Information as per Art. 13, 14 and 21 of the EU General Data Protection Regulation (GDPR) in the context of recruitment processes

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is the respective company to which you are applying:

soft-nrg Development GmbH
Einsteinring 37
85609 Aschheim
Germany
T +49 89 452280-0
[email protected]

softnrg srl
Bulevardul Regele Mihai I, nr.15
300079 Timișoara
Romania
T +40 769 082163
[email protected]

We have appointed the following data protection officer for soft-nrg Development GmbH:

activeMind AG Management- und Technologieberatung
Potsdamer Straße 3
80802 München
Germany
T +49 89 919294-900
[email protected]

We have appointed the following data protection officer for softnrg srl:

softnrg srl
Bulevardul Regele Mihai I, nr.15
300079 Timișoara
Romania

Mr. Petru Lungu
T +40 769 082 163
[email protected]

Below you will find a summary of the purposes for which we process your personal data, how long we store it, who can view it or receive it from us, and your associated rights.

The following categories of personal data are processed:

• First name, last name
• Email address
• Application documents: Certificates; curriculum vitae; proof of qualifications

The following data is also stored at the time the message is sent via the career portal:

• Date and time of the inquiry
• URL from which the inquiry was made
• IP address from which the inquiry was made
• Web browser and operating system used

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

Decision on the establishment of an employment relationship (Art. 6(1)(b) GDPR)

We will process the data you provide exclusively for the purpose of evaluating and selecting suitable candidates and contacting you.

Within the scope of the balancing of interests (Art. 6(1)(f) GDPR)

Where necessary, we process your data beyond the actual decision to establish an employment relationship in order to protect our legitimate interests or those of third parties. Examples of such cases are:

• Measures to protect employees and customers as well as to protect the company's property and for building and facility security (e.g. access controls, locking systems, video surveillance),
• Assertion of legal claims and defense in legal disputes: disclosure of personal data may be necessary in the context of official/judicial measures for the purpose of gathering evidence, criminal prosecution or enforcement of civil claims.

On the basis of your consent (Art. 6(1)(a), Art. 9(2)(a) GDPR in conjunction with Section 26(2) BDSG)

If you have given us your consent to process your personal data, it will only be processed for the purposes and to the extent agreed in the declaration of consent. Any consent given can be revoked at any time with effect for the future. Withdrawal of consent is only effective for the future and does not affect the legality of the data processed up to the time of withdrawal. Withdrawing your consent will not result in any disadvantages for you.

This concerns consent to the long-term storage of your application documents for further job postings in the event of a rejection.

Due to legal requirements (Art. 6(1)(c) GDPR in conjunction with Section 26 BDSG)

We are subject to various legal obligations that entail data processing. This includes, for example, the fulfillment of tax and similar control and reporting obligations.

In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purpose of gathering evidence or enforcing civil claims.

Within the company, access to your data is granted to those positions that require it to fulfill contractual, legal and regulatory obligations and to safeguard legitimate interests (e.g. HR department, management, future supervisor).

Service providers and vicarious agents employed by us may also receive data for these purposes if they require the data to perform their respective services. This may involve external service providers in the following areas: Support or maintenance of EDP or IT applications and personnel management software. All service providers are contractually bound and, in particular, obliged to treat your data confidentially.

Data will only be passed on to recipients outside our company in compliance with the applicable data protection regulations. Personal data may be passed on to the following third parties, for example: external data protection officer, authorities in the event of an obligation to disclose data.

It may be necessary to pass your personal data on to them in order to process your request or to fulfill a legal obligation.

Personal data is not transferred to countries outside the European Union or the European Economic Area.

If your application is rejected, it will be deleted no later than six months after notification of the decision. If you consent to your application documents being stored for a longer period for further job postings, your Talent Pool data will be stored for 12 months and then deleted. If an employment relationship is established, the application documents will be stored for at least the duration of the employment at soft-nrg.

If you have given us your consent, we will store your data until you withdraw your consent.

There is no legal or contractual requirement to provide personal data. However, it is not possible to process the application without this information.

If data processing is based on consent, the provision of your personal data is voluntary. We will not use your personal data for the respective purposes without your consent.

You can exercise the following rights at any time by contacting our data protection officer at the email address provided above:

• Information,
• Correction of incorrect personal data,
• Erasure,
• Restriction of data processing,
• Objection and
• Data portability

If you have given us your consent to process your data, you can revoke this at any time with effect for the future.

You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on your permanent place of residence or place of work.

Within Germany

A list of supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

Within Romania

Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal
B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, cod postal 010336
Bucuresti, Romania
[email protected]
https://www.dataprotection.ro

If you would like more information about your personal data stored by us, please do not hesitate to contact us if you have any questions about our data protection policy.

We do not use fully automated decision-making pursuant to Article 22 GDPR to establish, implement and terminate the employment relationship. If we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, to the extent required by law.

We do not process your data with the aim of automatically evaluating certain personal aspects.