V2 (022024)
Enreach GmbH uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Enreach GmbH.
With regard to interaction within the company account of Enreach GmbH, Enreach GmbH and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Enreach GmbH, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Enreach GmbH in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Enreach GmbH only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
I consent to Enreach GmbH passing on my personal data, which I have provided as part of the entire application process, to companies such as Enreach Communications and Centile, which are affiliated with Enreach GmbH as part of the Within Reach group of companies. I agree that Within Reach Group companies may use this data to contact me if they are interested in my application, should I be considered for a position in the company concerned. This consent also applies to data about my qualifications and activities from publicly available data sources (in particular professional social networks) that Enreach GmbH has collected as part of the application process. This consent is voluntary and does not affect my chances of applying to Enreach GmbH. I may refuse it without giving reasons and revoke it at any time - for example online via the application system - in which case Enreach GmbH will no longer pass on application data to affiliated companies after receipt of the revocation.
With the following information we would like to inform you as an applicant about the processing of personal data in the application procedure.
Responsible for data processing is:
Enreach GmbH Emil-Figge-Straße 86 44227 Dortmund Telefon: (0231) 4777-0 Telefax: (0231) 4777-444 E-Mail: office@enreach.de Internet: www.enreach.com, www.enreach.de
|
Management Board: Dr. Ralf Ebbinghaus Martin Claßen
|
Data Protection Officer: You can reach our data protection officer at datenschutz@enreach.de or via our postal address with the addition "the data protection officer".
|
When you apply to us, we process all data you provide us. This data is processed to carry out application procedures and, if necessary, to establish an employment relationship with you. We process your data by collecting, storing and using it to select suitable applicants and to contact you.
If you have applied for an advertised position, the processing of your data is based on the legal basis of Art. 6 para. 1 letter b DS-GVO and Art. 26 BDSG new version. In this case we process your data, because this is necessary for the decision on the establishment of an employment relationship in relation to the advertised position.
If you have sent us an unsolicited application, the processing of your data is based on the legal basis of Art. 6 para. 1 letter f DS-GVO. We have a legitimate interest in processing the data provided by you as an applicant to carry out an application procedure and to check whether you are suitable for us as an applicant and whether we want to establish an employment relationship with you in the future.
We will delete the data collected from you in this context if storage is no longer necessary.
If you have applied for an advertised position and the position is not filled by you, we will delete your data immediately after completion of the application procedure.
If you have applied to us on your own initiative, we will delete your data if you are no longer eligible as a candidate for Enreach GmbH.
If there is a legal obligation to retain data, we do not initially delete the data, but limit the processing of the data to the duration of the obligation to retain it.
You have the right to obtain information about your personal data stored by us (Art. 15 DS-GVO). In addition, you have the right to correction (Article 16 DS-GVO), deletion (Article 17 DS-GVO), processing restrictions (Article 18 DS-GVO) and data transferability (Article 20 DS-GVO) if the legal requirements are met.
You have the right to complain to a data protection supervisory authority about our processing of your personal data. The data protection supervisory authority of the federal state in which you live or in which Enreach GmbH as the person responsible has its headquarter .
If you have submitted an unsolicited application to us and the data processing is based on the legal basis of Art. 6 para. 1 letter f DS-GVO, you have a right of objection (Art. 21 DS-GVO). If you object to data processing, this will not take place in the future, unless Enreach GmbH as the person responsible can prove compelling reasons worthy of protection for further processing which outweigh your interest in the objection.
