This information shall brief you as applicant or data subject about the elicitation and processing of your personal data within the scope of your application process at Invia Flights Germany GmbH (hereinafter also referred to as: “we”/”us”) – the controller. The information is provided on the accordance with the regulations in Art. 13 and 14 of the DS-GVO.
1. Controller
Invia Flights Germany GmbH
Dittrichring 18 -20
04109 Leipzig
info@invia.de
2. Contact data of the DPO/Data Protection Officer:
You can reach our data protection officer at:
Invia Flights Germany GmbH
z.Hd. Datenschutzbeauftragter
Dittrichring 18 -20
04109 Leipzig
datenschutz@invia.de
3. The purposes of processing your personal data and the legal basis for the processing
We process your personal data for the purpose of decision finding about the establishment of your employment.
When we receive an application, we process the following personal data of yours:
- Title, first name, last name,
- a valid e-mail address, other electronic communication data if applicable,
- address,
- telephone number (landline and/or mobile),
- Curriculum vitae (including date of birth),
- references, certificates,
- other applicant data and information, if applicable also data according to Art. 9 DS-GVO
- Salary expectations
Das machen wir, um Dein Bewerbungsverfahren durchführen zu können, Dir gegebenenfalls einen Arbeitsvertrag anbieten zu können und/oder eventuell vorliegende Haftungsansprüche sowie die Geltendmachung etwaiger Ansprüche gegen Dich abzuwickeln.
We do that to conduct your application process, to offer you as the case may be an employment contract and/or to handle eventually any liability claims and the enforcement of any rights against you.
The data processing is carried out at your request and is necessary in accordance with Art. 88 DS-GVO in connection with. § 26 para. 1 p. 1 BDSG regarding the aforementioned purposes for the appropriate processing of the application and considers our legitimate interest to process your personal data for the evaluation for the suitability of the position and the (possible) filling of the position.
Beyond that it may occur that we process your personal data upon your consent. Such case takes place when we intend to overtake your application in our talent pool. Therefor we kindly ask you to give your consent to include your data in our talent pool as well as to readdress you within the time frame you consented for.
The legal basis for this processing is Art. 6 para. 1 lit. a DS-GVO.
Besides we process your personal data due to our prevailing interest after weighing of interests. Please see the following data below:
- IP address of the user,
- the date and time the website was accessed,
- the protocol, e.g. https,
- the request method “Get” or “Post”,
- the content of the request or information on the retrieved file that was transmitted to the user,
- access status (successful transmission, error, etc.),
- the amount of data transmitted in each case in bytes
- incoming and outgoing data traffic (“traffic”),
- a process identification number (“process ID”),
- the duration until the web server has answered the user’s request,
- the website from which the user accessed the site,
- the browser used by the user, the operating system, the interface,
- the language of the browser and the version of the browser software.
- The processing of personal data is carried out in order to:
The processing of personal data is carried out in order to:
- ensuring a smooth connection of the website
- ensuring a comfortable use of our website
- evaluation of system security and stability as well as for further administrative purposes
The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DS-GVO.
In the event that personal data is processed on the basis of our weighing of interests, section 7 contains specially highlighted information on your right to object.
4. recipients or categories of recipients of your personal data
A disclosure or Transmission of your personal data to a third party takes place when this is necessary for preparation and handling of the application process, for the treatment of other business activities or for fulfillment of mandatory law, including, but not limited to, tax-law and national insurance law.
A Disclosure or transmission of your personal data takes also place if:
- there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DS-GVO or
- the disclosure is necessary for the enforcement, exercise or defence of legal claims pursuant to Art. 6 (1) sentence 1 lit. f DS-GVO and there is no reason to assume that you have an prevailing legitimate interest in the non-disclosure your personal data.
Categories of recipients of personal data are, including but not limited to, social and labour administration offices, data destruction service providers, waste disposal service providers, tax advice and legal advice service providers, IT service providers.
Within our company, access to your personal data is granted to those persons who need it to fulfill our pre-contractual and legal obligations.
Data recipients are, in particular, our IT service providers, personnel service providers and data/file shredders as processors, insofar as they shall receive personal data, or they could receive personal data in connection with their services and maintenance activities for our company IT. Processors shall only process personal data which they receive in connection with our processing from us as a controller, only due to our instructions. Corresponding declarations of commitment and confidentiality or data processing addendums secure their activities.
We do not carry out the web hosting for the personal data received through the use of our websites at the Internet address invia.de by ourselves. In addition we therefor deploy a processor seated at Sitz in Deutschland und mit dem Standort von dessen Servern in Deutschland.
There is principally no intention to transfer personal data to a third state (a country outside the European Union or the European Economic Area).
5. Duration of storage
Your personal data will be stored upon receiving the application. In case of our inability to offer you an employment, we will retain the data submitted for up to six months after staffing took place in order to answer questions in connection with the application and rejection, insofar as this does not conflict with any statutory or official retention obligations.
In case you have consented to your inclusion to the applicant pool, your personal data will be stored for the consented period after the decision to vacancy notice. This enables us to contact you in case of future job offers.
Insofar we offer you an employment contract/employment relationship, we store your personal data in accordance with the relevant tax and commercial law retention and documentation obligations. These include a retention obligation of six or ten years for the commercial documents mentioned in §§ 238 and 257 of the Commercial Code. Corresponding provisions are also contained in the Fiscal Code and the Social Code for the retention of the documents mentioned herein.
Due to termination of the retention periods under commercial law, social law or tax law, the obligation to deletion does not automatically emerge, as in individual cases there may still be a legitimate interest in archiving in order to be able to provide information in the event of legal disputes, for example. This also applies to cases of preservation of evidence within the scope of statutes of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
6. Rights of the data subject
If personal data is processed from you by us, you have the following rights as a data subject:
6.1. Right of information
You can request information about your personal data that we process in accordance with Art. 15 DS-GVO.
6.2. Right of rectification
If the information relating to you is not (or is no longer) correct, you can request a correction in accordance with Article 16 of the GDPR. If your data is incomplete, you can request completion.
6.3. Right to deletion
You can request the deletion of your personal data under the conditions of Art. 17 of the General Data Protection Regulation (DS-GVO).
6.4. Right to limitation of processing
You have the right to request a restriction of the processing of your personal data (“blocking”) in the cases of Art. 18 DS-GVO.
6.5. Right to complain
If you are in opinon that the processing of your personal data violates data protection law, you have the right to complain to a data protection supervisory authority of your choice in accordance with Article 77 (1) of the GDPR.
6.6. Right of objection
You have the right to object on the specific grounds of Article 21 (1) of the GDPR. We will inform you about this in section 7.
6.7 Right of data portability
In the event that you have provided us with personal data in accordance with Art. 20 (1) DS-GVO, you have the right to have the data, which we process automatically, on the basis of your consent or in fulfilment of a contract handed over to you or to third parties in a structured, common and machine-readable format.
6.8. Automated decision making and profiling
We do not use any procedure of automatic decision-making including profiling according to Art. 4 (4) and Art. 22 DS-GVO.
7. Especially highlighted information
Article 21 of the GDPR obliges us to highlight a specific right of yours. The special emphasis concerns the following passages, which are set in cursive and underlined.
Right to object on a case-by-case basis upon weighing interests
- You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing is carried out based on our weighing of interests according to Art. 6 para. 1 lit. f DS-GVO.
- b) The cases have been described in general terms in this data protection information.
- c) In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of such data which prevail the interests, rights and freedoms of yours. This is also the case if the personal data serves the assertion, exercise or defence of legal claims.
8. Withdrawal of consent
If the processing of personal data by us is based on your consent, you have the right to withdraw this consent at any time by making a declaration to us. The revocation of the consent shall not affect the lawfulness of the processing carried out based on the consent until the revocation. We will inform you of this before the consent is given.
9. Obligation of provision
The provision of your personal data is not required by law or contract but is necessary for the processing of your application. The provision of the data is voluntary. If you do not provide the data, it will not be possible to process your application.
10. Data protection
If you contact us via an e-mail address specified on our website, the transport of the content of the e-mail to us is not end-to-end encrypted. This means that the e-mails are usually encrypted during transport via the e-mail providers involved but are not encrypted on the servers there.
If you contact us via the fax address given on our website, the transmission of the message to us is also not encrypted and therefore insecure regarding the data or information contained therein.
11. Amendment of this privacy information
This data protection information does not require your consent and is subject to regular review regarding the need for change. The previous version will be archived by us in the event of replacement by a new version.