Below, we inform you about our processing of your personal data and your rights, which you can assert against us according to the GDPR.

1. Responsible body

Trading as:     MUNK GmbH

Address:           Rudolf-Diesel-Str. 23

Postcode / town:        89312, Günzburg, Germany

Telephone:          +49 (0)8221/361601

E-mail:            info@munk-group.com
URL:               www.steigtechnik.de

The contact details of our data protection officer:

Stefan Keller
E-mail: stefan.keller@machcon.com

1. Purposes and legal basis of the processing

The data we receive from you will only be processed for the purposes for which you have transmitted it to us. Processing for any other purposes will only be considered if the legal requirements as specified in Article 6 (4) GDPR are met. We will of course comply with the resulting information obligations under Art. 13 (3) and Art. 14 (4) GDPR.

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR and Section 26 of the new BDSG, as well as Art. 6 (1) lit. b GDPR where appropriate on the initiation or execution of contractual relationships.

If you give us your express consent to process your personal data for specific purposes, the lawfulness of the processing is based on Art. 6 (1) lit. a GDPR. A given consent can be revoked at any time, with effect for the future. Should the consent also relate to the processing of special categories of personal data in accordance with Art. 9 GDPR, we will expressly inform you of this in advance. If the processing of your personal data is necessary for the defence of legal claims against us arising from the employment relationship, this processing is based on the legal principles of Art. 6 (1) lit. f GDPR.

If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations in accordance with Art. 6 (1) lit. c GDPR. In addition, processing may be carried out to protect our legitimate interests or the legitimate interests of third parties in accordance with Art. 6 (1) lit. f GDPR. We shall inform you separately of this stating the legitimate interest, if this is required by law. If the processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR in order to safeguard legitimate interests, you have the right, pursuant to Art. 21 GDPR, to object to the processing of such data at any time for reasons arising from your particular situation. In this case we will no longer process this data, unless we can prove compelling reasons for processing worthy of protection. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.

In the event that an employment relationship is established between you and us, in accordance with Art. 88 GDPR in conjunction with Section 26 of the new BDSG, we may process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of the interests of the employees resulting from a law or a collective agreement, a works or service agreement.

1. Duration of data storage

We process your data as long as this is necessary for the decision on your application. The personal data or application documents provided by you will be deleted at most six months after the end of the application procedure, unless longer storage is legally required or permitted.

Storage of your data beyond the mentioned purposes is only carried out in those cases in which we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The time limits for storage or documentation prescribed therein are two to ten years.

Ultimately, the period of storage is also based on the statutory periods of limitation, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), generally amount to three years, but can be up to thirty years in certain cases.

In principle, we carry out an examination of data towards the end of a calendar year with regard to the need for further processing. Given the volume of data, this check is carried out with regard to specific types of data or purposes of processing.

If you have agreed to a longer storage of your personal data, we will store it according to your consent.

If you are employed after the application procedure, your data will continue to be stored as far as this is necessary and permissible, and then transferred to the personnel file.

Under certain circumstances, you may receive an invitation to join our talent pool after the application process. This will also enable us to consider you for suitable positions in the future. If we have your consent, we will store your data in our talent pool in accordance with this consent.

1. Recipients of the data

We pass on your personal data within our company exclusively to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests.

Furthermore, your personal data will be processed on our behalf on the basis of contracted data processing agreements in accordance with Art. 28 GDPR. In this case, we guarantee that the processing of personal data shall occur in accordance with the provisions of the GDPR.

The categories of recipients in this case are: Bite GmbH, Magirus-Deutz-Str.16, 89077 Ulm, Germany

Disclosure of data to recipients outside the company shall otherwise only occur insofar as statutory provisions permit or require this, the disclosure is necessary for transacting and thus for fulfilling the contract or, at your request, for carrying out pre-contractual measures, you have consented or we are authorised to grant access.

1. Categories of personal data

We only process personal data that you have provided to us in the context of your application. This may be general data about your person, such as name, address, contact data or similar, but also information about your professional qualifications, school education, professional further education, as well as other data which you have transmitted to us.

1. Your rights

Every data subject has the following rights:

• Right to information pursuant to Art. 15 GDPR
• Right to correction pursuant to Art. 16 GDPR
• Right to deletion pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to notification pursuant to Art. 19
• Right to the transferability of data pursuant to Art. 20 GDPR

To exercise these rights, please contact: datenschutz@steigtechnik.de or write to MUNK GmbH, Rudolf-Diesel-Str. 23, 89312 Günzburg, Germany.

According to Art. 77 GDPR, you also have the right to complain to the data protection supervisory authority. This right is without prejudice to any other administrative or judicial recourse.

In particular, you have a right of objection under Art. 21 (1) and (2) GDPR against the processing of your data in connection with a direct advertising campaign, if this is based on a balancing of interests.

1. Sources of data

Only personal data will be processed which you have transmitted to us verbally, in writing, by e-mail or fax for the purpose of contacting us or applying for a job, or which you have entered in our BITE applicant management system from BITE GmbH in 89077 Ulm, Magirus Deutz-Str. 16, Germany.

1. Transmission to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary or legally required for the execution of the contractual relationship or

if you have given us your consent.
We do not currently transfer your personal data to any service provider outside the European Economic Area.

1. Provision of personal data

As a rule, the provision of personal data for the purpose of establishing, implementing or fulfilling a contract or for pre-contractual measures is neither required by law nor by contract. You are therefore not obliged to provide information regarding personal data. Please be aware, however, that this information is generally required for reaching a decision concerning conclusion of a contract, for fulfilment of a contract or for pre-contractual measures. If you do not provide us with any personal data, we may not be able to make a decision in the context of contractual measures.

1. Automated decision-making

The decision on your application is not based exclusively on automated processing. Therefore, no automated decision in individual cases within the meaning of Art. 22 DSGVO takes place.