Bellevue Group AG data privacy notice
Controller for processing according to DPA & GDPR
The controller responsible within the meaning of the General Data Protection Regulation and other data protection laws applicable in the Member States of the European Union and Switzerland and other provisions of a data protection nature is:
Bellevue Group AG
Data Protection
Seestrasse 16
CH-8700 Küsnacht
E-Mail: dataprotection@bellevue.ch
EU Representative
We have a data protection representative in the EU as a point of contact for supervisory authorities and data subjects on all issues related to EU data protection law:
VSG Datenschutzpartner UG
Am Kaiserkai 69
D-20457 Hamburg
E-Mail: info@datenschutzpartner.eu
www.datenschutzpartner.eu
Data Protection Officer Bellevue Asset Management (Deutschland) GmbH
We have also appointed a data protection officer for our German company. You can contact him at:
Sebastian Feldmann
Prico GmbH | www.prico.de
Unterer Markt 1, 49477 Ibbenbüren
Please feel free to contact our external data protection officer at Prico GmbH with any questions or concerns regarding data protection. Please send your request to s.feldmann@prico.de.
General information on data processing
Scope of processing personal data
We process personal data of our users only to the extent necessary to provide a functional website and its contents and services. Personal data is processed regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data is necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.
Data deletion and storage period
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies and no legal retention period or other requirement precludes this.
Provision of the website and creation of log files
Description and scope of data processing
Every time our website is accessed, data and information are automatically collected from the accessing computer system. The following data is collected:
Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
- HTTP status code
The data is also stored in our system's log files. This data is not stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.
Duration of storage
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the users' IP addresses are deleted or anonymized so that they can no longer be assigned to the accessing client.
Objection and removal options
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
Use of cookies
Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in or by the internet browser on your computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is visited again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
We also use cookies on our website that enable an analysis of the surfing behavior of users. The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.
Insofar as cookies are set to analyze user behavior, this is done on the basis of consent in accordance with Art. 6 (1) (a) GDPR.
Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of our website's functions cannot be offered without the use of cookies. For these, it is necessary that the browser be recognized even after a page change. As the website operator, we have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services.
The user data collected by technically necessary cookies are not used to create user profiles.
We use analysis cookies to improve the quality of our website and its contents. Analysis cookies tell us how the website is used, enabling us to constantly optimize our services.
Duration of storage, right to object and right to erasure
Cookies are stored on the user's device and transmitted by it to our site. Therefore, you as a user also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it is possible that not all of the website's functions can be used to their full extent.
Cookie consent
Our website uses a cookie banner to obtain your consent to the storage of certain cookies in your browser and to document this in a data protection compliant manner.
When you visit our website, you will see a banner where you can actively select various cookies and thus give your consent to their use. In order for the cookie consent tool to be able to assign your visit to you as a user and to individually record, log and store the consent settings you have made for a session, certain user information (including the IP address) is collected and stored when you visit our website through the cookie consent tool.
The recorded data shall be stored until you ask us to erase them or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.
We use the cookie consent technology to obtain the declarations of consent required by law for the use of cookies that are not technically essential. The legal basis for this is Art. 6 (1) (c) GDPR.
Contact form and e-mail contact
Description and extent of data processing
Our website includes a contact form that can be used for making contact electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:
- first name and surname of the user
- their e-mail address
- their address
- Your telephone number
- Any additional personal data you provide in your message
At the time of sending the message, the following data is also stored:
- The user's IP address
- Date and time of registration
The legal basis for the processing of your personal data in the context of the sending process is your consent Art. 6 (1) (a) GDPR.GDPR (checkbox with a link to this data protection declaration. If the purpose of the contact is to conclude a contract, the legal bases Art. 6 (1) (b), (f) GDPR are also relevant.
In this context, the data will not be passed on to third parties. The data will be used exclusively for the purpose of processing the conversation.
Legal basis for data processing
The legal basis for the processing of the data is the consent of the user Art. 6 (1) (a) GDPR.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
Purpose of the data processing
We process the personal data from the input mask solely for the purpose of processing the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Objection and removal option
The user has the option at any time to revoke his consent to the processing of personal data. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The user can object to the processing of their data by email or by post. In this case, all personal data stored in the course of establishing contact will be deleted.
Newsletter
Type and purpose of processing
We send out newsletters with the latest information about our products and offers. Personal data is processed in the process. During the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. The email address is collected for the purpose of delivering the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used. Data will not be passed on to other third parties. The data will be used exclusively for sending the newsletter.
Legal basis
The legal basis for the processing of data after registration for the newsletter by the user is the consent of the user in accordance with Art. 6 (1) (a) GDPR.
Storage duration
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's e-mail address will therefore be stored for as long as the newsletter subscription is active. The other personal data collected during the registration process will usually be deleted after a period of seven days.
Objection and removal options
You can cancel your subscription to the newsletter at any time. For this purpose, there is a corresponding unsubscribe link in every newsletter. This also allows you to revoke your consent to the storage of personal data collected during the registration process.
Data transfer to third countries
Among other things, tools from companies based in so-called third countries (i.e., outside the European Union (EU), the European Economic Area (EEA)) may be integrated on our website. When these tools are active, your personal data may be passed on to the servers of the respective companies. We have no influence on this data processing.
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or if the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this will only take place in accordance with the following legal requirements in accordance with Art. 44 ff. GDPR:
- Basis of an adequacy decision
- Internal data protection regulations
- Approved rules of conduct
- Standard data protection clauses
- Approved certification mechanism in accordance with Art. 46 (2) a) – f) GDPR
Google Analytics
Description and purpose
This website uses the “Google Analytics” service, which is provided by Google LLC, to analyze how users use the website. The service uses “cookies” – text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the US and stored there. If necessary, Google Analytics is used on this website with the extended code “gat._anonymizeIp ();” to ensure an anonymized collection of IP addresses (so-called IP masking). Please also note the following information on the use of Google Analytics: The IP address of the user is shortened within the member states of the EU and the European Economic Area. This abbreviation eliminates the personal reference of your IP address. As part of the agreement for order processing, which the website operators have concluded with Google LLC, the latter uses the collected information to create an evaluation of website use and website activity and provides services associated with internet use.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) (a) GDPR, if the anonymized data collection by means of the code “gat._anonymizeIp” does not take place. Otherwise, in particular in the case of the use of “gat._anonymizeIp”, Art. 6 (1) (f) GDPR is the legal basis. Our overriding legitimate interest lies in the hosting of this website.
Recipient
The recipient of your personal data is Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
Transfer to third countries
The personal data is transferred to the USA. The transfer is subject to suitable guarantees in accordance with Art. 46 GDPR. For this purpose, we have concluded standard contractual clauses with the data importer in accordance with Art. 46 (2) (c) GDPR. Furthermore, we are aware of our responsibility and, where necessary, take further measures to ensure the protection of personal data in order to protect the rights and freedoms of natural persons.
Duration of data storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, the data will be deleted if you assert your right to deletion within the meaning of Art. 17 (1) GDPR.
Revocation and objection
You have the right to revoke your consent to non-anonymized data collection at any time, cf. Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and will be effective for the future. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Further information on this can be found above in our data protection declaration under “Rights of the data subjects”.
In the case of anonymized data collection, you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found above in our data protection declaration under “Rights of the data subjects”.
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Weitere Datenschutzhinweise
Further information on the processing of your personal data can be found here.
Google Tag Manager
Description and purpose
We use Google Tag Manager on our website (Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Tag Manager allows us to manage website tags through an interface and is a cookie-free domain that does not collect personal information but can trigger other tags that collect data. Google pseudonymizes the data and the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) (a) GDPR.
Recipient
The recipient of your personal data is Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have, where necessary, concluded appropriate safeguards within the meaning of Art. 46 (2) GDPR with the data importer. Furthermore, we are aware of our responsibility and, where necessary, take further measures to ensure the protection of personal data in order to protect the rights and freedoms of natural persons.
Duration of data storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, the data will be deleted if you assert your right to deletion within the meaning of Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, cf. Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and will be effective for the future. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation. Further information on this can be found above in our data protection declaration under “Rights of data subjects”.
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Weitere Datenschutzhinweise
Further information on the processing of your personal data can be found here.
Registration on our website
If the data subject uses the option to register on the website of the data controller by providing personal data, the data in the respective input mask will be transmitted to the data controller. The data will be stored solely for the purpose of internal use by the data controller. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. When registering, the user's IP address and the date and time of registration are stored. This is to prevent misuse of the services. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass it on. Registration of the data is required for the provision of content or services. Registered persons have the option at any time to have the stored data deleted or modified. The person concerned will receive information about their stored personal data at any time.
Applicant data protection
If you apply to us electronically, i.e. by email or using our web form, we collect and process your personal data for the purpose of handling the application process and implementing pre-contractual measures.
By sending us an application, you express your interest in working for us. In this context, you provide us with personal data that we use and store exclusively for the purpose of your job search/application. In particular, the following data is collected: first and last name, email address, telephone number, and, if applicable, LinkedIn profile.
You also have the option of uploading documents such as a cover letter, your CV and references. These may contain further personal data such as date of birth, address, etc.
The legal basis for the processing of your applicant data is Art. 88 GDPR, § 26 BDSG-neu and Art. 9 (2) (b) GDPR. Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily provided as part of the application process, their processing is also carried out in accordance with Art. 9 (2) (b) GDPR (e.g. health data, such as severely disabled status).
Only authorized employees in the human resources department or persons involved in the application process have access to your data.
Personal data is stored solely for the purpose of filling the vacant position for which you have applied.
Your data will be stored for a period of six months after the application process has ended. This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations.
Integration of other services and content from third parties
It may be the case that third-party content, such as videos, fonts or graphics from other websites, are integrated into this online offering. This always assumes that the providers of this content (hereinafter referred to as “third-party providers”) are aware of the IP address of the user. This is because without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content. We endeavor to use only content from providers who use the IP address solely for the delivery of the content. However, we have no influence over whether the third-party providers store the IP address, e.g. for statistical purposes. We will inform users if we become aware of such instances. We would like to provide and improve our online services through these integrations.
The legal basis for the integration of other services and content from third parties is Art. 6 (1) (f) GDPR. The overriding legitimate interest lies in the intention to present our online presence in an appropriate manner and to provide user-friendly and economically efficient services on our part. Please make sure you are aware of the applicable data protection conditions before you transmit personal data to these websites.
Other recipients of data
Insofar as the legal requirements are met (e.g. you have given your consent), we may share your personal data with other recipients who provide services for us. In doing so, we limit the sharing of your personal data to the extent necessary, taking into account the principle of data minimization. The service providers used receive your personal data as contract processors (contract processing contract in accordance with Art. 28 GDPR) or as independent data processors. The following categories of service providers or data recipients may receive your data:
- Server & hosting providers
- Marketing agencies & website support
- External legal & tax advice
- Newsletter providers
- Recruiting service providers
- Service providers for postal and delivery services
- Other services and tools
Access to your data is only granted under strict conditions (confidentiality requirements).
Data security
Unfortunately, the transmission of information via the internet is not completely secure, which is why we cannot guarantee the security of the data transmitted via the internet to and via our website. However, we secure our website and other systems to the best of our ability using technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.
We take precautions to ensure the security of your personal data. Your data is conscientiously protected against loss, destruction, falsification, manipulation and unauthorized access or unauthorized disclosure.
Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following “rights as a data subject”:
Right of access pursuant to Art. 15 GDPR
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed by us. If this is the case, you can request the following information from the controller:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) the existence of a right to correction or deletion of your personal data, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information about the origin of the data if the personal data is not collected from the data subject;
You have the right to request information about whether your personal data is transferred to a third country or to an international organization. In this context, you can request information about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.
Right to rectification in accordance with Art. 16 GDPR
You have the right to obtain from the controller the rectification and/or completion of your personal data if it is inaccurate or incomplete. The controller must carry out the rectification without undue delay.
Right to restriction of processing in accordance with Art. 18 GDPR
You have the right to obtain from the controller restriction of processing where one of the following applies:
(1) you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but you need it to establish, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been established whether the legitimate reasons of the controller outweigh your reasons.
Where processing of personal data concerning you has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
Right to erasure in accordance with Art. 17 GDPR
Erasure obligation
You have the right to request that we erase personal data concerning you without undue delay and we are obliged to erase this data without undue delay where one of the following grounds applies:
(1) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based according to point (a) of Art. 6(1), or point (a) of Art. 9(2) GDPR, and where there is no other legal ground for the processing.
(3) You object to the processing in accordance with Art. 21(1) of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) of the GDPR.
(4) Your personal data has been processed unlawfully.
(5) The deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law to which the controller is subject.
(6) The personal data concerning you has been collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
Information to third parties
If we have made the personal data concerning you public and we are obliged to delete it in accordance with Art. 17 (1) GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
Exceptions
The right to erasure does not apply to the extent that processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with Art. 9 (2) (h) and (i) as well as Art. 9 (3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) of the GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defense of legal claims.
Right to notification pursuant to Art. 19 of the GDPR
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to request the data controller to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
(1) the processing is based on consent pursuant to point (a) of Art. 6 (1) GDPR or point (a) of Art. 9(2) GDPR or on a contract pursuant to point (b) of Art. 6 (1) GDPR; and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object pursuant to Art. 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6(1) GDPR, including profiling based on those provisions.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, of exercising your right to object by automated means using technical specifications.
Right to revoke the data protection declaration of consent in accordance with Art. 7 (3) GDPR
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. To revoke consent or to object, simply send us a message by e-mail.
Right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.
Automated individual decision-making, including profiling
You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
(1) is necessary for entering into, or performance of, a contract between you and the data controller;
(2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) with your explicit consent.
However, these decisions must not be based on special categories of personal data in accordance with Art. 9 (1) GDPR, unless Art. 9 (2) a) or g) applies and appropriate measures have been taken to protect rights and freedoms as well as your legitimate interests.
Bewerbungen (Ausbildung & Stellenangebote)
Mit der Übermittlung der Bewerbung an uns erklären sich die Bewerber mit der Verarbeitung ihrer Daten zu Zwecken des Bewerbungsverfahrens entsprechend der in dieser Datenschutzerklärung dargelegten Art und Umfang einverstanden. Die Rechtsgrundlage für die Verarbeitung von Bewerberdaten ist Art. 88 DSGVO, § 26 BDSG-neu und Art. 9 Abs. 2 lit. b) DSGVO. Soweit im Rahmen des Bewerbungsverfahrens freiwillig besondere Kategorien von personenbezogenen Daten im Sinne des Art. 9 Abs. 1 DSGVO mitgeteilt werden, erfolgt deren Verarbeitung zusätzlich nach Art. 9 Abs. 2 lit. b) DSGVO (z.B. Gesundheitsdaten, wie z.B. Schwerbehinderteneigenschaft oder ethnische Herkunft). Soweit im Rahmen des Bewerbungsverfahrens besondere Kategorien von personenbezogenen Daten im Sinne des Art. 9 Abs. 1 DSGVO bei Bewerbern angefragt werden, erfolgt deren Verarbeitung zusätzlich nach Art. 9 Abs. 2 lit. a) DSGVO (z.B. Gesundheitsdaten, wenn diese für die Berufsausübung erforderlich sind). Sie können uns Ihre Bewerbungen gerne per E-Mail oder auf dem postalischen Weg übermitteln. Hierbei bitten wir jedoch zu beachten, dass E-Mails grundsätzlich nicht verschlüsselt versendet werden und die Bewerber selbst für die Verschlüsselung sorgen müssen. Wir können daher für den Übertragungsweg der Bewerbung zwischen dem Absender und dem Empfang auf unserem Server keine Verantwortung übernehmen und empfehlen daher eher den postalischen Versand zu nutzen. Die von den Bewerbern zur Verfügung gestellten Daten können im Fall einer erfolgreichen Bewerbung für die Zwecke des Beschäftigungsverhältnisses von uns weiterverarbeitet werden. Andernfalls, sofern die Bewerbung auf ein Stellenangebot nicht erfolgreich ist, werden die Daten der Bewerber gelöscht. Die Daten der Bewerber werden ebenfalls gelöscht, wenn eine Bewerbung zurückgezogen wird, wozu die Bewerber jederzeit berechtigt sind. Die Löschung erfolgt nach dem Ablauf eines Zeitraums von sechs Monaten, damit wir etwaige Anschlussfragen zu der Bewerbung beantworten und unseren Nachweispflichten aus dem Allgemeinen Gleichbehandlungsgesetz genügen können. Rechnungen über etwaige Reisekostenerstattung werden entsprechend den steuerrechtlichen Vorgaben archiviert.
Amendments to the data protection provisions
Bellevue reserves the right to amend this data protection declaration at any time with future effect so that it always complies with the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services or service features.