V2 (022024)
Raffinerie Heide GmbH uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Raffinerie Heide GmbH.
With regard to interaction within the company account of Raffinerie Heide GmbH, Raffinerie Heide GmbH and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Raffinerie Heide GmbH, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Raffinerie Heide GmbH in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Raffinerie Heide GmbH only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
Information about the collection and processing of your personal data in the context of job applications to Raffinerie Heide GmbH
Raffinerie Heide GmbH (“Raffinerie Heide”) takes the protection of personal data extremely seriously. For the purposes of your application, we process the personal data which you have provided to Raffinerie Heide electronically, either by using the online application tool for your application or in your e-mail application. The data provided to us is processed with strict confidentiality and in compliance with the relevant German and European data protection laws, including in particular the EU General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act (“BDSG”).
Please read this Data Privacy Policy carefully before you send your personal data to Raffinerie Heide.
Personal data are only collected and used on a regular basis with your consent or if the processing of such data is permitted by law. The following provisions provide information about the type, scope and purpose of the collection and processing of your personal data.
In the event that we make use of the services of commissioned service providers for the purpose of providing specific functions for our offer or of our services, we will also inform you in detail in the following about the action taken. We also provide information about the stipulated criteria which apply to storage and the length of time for which data is stored. We also inform you about your rights regarding each instance of data processing.
This Data Privacy Policy relates exclusively to the processing of data in connection with the application you have made using the Raffinerie Heide tool on the website https://www.heiderefinery.com/de/karriere/stellenboerse/ (“Raffinerie Heide Website”) and to your application sent by e-mail.
The controller responsible for data protection law in the meaning of the GDPR and all other applicable provisions of EU data protection law is Raffinerie Heide (“Controller”). If you have any questions, suggestions or criticisms relating to data protection and your application, please contact:
Raffinerie Heide GmbH
Meldorfer Straße 43
25770 Hemmingstedt
Germany
Tel. +49 481 6930
E-mail: info@heiderefinery.com
Any data subject (anyone affected) can contact our data protection officer with questions and suggestions at any time. Our data protection officer can be contacted as follows:
Raffinerie Heide GmbH
Data Protection Officer
Meldorfer Straße 43
25770 Hemmingstedt
Germany
E-mail: datenschutzbeauftragter@heiderefinery.com
Raffinerie Heide processes your personal data in compliance, in particular, with the GDPR and other national and European standards.
Data are primarily processed for the purpose of establishing an employment relationship with you. The primary legal basis for such processing is Article 6(1) sentence 1 (b) GDPR and section 26(1) German Federal Data Protection Act (BDSG).
Raffinerie Heide may also process your data in order to comply with any legal obligations to which it is subject. This is legitimate primarily on the basis of Article 6(1) sentence 1 (c) GDPR.
If necessary, Raffinerie Heide also processes your data on the basis of Article 6(1) sentence 1 (f) GDPR in order to safeguard the legitimate interests of Raffinerie Heide or third parties. Raffinerie Heide may process your personal data in line with its legitimate interests to guarantee IT security and IT operations. In all cases the existence of such a legitimate interest is carefully weighed up to determine whether such interest may be overridden by interests of your own which must be protected.
If special categories of personal data as defined in Article 9(1) GDPR or other comparable national regulations are processed (e.g. recording of severe disability for the purpose of calculating a severe disability levy on the company), this is done when establishing the employment relationship to exercise the rights or fulfil the legal obligations arising from employment, social security and social protection law. Such processing is lawful under Article 9(2) (b) GDPR and section 26(3) Federal Data Protection Act (BDSG) or comparable regulations.
It may also be necessary to process health data for the purpose of assessing your working capacity under Article 9(2) (h) GDPR or comparable national laws. Special categories of personal data may also be processed on the basis of consent given under Article 9(2) (a) GDPR (e.g. preventive or occupational medicine) or Article 26(2) BDSG.
Raffinerie Heide will inform you in advance if it wishes to process your personal data for purposes other than those referred to above.
For the purposes of the GDPR you are the “data subject” of any of your personal data which we process. As a data subject you have the following rights with regard to Raffinerie Heide:
You have the legal right (refer in particular to Article 15 GDPR) to obtain from Raffinerie Heide at any time confirmation as to whether or not your personal data are being processed by Raffinerie Heide. If this is the case, you have the right to request information about the extent of such data processing.
You have a right to obtain from Raffinerie Heide the rectification of inaccurate personal data concerning you and/or to have incomplete personal data completed (refer in particular to Article 16 GDPR).
In certain circumstances (refer in particular to Article 18 GDPR) you have the right to obtain the restriction of the processing of your personal data.
In certain circumstances (refer in particular to Article 17 GDPR) you have the right to obtain the erasure of personal data concerning you without undue delay. The right to erasure does not apply to the extent that processing is necessary.
If you have asserted your right (refer in particular to Article 16 GDPR) to rectification, erasure or restriction to Raffinerie Heide, Raffinerie Heide must communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. Raffinerie Heide shall inform you about those recipients if you request it (refer in particular to Article 19GDPR).
You have the right (refer in particular to Article 20 GDPR) to receive the personal data concerning you which you have provided to Raffinerie Heide, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another company without hindrance from Raffinerie Heide provided that the preconditions for such transfer are met.
You have the right to object at any time to the processing of personal data under Article 6(1) sentence 1 (f) GDPR concerning you on grounds relating to your particular situation (refer in particular to Article 21 GDPR). Raffinerie Heide may then no longer process the personal data relating to you unless Raffinerie Heide demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You can inform us or our Data Protection Officer of such objection by contacting us as follows:
Raffinerie Heide GmbH
Meldorfer Straße 43
25770 Hemmingstedt
Germany
Tel. +49 481 6930
E-mail: info@heiderefinery.com
E-mail Data Protection Officer: datenschutzbeauftragter@heiderefinery.com
You have the right at any time to withdraw your data protection declaration of consent from Raffinerie Heide (refer in particular to Article 7 GDPR). Withdrawal of consent does not affect the lawfulness of any processing conducted on the basis of the consent up to the point of withdrawal. In certain circumstances it may also be possible for Raffinerie Heide to process the data on other legal grounds.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR (refer in particular to Article 77 GDPR).
If possible, please send applications to us by e-mail or with our online tool. We will then process the data entered by you in the input mask or sent to us by e-mail during the application process. These data are primarily:
Raffinerie Heide erases your personal data as soon as they are no longer needed for the purposes referred to above and no further legal evidence or legal retention requirements apply. After the employment relationship has ended, Raffinerie Heide will continue to store your personal data for as long as such data are required to comply with legal retention requirements.
If we are unable to offer you employment with Raffinerie Heide, after we have informed you we will in all cases keep the data provided by you for up to six months in order to be able to answer any questions which you may have relating to your application and rejection, unless other statutory retention periods apply.
However, if the application documents you have sent to Raffinerie Heide may be of fundamental interest to the company and it is only the case that there is no suitable position for you available at the present time, we request your consent to Raffinerie Heide keeping and storing your data accordingly. We may send you an e-mail for this purpose. This will enable Raffinerie Heide to contact you if suitable vacancies arise in the future. In this case we will store your data for twelve months.
We offer you a job newsletter on our career portal. If you subscribe to the job newsletter we will use your e-mail address to inform you via the newsletter about new job vacancies and current developments at Raffinerie Heide. For statistical purposes we may evaluate which links have been clicked in the newsletter. We can see who has clicked, but not what specific links were clicked.
You have given your explicit consent separately or in the course of the application process. The legal basis for such processing is Article 6(1) sentence 1 (a) GDPR. You may withdraw your consent at any time with effect for the future. You can unsubscribe from the job newsletter here: https://seu2.cleverreach.com/f/125616-139926/wwu/
Your e-mail address will only be stored for the purpose of sending the newsletter for as long as you have a subscription for it. We will erase your data as soon as you have withdrawn your consent provided that such data must not be retained by law.
Our newsletter is sent by the CleverReach newsletter mailing platform, which is operated by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany ("CleverReach"). We use the order processing services of CleverReach.
The services provided by the German-based company CleverReach are subject to the GDPR. Your data are only sent to third parties by CleverReach in compliance with the legal requirements of the GDPR.
Under Article 6(1) sentence 1 (f) GDPR, we have a legitimate in interest in passing on your data (name and e-mail address) to CleverReach as CleverReach sends the newsletter in its function as our service provider.
CleverReach will erase your data as soon as we ask CleverReach to erase or return your data, e.g. once you have withdrawn your consent to us. This has been agreed as part of the order processing agreement with CleverReach.
CleverReach’s privacy policy is available at: https://www.cleverreach.com/en/privacy-policy/
Your data will be stored on the servers of Host Europe GmbH, Hansestrasse 111, 51149 Cologne, Germany (referred to in the following as “HostEurope”). Host Europe may only use the data in accordance with instructions given by us (order processing). HostEurope also adopts stringent technical measures to protect your personal data.
HostEurope does not pass on your personal data to third parties unless this is necessary in order to perform the agreed services or if HostEurope is required to do so by law or to comply with a valid and mandatory instruction issued by a government or regulatory authority. The data provided for this purpose are kept to a minimum.
The purpose of processing data is that HostEurope enables us to use HostEurope servers.
The legal basis for the processing of your data is Article 28 GDPR and Article 6(1) sentence 1 (f) GDPR.
We have a legitimate interest in using the services of Host Europe in order to run our business properly.
Under Article 21 GDPR, you have the right to object to the processing of your data. In this case we will erase your data unless retention periods apply or such erasure is overridden by our interest in storage. Please note that it is only possible to use our website if data is stored by HostEurope.
We only store the data for as long as is necessary to achieve this purpose and until any statutory retention periods have expired.
Further information about HostEurope and data protection is available at: https://www.hosteurope.de/en/terms-and-conditions/privacy/
Raffinerie Heide has implemented appropriate physical, technical and administrative security standards to protect personal data against loss, misuse, modification or destruction. Our service providers are contractually committed to safeguarding the confidentiality of personal data. In addition, they may not use the data for purposes that have not been approved by us.
In addition to this data privacy policy for online applications to Raffinerie Heide, the general data privacy policy for the Raffinerie Heide website also applies.
A link to this policy is available here: https://www.heiderefinery.com/en/legal-notices/
