Data privacy policy

Privacy Note
We appreciate your visit on our career website and your interest in our company. We want you to feel comfortable and safe with regards to how we process your personal data. Data protection and transparency are very important to us. This privacy notice is meant to help you understand our privacy practices, including which personal data we collect, why we collect it, what we do with it, and how we protect it, as well as knowing your individual rights. This information will enable you to always be in full control of your personal data.
 
Controller legally responsible for data processing:
 
DEFACTO GmbH
Am Pestalozziring 1-2
91058 Erlangen
 
Collection and processing of personal data
When visiting our Website, our Web servers store your IP Address and your Internet service provider, from which web page you visited us, which of our web pages you call up, as well as date and duration of your visit. Personal data we need exclusively for processing your application are only stored if you provide us with those data voluntarily within your application. Your personal information and data will be collected and stored with the greatest care and integrity possible and only used purposively. We collect only those data which are necessary for an application at DEFACTO GmbH. The use of the online form and the input of your data is voluntary, but necessary for an application (Art. 13 (2) e GDPR). In any data processing we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR). This includes collecting, saving and using your personal data. We will never use your data for marketing purposes, and we will never sell, rent or leave your personal data to third parties. You agree that your data may be processed and transmitted only within the application process. You assure that your information is correct. You are also aware that incorrect information might lead to dismissal.
 
Your online application
After input and transmission of your data they are directly sent over an encrypted connection to the server of our external service provider. All data will be encrypted based on TLS-encryption. TLS encryption is also used when logging in with the provided user data after your registration.
 
Data security
Your data are hosted with a provider within the scope of data processing as defined in Art. 28 GDPR.
Both, DEFACTO GmbH and the provider have implemented technical and organizational measures to prevent your collected data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. Our security measures are improved on an ongoing basis in accordance with the development of technical standards
Application form
When filling the application form, you provide us with personal data. This includes master data, contract data, CV, qualification and photo. We will use this information only for the processing of your application. In order to protect your personal data, the transmission is coded by a common encryption method. We will delete your personal data 3 months after termination of the application process. In case you give us your consent to include your application in our applicants’ pool, the data will be deleted after one year.
 
Recipients of the data
In the course of the process, applicant data can be transmitted to the human resources department, to contact partners of the individual specialist departments and to trainers. Further recipients may be processors, processing the data collected in our behalf (webhosts, supplier of test systems, etc.).
 
Your rights
According to GDPR you have the following rights with regard to your personal data. You can find more detailed information in Art. 15 to 21 GDPR as well as in §§ 32 to 37 German Federal Data Protection Act.
You have the right to access your personal data. You may also request the rectification of inaccurate data. Under certain conditions you have the right to erasure, the right to restriction and the right to data portability. Further, you have the right to object to processing of personal data which is based on point (e), (f) of Art. 6(1), including profiling based on those provisions. You may withdraw your consent at any time and without giving reasons with effect for the future.
 
You may assert these rights directly with the controller. Therefore, informal contact is sufficient. You may send an Email or a letter.
 
DEFACTO GmbH
Personalabteilung
Am Pestalozziring 1-2
91056 Erlangen
humanresources@defacto.de
 
You also have the right to lodge a complaint with a supervisory authority if you find our processing of your personal data to be inconsistent with applicable data protection law. A list of federal Data Protection Commissioner and contact data can be found here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
 
In case of any further questions please feel free to contact our officer for data protection:
David Gabel - Email: david.gabel(at)dsgvo-support.de
 
General information concerning data protection and processing of personal data can be found at https://www.dsgvo-support.de