1. name and contact details of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

GWH Wohnungsgesellschaft mbH Hessen
Westerbachstraße 33
60489 Frankfurt am Main

Phone: 069 97551 0

E-mail: info@gwh.de

Website: www.gwh.de

 

GWH Wohnungsgesellschaft mbH Hessen is also responsible for the personnel work for the following companies:

GWH Immobilien Holding GmbH
Westerbachstraße 33
60489 Frankfurt am Main

GWH Bauprojekte GmbH
Westerbachstraße 33
60489 Frankfurt am Main

Systeno GmbH
Westerbachstraße 33
60489 Frankfurt am Main

GWH WertInvest GmbH
Westerbachstrasse 33
60489 Frankfurt am Main

 

2. contact details of the data protection officer

You can reach our data protection officer using the following contact details:

GWH Wohnungsgesellschaft mbH Hessen
Data Protection Officer
Westerbachstraße 33
60489 Frankfurt am Main

E-mail: datenschutz@gwh.de

 

3. which of your personal data are used by us?

We process your personal data insofar as this is necessary to carry out the application process. This includes the following data categories:

 

Standard information:

• Applicant master data (first name, surname, address, job position)

 

With your application documents, you provide us with data that we check during the selection process:

• Qualification data (cover letter, curriculum vitae, previous activities, professional qualifications)
• (Employment) references and certificates (performance data, assessment data, etc.)
• Voluntary information, such as an application photo, information on severe disability or other information that you voluntarily provide us with in your application.

 

Any special information required for the position to be filled:

• Results of aptitude tests, assessment centers

 

Other information, if applicable

• Publicly accessible, work-related data, such as a profile on professional social media networks

 

4. from which sources does the data originate?

We process personal data that we receive from you as part of the application process.

We receive personal data from the following sources:

• Other group companies (outside the subgroup of GWH Immobilien Holding GmbH, only if this is done with your express consent)
• Service provider for applicant placement

 

We process personal data that originates from public sources, i.e. work-related social networks.

 

5. purpose and legal basis of the data processing

We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as all other relevant laws.

 

5.1 Data processing for the purposes of the application relationship (Section 26 (1) BDSG)

Personal data of applicants may be processed for the purposes of the application process if this is necessary for the decision on the establishment of an employment relationship with us. The necessity and the scope of the data collection depend, among other things, on the position to be filled.

 

5.2 Data processing on the basis of your consent (Art. 6 para. 1 lit. a GDPR, Section 26 para. 2 BDSG)

If you have given us your voluntary consent to the collection, processing or transfer of certain personal data, this consent forms the legal basis for the processing of this data.

In the following cases, we process your personal data on the basis of your consent:

• Inclusion in the applicant pool, i.e. we store the application documents beyond the current application process for consideration in subsequent application processes
• Forwarding the application to Group companies

 

5.3 Based on the legitimate interest of the controller (Art. 6 para. 1 lit. f GDPR)

In certain cases, we process your data to protect our legitimate interests or those of third parties.

• For the defense of legal claims in proceedings under the General Equal Treatment Act (AGG). In the event of a legal dispute, we have a legitimate interest in processing the data for evidence purposes.

 

6. to whom will your data be passed on?

Your data will mainly be processed by our HR department. The applicant data will also be made available to the department and/or division management (and possibly also the management) to which the position for which you have applied is assigned. Furthermore, the responsible works council is entitled to receive the application documents in accordance with § 99 BetrVG.

 

Internal positions:

• Personnel department
• Department/division management and management
• Financial accounting, if applicable
• Works Council

 

companies within the Group:

The HR department of GWH Wohnungsgesellschaft mbH Hessen also acts as the HR department for the other companies in the GWH Immobilien Holding GmbH subgroup (GWH Immobilien Holding GmbH, GWH Bauprojekte GmbH, Systeno GmbH and GWH WertInvest GmbH). However, these companies will only receive your data if you send your application to the relevant company.

 

External service providers:

• Your data will be stored in the applicant management tool "onlyfy one" of New Work SE, Am Strandkai 1, 20457 Hamburg. In addition to this information in accordance with Art. 13 GDPR, you will find a data protection declaration from New Work SE, Am Strandkai 1, 20457 Hamburg, when applying via the portal. The declarations complement each other.
• In addition, data that you make available to us can be stored on our IT systems on the server systems of GWH's partner companies - e-mails via Vodafone, server systems hosted by E-Shelter.
• Paper data is disposed of via FES in compliance with data protection regulations.

 

7. will your data be transferred to countries outside the European Union (so-called third countries)?

A transfer to a third country outside the EU does not take place and is not intended.

 

8 How long will your data be stored?

We store your personal data for as long as is necessary for the decision on your application. If an employment relationship between you and us is not established, we may continue to store data if this is necessary to defend against possible legal claims. As a rule, your data will be deleted within six months of the end of the application process.

 

9. what rights do you have in connection with the processing of your data?

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure.

 

9.1 Right of objection

What rights do you have in the event of data processing based on your legitimate or public interest?

Pursuant to Art. 21 (1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) GDPR (data processing in the public interest) or on Article 6 (1) (f) GDPR (data processing to protect a legitimate interest); this also applies to profiling based on this provision.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

 

9.2 Revocation of consent

You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future.

 

9.3 Right to information

You can request information about whether we have stored personal data about you. If you wish, we will tell you what data is involved, for what purposes the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have in relation to this data.

 

9.4 Further rights

In addition, you have the right to have incorrect data corrected or to have your data deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict the processing. You may also request that we provide all personal data that you have provided to us in a structured, commonly used and machine-readable format either to you or to a person or company of your choice.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

 

9.5 Exercising your rights

To exercise your rights, you can contact the controller or the data protection officer using the contact details provided. We will process your requests immediately and in accordance with the legal requirements and inform you of the measures we have taken.

 

10. is there an obligation to provide your personal data?

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the application process. This means that if you do not provide us with personal data when applying, we will not be able to carry out the application process.

 

11. changes to this information

If the purpose or the way in which we process your personal data changes significantly, we will update this information in good time and inform you of the changes in good time.