Data protection information for applicants
Information in accordance with the General Data Protection Regulation (Art. 13 EU GDPR)
Dear applicant,
Thank you for your interest in our company. In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data transmitted by you as part of the application process and any personal data collected by us and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.
1. Data controller within the meaning of data protection law
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: info@isafe-mobile.com
URL: https://www.isafe-mobile.com/
2. Contact details of our data protection officer
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: privacy@isafe-mobile.com
URL: https://www.isafe-mobile.com/
3. Purposes and legal bases of processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us.
The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG for the purposes of the employment relationship, if this is necessary for the decision on the establishment of an employment relationship.
Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 [1] lit. c GDPR) or for the defence or assertion of legal claims. The legal basis for this is Art. 6 (1) lit. f GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is given on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. Any consent given can be revoked at any time with effect for the future (see Clause 9 of this data protection information).
If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees’ interests arising from a law or a collective agreement, a works or service agreement (collective agreement).
4. Categories of personal data
We only process data that is related to your application. This may include general personal data (name, address, contact details, etc.), details of your professional qualifications and school education, details of further professional training and any other data that you provide to us in connection with your application.
5. Recipient of the data
We only pass on your personal data within our company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if we have your consent.
6. Transfer to a third country
A transfer to a third country is not intended.
7. Duration of data storage
We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.
In the event that you have consented to your personal data being stored for a longer period of time, we will store it in accordance with your declaration of consent.
If the application procedure is followed by an employment, training or internship relationship, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file.
8. Your rights
Every data subject has the right to the disclosure of information pertaining to them under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that any cancellation is only effective for the future. This does not affect processing that took place before the cancellation. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements (see Clause 8 of this data protection information).
Right of objection
If the processing of your personal data is carried out in accordance with Article 6 (1) lit. f GDPR, in order to protect legitimate interests, you have the right to object to the processing of this data at any time for reasons arising from your particular situation, in accordance with Article 21
GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided in
Clause 1.
9. Necessity of the provision of personal data
The provision of your personal data as part of the application process is voluntary.
However, we can only make a decision to establish an employment relationship with you if you provide the personal data that is necessary to carry out the application.
10. Automated decision making
The decision on your application is not based exclusively on automated processing. There is, therefore, no automated decision-making in individual cases within the meaning of Art. 22 GDPR.
We process personal data that we receive from you by post or e-mail or that you send to us when you contact us or submit your application.
11. Subject to change
For legal reasons, adjustments to our data protection guideline may become necessary. We reserve the right to make corresponding changes at any time.
12. Please note:
Applications by e-mail are normally transmitted in unencrypted form!
You can encrypt your attachments yourself by using packing programmes. You can then give us the password by telephone.
Please do not send the password within the same e-mail containing the attachments.
Status: 16.1.2025
Data protection information for customers and suppliers
Information in accordance with the General Data Protection Regulation (Art. 13 EU GDPR)
Dear customers and suppliers,
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we would like to inform you about the processing of your personal data by i.safe MOBILE GmbH and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services. In order to ensure that you are fully informed about the processing of your personal data in the context of the fulfilment of a contract or the implementation of pre-contractual measures, please take note of the following information.
1. Data controller within the meaning of data protection law
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: info@isafe-mobile.com
URL: https://www.isafe-mobile.com/
2. Contact details of our data protection officer
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: privacy@isafe-mobile.com
URL: https://www.isafe-mobile.com/
3. Purposes and legal bases of processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, execution and fulfilment of a contract and for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or execution of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 (1) lit. b GDPR.
If you give us your express consent to process personal data for specific purposes (e.g. disclosure to third parties, evaluation for marketing purposes or advertising by e-mail), the lawfulness of this processing is given on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. Any consent given can be revoked at any time with effect for the future (see Clause 9 of this data protection information).
If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfil legal obligations in accordance with Art. 6 (1) lit. c GDPR.
In addition, processing may be carried out to protect our legitimate interests or those of third parties and for the defence and assertion of legal claims in accordance with Art. 6 (1) lit. f GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.
4. Categories of personal data
As part of the processes, only the data required to fulfil the stated purposes is processed. The data processed by us is exclusively customer or supplier data.
This includes: name, address, telephone, fax and e-mail address, as well as any other data that you provide to us in the context of establishing the contract.
The data collected is used to fulfil the contract; no contract can be concluded or order fulfilled without this data.
5. Recipient of the data
We only pass on your personal data within the company to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.
Your personal data is processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of ERP systems (customer order management)
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the fulfilment of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be, for example:
- External tax consultants
- Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) if there is a legal or official obligation,
- Recipients to whom the transfer is directly necessary for the establishment or fulfilment of the contract, such as financial service providers, transport service providers.
6. Transfer to a third country
As a matter of principle, we endeavour to process your personal data only within the EU/EEA. If a transfer of personal data to third countries outside the EU/EEA (e.g. to the USA) is necessary (e.g. for contract fulfilment) or is carried out by our processors, further appropriate guarantees are required to ensure a level of data protection that corresponds to that of the GDPR. To ensure this, we have ensured appropriate safeguards in accordance with Art. 46 GDPR (e.g. standard contractual clauses in accordance with Art. 46 [2] lit. c GDPR) and, if necessary, additional safeguards. These oblige the recipient of the data in countries outside the EU to process the data in accordance with the level of protection in Europe.
7. Duration of data storage
Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfilment of contractual purposes. This also includes the initiation and execution of a contract. In addition, we are subject to various retention and documentation obligations arising from the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Money Laundering Act (GwG), among others. The retention and documentation periods prescribed there are two to ten years. Finally, the storage period also depends on the statutory limitation periods, which, for example, according to Sections 195 et seq. German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
8. Your rights
Every data subject has the right to the disclosure of information pertaining to them under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that any cancellation is only effective for the future. This does not affect processing that took place before the cancellation. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements (see Clause 8 of this data protection information).
Right of objection
If the processing of your personal data is carried out in accordance with Article 6 (1) lit. f GDPR, in order to protect legitimate interests, you have the right to object to the processing of this data at any time for reasons arising from your particular situation, in accordance with Article 21
GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided.
9. Necessity of the provision of personal data
The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.
10. Automated decision making
In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to establish, fulfil or implement the business relationship or for pre-contractual measures.
If we use these procedures in individual cases, we will inform you of this separately or obtain your consent if this is required by law.
11. Subject to change
For legal reasons, adjustments to our data protection guideline may become necessary. We reserve the right to make corresponding changes at any time.
Status: 16.1.2025
Data protection information for employees
Information in accordance with the General Data Protection Regulation (Art. 13 EU GDPR)
Dear employees,
Thank you for your interest. In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you how we use your personal data and what your rights are in this regard. Which data is processed in detail and how it is used depends largely on the specific employment relationship.
1. Data controller within the meaning of data protection law
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: info@isafe-mobile.com
URL: https://www.isafe-mobile.com/
2. Contact details of our data protection officer
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: privacy@isafe-mobile.com
URL: https://www.isafe-mobile.com/
3. Purposes and legal bases of processing
First and foremost, the processing of personal data serves the purposes of the employment relationship if this is necessary for the decision on the establishment of an employment relationship or, after the establishment of the employment relationship, for its implementation or termination. We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws (e.g. BetrVG, ArbZG, etc.), insofar as these are necessary for the employment relationship. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG as amended and, if applicable, Art. 6 (1) lit. b GDPR for the initiation or execution of contractual relationships.
Due to legal regulations, particularly in the area of tax and social security law, we as an employer are subject to various control and reporting obligations. In this case, we process your data in order to fulfil our legal obligations. This is done on the basis of Art. 6 (1) lit. c GDPR in conjunction with Section 26 BDSG.
In individual cases, your consent may also be obtained in accordance with Art. 6 (1) lit. a GDPR for the processing or transmission of your data. Your consent is voluntary in these cases and can be revoked by you at any time in the future. You will not suffer any disadvantages if you do not give your consent or if you withdraw your consent at a later date.
If special categories of personal data are processed in accordance with Art. 9 (1) GDPR, this serves the exercise of rights or the fulfilment of legal obligations under labour law, social security law and social protection law, such as providing health data to the health insurance company, recording severe disability due to additional leave and determining the compensation levy for the non-employment of the severely handicapped under German law (the so-called “Schwerbehindertenabgabe”). The processing is carried out on the basis of Art. 9 (2) lit. b GDPR in conjunction with Section 26 (3) BDSG. In addition, the processing of health data may be necessary for the assessment of your ability to work in accordance with Art. 9 (2) lit. h GDPR in conjunction with Section 22 (1) b BDSG.
Furthermore, we may process your personal data if this is necessary for the defence of legal claims asserted against us arising from the employment relationship. The legal basis for this is Art. 6 (1) lit. f GDPR. Our legitimate interest is, for example, a burden of proof in the context of legal proceedings.
4. Categories of personal data
We collect personal data from you in order to establish, implement and terminate your employment relationship. Personal data includes all information that relates or can be related to a specific person, in particular, by means of assignment to an identifier such as a name, with which the person can be identified (Art. 4 No. 1 GDPR).
The categories of personal data processed include, in particular:
- Master data (such as first name, last name, name affixes and titles, date of birth, gender, nationality, marital status, personnel number),
- Contact details (e.g. private address, [mobile] telephone number, e-mail address, fax number),
- Data from the employment relationship, e.g. personnel questionnaires, social data, health insurance number and the name of the health insurance company, bank details, social security number, pension insurance number, salary data, tax status information and tax identification number, place of employment or workplace, time tracking data, periods of absence and vacation, business trips, periods of incapacity to work, training and professional experience, criminal record, application documents including certificates and photos, as well as employment documents (such as job title, functions, work history, working hours, remuneration, performance information, disciplinary and complaint data, severe disability, pregnancy including notification of supervisory authorities, pension claims, terminations and notice periods.
- Performance appraisals, salary adjustments, short CVs, targets, information on further training, training courses and qualifications, certificates if applicable.
- This may also include special categories of personal data such as health data, e.g. health conditions, health and illness data, sick leave certificates.
As a rule, your personal data is collected directly from you as part of the recruitment process or during the employment relationship. In certain constellations, your personal data will also be collected by other organisations due to legal regulations. This includes, in particular, ad hoc requests for tax-related information from the relevant tax office and information on periods of incapacity for work from the relevant health insurance fund.
5. Recipient of the data
Within our company, only those persons receive your personal data who need it to fulfil our contractual and legal obligations (for example, the HR department and the respective specialist department).
In addition, we use various service providers (such as lawyers, insurance companies, hotel and transport service providers) to fulfil our contractual and legal obligations. Compliance with data protection regulations in the case of the processing of personal data in the contractual relationship is ensured by corresponding contracts with the service providers in accordance with Art. 28 GDPR.
Your personal data may only be transferred to other recipients outside the company if this is necessary to fulfil contractual and legal obligations as an employer. These can be, for example
- Authorities in the event of a legal or official obligation (e.g. pension insurance institutions, professional pension schemes, social insurance institutions, employers’ liability insurance association, tax authorities, courts)
- Employee’s bank (SEPA payment medium)
- Acceptance centres of the health insurance companies
- Positions in order to be able to guarantee entitlements from the company pension scheme
- Positions in order to be able to pay out capital-forming benefits
- Third party debtor in the event of wage and salary garnishment
- Insolvency administrator in the event of personal insolvency
6. Transfer to a third country
A transfer to a third country is not intended.
7. Duration of data storage
We only store your personal data for as long as knowledge of the data is required for the purposes of the employment relationship or the purposes for which it was collected, or for as long as statutory or contractual retention requirements exist.
Different statutory retention periods result from tax, labour and social security regulations. After you leave our company, we will retain your personnel file for as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and retain records, which are regulated in the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The storage periods are then up to ten years. In addition, personal data may be retained for the period during which claims can be asserted against us as an employer (statutory limitation period of three or up to thirty years).
8. Your rights
Every data subject has the right to the disclosure of information pertaining to them under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that any cancellation is only effective for the future. This does not affect processing that took place before the cancellation. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements (see Clause 8 of this data protection information).
Right of objection
If the processing of your personal data is carried out in accordance with Article 6 (1) lit. f GDPR, in order to protect legitimate interests, you have the right to object to the processing of this data at any time for reasons arising from your particular situation, in accordance with Article 21
GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided.
9. Necessity of the provision of personal data
As part of your employment relationship, you only need to provide the personal data that is required for the commencement and performance of the employment relationship or that we are legally obliged to collect.
Without this data, we will not be able to fulfil the employment contract with you.
10. Automated decision making
An automated decision (including profiling) does not take place within the meaning of Art. 22 GDPR.
11. Subject to change
For legal reasons, adjustments to our data protection guideline may become necessary. We reserve the right to make corresponding changes at any time.
Status: 16.1.2025
Data protection information for the use of Microsoft Office 365 applications
Information in accordance with the General Data Protection Regulation (Art. 13 EU GDPR)
Dear users,
This information applies if you use Microsoft 365 applications together with us. This applies, in particular, to the use of a Microsoft Office application such as Teams, SharePoint, Stream, Forms (hereinafter M365) or similar, for which you will usually receive an invitation from us. M365 is a productivity, collaboration and exchange platform for individual users, teams, communities and networks that can be used across organisational units. When you use M365, personal data about you is processed. Please note that this data protection notice only informs you about the processing of your personal data by us if you use Microsoft applications together with us.
If you require information about the processing by Microsoft, we ask you to view the corresponding declaration under the following link: https://www.microsoft.com/en-us/privacy/privacystatement.
1. Data controller within the meaning of data protection law
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: info@isafe-mobile.com
URL: https://www.isafe-mobile.com/
2. Contact details of our data protection officer
i.safe MOBILE GmbH
i_Park Tauberfranken 10
D-97922 Lauda-Koenigshofen
Phone: +49 9343 60148-0
E-mail: privacy@isafe-mobile.com
URL: https://www.isafe-mobile.com/
3. Purposes and legal bases of processing
Where necessary, we process your personal data exclusively to ensure an effective customer or supplier relationship and an effective employment relationship with you. Your data is processed in order to be able to use the tool in question for the purpose of communication and collaboration. Furthermore, your data may be processed for information security purposes and to ensure the functional security and stability of the IT systems.
The legal basis depends on the reason for your cooperation with us. Below you will find a description of the legal bases on which we process your personal data when you use M365 applications. Please note that this information is only examples and not a complete or exhaustive list of the possible legal bases for data processing.
Consent (Art. 6 [1] lit. a GDPR)
We only process certain personal data with your prior, explicit and free consent, e.g. if you take part in a survey via Microsoft Forms. The recording of team meetings for use outside the livestream is also based exclusively on your consent. Consent is given by accepting the invitation to the meeting and subsequently attending the meeting. There is neither a contractual nor a legal obligation to provide the data. Consent is voluntary and can be revoked in whole or in part at any time with effect for the future. The lawfulness of the processing remains unaffected until the consent is revoked.
Fulfilment of a contract with you (Art. 6 [1] lit. b GDPR)
Your data will be processed on the basis of Art. 6 [1] lit. b) GDPR if the use is based on a contract.
Fulfilment of a legal obligation (Art. 6 [1] lit. c GDPR)
We are subject to a number of legal requirements and may process your personal data to fulfil our legal obligations. For example, we are legally obliged to provide information to certain public bodies (including law enforcement authorities) on request.
Protection of our legitimate interests or those of a third party (Art. 6 [1] lit. f GDPR)
We process your personal data to protect our legitimate interests or the interests of third parties on the basis of Art. 6 (1) lit. f) GDPR. However, this will only take place if your interests as the data subject do not take precedence over our interests in individual cases. Legitimate interests pursued in the use of M365 are: effective realisation of meetings, optimisation of business processes, protection of the vital interests of our employees and thus the fulfilment of our duty of care as an employer by reducing the number of face-to-face meetings during the coronavirus pandemic.
4. Categories of personal data
Various types of data are processed when using M365 applications. The scope of this data depends, among other things, on which application is used and what data you provide. Certain information is already processed automatically as soon as you use M365.
The following personal data may be subject to processing:
- Identification data (e.g. names, addresses, e-mail, telephone numbers, profile picture [optional], user name).
- Content data (e.g. text input, audio data, videos, documents)
- Usage data (e.g. websites visited, time of access, date, type of access, information on the data/files/documents accessed and all activities in connection with their use, such as creating, changing, deleting a document, setting up a team [and channels in teams], making notes in the notebook, starting a chat, replying in the chat)
- Meta/communication data (e.g. IP addresses, device/hardware information, location data if authorised by the user, live transmission of sound and images)
5. Categories of recipients of personal data and transfer to EU/EEA third countries
We are dependent on Microsoft for the use of the M365 applications. In accordance with the legal obligation, we have entered into contractual agreements with Microsoft as the processor for the transfer of data. The processing of personal data by Microsoft generally takes place on servers in the EU. However, access from third countries such as the USA cannot be ruled out. An adequate level of data protection is ensured by an adequacy decision of the EU Commission, which is available for the USA here. Service providers from the USA are generally certified under the EU-U.S. Data Privacy Framework. Further information can be found here. Microsoft has also implemented so-called standard contractual clauses in accordance with Art. 46 GDPR. Further information can be found here.
The extent to which Microsoft processes personal data outside the EU or the EEA as its own data controller can be found in Microsoft’s data protection information above.
6. Duration of data storage
We only store your personal data for as long as knowledge of the data is required for the purposes of the employment relationship or the purposes for which it was collected, or for as long as statutory or contractual retention requirements exist.
Different statutory retention periods result from tax, labour and social security regulations. After you leave our company, we will retain your personnel file for as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and retain records, which are regulated in the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The storage periods are then up to ten years. In addition, personal data may be retained for the period during which claims can be asserted against us as an employer (statutory limitation period of three or up to thirty years).
7. Your rights
Every data subject has the right to the disclosure of information pertaining to them under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that any cancellation is only effective for the future. This does not affect processing that took place before the cancellation. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements (see Clause 8 of this data protection information).
Right of objection
If the processing of your personal data is carried out in accordance with Article 6 (1) lit. f GDPR, in order to protect legitimate interests, you have the right to object to the processing of this data at any time for reasons arising from your particular situation, in accordance with Article 21
GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided.
8. Necessity of the provision of personal data
As part of the M365 applications, you must provide the personal data required to use the M365 applications (in particular, e-mail address, name, address).
Without this data, we cannot provide the use of the M365 applications.
9. Automated decision making
An automated decision (including profiling) does not take place within the meaning of Art. 22 GDPR.
10. Subject to change
For legal reasons, adjustments to our data protection guideline may become necessary. We reserve the right to make corresponding changes at any time.
Status: 16.1.2025