Information for employees

Privacy policy status: 10.11.2020

Data protec­tion infor­ma­tion for employees accor­ding to the EU General Data Protec­tion Regu­la­tion

I. Who is responsible for data processing and who can I contact?

Responsible for data processing:

RST Rostock System-Technik GmbH
Friedrich-Barnewitz-Str. 9
18119 Rostock
Germany
Fon: +49 381 56 0
Email: info[at]rst-rostock.de

Contact details of the data protection officer:

RST Rostock System-Technik GmbH
Data protection officer
Friedrich-Barnewitz-Str. 9
18119 Rostock
Germany
Fon: +49 381 56 0
Email: datenschutzbeauftragter[at]rst-rostock.de

II. What sources and data do we use?

We process the following categories of personal data:

• Master data (e.g. surname, first name, place of birth, date of birth, contact details, address, banking details, social insurance information, marital status)
• Information about your education and professional background (e.g. school education, other qualifications such as studies, including the relevant certificates), references from previous employers
• Information that you have made public on the Internet, e.g. in job-related social networks (e.g. Xing, LinkedIn)
• Information about your employment with us (e.g. current and past positions, reporting lines, use of corporate infrastructure and IT systems, performance data)
• Information that is necessary for the establishment, performance and termination of the employment or that we are legally obliged to process (e.g. tax and social insurance relevant information, attendance and absence data, religious affiliation). This may include information about your health (e.g. periods of sick-leave, degree of disability).

Usually, we receive the this information from you. Some information may also be provided to us by external third parties (e.g. financial or social security authorities or recruitment agencies).

III. What do we process the data for (purpose of processing) and on which legal basis?

We process your data for the establishment, performance and termination of your employment relationship. In individual cases, this also includes sharing of necessary information about you with our customers.

Furthermore we process your data for the fulfilment of our legal obligations, as well as on the basis of a justified interest in the processing of your data.

The legal bases for these processing operations are GDPR Art. 6 Paragraph 1 lit. c) and f), as well as your consent, if you have given us such a consent.

IV. Who receives my data?

We may forward your data to the following third parties:

• Our parent company ABLE Management Services, which provides us with central services for the processing of employment relationships (e.g. central personnel administration, accounting, payroll, legal advice), as well as for safeguarding our legitimate interest in group-wide, efficient personnel management.
• Public institutions such as financial and social security authorities.
• Private parties to whom we are obliged to transmit certain data (e.g. health insurance companies).
• Our customers, if they have to contact you or if an assignment with these customers is considered or actually carried out.
• Other companies within our group of companies, if this is necessary for the performance of your employment relationship, if we have a justified interest in the transfer or if you have given us your consent to this.
• Private entities that work for us as service providers (e.g. providing and administering of our IT systems, executing administrative tasks in the personnel and administration area or providing legal advice).

V. How long will my data be stored?

We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations.

If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless temporary further processing is necessary for legal reasons.

VI. What data protection rights do I have?

Every affected person has the right of access under Article 15 GDPR, the right of rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.

You can revoke your consent to the processing of personal data at any time by contacting the responsible body. This also applies to the revocation of declarations of consent given to us prior to the application of the EU General Data Protection Regulation, i.e. before 25 May 2018. Please note that the revocation will only take effect in the future. Processing of data that took place before the revocation are therefore not affected by a revocation.

VII. Is there an obligation for me to provide data?

The provision of the aforementioned data is necessary for the performance of your employment relationship. If you do not provide us with the necessary data in contravention of a legal or (ancillary) contractual obligation, we may not be able to maintain the employment relationship with you.