Information for applicants about the collection of personal data, provided in accordance with article 13 of the EU General Data Protection Regulation
Our company regards compliance with data protection law requirements as extremely important.
Under the European General Data Protection Regulation (GDPR), we have an obligation to provide information about the collection of your personal data and your associated rights.
The following information is designed to explain to you how we collect and process your personal data in connection with your application:
Personal data is information that can be used to identify you. It includes information such as your name, contact details and photos.
The company you have applied to is the entity responsible for collecting and processing your data (the "controller").
When you submit an application to us, we process data about you that we need in connection with the application process. This may include contact details, all information relating to your application (e.g. CV, references, qualifications, responses to questions etc.) and, if applicable, bank account details (to reimburse travel expenses). Our authority to process this data is based on section 26 of the new Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
Our company [GREY Düsseldorf GmbH, GREY Germany GmbH, GREY Shopper GmbH] is part of a corporate network. If you did not apply directly for a position at Grey Düsseldorf GmbH, your application will be processed initially by our recruiting specialists at Grey Düsseldorf GmbH and, if applicable, forwarded from there to the recruiting company for a final decision on the success of the application.
It goes without saying that your data is treated as confidential. We do not transfer your data to third parties. Where necessary, we engage service providers who are strictly bound by our instructions to assist us with IT matters or in archiving and destroying documents. We enter into separate data processing agreements with these service providers in order to ensure that your data is handled securely and in accordance with the law.
Unless statutory retention periods apply, data is erased as soon as its storage is no longer necessary. For unsuccessful applicants, this usually occurs no later than six months after the completion of the application process. Certain data may be stored for longer in individual cases (e.g. for the settlement of travel expenses). In that case, the duration of storage is governed by the statutory retention periods.
As the person affected by data collection (the "data subject"), you have a right of access to the personal data concerning you, a right to have inaccurate data corrected and a right of erasure if any of the grounds under article 17 GDPR applies, e.g. if the data is no longer necessary for the purposes for which it was collected or processed. You also have a right to restrict processing if any of the criteria under article 18 GDPR applies, a right to object if the requirements of article 21 GDPR are met, and a right to data portability if the requirements of article 20 GDPR are met.
Every data subject also has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of his or her personal data infringes data protection laws. This right may be exercised by lodging a complaint with a supervisory authority in the member state of the data subject's habitual residence or place of work, or the place of the (alleged) infringement.
To exercise the above rights, please contact hr@grey.de, HR Abteilung, Grey Düsseldorf GmbH, Platz der Ideen 1, 40478 Düsseldorf
Our Data Protection Officer is Mr Hannes Oenning, WPP Deutschland Holding GmbH & Co KG, Darmstädter Landstr. 112, 60598 Frankfurt am Main, dsb@wpp-germany.de
[Last updated: May 2018]
