Privacy Policy
1. Information about the collection of personal data
Below you will find information about how we process personal data. This is because, insofar as we decide on the purposes and means of data processing either alone or jointly with others, we are obliged to inform you transparently about the processing (cf. Articles 13 and 14 GDPR). Personal data is any information that can be attributed to you personally, e.g., name, address, email, or online identifiers such as your IP address. Above all, we explain how and to what extent the data is used, for what purposes, as well as the legal basis for this and the criteria that apply to the storage period. The privacy policy is structured in a modular fashion. This means that it consists of general information and information that relates solely to the processing situations specified there.
The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
FRIGOMED GmbH
Rudolf-Diesel-Straße 13
34277 Fuldabrück
Germany
Telephone: +49 561 400 72 60
email: info@frigomed.de
You can contact our (group) data protection officer at the email address datenschutz@frigosped.de, or alternatively at our postal address with the addition “the data protection officer”.
2. Collection of personal data when visiting this website
a. When using the website for informational purposes only, i.e. if you do not provide us with any other information, the data that is technically necessary to display the website and ensure its stability and security will be processed. This data includes the domain accessed, the date and time of access, the request (HTTP request), bytes transferred, description of the user’s browser, IP address, and HTTP status code. This data is not merged with other data. We do not have direct access to the data. The data can only be accessed by the web server provider for security purposes and is automatically deleted after three days at the latest. The legal basis for the processing of personal data for the implementation of these pre-contractual measures is Art. 6 (1) (b) GDPR. You are not obliged to provide this personal data. In particular, you are free to hide your IP address with a virtual private network (VPN) and thus protect your online activities from being tracked without any consequences for not providing the data (Art. 13 (2) (e) GDPR).
b. In addition, the data is aggregated and anonymized for statistical purposes. We have a legitimate interest in analyzing user behavior in order to optimize our offering. The legal basis for this is Art. 6 (1) (f) GDPR.
c. Furthermore, when using the website, text information, also known as “cookies,” is stored on your computer via your Internet browser. Our website allows visitors to change the language of the content so that the website is displayed in their preferred language. For this purpose, the respective setting is stored in a so-called persistent cookie. This means that the cookie has an expiration date and is only deleted when this date is reached or when it is manually removed (name of the cookie: pll_language; value for identifying the selected language: “en” or “pl”; duration: one year). This is a technically necessary cookie that we use on the legal basis of Art. 6 (1) (b) GDPR, § 25 (1), (2) No. 2 TDDDG. You are not obliged to provide the data stored in the cookie and can prevent or restrict the storage and evaluation of the cookie by adjusting your internet browser settings accordingly. You can also delete existing cookies at any time, although this will generally result in you no longer being able to use the website to the same extent.
d. When operating the website or the underlying IT infrastructure (colocation data center and hosting services), we, as a group company, use the services of our parent company, FRIGOSPED GmbH Internationale Spedition, Industriegebiet Rohr, Sälzerstraße 1, 56235 Ransbach-Baumbach, Germany, to process your data, which acts on our behalf in this regard. Order processing can be carried out on an ancillary basis on the legal basis of the underlying processing. Processing that is justified for the controller can therefore also be carried out by order processors on the same data protection basis, provided that the requirements for order processing under Art. 28 et seq. GDPR are met in this context. In the present case, this is based on the legal basis of Art. 6 (1) (b) and (f) GDPR. In any case, outsourcing is necessary to safeguard our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. In this respect, we comply with the legal requirements and, in particular, conclude a contract for order processing that serves to protect your data.
3. Additional features and offers on our website
In addition to using our website for purely informational purposes, you have the option of sending us an inquiry, in which case we will store the data you provide there for the purpose of processing the inquiry and any follow-up questions. The processing for the provision of contractual or pre-contractual services is determined by the underlying contractual relationship and is based on Art. 6 (1) (b) GDPR. In all other cases, we have a legitimate interest in responding to your request, whereupon the processing is based on Art. 6 (1) (f) GDPR.
Although you are not obliged to provide further data, the provision of such data is a prerequisite for us to perform our contractual or pre-contractual services. This means that if you do not provide us with any data, we will not respond to your request and it is a prerequisite for concluding a contract (Art. 13 (2) (e) GDPR). If you have a right to object, please note that you can also submit your request by telephone or post to a specific company.
The data collected will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing its deletion. If we are obliged to store data for a longer period due to commercial law retention and documentation obligations, processing will be restricted. This means that the data will be blocked and not processed for other purposes. According to § 147 (1) and (3) AO, § 257 (1) and (4) HGB, § 14b (1) UStG, a 10-year retention period applies to books and records, annual financial statements, booking documents, invoices, etc., as well as a 6-year retention obligation for all other business documents subject to retention, such as commercial or business letters received or sent and other documents, insofar as they are relevant for taxation. The retention period begins at the end of the calendar year. No data is passed on to third parties.
4. Data protection information regarding the application process
When you submit an application to us, we, FRIGOMED GmbH, Rudolf-Diesel-Straße 13, 34277 Fuldabrück, and additionally FRIGOSPED GmbH Internationale Spedition, Sälzerstraße 1, 56235 Ransbach-Baumbach, as our “parent company,” are responsible for data protection in accordance with data protection law.
We process the data you send us in connection with your application for the specific purpose of initiating, conducting, and completing the application process, in particular to assess your suitability for the position (or, if applicable, other open positions in our companies). This includes personal data in the following categories: Master data (e.g., name, date of birth); Contact details (e.g., address, telephone number); Application documents (e.g., references, resume); Data on professional development relating to knowledge acquired that is necessary for the job to be performed (e.g., training and further education, professional experience, additional qualifications); and in the case of an online application, usage and traffic data (e.g., your IP address, date, and time) are also collected.
The processing of your personal data is primarily based on the legal basis of § 26 of the German Federal Data Protection Act (BDSG) and, secondarily, on Article 6 (1) (b) of the General Data Protection Regulation (GDPR). According to this, the processing of data that is necessary in connection with the decision to establish an employment relationship is permissible. If you voluntarily provide additional information, this data will be processed exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. If you voluntarily provide special personal data within the meaning of Art. 9 (1) GDPR or if this data is requested as necessary, the legal basis is additionally Art. 9 (2) (a) GDPR or Art. 9 (2) (b), § 26 (3) BDSG. If necessary after completion of the application process, data processing may also be carried out on the basis of the requirements of Art. 6 GDPR, in particular due to tax law requirements for the reimbursement of application costs in accordance with Art. 6 (1) (c) GDPR or for the pursuit of legal claims or the pursuit of legitimate interests pursuant to Art. 6 (1) (f) GDPR, whereby our interest then lies in the assertion or defense of claims.
Although you are not obliged to provide data, doing so is a prerequisite for us to contact you and carry out the application process, i.e. to perform our contractual or pre-contractual services. This means that if you do not provide us with the necessary data, this may have consequences in that we may not be able to respond to your application or consider you adequately in the application process.
The data will be deleted as soon as it is no longer required, usually no later than three to six months after receipt of the rejection letter (see also § 15 (1), (2), and (4) AGG, § 61b ArbGG). If you have consented to further storage, we will transfer your data to our applicant pool. This data will be deleted after two years. After a successful application, some of the data may be further processed for employment purposes, meaning that it will be transferred to our personnel information system to the extent necessary.
We only pass on your personal data to the departments and individuals who need it for the proper execution of the application process and the fulfillment of our obligations, or on the basis of legitimate interest. Due to our company’s integration into the group of companies, this means that applications are primarily processed by the central human resources department at the parent company, FRIGOSPED GmbH Internationale Spedition, Sälzerstraße 1, 56235 Ransbach-Baumbach, which is also the controller within the meaning of data protection law. Your application data will be forwarded to this human resources department upon receipt of your application and reviewed there. Suitable applications will then be forwarded internally to the department managers responsible for the respective vacant position, which may also be employees of another group company due to matrix structures. The further procedure will then be coordinated. As controllers who are part of a group of companies, we have a legitimate interest in transferring personal data within the group of companies for internal administrative purposes, including the processing of personal data of employees. We base this processing on a balancing of interests or the legal basis of Art. 6 (1) (f) GDPR. § 26 BDSG merely represents a specification within the framework of Art. 88 GDPR, must be interpreted in accordance with the GDPR, and is therefore the subordinate standard. We have a legitimate interest in centralizing our processes in a group personnel administration system for the purposes of increasing efficiency, professionalism, process economy, and compliance in companies that also operate as a group and are managed uniformly.
We use SSL encryption to protect data transmitted via the website as effectively as possible. You can recognize such encrypted connections by the prefix “https://” in the address bar of your browser. The data is stored in our group IT infrastructure and processed exclusively on our behalf by service providers on the basis of order processing agreements in accordance with Art. 28 GDPR. No data is transferred to third parties who are not based in the European Union or the European Economic Area.
Insofar as we act as joint controllers within the meaning of Art. 26 GDPR, we have agreed on how we will safeguard your rights and have specified in more detail which obligations each individual fulfills in order to comply with the requirements of the GDPR. This applies in particular to the exercise of your rights as a data subject and the fulfillment of the information obligations under Art. 13 and 14 GDPR. In this regard, please contact FRIGOSPED GmbH Internationale Spedition (“parent company”) as the joint contact for the processing of your data and the assertion of your rights, although you can assert your rights against any of us.
5. Your rights
You have the right:
– to withdraw consent once given at any time in accordance with Art. 7 (3) GDPR. As a result, data processing based on this consent may no longer be continued in the future;
– pursuant to Art. 15 GDPR, to request information about your processed personal data. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;
– pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate or incomplete personal data stored about you;
– to request the erasure of your stored personal data in accordance with Art. 17 GDPR for the reasons specified in paragraph 1 thereof, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
– pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data; the processing is unlawful, but you oppose its erasure; we no longer need the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
– pursuant to Art. 20 GDPR, to receive your personal data that you have provided in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
– in accordance with Art. 21 GDPR, you may object to the processing of your personal data, which we base on a balancing of interests, if there are reasons for this arising from your particular situation. We ask you to explain the reasons why we should not process your personal data as we have done. We will then review the situation and either stop or adjust the data processing or explain to you our compelling legitimate reasons for continuing the processing.
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data in accordance with Art. 77 GDPR. The contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
If you have any further questions, please feel free to contact us at any time using the contact details provided above.
The German version of our privacy policy takes precedence over this translation.