Data protection provisions Application process

Information pursuant to Art. 13 & 14 GDPR Applicants

Person responsible

CARASANA Bäderbetriebe GmbH
Römerplatz 1
76530 Baden-Baden
Germany

Authorized representative

Konrad Lansche - Operations Manager
Tel: +49 (0) 7221 / 27 59-830
E-Mail: [email protected]

Data Protection Officer

The company data protection officer can be contacted by e-mail at: [email protected]

Purpose and legal basis

We collect and process your personal data exclusively for the purposes of initiating the employment relationship and for business purposes permitted within the scope of our business activities that are related to your role and function in our company. This includes:

• Processing of applications (Art. 6 para. 1b GDPR in conjunction with Section 26 BDSG)

Your data will only be processed for purposes other than those mentioned if this processing is compatible with the purposes of the application process. We will inform you about this processing before processing your data in this way and, if necessary, obtain your consent.

The provision of the personal data to be collected here is necessary for the implementation of the application process between you and us. Without the provision of this data, we cannot carry out the application process without disruption.

Type of data or data categories

The following data or data categories are processed to pursue and fulfill the above-mentioned purposes:

• Contact and communication data
• Profile data, information on education and vocational training, completed training courses for further education and qualification, language skills, other qualifications
• Applicant data (application, curriculum vitae, certificates, proof of education and vocational training, diplomas)
• If applicable, marital status, children, religious affiliation and nationality

We receive the data that we process exclusively from you. Data from other sources is not collected.

Recipients and disclosure to third parties

Within our company, those departments that need your data to fulfill the above-mentioned purposes will have access to it. This also applies to service providers and vicarious agents employed by us. We only transfer personal data to third parties if this is necessary for the aforementioned purposes or if you have given your prior consent.

Source of the personal data and, if applicable, whether it originates from publicly accessible sources

In principle, we only process data that we receive from you as an applicant. Data from other sources is neither collected nor processed.

Storage and deletion

Your personal data will only be stored for as long as knowledge of the data is required for the purposes of the application process or the purposes for which it was collected, or for as long as statutory or contractual retention requirements exist.

As a rule, deletion takes place within 6 months of collection.

Rights of data subjects

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about
  • the purposes of processing,
  • the categories of personal data,
  • the categories of recipients to whom your data has been or will be disclosed,
  • the planned storage period,
  • the existence of a right to rectification, erasure, restriction of processing or objection,
  • the existence of a right of appeal,
  • the origin of your data if it was not collected by us.
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us.
• in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Objection with consent

In accordance with Art. 7 para. 3 GDPR, you can revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. If you would like to exercise your right to object, simply send an email to [email protected].

Objection pursuant to Art. 21 GDPR

In accordance with Art. 21 GDPR, you can object at any time to data processing which (1.) is in the public interest or in the exercise of official authority conferred on the controller (Art. 6 e GDPR) or (2.) is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6 f GDPR), if this objection arises from your particular situation, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. If you wish to exercise your right to object, simply send an email to [email protected].