Data protection notice
Data protection information in accordance with Art. 13 GDPR with regard to the application procedure
This data protection information is to inform you about the processing of your personally identifiable information within the group member companies, departments, and groups at SC MAHLE Componente de Motor SRL and about your rights under data protection law (known as the rights of the data subject).
According to Art. 4 (1) of the EU General Data Protection Regulation (GDPR), your personally identifiable information includes any information relating to you as an identified or identifiable natural person, in particular by reference to an identifier such as a name or an organizational or personal identification number by means of which you can be identified as a natural person.
1. Controller for the processing of your personal data
According to Art. 4 No. 7 GDPR, the competent and responsible Controller for processing your personal data is, unless otherwise agreed in a contract, the
SC MAHLE Componente de Motor SRL
Calea Aradului, DN 69, km 6.6
Romania
(“MAHLE”)
2. Purpose of data processing
MAHLE processes (e.g. collecting, recording, ordering, storing, adapting, using, transmitting, linking, deleting, restricting; "processing") your personal data exclusively in the context of the application process, in particular to check your suitability for the position applied for, to invite you to a job interview and, if you are to be employed, to prepare your employment with MAHLE ("Purpose").
Processing of your personal data for purposes other than those described above will only be carried out to the extent permitted by law or if you have consented to the changed purpose of the data processing. In the event of further processing for purposes other than those for which the data were originally collected, we will inform you about these other purposes before processing and provide you with all further relevant information.
3. Information about personal data
MAHLE collects and processes information as personal data both in paper format and in digital form. This personal data may include, in addition to the personal data necessary for the performance of your employment relationship:
- Your master data (surname, first name, name affixes, date of birth, title)
- Contact information (address, phone number, e-mail address)
- Education and qualification data (curriculum vitae, certificates)
- All other data you provide us with during the application process
4. Legal basis for processing your personally identifiable information
The legal basis for processing your personally identifiable information for purposes of the employment relationship (i.e., the decision to establish, initiate, execute, and terminate) is Art. 6 I lit. b GDPR.
5. Your data protection rights
Your data protection rights (rights of the data subject) are regulated in Chapter III (Arts. 12 ff.) GDPR. Under these provisions, you have the right to be informed about the personally identifiable information stored about you, about the purposes of processing, about any transmission to other locations, and about the duration of storage.
You can also receive excerpts or copies to exercise your right of access. If data is incorrect or no longer necessary for the purposes for which it was collected, you can demand the correction, deletion, or restriction of the processing of your data. If provided in the processing operation, you can also access and possibly correct your data yourself. In addition, you have the right to obtain the data provided by you in a structured, conventional, and machine-readable format.
If your particular personal situation should give rise to reasons against processing your personally identifiable information, you can object to the processing, as long as the processing is based on a justified interest. If you object, we will process your personally identifiable information only if there are particular interests that outweigh your interests, rights, and freedoms or if the processing serves to establish, exercise, or defend legal claims. For questions about your rights and to exercise your rights, please contact MAHLE.
6. Transfer of data to third parties / recipients of the data
Your personally identifiable information is transmitted or published by MAHLE only to the extent specified by a legal standard (e.g., to tax and social insurance authorities) or to fulfill the rights and obligations of the labor contract concluded with you (e.g., the employee’s banking data) or a justified interest on the part in the above sense of an external party, and to the extent that the transmission is permissible under the data protection regulations (e.g., health insurance, pension scheme program, evaluation in the course of regulatory offences or criminal cases).
Your personally identifiable information can also be disclosed by MAHLE to authorized persons and suppliers who provide a service to us, including insurers and consultants, for justified reasons, to the extent that the company is authorized in individual cases under the data protection regulations. If your consent or special reporting should be required for this purpose, then we will obtain your consent or inform you thereof in advance in a timely manner. Your personally identifiable information can also be transmitted to service providers for performing data processing tasks, for example, for performing automated processing of personally identifiable information or for wage and payroll accounting. We will observe the regulations under data protection law.
Within the MAHLE Group, your data will be transmitted to certain companies if these companies perform data processing tasks centrally for affiliated companies. The standard contract clauses apply here.
Particular tasks of personnel administration and management are performed as a central function. This includes, in particular, central personnel administration, personnel planning, personnel development, training, central compliance measures, and central HR controlling. In addition, specially designated locations have restricted access rights to your data. Your data is transmitted or disclosed only to the extent necessary and in compliance with the applicable data protection regulations. If data is transmitted to third countries, or disclosure occurs at locations in third countries, then the additional prerequisites for ensuring an appropriate level of data protection will be met (cf. Standard contract clauses).
7. Duration of storage
Personally identifiable information is stored only as long as knowledge of this data is necessary for the purposes of the employment relationship or the purposes for which it was collected, or if there are legal or contractual regulations for verification and storage.
Different verification and storage requirements are specified in regulations on tax law, labor law, and social insurance law, ranging up to 75 years for documents and receipts relevant under tax law. After you have left our company, we will continue to store your personally identifiable information for a period of time in which we expect to encounter claims arising from the employment relationship. To maintain evidence, the legal limitation period can be up to 75 years, whereby the regular limitation period varies from country to country.
8. Necessity of providing personal data
The provision of your personal data within the scope of the application procedure is neither contractually nor legally required, so you are not obliged to provide information about your person. You should note, however, that we require corresponding personal data from you in order to decide on an application or to conclude a contract of employment. If you do not provide us with personal information, we will not be able to decide to enter an employment contract as part of the process.
We recommend that you only provide personal data that is necessary for the application process.
Complaints about the processing of your personally identifiable information
If you have any concerns or questions about the processing of your personally identifiable information, you can contact your responsible Human Resources department. You can also, however, reach the (group) data protection officer or the responsible supervisory authority for data protection using the contact data listed below.
9. Contact
MAHLE International GmbH
Corporate Data Privacy
Pragstr. 26 – 46
70376 Stuttgart
Germany
Phone: +49 711 501 0
Email: data-privacy-germany@mahle.com
Contact data for the (Group) Data Protection Officer:
MAHLE GmbH
Dr. Alexander Deicke
Kaffeeberg 11
71634 Ludwigsburg
Germany
Phone: +49 7141 9475320
Email: kdsb@mahle.com
Address of the responsible supervisory authority for data protection:
Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal
Adresa: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, cod postal 010336, Bucuresti, Romania