V2 (022024)
Bertrandt AG uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Bertrandt AG.
With regard to interaction within the company account of Bertrandt AG, Bertrandt AG and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Bertrandt AG, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Bertrandt AG in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Bertrandt AG only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
The protection of your personal data is very important to us. We would therefore like to provide you with transparent information about our data protection principles and the procedures for using your information when you make an application via our e-Recruiting system. When applying to Bertrandt AG, you are applying to join an innovative company with modern IT and HR processes and systems.
By completing the registration and submitting your application, you agree:
You can object to data processing at any time However, if you do so, we will no longer be able to consider your application in our selection process. Further details can be found in our Data Privacy Statement.
You also confirm that you have read and understood our Data Privacy Statement.
The protection of your personal data is very important to us. We would therefore like to inform you about our data protection principles and the procedures for using your data as part of your application via our e-recruiting system.
Bertrandt uses both technical and organisational security measures to protect your data from manipulation, loss, destruction or unauthorised access and reviews the security measures in line with technological developments.
Bertrandt AG uses the onlyfy one (by XING) service to process applications. This privacy policy informs you about the processing of your data.
onlyfy one
onlyfy one is part of New Work SE's comprehensive XING service, which aims to help improve and simplify users' professional lives through a variety of different applications (onlyfy one as well as the XING social network, kununu, etc.) and to make the world of work more fulfilling for individuals and more successful for companies at the same time. onlyfy one, as part of the comprehensive XING service, is an online platform that brings talents and companies together. Companies can use onlyfy one to publish job adverts, identify interesting talents (including from the XING professional network), receive and manage applications and exchange information with talents and applicants. New Work SE supports this coming together of talents and companies on or via onlyfy one. This is done, among other things, by recommending talents and displaying them in the customer's company account as well as by generating and providing recruiting-relevant information and analyses based on data that New Work SE processes in onlyfy one and, if applicable, in other XING applications or externally.
Shared responsibility
With regard to the interaction in the company account of Bertrandt AG, there is a so-called joint responsibility of Bertrandt AG and New Work SE pursuant to Art. 26 GDPR, as they jointly determine the purposes and means of processing within the meaning of Art. 4 No. 7 GDPR. The current version of the agreement on joint responsibility pursuant to Art. 26 GDPR, which New Work SE concludes with the companies that use onlyfy one, can be viewed here as an appendix to the GTC https://www.xing.com/terms/onlyfy-one to find out about the essentials of the agreement.
Data processing by New Work SE
With regard to the data processing for which New Work SE is solely responsible or is responsible within the scope of joint responsibility with Bertrandt AG, you will find more detailed information in the data protection declaration of XING, https://privacy.xing.com/de/datenschutzerklaerung. There you will also find the contact details of New Work SE and the company data protection officer of New Work SE.
Interruption of your online application
You can interrupt the creation of your online application at any time and continue at a later date. Cookies are used for this purpose. Data provided by you to create the user account and uploaded documents are recorded in the Bertrandt AG company account in onlyfy one. The data remains recorded even if you interrupt and/or do not complete an application. In this case, your application will be marked as incomplete and the data will remain accessible to Bertrandt AG to a limited extent.
Visibility of your data
You can view, edit or update the data you provided in the online application in your candidate profile at any time.
Notes on special functions of onlyfy one
Calendar function
If the calendar function is used, your data will be processed as part of and for the purpose of making appointments in the application process. The legal basis is Art. 6 para. 1 lit. f GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is categorised as a safe third country on the basis of the European Commission's adequacy decision. You can find more information about Cronofy's data protection here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/.
WhatsApp application
The data processing information listed under Information on data processing for applications via WhatsAPP from New Work SE does not apply, as Bertrandt, as the responsible body, does not use the WhatsApp application provided by New Work SE for integration into Onlyfy.
The following privacy policy applies to the WhatsApp function:
If you use WhatsApp, you have agreed to the WhatsApp terms of use. When applying via WhatsApp, all necessary applicant information is requested via a WhatsApp chat. The data is then imported directly into onlyfy one via a service provider and processed there as part of and for the purpose of the normal application process.
The application-per-WhatsApp function is provided by an IT service provider. There is an order processing contract with this service provider.
Please note that you use your own private WhatsApp account for the application and therefore a transfer, especially to the USA, cannot be excluded. The USA is currently considered an unsafe third country, which means that it may not be able to guarantee the EU data protection standard. The transfer may entail certain data protection risks (e.g. unauthorised access to your data by US security authorities). However, the messages sent and received are end-to-end encrypted.
You can find WhatsApp's data protection information, for example on its processing or on exercising your data protection rights vis-à-vis WhatsApp, here: https://www.whatsapp.com/legal/privacy-policy-eea.
If you want to withdraw consent, please contact support@onlyfy.com
Within the meaning of the General Data Protection Regulation (GDPR), the controller of the processing of personal data as part of the application process is:
Name of controller:
Bertrandt AG
Birkensee 1
71139 Ehningen
Germany
Address of controller:
Bertrandt AG
Birkensee 1
71139 Ehningen
Germany
Tel: + 49 7034 656-0
Fax: + 49 7034 656-4151
Email: info@bertrandt.com
Our Data Protection Officer is available to answer any questions you may have about the processing of your personal data. Please contact: datenschutz@bertrandt.com
Michael Walther
datenschutz@bertrandt.com
As part of the application process, we store the personal data provided by you. This applies to applications for specifically advertised vacancies as well as speculative applications.
When you register on our careers page, you either apply for a specific job advertisement or are looking for a job with us on your own initiative. The data which we request from you will be used by Bertrandt AG across the entire Group as well as by existing and potentially interested customers exclusively for the purpose of filling vacancies.
For the purposes of processing, the data provided by you is divided into the following categories:
In addition, we create data on the assessments and evaluations undertaken as part of the application process and keep a record of the application process.
Data collection and processing in the context of the application process are based on the legal provisions of Article 6 (1) (b) and (f) of the GDPR and Section 26 (1) of the Federal Data Protection Act.
We will process your data for similar recruitment procedures, regardless of whether you made a speculative application or responded directly to a job advertisement during your registration.
You can view, update and delete your data at any time in your Applicant Cockpit. Please note that you are responsible for the accuracy of your data.
In addition, we will process and use your data for the purposes of advice, advertising and market research only with your express consent, which must be given separately.
In detail, Bertrandt AG s, as well as the subsidiaries of Bertrandt AG, which are affiliated companies within the meaning of Section 18 of the German Companies Act, the following personnel have access to your data:
In case of potentially interested customers, these may include:
The data is transferred exclusively for the purpose of the verification of your qualifications and in the context of processing current and subsequent application procedures and vacancy filling processes, as far as necessary to process the applications received.
Only such departments will receive your data that are entrusted with the preparation and implementation of the application process and staffing processes and whose involvement is necessary.
Your application is therefore not restricted to the specific position you have applied for.
You can find an overview of our affiliated companies within the meaning of Section 18 of the German Companies Act at: https://www.bertrandt.com/unternehmen/konzern/standorte/
For the technical implementation of the e-Recruiting process, we use a service provider who acts as a “processor” within the meaning of Article 28 of the GDPR. It processes personal data for these purposes and does so on our behalf and in accordance with our instructions.
If a transfer of data to third countries is necessary, this can take place provided that an appropriate level of security or guarantees are in place.
Your profile is activated whenever contact or changes are made, either by you or the recruiter, and is stored for a period of 180 days. Unless subject to a statutory retention period, the data will be erased as soon as storage is no longer required or the legitimate interest in its storage has expired. If your application is unsuccessful, this is usually the case no later than six months after completion of the application process or after 6 months of inactivity, either by you or the recruiter.
In individual cases, individual data may be stored for a longer period (e.g. statement of travel expenses). In such cases, the duration of storage is based on the statutory retention requirements arising, for example, from the German Tax Code (6 years) or the German Commercial Code (10 years).
You will not be notified when your profile is about to be deleted and you will receive no confirmation of its deletion. If you are still awaiting feedback regarding a position, please contact the responsible recruiter.
You can view, update and delete your data at any time in your Applicant Cockpit. Please note that you are responsible for the accuracy of your data.
You have the following rights as a data subject:
The restrictions according to Sections 34 and 35 of the Federal Data Protection Act apply to the right of access and the right to erasure.
In addition, you have a right to lodge an appeal with a data protection supervisory authority in accordance with Article 77 of the GDPR in conjunction with Section 19 of the Federal Data Protection Act, if you are of the opinion that your personal data is being processed unlawfully.
The Data Protection Supervisory Authority responsible for our company is:
The Baden-Württemberg State Commissioner for Data Protection and Freedom of Information
Königstraße 10 a
70173 Stuttgart
Germany
PO Box 10 29 32
70025 Stuttgart
Germany
Tel: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
You have the right to object, on grounds of legitimate interest, at any time to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the GDPR (processing of data on the basis of a balance of interests). You can object to the data processing at any time with effect for the future. An objection will result in the termination of your application procedure.
To enforce your right to object, please send us an email to career@bertrandt.com. This email address is protected against spambots. JavaScript must be activated to ensure that it can be displayed.
You can also contact us by post:
Bertrandt AG HR Marketing and Recruitment
Birkensee 1
71139 Ehningen
Germany
No automated individual decision-making within the meaning of Article 22 of the GDPR takes place.
"Cookies" are used in several places when you use the online recruitment website. They serve to make the recruitment application more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer. Session cookies are discarded when you leave our website. Permanent cookies (e.g. for functions such as "remember password") remain stored on your computer's hard drive by your browser until they are deleted. You can prevent the placement of cookies by choosing the appropriate settings of your browser software. However, please note that you may then not be able to make full use of all the website functions.
Cookies may be necessary to ensure the functionality of our website. The use of such cookies does not require consent and can therefore not be deactivated. Cookies which serve the purpose of "analysing" your behaviour whilst on our website are only placed with your consent. If we use cookies that require consent, a cookie banner will be displayed when you visit our website for the first time. You will then be asked to agree to the use of cookies requiring consent. If you wish to change your cookie settings at a later date, you can make this change on the website by going to "Cookies".
The following is a list of the cookies used:
The following cookies are used by Onlyfy:
Provider: Onlyfy
Cookie: PHPSESSID
Purpose: This cookie is used to identify the user while using Onlyfy. The cookie is essential for correct functionality. The cookie expires when the browser is closed.
Duration of storage: Until the browser window is closed (session cookie).
Provider: Onlyfy
Cookie: REMEMBERME
Purpose: This cookie is used to restore an expired session. The cookie is essential for correct functionality.
Duration of storage: The cookie expires after 2 weeks.
Bertrandt AG is responsible for data processing. If you have any queries, please contact Bertrandt AG, -Datenschutz- Birkensee 1, 71139 Ehningen or by e-mail Datenschutz@Bertrandt.com, phone: +49 7034 656-0
Mr. Michael Walther, e-mail: Datenschutz@Bertrandt.com
Your data is collected in order, to
Your data are processed on the basis of Art. 6(1)(f) of the General Data Protection Regulation (legitimate interest).
The data controller processes the data for the purpose of optimal process design. The interests, fundamental rights and freedoms of the data subjects are not affected. The personal data are generated from public sources and processed by the controller. The controller provides transparent information about the data processing. The processing of personal data by the controller on the basis of legitimate interests is permissible.
You have the right to object to the processing of your personal data at any time, in accordance with Article 21 of the General Data Protection Regulation. You can exercise your right to object directly by contacting the data controller using the contact details above.
We process the following personal data from you:
Bertrandt AG (this includes Bertrandt AG and affiliated companies within the meaning of Section 18 of the German Stock Corporation Act (these can be found at https://www.bertrandt.com/unternehmen/konzern/standorte/),
The following categories of data are processed:
Data will only be transferred outside the EU / EEA if an appropriate level of security is guaranteed.
The storage period is indefinite until the purpose of the data processing ceases to apply or until you object.
You have various rights under the General Data Protection Regulation. Details can be found in particular in Articles 15 to 18 and 21 of the General Data Protection Regulation.
Right of access
You can request information about the personal data we process. In your request for information, you should specify your request in order to make it easier for us to compile the necessary data.
Right to erasure
You can request the deletion of your personal data.
Right to restriction of processing
You have the right to request restriction of the processing of data relating to you.
Right to data portability
You have the right to data portability of your personal data processed by us, in a common machine-readable format.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of data concerning you.
Right to complain
If you believe that we have not complied with your request or not fully complied with your request, you may lodge a complaint with the relevant data protection supervisory authority.
We use publicly available social media sources (for example LinkedIN, XING) to collect personal data
There is no obligation on your part to provide the data. You may object to the data processing at any time by contacting the data controller.
No, there is no automated decision-making including profiling.
