if any legal claims are filed in connection with an unsuccessful application, for example. In that case, we would have a legitimate interest in the establishment or defence of legal claims.
If we are required to disclose personal data to a public or private body in order to comply with a legal obligation, the legal basis for this is Article 6(1)(c) GDPR.
3. Recipients/categories of recipients of personal data
When your application details are received, they will be viewed by the HR department. Suitable applications will be forwarded internally to the manager of the department with the vacancy concerned. Next steps will then be agreed.
If you have consented to the inclusion of your data in our Talent Pool, please see point 2 (third paragraph).
Your data will only be accessed by individuals who need to do so for the purposes of the application process. Alongside members of the HR department, these also include managerial staff in the department you are applying to join.
If you submit a speculative application, the staff members who may access your data include, alongside members of the HR department, managerial staff in departments with suitable vacancies.
If we use external service providers or contractors in connection with the recruitment process (currently we only use providers or contractors within the EU/EEA and in particular our parent company ARRK Engineering GmbH in Munich, Germany), their activities, and the activities of any subcontractors engaged by them with our authorisation, may also include the processing of personal data.
In this case, we will enter into a specific contractual agreement concerning processing on our behalf in accordance with Article 28 GDPR. This will oblige those service providers to comply with the same data protection rules as us, and they will only process your personal data on our instructions.
We may also be required to disclose personal data to public or private bodies in order to comply with a legal obligation.
4. How long your personal data will be retained
Applicant data is normally erased no later than six months following final rejection of an application.
If you have agreed that your data can be added to our Talent Pool, that data will be erased no later 12 months after you create your applicant profile and send us your application data.
Once these periods have expired, or if you delete your applicant profile yourself or withdraw consent to continued storage of your data, the data you have provided will be anonymised and the documents you have sent to us will be erased.
Aside from this, your data may be processed for longer than six months if necessary in order to pursue legitimate interests after completion of the application process (see also point 3).
In addition, we may need to retain your data to comply with legal obligations (such as retention periods laid down in commercial or tax law) even if you delete your profile or withdraw your consent.
We may also need to process your data for longer than six months if we have a legal obligation to disclose personal data to a public or private body. If your application is successful, we will transfer your data from the application data system into our HR information system.
5. Your rights in relation to processing of personal data
(1) You have the right to access personal data concerning you that we process (Article 15 GDPR).
If you request access to your personal data in a manner other than in writing, please note that we may need to ask you to provide proof that you are the person entitled to access the data.
(2) In the circumstances provided for in law, you also have the right to rectification of inaccurate data concerning you (Article 16 GDPR).
(3) You have right to erasure in particular if you withdraw your consent to processing of your data and there is no other legal basis for storage of that data. You also have this right if we have a legal obligation to erase your data (“right to be forgotten”, Article 17 GDPR).
(4) You have the right to obtain restriction of processing of your data (Article 18 GDPR).
(5) You can withdraw your consent to processing of your data at any time.
However, please note that in this case we will not be able to consider your application further. It will not affect the application process in any way if you withdraw your consent to storage of your data in our Talent Pool.
(6) You have the right to data portability (Article 20 GDPR) as set out in data protection law.
(7) You have the right to right to lodge a complaint with the appropriate data protection supervisory authority at any time.
6. Voluntary nature of the choice to provide personal data
Provision of personal data for recruitment purposes is voluntary and you are not legally or contractually obliged to do so. However, please note that we may not be able to process your application without this necessary information.
If we need any specific personal data or documents in order to continue considering your application (i.e. data or documents which are necessary for the application process), this will either be stated in the job advertisement or we will let you know during the online application process.
Storage of your applicant data in the Talent Pool is always voluntary. Your application will be considered regardless of whether or not you consent to inclusion in the Talent Pool.