Skip to main content

Processing of (personal) data by the entity in charge of the online application process

FAIR PROCESSING NOTICE

This fair processing notice ("Notice") sets out how NACHI EUROPE GmbH ("we", "us" and "our") will process as a data controller the personal data of the employees of our corporate customers, suppliers and other business partners and the visitors of our website and the measures and processes we have put in place to ensure its adequate protection. Providing such information is one of the requirements of the General Data Protection Regulation 2016/679 ("GDPR").

This notice does not form any contractual relationship between you and us, and we may amend it from time to time.

§ 1 LAWFUL PROCESSING

  1. We will only process your personal data:

    1. where you have given your consent (you may withdraw your consent at any time, by making a request using the contact details set out below);
    2. where the processing is necessary to provide our products or services to you/your employer;
    3. where the processing is necessary to respond to a request from you/your employer;
    4. where the processing is necessary to maintain our relationship with you/your employer;
    5. where the processing is necessary for compliance with our legal and regulatory obligations

§ 2 WHAT PERSONAL DATA WE COLLECT ABOUT YOU

  1. We process the following types of personal data about you:

    1. Your name, email address and other contact details;
    2. Your role, position and/or job title within your employment
    3. Details of your preferences for types of marketing events or materials;
    4. Details of your access to our premises, systems, websites; and
    5. Your messages, feedback or contributions to surveys and questionnaires.

  2. It may be mandatory for you to provide us with your personal data, to enable us to manage our business and operations, to maintain our relationship with you/your employer, to provide our products or services to you/your employer or to comply with our legal and regulatory obligations. If you fail to provide your personal data, we might be unable to maintain our relationship with you/your employer or to provide our products or services to you/your employer.

  3. We make every effort to maintain the accuracy and completeness of your personal data which we store and to ensure all of your personal data is up to date. However, you can assist us with this considerably by promptly contacting us if there are any changes to your personal data or if you become aware that we have inaccurate personal data relating to you. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

§ 3 HOW WE COLLECT PERSONAL DATA.

  1. We usually collect your personal data from the information you/your employer submits during the course of your/your employer's relationship with us. This will typically be through you/your employer sending us emails and other correspondence, business cards, the forms and documents used when you/your employer signs up to our marketing or market data news lists, when you are named as an authorized person to trade on behalf of your employer, the sign up information you/your employer uses to access any of our products or services either on your own behalf or on behalf of your employer.

    We may also collect your personal data from other sources such as our group companies, fraud prevention agencies, credit reference agencies and the records of governmental agencies.

§ 4 HOW WE USE PERSONAL DATA

  1. We will process your personal data in connection with the management of our relationship with you/your employer and the provision of our products and services to you/your employer for the following purposes:

    1. to provide you/your employer with requested products or services;
    2. to respond to your/your employer's messages or posts to us;
    3. to provide you/your employer with promotional and marketing materials about our products and services that we think you/your employer may be interested;
    4. to manage, develop and improve our product range, services, stores, information technology systems and websites;
    5. for monitoring and assessing compliance with law and our policies and standards;
    6. to comply with our legal and regulatory obligations and requests anywhere in the world, including reporting to and/or being audited by national and international regulatory bodies;
    7. to carry out money laundering, financial and credit checks and for fraud and crime prevention and detection purposes;
    8. for administrative purposes in relation to the security of and access to our systems, premises, platforms and websites and applications;
    9. to comply with court orders and exercise and/or defend our legal rights;
    10. for any other legitimate business purpose; and
    11. as otherwise permitted or required by any applicable law or regulation.

§ 5 INTERNATIONAL TRANSFERS OF PERSONAL DATA

  1. Your personal data may be transferred to (including accessed in or stored in) a country or territory outside the European Economic Area ("EEA"), including to countries whose laws may not offer the same level of protection of personal data as are enjoyed within the EEA. In particular, we may share your personal data with NACHI-FUJIKOSHI CORP. based in Japan. We will ensure that any such international transfers are made subject to appropriate or suitable safeguards as required by the GDPR. You can obtain copies of the relevant safeguard documents by making a request using the contact details set out below.

§ 6 WHEN WE MAY DISCLOSE YOUR PERSONAL DATA

  1. We do not and will not sell, rent out or trade your personal data. We will only disclose your personal data to the following recipients:

    1. to our group companies;
    2. to companies approved or designated by you;
    3. to third parties who process your personal data on our behalf (such as our systems providers including cloud providers);
    4. to third parties who process your personal data on their own behalf but through providing you or your employer with a service on our behalf (such as our suppliers);
    5. to companies providing services for money laundering checks, credit risk reduction and other fraud and crime prevention purposes and companies providing similar services, including financial institutions, credit reference agencies and regulatory bodies with whom such information is shared;
    6. to any third party to whom we assign or novate any of our rights or obligations;
    7. to any prospective buyer in the event we sell any part of our business or assets; and
    8. to any government, regulatory agency, enforcement or exchange body or court where we are required to do so by applicable law or regulation or at their request.

§ 7 HOW WE PROTECT YOUR PERSONAL DATA

  1. We are committed to safeguarding and protecting your personal data and will implement and maintain appropriate technical and organizational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorized destruction, loss, alteration, disclosure or access.

§ 8 YOUR RIGHTS IN RELATION TO THE PERSONAL DATA WE COLLECT

  1. If you wish to:

    1. update, modify, or delete your personal data, or obtain a copy of your personal data that we hold; or
    2. restrict or stop us from using any of your personal data which we hold,

      you can request this by contacting us using the contact details set out below.
  2. In any of the situations listed above, we may request that you prove your identity by providing us with a copy of a valid means of identification in order for us to comply with our security obligations and to prevent unauthorised disclosure of data.

§ 9 HOW LONG WE WILL HOLD YOUR PERSONAL DATA FOR

  1. We will only retain your personal data as long as necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements.

§ 10 USE OF COOKIES

  1. For information about how we use cookies, please read our cookie policy at [http://www.nachi.de].

§ 11 HOW WE UPDATE OR CHANGE THIS FAIR PROCESSING NOTICE

  1. We may change or update parts of this Notice in order to maintain our compliance with applicable law and regulation or following an update to our internal practices. We will do this by updating this Notice. You will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this Notice so you are fully aware of any changes or updates.

§ 12 HOW YOU CAN CONTACT US AND OUR DATA PROTECTION OFFICER

  1. Responsible for the processing of personal data on and through this website is:

    NACHI EUROPE GmbH
    Bischofstraße 99
    47809 Krefeld
    Telephone: +49 2151 8932 0
    E-mail: info@nachi.de

    Our data protection officer can also be contacted per post at the above address as well as by telephone on +49 160 4125097 or via e-mail at lasser@lionos.com.

§ 13 HOW TO LODGE A COMPLAINT TO THE REGULATOR

  1. You are entitled to lodge a complaint with our data protection regulator if you consider that we have breached your data protection rights. The data protection regulator in Nordrhein-Westfalen Germany is Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, which can be contacted at Postfach 20 04 44 40102 Düsseldorf. The data protection regulator in Baden-Württemberg Germany is Der Landesbeauftragte für den Datenschutz Baden-Württemberg, which can be contacted at Postfach 10 29 32 70025 Stuttgart. The data protection regulator in Czech Republic is Úřad pro ochranu osobních údajů, which can be contacted at Pplk. Sochora 27, 170 00 Praha 7.

    Date updated: November 2022

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.