Data protection Coveto
1. Data Controller
The data controller at KASTO Maschinenbau GmbH & Co. KG is:
KASTO Maschinenbau GmbH & Co. KG
Industriestraße 14
77855 Achern-Gamshurst
Tel. +49 (0) 78 41 / 61 - 0
E-Mail: kasto(at)kasto.com
Web: www.kasto.com
2. Data Protection Officer
The Data Protection Officer for KASTO Maschinenbau GmbH & Co. KG is:
DataCo GmbH
Kivanc Semen
Sandstraße 33
803354 München
Behoerdenmeldung(at)dataguard.de
3. Purpose and Legal Basis for the Storage and Processing of Personal Data
We collect and process an applicant’s personal data within the framework of the application process for the purpose of establishing an employment relationship. The related processing and use of the data is based on Art. 88(1) DS-GVO in conjunction with § 26 BDSG.
If, during the application process, the applicant is asked to give voluntary consent to forward their data to our partner company KEURO GmbH & Co. KG (and vice versa: KEURO to KASTO) because the applicant’s profile matches a position advertised there, this is carried out on the legal basis of Art. 6(1)(a) in conjunction with Art. 88(1) DS-GVO.
If, following the conclusion of the internal application process, the applicant’s personal data is required due to a legal dispute, we refer to the legitimate interests under Art. 6(1)(f) DS-GVO to assert or defend our rights.
3.1 Categories of Personal Data
The following categories of personal data of the applicant are generally processed and stored within our application process:
- Master data
- Contact details
- Application documents
- Cover letters
- CVs
- Employment, school, and university certificates
- Additional data provided by the applicant
- Comments, records, assessments, and evaluations created during the application process
Furthermore, the course of the application process, the current status, subsequent evaluations, and the postal and digital correspondence with the applicant are stored.
4. Recipients of Personal Data
Within the framework of our application process, your personal data is only shared with persons directly involved in achieving the purpose (see above). This includes the relevant department heads, managing directors, HR staff, personnel management, and employees responsible for handling the application, as well as the works council (after successful completion of the application process and start of employment, in accordance with § 99(1) Sentence 1 BetrVG).
We use the application management tool of coveto ATS GmbH to conduct the application process.
We have concluded the necessary agreements with coveto ATS GmbH. The applicant can view coveto ATS GmbH’s privacy policy at coveto.de/datenschutz.
Sharing your data with other companies, e.g., our partner company Eusan GmbH (and vice versa), only occurs with the applicant’s consent.
5. Storage of Personal Data
The data provided by the applicant will be stored within the company until the application process has concluded and the need for documentation in the event of a discrimination claim under the AGG can be excluded. After a maximum of six months, the data provided by the applicant will be automatically deleted from our system.
If employment is established following the application process, the applicant data will be forwarded to the necessary persons (e.g., HR department and works council) in compliance with legal requirements to commence employment (contract conclusion).
If the applicant has agreed to be placed on hold (added to the applicant pool), their data will be stored until the applicant withdraws consent. Thereafter, data will be deleted immediately. At the latest, deletion occurs eighteen months after a decision in the original application process.
6. Data Subject Rights
The applicant may exercise their rights under Articles 15 to 20 DS-GVO at any time, including the right to access, rectify, erase, restrict processing, and data portability of their personal data.
The applicant may also lodge a complaint with the above-mentioned Data Protection Officer or the relevant supervisory authority at any time (Art. 77 DS-GVO).
Supervisory authority responsible for KASTO Maschinenbau GmbH & Co. KG:
Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg
Königstr. 10a
70173 Stuttgart Postfach 10 29 32
70025 Stuttgart
Telefon: 0711 615541-0
Fax: 0711 615541-15
E-Mail: poststelle(at)lfdi.bwl.de
Webseite: www.baden-wuerttemberg.datenschutz.de
7. Right to Withdraw Consent
The applicant may withdraw consent to the processing and storage of their data at any time. Upon withdrawal, the data will be deleted immediately. The legality of processing carried out based on consent until the withdrawal remains unaffected. The applicant is informed that exercising the right to withdraw excludes further participation in the application process and the possibility of being considered for the position applied for.
8. Right to Object to the Processing of Personal Data
The applicant also has the right to object at any time to the processing of personal data based on Art. 6(1)(f) DS-GVO (Art. 21 DS-GVO).
9. Provision of Personal Data
Providing personal data is a prerequisite for conducting our application process with the goal of establishing an employment relationship.
If the data is not provided, the application process cannot be conducted or continued, and consideration of the applicant for the position is excluded.