Your data is collected and processed as part of the recruitment process or to carry out the employment relationship.
Responsible body:
HR department
Data Protection Officer:
Omnis Consulting GmbH
Ernst Buchner
Innere Passauer Strasse 2
94315 Straubing
Telephone: +49 9421/869 9989
email: dsb@omnis-consulting.de
The required data includes in particular your master data (in particular first and last name, name additions, nationality), your contact details (in particular private address, mobile and landline number, e-mail address), other data from the employment relationship, such as time recording data. vacation periods. periods of incapacity for work. skill data, social data, bank details, social security number, pension insurance number, salary data, tax identification number, special health data and, if applicable, criminal records) as well as log data that is generated when using the IT systems.
Most of your personal data is collected directly from you. However, due to legal regulations, some of your data is also collected from other bodies, such as the tax office to request tax-relevant information, the health insurance company to provide information about periods of incapacity for work or, if applicable, from other third parties, such as a job agency or from publicly available sources (e.g. professional networks). Within our company, your personal data is only received by persons who need it to fulfill our contractual and legal obligations, such as the HR department, the accounting department, the works council or the representative body for the severely disabled.
Within our group of companies, your data is transferred to certain companies when they perform data processing tasks centrally for the members of the group (e.g. payroll, disposal of files).
Outside the company, we transfer your data to other recipients, insofar as this is necessary to fulfill our contractual and legal obligations. These include in particular the social security institutions, health insurance, pension insurance, professional pension institutions, the employment agency, the professional association, the tax authorities, accident and liability insurance, courts, banks, competent bodies in order to be able to guarantee claims from occupational pension schemes or capital benefits, third-party debtors in the event of wage and salary attachments or insolvency administrators in the event of personal bankruptcy.
Your data will not be transferred to a third country.
We process your personal data in compliance with all relevant laws, such as the GDPR, the Federal Data Protection Act (BDSG), the Works Constitution Act, the Working Hours Act, etc.
Data processing is primarily used to establish, implement and terminate the employment relationship. The relevant legal basis for this is Article 6 (1) (b) GDPR in conjunction with Section 26 (1) BDSG. In addition, collective agreements (group, general and works agreements as well as collective agreement regulations) are welcome. Art. 6 para. 1 b) in conjunction with Art. 88 para. 1 GDPR in conjunction with Section 26 para. 4 BDSG and, if applicable, your separate consents. Art. 6 para. 1 a), 7 GDPR in conjunction with Section 26 para. 2 BDSG (e.g. in the case of video recordings) can be used as a data protection permission provision.
We also process your data in order to be able to fulfill our legal obligations as an employer, in particular in the area of tax and social security law. This is done on the basis of Art. 6 para. 1 c) GDPR in conjunction with Section 26 BDSG.
Where necessary, we also process your data on the basis of Article 6 (1) (f) GDPR in order to protect the legitimate interests of us or of third parties (e.g. authorities). This applies in particular when investigating criminal offences (legal basis Section 26 (1) (2) BDSG) or within the Group for purposes of corporate management, internal communication and other administrative purposes.
As far as special categories of personal data are welcome. Article 9 (1) of the GDPR is processed, this serves to exercise rights or to fulfill legal obligations under employment law, social security law and social protection (e.g. provision of health data to health insurance, recording of severe disability due to additional leave and calculation of the disability tax). This is done on the basis of Article 9 (2) (b) GDPR in conjunction with Section 26 (3) BDSG.
We are also happy to process health data to assess your ability to work. Art. 9 para. 2 h) in conjunction with § 22 para. 1 b) BDSG.
In addition, the processing of special categories of personal data may be based on consent in accordance with Article 9 (2) a) GDPR in conjunction with Section 26 (2) BDSG (e.g. occupational health management).
Should we wish to process your personal data for a purpose not mentioned above, we will inform you beforehand.
Other purposes of data processing: Data processing for statistical purposes or data processing of activity-related service data.
The storage period of the collected data is limited to the employment relationship. We delete your personal data as soon as it is no longer required for the purposes mentioned above. After termination of the employment relationship, the data is stored and then deleted in accordance with the legal or regulatory retention periods, which result, among other things, from the Commercial Code and the Tax Code. The storage periods are then up to ten years. In addition, personal data may be stored for the period of the legal limitation period of three or up to 30 years if claims can be made against us.
Rights of the person concerned
a. Right to information
You have the right to information and the right to receive an electronic copy of your personal data.
b. Right to rectification You have the right to correct your personal data if this data is incorrect. This right includes the right to complete your personal data if it is incomplete.
c. Right to delete (right to be forgotten) You have the right to delete your personal data, in particular if this data is no longer necessary to fulfill the purpose for which the data was collected. This right also exists if the underlying legal basis was ineffective from the outset or the effectiveness ceases to apply later.
d. Right to restrict processing
You have the right to restrict the processing of your personal data if you dispute the accuracy of this data, - you refuse to delete the personal data and instead request the restriction of use, - the person responsible no longer needs the personal data for the underlying purposes, but you need this data to assert, exercise or defend legal claims, - you are happy to process the personal data. have objected to Article 21 (1) GDPR and it is not clear or not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.
e. Right to data portability
You have the right to receive the personal data, provided that you have provided it to us, in a structured, commonly used and machine-readable format. If this data is processed on the basis of consent or for contract processing, you also have the right to have us transfer this data to a third party, insofar as this is technically possible.
f. Right to object
You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This right exists if data processing is carried out on the basis of Article 6 paragraph 1 lit. f GDPR (data processing to protect legitimate interests).
g. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the competent data protection supervisory authority:
Ayrian State Office for Data Protection Supervision
Promenade 27
91522 Ansbach
Telephone.: 0981-53 1300
Fax: 0981-53 98 1300
email: poststelle@lda.bayern.de
The provision of personal data is necessary for the establishment, implementation and termination of the employment relationship and represents a secondary contractual obligation of the employee. If we do not receive the necessary data, it is not possible to carry out the employment relationship with you.