Effective from 25 May 2018, the European data protection regulation came into force and thus new data protection requirements have to be met. In compliance with General Data Protection Regulation (GDPR), GÖRLITZ AG has a responsibility to make individuals aware of their rights and ensure mechanisms are in place to act on these.
Data protection officer:
2. Information about processing and lawfulness:
We at GÖRLITZ AG process your data in compliance with General Data Protection Regulation (GDPR), German Bundesdatenschutzgesetz (BDSG) and other relevant and applicable law and regulations.
We at GÖRLITZ require personal data to process applications in compliance with labour law. Procession complies with Article 88 GDPR (and § 26 BDSG).
Personal data related to an application is processed to meet legal requirements our company has to consider. Processing complies with Article 6(1)(c) GDPR.
Finally, personal data is processed when the person affected has consented to the processing (eg your application shall be taken into consideration for future job advertisements). Processing complies with Article 6(1)(a) GDPR.
3. Categories of recipients of personal data
Recipients of personal data transferred by our company are at first all service providers or contractors who process personal data on our behalf (eg providers of EDP or IT services). They act as processors in compliance with Article 28 GDPR. Processing by a processor is governed by a contract made with the controller.
Other recipients of personal data are members of GÖRLITZ that are responsible for applications and advertised the particular post. For a list of our subsidiaries, please go to www.goerlitz.com.
For our subsidiary in Switzerland, the data protection level shall be considered as fully adequate and for the moment it persists as stipulated in Article 45(9) GDPR. In accordance with GDPR, a transfer of personal data to a third country (here Switzerland) can thus take place when the third country ensures an adequate level of protection.
4. Transfer to third countries
We do not transfer personal data to third countries. Third countries are countries that do not belong to the European union/EEC.
5. Storage period of personal data
With regard to deleting your personal data stored, we follow a specific concept that applies to the whole group. We allocate personal data to deletion categories. These categories provide specific periods for retention as well as deletion of personal data. After expiry of these standard periods personal data shall be deleted.
Personal data stored that is related to an application shall be deleted three months after termination of the particular application procedure or expiry of the period during which we could face legal claims provided we are not obliged to keep data longer (eg retention time stipulated in German law, sometimes up to 10 years).
6. Rights of the data subject
The GDPR protects fundamental rights and freedoms of natural persons. You as the data subject shall have:
- the right to access (Article 15)
- the right to rectification (Article 16)
- the right to erasure (Article 17)
- the right to restriction of processing (Article 18)
- the right to object (Article 21)
- the right to data portability (Article 20).
7. Right to object
Provided processing of personal data is based on Article 6(1)(a) or Article 9(2) GDPR and related to processing specific personal data with your given permission, you have the right to object at any times to the processing of your personal data. Objection, however, does not revoke lawfulness of processing that has been made based on your given consent until objection.
You may assert your rights against our company by writing an email to
8. Right to lodge a complaint with a supervisory authority
Please address any possible claim to:
Der Landesbeauftragte für den Datenschutz und
die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
Phone: +49 (0) 6131 208-2449
Fax: +49 (0) 6131 208-2497
In compliance with Article 77(1) GDPR, every data subject shall have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes law and regulations.
9. Provision of personal data
Our group offers various services based on a contract that has been agreed on between you as data subject and our company. Under the terms of the contract, you shall be obliged to provide specific personal data to us. Among such data, there are details required by our company to be able to fulfil the contracts (eg address, ways of payment, etc). If these details are not provided, contracts with our company cannot be made.
10. Automated individual decision-making, including profiling
Our company does not take any measures to enable automated individual decision-making, such as, for example, profiling (eg provision of information about preferences or behaviour of the data subject) in terms of Article 22 GDPR.
Status as of: May 2018 – We will keep you up-to-date in case of modifications, changes and the like.