V2 (022024)
Bertrandt AG uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Bertrandt AG.
With regard to interaction within the company account of Bertrandt AG, Bertrandt AG and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Bertrandt AG, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Bertrandt AG in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Bertrandt AG only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
The protection of your personal data is very important to us. We would therefore like to provide you with transparent information about our data protection principles and the procedures for using your information when you make an application via our e-Recruiting system. When applying to Bertrandt AG, you are applying to join an innovative company with modern IT and HR processes and systems.
By completing the registration and submitting your application, you agree:
You can object to data processing at any time However, if you do so, we will no longer be able to consider your application in our selection process. Further details can be found in our Data Privacy Statement.
You also confirm that you have read and understood our Data Privacy Statement.
The protection of your personal data is very important to us. We would therefore like to provide you with information about our data protection principles and the procedures for using your information when you make an application via our e-Recruiting system.
Bertrandt uses both technical and organisational security measures aimed at protecting your data against manipulation, loss, destruction and unauthorised access, and it continues to update its security measures in line with technological developments.
Bertrandt AG uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data.
onlyfy one
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet. On or respectively via onlyfy one, companies can, for example, publish job ads, identify interesting talented individuals (where applicable including from the XING professional network), receive and manage applications, and enter into dialogue with talented individuals and applicants. New Work SE supports this coming together of talented individuals and companies on and via onlyfy one. This takes place through, for example, talented individuals being recommended and displayed in the business customer’s company account, as well as through the generation and provision of recruitment-relevant information and analysis based on data that New Work SE processes in onlyfy one and, where applicable, in other XING applications or outside them.
Shared responsibility
With regard to interaction within the company account of Bertrandt AG, Bertrandt AG and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
Data processing by New Work SE
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Bertrandt AG, detailed information is available in the Privacy Policy of onlyfy one (by XING) at https://privacy.xing.com/de/datenschutzerklaerung. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
Pausing your online application
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Bertrandt AG in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Bertrandt AG only.
Visibility of your data
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
Notes on the special functions of onlyfy one
Calendar function
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
WhatsApp application
If you use the apply using the WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. The USA is currently considered an insecure third country, which means that it may not be able to guarantee EU data protection standards. Sending the application may involve certain data protection risks (e.g. unauthorised access to your data by US security agencies). However, the sent and received messages are encrypted end-to-end.
WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
If you want to withdraw consent, please contact support@onlyfy.com
Within the meaning of the General Data Protection Regulation (GDPR), the controller of the processing of personal data as part of the application process is:
Name of controller:
Bertrandt AG
Birkensee 1
71139 Ehningen
Germany
Address of controller:
Bertrandt AG
Birkensee 1
71139 Ehningen
Germany
Tel: + 49 7034 656-0
Fax: + 49 7034 656-4151
Email: info@bertrandt.com
Our Data Protection Officer is available to answer any questions you may have about the processing of your personal data. Please contact: datenschutz@bertrandt.com
Michael Walther
datenschutz@bertrandt.com
As part of the application process, we store the personal data provided by you. This applies to applications for specifically advertised vacancies as well as speculative applications.
When you register on our careers page, you either apply for a specific job advertisement or are looking for a job with us on your own initiative. The data which we request from you will be used by Bertrandt AG across the entire Group as well as by existing and potentially interested customers exclusively for the purpose of filling vacancies.
For the purposes of processing, the data provided by you is divided into the following categories:
In addition, we create data on the assessments and evaluations undertaken as part of the application process and keep a record of the application process.
Data collection and processing in the context of the application process are based on the legal provisions of Article 6 (1) (b) and (f) of the GDPR and Section 26 (1) of the Federal Data Protection Act.
We will process your data for similar recruitment procedures, regardless of whether you made a speculative application or responded directly to a job advertisement during your registration.
You can view, update and delete your data at any time in your Applicant Cockpit. Please note that you are responsible for the accuracy of your data.
In addition, we will process and use your data for the purposes of advice, advertising and market research only with your express consent, which must be given separately.
In detail, Bertrandt AG s, as well as the subsidiaries of Bertrandt AG, which are affiliated companies within the meaning of Section 18 of the German Companies Act, the following personnel have access to your data:
In case of potentially interested customers, these may include:
The data is transferred exclusively for the purpose of the verification of your qualifications and in the context of processing current and subsequent application procedures and vacancy filling processes, as far as necessary to process the applications received.
Only such departments will receive your data that are entrusted with the preparation and implementation of the application process and staffing processes and whose involvement is necessary.
Your application is therefore not restricted to the specific position you have applied for.
You can find an overview of our affiliated companies within the meaning of Section 18 of the German Companies Act at: https://www.bertrandt.com/unternehmen/konzern/standorte/
For the technical implementation of the e-Recruiting process, we use a service provider who acts as a “processor” within the meaning of Article 28 of the GDPR. It processes personal data for these purposes and does so on our behalf and in accordance with our instructions.
If a transfer of data to third countries is necessary, this can take place provided that an appropriate level of security or guarantees are in place.
Your profile is activated whenever contact or changes are made, either by you or the recruiter, and is stored for a period of 180 days. Unless subject to a statutory retention period, the data will be erased as soon as storage is no longer required or the legitimate interest in its storage has expired. If your application is unsuccessful, this is usually the case no later than six months after completion of the application process or after 6 months of inactivity, either by you or the recruiter.
In individual cases, individual data may be stored for a longer period (e.g. statement of travel expenses). In such cases, the duration of storage is based on the statutory retention requirements arising, for example, from the German Tax Code (6 years) or the German Commercial Code (10 years).
You will not be notified when your profile is about to be deleted and you will receive no confirmation of its deletion. If you are still awaiting feedback regarding a position, please contact the responsible recruiter.
You can view, update and delete your data at any time in your Applicant Cockpit. Please note that you are responsible for the accuracy of your data.
You have the following rights as a data subject:
The restrictions according to Sections 34 and 35 of the Federal Data Protection Act apply to the right of access and the right to erasure.
In addition, you have a right to lodge an appeal with a data protection supervisory authority in accordance with Article 77 of the GDPR in conjunction with Section 19 of the Federal Data Protection Act, if you are of the opinion that your personal data is being processed unlawfully.
The Data Protection Supervisory Authority responsible for our company is:
The Baden-Württemberg State Commissioner for Data Protection and Freedom of Information
Königstraße 10 a
70173 Stuttgart
Germany
PO Box 10 29 32
70025 Stuttgart
Germany
Tel: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
You have the right to object, on grounds of legitimate interest, at any time to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the GDPR (processing of data on the basis of a balance of interests). You can object to the data processing at any time with effect for the future. An objection will result in the termination of your application procedure.
To enforce your right to object, please send us an email to career@bertrandt.com. This email address is protected against spambots. JavaScript must be activated to ensure that it can be displayed.
You can also contact us by post:
Bertrandt AG HR Marketing and Recruitment
Birkensee 1
71139 Ehningen
Germany
No automated individual decision-making within the meaning of Article 22 of the GDPR takes place.
"Cookies" are used in several places when you use the online recruitment website. They serve to make the recruitment application more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer. Session cookies are discarded when you leave our website. Permanent cookies (e.g. for functions such as "remember password") remain stored on your computer's hard drive by your browser until they are deleted. You can prevent the placement of cookies by choosing the appropriate settings of your browser software. However, please note that you may then not be able to make full use of all the website functions.
Cookies may be necessary to ensure the functionality of our website. The use of such cookies does not require consent and can therefore not be deactivated. Cookies which serve the purpose of "analysing" your behaviour whilst on our website are only placed with your consent. If we use cookies that require consent, a cookie banner will be displayed when you visit our website for the first time. You will then be asked to agree to the use of cookies requiring consent. If you wish to change your cookie settings at a later date, you can make this change on the website by going to "Cookies".
The following is a list of the cookies used:
The following cookies are used by Onlyfy:
Provider: Onlyfy
Cookie: PHPSESSID
Purpose: This cookie is used to identify the user while using Onlyfy. The cookie is essential for correct functionality. The cookie expires when the browser is closed.
Duration of storage: Until the browser window is closed (session cookie).
Provider: Onlyfy
Cookie: REMEMBERME
Purpose: This cookie is used to restore an expired session. The cookie is essential for correct functionality.
Duration of storage: The cookie expires after 2 weeks.
Bertrandt AG is responsible for data processing. If you have any queries, please contact Bertrandt AG, -Datenschutz- Birkensee 1, 71139 Ehningen or by e-mail Datenschutz@Bertrandt.com, phone: +49 7034 656-0
Mr. Michael Walther, e-mail: Datenschutz@Bertrandt.com
Your data is collected in order, to
Your data are processed on the basis of Art. 6(1)(f) of the General Data Protection Regulation (legitimate interest).
The data controller processes the data for the purpose of optimal process design. The interests, fundamental rights and freedoms of the data subjects are not affected. The personal data are generated from public sources and processed by the controller. The controller provides transparent information about the data processing. The processing of personal data by the controller on the basis of legitimate interests is permissible.
You have the right to object to the processing of your personal data at any time, in accordance with Article 21 of the General Data Protection Regulation. You can exercise your right to object directly by contacting the data controller using the contact details above.
We process the following personal data from you:
Bertrandt AG (this includes Bertrandt AG and affiliated companies within the meaning of Section 18 of the German Stock Corporation Act (these can be found at https://www.bertrandt.com/unternehmen/konzern/standorte/),
The following categories of data are processed:
Data will only be transferred outside the EU / EEA if an appropriate level of security is guaranteed.
The storage period is indefinite until the purpose of the data processing ceases to apply or until you object.
You have various rights under the General Data Protection Regulation. Details can be found in particular in Articles 15 to 18 and 21 of the General Data Protection Regulation.
Right of access
You can request information about the personal data we process. In your request for information, you should specify your request in order to make it easier for us to compile the necessary data.
Right to erasure
You can request the deletion of your personal data.
Right to restriction of processing
You have the right to request restriction of the processing of data relating to you.
Right to data portability
You have the right to data portability of your personal data processed by us, in a common machine-readable format.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of data concerning you.
Right to complain
If you believe that we have not complied with your request or not fully complied with your request, you may lodge a complaint with the relevant data protection supervisory authority.
We use publicly available social media sources (for example LinkedIN, XING) to collect personal data
There is no obligation on your part to provide the data. You may object to the data processing at any time by contacting the data controller.
No, there is no automated decision-making including profiling.
