The “controller”, as defined in the General Data Protection Regulation (GDPR), other national data protection laws applicable in the Member States of the European Union, and other data protection regulations, is:
isoplus GmbH
Happinger-Au-Str. 3
D-83026 Rosenheim
Tel.: +49 8031 650-0
Email: info@isoplus.group
(hereinafter referred to as “we”, “us” or “our”).
Ensuring the protection of your personal data is one of our main concerns. To highlight just how important this issue is to us, we have put our data protection and data security in the hands of a specialist consulting firm. Our data protection officer also belongs to this experienced group of experts.
We are advised by:
TÜV SÜD Akademie GmbH
Westendstraße 160
D-80339 München
Email: datenschutz@isoplus.group
If you have any questions about data protection or data security, please contact our data protection officer directly.
a) Scope
We will generally only process your personal data to the extent necessary to provide a functioning website, as well as our content and services.
b) Legal basis
If we obtain your consent to process your personal data, the legal basis for that form of processing will be point (a) of Art. 6 (1) GDPR. If we process your personal data to perform a contract with you or to take steps prior to entering into a contract, the legal basis for that form of processing will be point (b) of Art. 6 (1) GDPR. If we need to process your personal data to ensure compliance with a legal obligation, the legal basis for that form of processing will be point (c) of Art. 6 (1) GDPR. If your personal data is processed for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms, the legal basis for that form of processing will be point (f) of Art. 6 (1) GDPR.
c) Retention period
Your personal data will be deleted as soon as the purpose for which it was being stored no longer applies or, if you have the right to withdraw any consent you may have given, as soon as you declare that you wish to withdraw your consent. Your personal data may be stored beyond this period if this is stipulated by EU law or national legislation through EU regulations, laws or any other provisions to which we are subject. However, your personal data will be blocked in such cases.
d) External links
If we provide any links to external websites, this privacy policy will not apply to the processing of your personal data by the controllers of the linked websites. Therefore, we would advise you to read the privacy policy on any external websites you may visit. If any such links require a legal basis for the resulting processing of your personal data, this will be your consent given by clicking on the link in accordance with point (a) of Art. 6 (1) GDPR. If you click on a link (hyperlink), the following personal data will usually be processed:
- your IP address;
- your screen resolution;
- your browser;
- your bandwidth;
- and your language settings.
1. Provision of our website and creation of log files
a) Description and scope
We will process your personal data to ensure that our website is delivered to your PC or mobile device without errors. In some cases, your personal data will have to be stored for the duration of a session.
We will also temporarily store your personal data in log files to ensure the functionality of our website and the security of our IT systems. Your personal data stored in log files will not be processed in any other way.
The following personal data will be processed for the purpose of providing our website and creating log files:
- your IP address;
- date of access;
- time of access;
- previously visited website, if any;
- your browser;
- and your operating system.
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of providing a fully functional website and ensuring the security of our IT systems. This also represents our legitimate interest.
d) Retention period
Your personal data will be stored in log files for a period of 30 days. Otherwise, your personal data will only be stored for the duration of your browsing session.
e) Right of erasure and right to object
As the processing of personal data and its storage in log files is essential for providing a fully functional website and ensuring the security of our IT systems, you do not have the right to object.
Technically necessary cookies
a) Description and scope
We will process your personal data using technically necessary cookies, as many of our website features and services that make it easier for you to use our website – or that make it possible for you to use our website in the first place – would not work properly without such cookies.
We will use these technically necessary cookies to store some of your personal data; however, these cookies will only be used for the relevant features and services. Your personal data will not be processed in any other way.
A list of the technically necessary cookies we use, as well as their purpose, retention period and additional information, can be found in our cookie banner.
The following personal data will be processed through the use of technically necessary cookies:
- your IP address;
- your browser language settings;
- your browser;
- and shopping cart information.
b) Legal basis
Legitimate interest, Section 25 (2) of the German Act on Data Protection and Privacy in Telecommunications and Telemedia (TTDSG) in conjunction with point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of providing our website features and services. This also represents our legitimate interest.
d) Retention period
Your personal data will usually be stored for the duration of each session, unless otherwise stated in the detailed information contained in the list of technically necessary cookies we use.
e) Right of erasure and right to object
Technically necessary cookies will be stored on your PC or mobile device and sent to our website from there. This gives you full control over the use of technically necessary cookies. You can disable or restrict the transfer of cookies by changing your browser settings. You can delete saved cookies at any time. This can also be done automatically. If you disable cookies, however, you might not be able to fully use all features of our website. Non-essential cookies If any non-essential cookies are used for our website features and services, you will find a list of such cookies, as well as their purpose, retention period and additional information, in our cookie banner.
3. Non-essential cookies
If any non-essential cookies are used for our website features and services, you will find a list of such cookies, as well as their purpose, retention period and additional information, in our cookie banner.
4. YouTube videos
a) Description and scope
To display video content, we embed YouTube videos on our website. This allows us to display the content we want to present on our website in an appealing, uniform manner, regardless of the device you may be using. YouTube is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
The following personal data will be processed in connection with the YouTube videos embedded on our website:
- your IP address;
- your browser;
- and your screen resolution.
If you play a video, additional personal data may be processed by YouTube. You can find more information here: https://policies.google.com/privacy?hl=de#whycollect
b) Legal basis
Consent, point (a) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of embedding video content in an appealing, uniform manner, regardless of the device you may be using.
d) Retention period
We will only process your personal data until the end of your website visit (Privacy Enhanced Mode). We have no control over how YouTube will delete your personal data. More information can be found here: https://policies.google.com/privacy?hl=de&gl=de#inforetaining
e) Right of erasure and right to object
You may withdraw your consent at any time, in particular by closing the application and/or reloading the website.
We have no control over how YouTube will process your personal data. You can find more information here: https://policies.google.com/privacy?hl=de
5. Google Maps
a) Description and scope
To display map content, we embed Google Maps on our website. This allows us to display the content we want to present on our website in an appealing, uniform manner, regardless of the device you may be using. Google Maps is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
The following personal data will be processed in connection with the Google Maps embedded on our website:
- your IP address;
- your screen resolution;
- your language settings;
- and location data.
If you use the Google Maps service, additional personal data may be processed. You can find more information here: policies.google.com/privacy
b) Legal basis
Consent, point (a) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of displaying map content.
d) Retention period
We will only process your personal data until the end of your website visit (Privacy Enhanced Mode). We have no control over how Google Maps will delete your personal data. More information can be found here: policies.google.com/privacy;
e) Right of erasure and right to object
You may withdraw your consent at any time, in particular by closing the application and/or reloading the website. You can find more information here: https://policies.google.com/privacy?hl=de-DE
6. Data processing during an application process
a) Description and scope
We offer you the chance to apply for vacant positions directly via our website. If you do this, any personal data provided during your application will be processed. We will process the following personal data during the application process:
- your title;
- your first name;
- your last name;
- your address;
- your civil status;
- your nationality;
- your email address; and
- your telephone number.
We will also process the personal data contained in your CV and cover letter, as well as any other personal data you may upload.
b) Legal basis
Consent, point (a) of Art. 6 (1) GDPR, Art. 88 (1) GDPR in conjunction with Section 26 (2) of the Federal Data Protection Act (BDSG). Or, if special categories of personal data are processed: Consent, point (a) of Art. 9 (2) GDPR. Establishment of an employment relationship: point (b) of Art. 6 (1) GDPR, Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG.
c) Purpose
We will process this data for the purpose of conducting the application process and taking steps prior to establishing an employment relationship.
d) Retention period
Your personal data will be deleted or blocked as soon as it is no longer required for the purpose for which it was originally processed. If we do not enter into an employment contract with you after completing the application process, we will store your data – and block it from further access – for up to 6 months following the application process due to the burden of proof in relation to discrimination claims pursuant to Section 21 (5) and Section 22 of the German General Act on Equal Treatment (AGG). If we enter into an employment contract with you after completing the application process and thereby establish an employment relationship, we will store your personal data obtained during the application process until the end of the employment relationship. Your personal data may be stored beyond this period if this is stipulated by EU law or national legislation through EU regulations, laws or any other provisions to which we are subject.
e) Right of erasure and right to object
You may withdraw your consent at any time during the application process. Your personal data will then be deleted. However, we will no longer be able to consider your application. If we enter into an employment contract with you and thereby establish an employment relationship, the processing of your personal data will be essential for us to perform the employment contract. This means that you do not have the right to object.
7. Contacting us
Contact form and email correspondence
a) Description and scope
If you use our contact form or write to us by email, the following personal data will be processed:
- your title;
- your first name;
- your last name;
- your company;
- your email address;
- your address;
- your telephone number; and
- the content of your message.
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of handling your enquiry.
d) Retention period
Your personal data will be stored until the relevant purpose no longer applies. This will usually be the case once your enquiry has been handled, unless longer retention periods apply.
e) Right of erasure and right to object
You may always object to the future processing of your personal data obtained through our correspondence. However, this will prevent us from handling your enquiry. If you do this, any personal data stored over the course of our communication will be deleted, unless this is prevented by statutory retention periods. Your personal data will then be blocked until the end of the statutory retention periods.
8. Marketing
Google Analytics
a) Description and scope
We will use Google Analytics to analyse your browsing habits. Whenever you access individual pages on our website, the following data will be stored: IP address of the accessing system; the page accessed on our website; the website from which you have been redirected to the page (referrer URL); the sub-pages you open from the page accessed on our website; the amount of time spent on the page; mouse and keyboard behaviour; and the frequency with which you access the page. Your personal data will only be stored there. Your data will not be passed on to third parties.
b) Legal basis
Consent, Section 25 (1) TDDDG in conjunction with Art. 6 para. 1 sentence 1 lit. a) EU GDPR.
c) Purpose
We will process this data for the purpose of analysing your browsing habits. By evaluating the data obtained, we will be able to compile information about the way in which you use individual components of our website. This will help us to continually improve our website and make it more user-friendly.
d) Retention period
You can find a detailed list of the storage duration of each of the ‘tracking cookies’ we use at You can find a detailed list of the storage duration of each of the ‘tracking cookies’ we use in our cookie banner under the heading ‘Change’. You can call up this cookie banner again at any time by clicking on the ‘Change privacy settings’ button at the end of this privacy policy.
e) Right of erasure and right to object
You may always object to the future processing of your personal data in the context of the use of Google Analytics. To do so, simply click on the ‘Change privacy settings’ button at the end of this privacy policy.
9. change the settings of your browser
Alternatively, you can generally deactivate or restrict the transmission of cookies by changing the settings in your browser. You can delete cookies that have already been saved at any time. This can also be done automatically. If technically necessary cookies are also deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
10. Browser add-on
If you do not want your personal data to be processed by Google Analytics, you can also install the browser add-on to deactivate Google Analytics. This add-on instructs the Google Analytics JavaScript (ga.js, analytics.js and dc.js) executed on websites not to allow information to be sent to Google Analytics.
If you wish to deactivate Google Analytics, go to the page below and install the add-on to deactivate Google Analytics for your browser. Detailed information on installing and uninstalling the add-on can be found in the relevant help resources for your browser.
Browser and operating system updates may result in the deactivation add-on no longer working as intended. Further information on managing add-ons for Chrome can be found on the pages listed below. If you are not using Chrome, check directly with your browser manufacturer to see if add-ons are working properly in the browser version you are using.
The latest versions of Internet Explorer occasionally load the add-on to deactivate Google Analytics after personal data has already been sent to Google Analytics. If you are using Internet Explorer, the add-on will therefore install cookies on your computer. These cookies ensure that any data collected is immediately deleted from the server that collected the data. Make sure that third-party cookies are not deactivated for Internet Explorer. If you delete your cookies, these cookies will be reset within a short time by the add-on to ensure that your Google Analytics browser add-on continues to work without restriction.
The browser add-on for deactivating Google Analytics does not prevent personal data from being sent to the website or to other tracking services.
You can find more information on terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de.
IP anonymisation is also activated on our website.
11. Data protection and legal issues
1. Exercising your rights as a data subject under Art. 12 et seq. GDPR
a) Description and scope
If you exercise your rights as a data subject, we will process your personal data when responding to your request. The contact details you provide in this context will be processed exclusively for the purpose of dealing with and responding to your message and then subsequently documenting the fact that we have handled your request in accordance with the law within the scope of our accountability. If you exercise your rights as a data subject, we will process the following personal data when responding to your request:
- your first name;
- your last name;
- your postal address;
- your email address;
- and your telephone number.
b) Legal basis
Legal obligation, point (c) of Art. 6 (1) GDPR in conjunction with Art. 12 et seq. GDPR. Legitimate interest in subsequent documentation, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of responding to your rights as a data subject in a legally compliant manner.
d) Retention period
We will store your personal data for 3 years after the process has been completed, Section 41 BDSG in conjunction with Section 31 (2) No. 1 of the German Act on Regulatory Offences (OWiG).
e) Right of erasure and right to object
If you exercise your rights as a data subject, you may always object to the future processing of your personal data in connection with the handling of such requests. However, this will prevent us from responding to your requests. As it is essential to document the fact that we have responded to your request in a legally compliant manner, you do not have the right to object.
2. Legal defence and enforcement of rights and claims
1. Description and scope
We will process your personal data if you assert any legal claims against us or if we assert any claims and rights against you.
2. Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
3. Purpose
We will process this data for the purpose of defending against unjustified claims and asserting and enforcing our legal rights and claims. This also represents our legitimate interest.
4. Retention period
Your personal data will be stored until the relevant purpose no longer applies. This will usually be the case when the relevant decision becomes legally binding.
5. Right of erasure and right to object
As the processing of your personal data is essential for our legal defence and the enforcement of our rights and claims, you do not have the right to object.
1. Facebook
a) Description and scope
We run a Facebook page, where we process personal data to contact and interact with Facebook users and guests. We also post information about our company from time to time.
If you contact us directly via our Facebook page (e.g. via Facebook Messenger), the data you share will only be processed for the purpose of recording and responding to your enquiry as a current or prospective customer.
We are also able to generate statistics on visits to our Facebook page. This information is compiled by Meta (“Facebook Insights”) and enables us to market our activities in a more effective and targeted manner.
With regard to the data provided by Facebook Insights, we are jointly responsible for data processing in collaboration with Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). For this purpose, we have entered into an agreement with Meta Platforms Ireland Limited regarding our respective obligations under the GDPR.
The essential contents of the agreement can be viewed here: https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/legal/terms/page_controller_addendum
You can find out which data is used by Meta to analyse the use of our Facebook page and which information Meta provides for data processing via Facebook Insights here: https://de-de.facebook.com/legal/terms/information_about_page_insights_data
For more information on how Meta Platforms Ireland Limited will process your personal data, please visit: https://www.facebook.com/about/privacy and https://de-de.facebook.com/legal/terms/information_about_page_insights_data
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of analysing your behaviour on our Facebook page, designing our Facebook page to match your interests, and handling enquiries.
d) Retention period
For more information on how long your personal data will be stored by Meta Platforms Ireland Limited, please visit: www.facebook.com/about/privacy
e) Right of erasure and right to object
If you do not want your personal data to be collected through our Facebook page, you may object to the future processing of your personal data in this context at any time. We will forward your objection to Meta Platforms Ireland Limited.
2. Instagram
a) Description and scope
We run an Instagram channel, where we process personal data to contact and interact with Instagram users and guests. We post information about our company there.
If you contact us directly via our Instagram channel (e.g. via Instagram Direct Messenger), the data you share will only be processed for the purpose of recording and responding to your enquiry as a current or prospective customer.
We are also able to generate statistics on visits to our Instagram channel. This information is compiled by Meta (“Instagram Insights”) and enables us to market our activities in a more effective and targeted manner.
With regard to the data provided by Instagram Insights, we are jointly responsible for data processing in collaboration with Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). For this purpose, we have entered into an agreement with Meta Platforms Ireland Limited regarding our respective obligations under the GDPR.
The essential contents of the agreement can be viewed here: https://www.facebook.com/legal/controller_addendum and https://www.facebook.com/legal/terms/page_controller_addendum
You can find out which data is used by Meta to analyse the use of our Instagram channel and which information Meta provides for data processing via Instagram Insights here: https://de-de.facebook.com/legal/terms/information_about_page_insights_data
For more information on how Meta Platforms Ireland Limited will process your personal data, please visit: https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/legal/terms/information_about_page_insights_data
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of analysing the success of our Instagram channel, designing our Instagram channel to match your interests, and handling enquiries.
d) Retention period
For more information on how long your personal data will be stored by Meta Platforms Ireland Limited, please visit: https://privacycenter.instagram.com/policy/
e) Right of erasure and right to object
If you do not want your personal data to be collected through our Instagram channel, you may object to the future processing of your personal data in this context at any time. We will forward your objection to Meta Platforms Ireland Limited.
3. LinkedIn
a) Description and scope
We run a LinkedIn page, where we process personal data to contact and interact with users and guests. We post information about our company there.
If you contact us directly via our LinkedIn page (e.g. by sending us a message), the data you share will only be processed for the purpose of recording and responding to your enquiry.
We are also able to generate statistics on visits to our LinkedIn page. This information is compiled by LinkedIn (“Page Insights”) and enables us to market our activities in a more effective and targeted manner.
With regard to the data provided by Page Insights, we are jointly responsible for data processing in collaboration with LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland). For this purpose, we have entered into an agreement with LinkedIn Ireland Unlimited Company regarding our respective obligations under the GDPR.
The essential contents of the agreement can be viewed here: https://legal.linkedin.com/pages-joint-controller-addendum
You can find out which data is used by LinkedIn to analyse the use of our LinkedIn page and which information LinkedIn provides for data processing via Page Insights here: https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de
For more information on how LinkedIn Ireland Unlimited Company will process your personal data, please visit: https://de.linkedin.com/legal/privacy-policy
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of analysing the success of our LinkedIn page, designing our LinkedIn page to match your interests, and handling enquiries.
d) Retention period
For more information on how long your personal data will be stored by LinkedIn Ireland Unlimited Company, please visit: https://www.linkedin.com/legal/privacy-policy
e) Right of erasure and right to object
If you do not want your personal data to be processed by LinkedIn, you may object to the future processing of your personal data through our LinkedIn page at any time. For more information on how LinkedIn will process your personal data, please visit: https://de.linkedin.com/legal/privacy-policy
4. YouTube
a. Description and scope
We run a YouTube channel operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). As the operator of YouTube, Google Ireland Limited collects and processes personal data to the extent described in its privacy policy.
For more information on how Google Ireland Limited will process your personal data, please visit: https://policies.google.com/privacy?hl=de&gl=de
If you contact us directly via our YouTube channel (e.g. by sending us a message or posting a comment), the data you share will only be processed for the purpose of recording and responding to your enquiry.
We are also able to generate statistics on visits to our YouTube channel. This information is compiled by YouTube (“Analytics”) and enables us to market our activities in a more effective and targeted manner. You can find out which data is used by YouTube to analyse the use of our YouTube channel and which information YouTube provides for data processing via Analytics here: https://support.google.com/youtube/answer/9002587?hl=de
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of analysing your behaviour when you visit our YouTube channel, analysing the success of the videos we upload, and handling enquiries.
d) Retention period
For more information on how long your personal data will be stored by Google Ireland Limited, please visit: policies.google.com/privacy;
e) Right of erasure and right to object
If you do not want your personal data to be processed by Google Ireland Limited, you may object to the future processing of your personal data through our YouTube channel at any time. We will forward your objection to Google Ireland Limited.
5. New and existing customer relationships
a) Description and scope
As part of new and existing business relationships with our customers, we will process your personal data if any of our customers name you as a contact for specific issues. We will process the following personal data as part of new and existing business relationships with our customers: your first name; your last name; your company name; your business address; your business email address; and your business telephone number.
b) Legal basis
Legitimate interest, point (f) of Art. 6 (1) GDPR.
c) Purpose
We will process this data for the purpose of awarding, executing and billing the relevant contract and conducting future contract awards or tenders.
d) Retention period
Your personal data will be stored until there is a change of designated contact, until the contract is completed, or until all claims arising from the contractual relationship have expired. Your personal data may be stored beyond this period if this is stipulated by EU law or national legislation through EU regulations, laws or any other provisions to which we are subject.
e) Right of erasure and right to object
As the processing of your personal data is essential for the purpose of awarding, executing and billing the relevant contract, you do not have the right to object.
6. Applicants
a) Description and scope
We would like to provide the following information regarding the processing of your personal data during the application process:
b) Legal basis
1. Personal data
If we obtain your consent to process your personal data, the legal basis for that form of processing will be point (a) of Art. 6 (1) GDPR, Art. 88 (1) GDPR in conjunction with Section 26 (2) BDSG.
If data processing is necessary to establish an employment contract, the legal basis for that form of processing will be point (b) of Art. 6 (1) GDPR, Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG, Section 611a of the German Civil Code (BGB).
If data processing is necessary for compliance with a legal obligation to which we are subject, the legal basis for that form of processing will be point (c) of Art. 6 (1) GDPR.
If data processing is necessary to protect your vital interests or those of another natural person, the legal basis for that form of processing will be point (d) of Art. 6 (1) GDPR.
If data processing is necessary for the purpose of legitimate interests pursued by us or by a third party, except where such interests are overridden by your own interests or fundamental rights and freedoms, the legal basis for that form of processing will be point (f) of Art. 6 (1) GDPR.
2. Special categories of personal data
If we obtain your consent to process any special categories of personal data (Art. 9 (1) GDPR), such as religious affiliation, nationality or data concerning health, the legal basis for that form of processing will be point (a) of Art. 9 (2) GDPR.
If the processing of special categories of personal data is necessary for the purposes of carrying out our obligations and exercising specific rights in the field of employment and social security and social protection law, the legal basis for that form of processing will be point (b) of Art. 9 (2) GDPR, Art. 88 (1) GDPR in conjunction with Section 26 (3) BDSG.
If the processing of special categories of personal data is necessary to protect your vital interests, the legal basis for that form of processing will be point (c) of Art. 9 (2) GDPR. If the processing relates to special categories of personal data that you manifestly make public, the legal basis for that form of processing will be point (e) of Art. 9 (2) GDPR.
If the processing of special categories of personal data is necessary for the purposes of preventive or occupational medicine or for the assessment of working capacity, the legal basis for that form of processing will be point (h) of Art. 9 (2) GDPR.
c) Purpose
We will process this data for the purpose of establishing an employment relationship, in particular for the purpose of complying with obligations set out in employment contracts, legislation, any collective agreements and social security law.
d) Retention period
Your personal data will be deleted or blocked as soon as it is no longer required for the purpose for which it was originally stored. Your personal data may be stored beyond this period if this is stipulated by EU law or national legislation through EU regulations, laws or any other provisions to which we are subject. Your data will also be deleted or blocked at the end of any retention period specified in such regulations, unless your data has to be stored beyond this period for the purpose of entering into or performing a contract.
We will then store your data for the following periods (not an exhaustive list):
application documents and data: up to 6 months following rejection decision due to the burden of proof in relation to discrimination claims, retention period pursuant to Section 21 (5) and Section 22 AGG;
and application documents in other cases: upon dissolution or termination of the employment relationship.
e) Right of erasure and right to object
As the processing of your personal data during the application process is essential to establish an employment relationship, you do not have the right to object. If your personal data is processed based on your consent, you will have the option to withdraw your consent at any time.
Your personal data will be received by the units and departments within our company that need it for the purposes mentioned above. We may also use different service providers and may send your personal data to other trusted recipients. This may include the following:
- banks;
- scanning services;
- printing houses;
- lettershops;
- IT service providers;
- partners;
- lawyers and courts;
- auditors;
- tax advisors; and
- external consulting firms.
When processing your personal data, we may transfer it to trusted service providers in third countries. Third countries are those outside the European Union (EU) or European Economic Area (EEA).
We will only work with service providers who provide us with appropriate safeguards for your personal data and who can guarantee that your personal data will be processed in accordance with strict European data protection standards. A copy of the appropriate safeguards can be viewed at our offices.
If we transfer your personal data to third countries, this will be done on the basis of an adequacy decision from the European Commission or, if no such decision has been adopted, on the basis of standard data protection clauses issued by the European Commission.
You may assert the following rights against us:
1. Right of access
You have the right to obtain confirmation as to whether we are processing your personal data and, where that is the case, access to the personal data in question. We will also inform you about:
- the purpose of processing;
- the categories of data concerned;
- the recipients of your personal data;
- the envisaged period for which the data will be stored or the criteria used to determine this period;
- your other rights;
- where your personal data has not been collected from you, any available information as to its source; and
- the existence of automated decision-making and information about the logic involved, as well as the significance and envisaged consequences of such processing.
2. You have the right to request the rectification and/or supplementation of any personal data we are processing that is incorrect or incomplete.
3. Right to the restriction of processing You have the right to request the restriction of processing if:
- we have to verify the accuracy of your personal data that we are processing;
- the processing of your personal data is unlawful;
- we no longer need your personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims; or
- you have objected to the processing of your personal data pending verification.
4. Right to erasure
You have the right to erasure if:
- we no longer need your personal data for the original purposes of processing;
- you withdraw your consent and there is no other legal basis for the processing of your personal data;
- you object to the processing of your personal data and, unless the processing relates to direct marketing, there are no overriding legitimate grounds for further processing; the processing of your personal data is unlawful;
- the deletion of your personal data is required by law; or
- your personal data as a minor has been collected for information society services.
5. Right to information
If you exercise your right to rectification, erasure or the restriction of processing, we will inform all recipients of your personal data about the rectification or erasure of the data or the restriction of processing.
6. Right to data portability
You have the right to receive any personal data we are processing on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format and to transfer the data to another controller. You have the right to have us transfer the data directly to another controller, provided this is technically feasible.
7. Right to object
You have the right to object to the processing of your personal data on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate legitimate grounds for processing.
8. Right to withdraw your consent
You have the right to withdraw any consent you have given us at any time. If you withdraw your consent, this will not affect the lawfulness of any data processing carried out on the basis of your consent up to that point.
9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you believe that we are processing your personal data in violation of the GDPR. The competent supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
Cookie settings
Our websites and mobile apps use cookies. By clicking on the ‘I agree to the use of marketing cookies’ button, you consent to us using marketing cookies to process your website and cross-device surfing behaviour for the purpose of improving convenience, website optimisation, user behaviour analysis and the display of personalised advertising – pseudonymised. Please note that the United States (USA) is a so-called third country that does not offer an adequate level of protection for your personal data. For example, US authorities can access your data stored by our service providers without a specific reason and without judicial authorisation. This consent is voluntary and not necessary for the use of our website. You can deactivate individual cookie categories within the privacy policy and thus revoke your consent at any time with effect for the future. The setting of so-called ‘technically necessary cookies’, i.e. cookies that simplify the use of our websites and mobile apps for you and enable some functions of our websites and mobile apps in the first place, is absolutely necessary and therefore does not require consent.
If you do not wish to consent to the processing of your data by marketing cookies, please select the ‘Only technically necessary cookies’ button.
Cookies are small text files that are used by websites to make the user experience more efficient.
By law, we can store cookies on your device if they are absolutely necessary for the operation of this site. For all other types of cookies, we need your permission.
This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.
You can change or withdraw your consent at any time from the cookie statement on our website.
Find out more about who we are, how you can contact us and how we process personal data in our privacy policy.
Please provide your consent ID and date when you contact us regarding your consent.
Your consent applies to the following domains: www.isoplus.group
Let us know if you have any questions.