Mandatory notification under Article 13 DS-GVO (=GDPR) for employees
§ 1 A person responsible according to Art. 4 clause 7, DS-GVO is:
NBZ-Nano-Bioanalytik-Zentrum Münster GmbH
Telefon: +49 (0)251 / 384503-30
If you would like to receive further information on the subject of data protection and about our handling of your personal data as well as regarding your rights, please use the above mentioned contact opportunities:
§ 2 Your rights
You have with respect to us the following rights regarding the relevant personal data:
- Right to obtain information
- Right to correction or deletion,
- Right to limiting the processing,
- Right to objection against the processing,
- Right to data portability.
In addition, you have the right to file a complaint at a data protection authority about the processing of your personal data by us.
§ 3 Withdrawal of a consent
If you have given consent for processing of your data, you can withdraw it at any time. Such a withdrawal has an effect on the admissibility of the processing of your personal data after you have made it known to us. The withdrawal can be sent to us by using the contact information provided above.
§ 4 Objection against the processing of your data
You have the right to object at any time to the processing of your personal data insofar as we base the processing on a balancing of interests or if the processing of data is necessary for fulfilling a specific function which is in the public interest or is conducted on behalf of the Law, and has been transferred to ourselves. When using such an objection, we ask you to specify the grounds why we should not process your personal data in the way as we do it. In the case of your substantiated objection, we check the factual situation and start or adapt the data processing correspondingly, unless we can prove the existence of mandatory legitimate grounds for the processing, which outweigh your interests, rights and freedoms of action, or when the processing serves for the assertion, exercising or defending of legal claims. You have the right to object at any time to the processing of your personal data for direct advertising purposes. When you object to the processing of your personal data for direct advertising purposes, we will not use your personal data for these purposes anymore. You can inform us about your objection by using the contact data provided above.
§ 5 Purposes of processing
(1) We process your personal data primarily in order to set up, to implement or to terminate a contract of employment with yourself, and – in that context – particularly for the following purposes:
- HR data management
- salary and tax accounting,
- time logging,
- in context of general contractual processing,
- for project management,
- for holiday planning together with work planning and representation planning,
- to enable attendance at refresher training events,
- in order to provide capital-forming benefits, company pension benefits and
- in order to provide mobile terminals.
To the extent that the processing of your personal data is needed in order to set up, to implement or to terminate your contract of employment, the legal basis for the processing of data is §26, paragraph 1, German data-processing regulations. To the extent that particular personal data is processed in this context – for purposes as defined in Article 9, paragraph 1, GDPR – the legal foundation for this processing is §26, paragraph 3, German data-processing regulations, in conjunction with Article 9, paragraph 1, GDPR.
(2) Your personal data will also be processed, in line with Article 6, paragraph 1, clause (f) GDPR in order to preserve our justified interests in:
- overview of our HR situation,
- insurance management and
- in order to assure security and IT security.
(3) To the extent that we base ourselves, in the processing of your personal data, on Article 6, paragraph 1 (c), GDPR, the corresponding purpose is to fulfil our statutory obligations with particular reference to obligations attaching to ourselves under the social statute book, together with the requirement to adhere to the provisions of commercial and tax regulations, with particular reference – in this context – to disclosing pregnancy; and re-integration following an illness.
(4) To the extent that we base ourselves, in the processing of your personal data, on Article 6, paragraph 1, clause (a), GDPR, the legal foundation for this processing is dependent on your consent, with particular reference to the matter of representation of the Company to third parties as the result of the publication of employee photos and information.
§ 6 Recipients
The recipients of personal data may be as follows:
- tax consultants/auditors
- providers in connection with taxation and book-keeping
- tax office
- insurance companies/finance providers
- funding bodies
- lead partners
- public authorities and offices (Courts, governmental offices, job centres etc)
- health funds
- social security funds
- pension insurers
- providers of refresher training
- conference services providers
- software and IT service providers
- providers of dispatch services
§ 7 Duration of storage
(1) We place personal data on store in accordance with the respective purpose for the corresponding processing. No later than by the expiry of the statutory storage periods, the data will be deleted/destroyed; and personal data will be anonymized at an earlier stage, if possible.
(2) Provided that you have given your consent for the processing of your personal data, we place your personal data on store until your consent is revoked.
§ 8 Obligation to share
The sharing of personal data is neither a legal nor a contractual requirement, but it may be needed as the prerequisite for negotiating an agreement. There is no obligation for the sharing of data. However, the decision not to share information may lead to the outcome that a contract of employment cannot be executed.