Data privacy information for applicants of Richardson Electronics GmbH

(As of: 25.05.2023)

Protecting your privacy is important to us. We process your personal data exclusively within the framework of the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and Germany’s Federal Data Protection Act (BDSG).In the following, we provide information regarding data protection law with you as the data subject as per the information required under Art. 13 and 14 of the GDPR in the collection of personal data:

1. Data processor

a) Name and contact details of the controller

Richardson Electronics GmbH
Boschstr. 8
82178 Puchheim
Germany

Phone: +49 (0)89 - 8189128-0
Fax: +49 (0)89 - 8189128-10
E-Mail: privacy-europe@rell.com

b) Contact details of the data protection officer

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to obtain information, correct, block or delete data, please contact our data protection officer(s): privacy-europe@rell.com

2. Scope of processing

a) Purpose of data processing and legal basis

We process your personal data for the purpose of carrying out the application process, insofar as it is necessary.

The data processing is carried out on the basis of Art. 6 (1) lit. b) GDPR.

The processing of special categories of personal data (e.g., health data) is carried out exclusively on the basis of Art. 9 GDPR, provided that they have expressly consented to one or more specified purposes or if it is required for the exercise of rights or the fulfilment of obligations under employment, social security and social protection law.

b) Categories of personal data that are processed

The following categories of applicant data are affected:

We process the following data categories: Name, address, other contact details, date of birth, education / work experience, results of the recruitment process and comparable data.

c) Source of the personal data

Your personal data will in principle be collected from you, unless third parties, in particular administrative bodies or third parties you have named as references, give us information.

d) Duration of data storage

We generally store your personal data for the duration of the application process and for an additional six months after that. If your application leads to employment with us, your application data will be subsequently stored and processed for the purpose of establishing, carrying out and terminating the employment relationship. In this case, you will be informed separately about this change in purpose.

3. Transfer of data and foreign reference

a) Personal data recipients or categories of recipients

Personal data recipient categories include the HR department, senior management, unit heads or immediate supervisors and, where applicable, other companies within the Richardson group.

b) Transmission

Some of your data will also be transmitted and processed in countries outside the European Union (“EU”) or the European Economic Area (“EEA”). If it is necessary, we ensure that you have a sufficient level of data protection for your data in these cases by, for example, concluding EU standard contractual clauses with our contracting parties, or we will ask for your express consent.

4. Rights of the data subject

If your personal data is processed, you are the data subject as defined in the GDPR, and you have the following rights with respect to the controller:

a) Right of access

According to Art. 15 GDPR, you can obtain confirmation from the controller as to whether personal data relating to you is being processed. Where that is the case, you have a right of access to the personal data and to the information mentioned in Art. 15 (1) (a - h), such as purposes of the processing, categories of personal data being processed, if a disclosure to third parties will occur, and the envisaged storage period. Moreover, you also have a right to obtain a copy of the personal data undergoing processing.

b) Right to rectification

Art. 16 GDPR grants you the right to have inaccurate and/or incomplete personal data corrected without delay.

c) Right to erasure

According to Art. 17 GDPR, you may obtain the erasure of personal data relating to you from the controller without undue delay, provided that one of the grounds listed in Art. 17 (1) (a–f) GDPR applies. Grounds for the right to erasure are according to this, for example,

• that the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
• that you withdraw your consent, and there is no other legal ground for the processing or
• that the personal data has been processed unlawfully.

The right to erasure shall not apply to the extent that processing is necessary according to Art. 17 (3) (a–e) GDPR, for instances such as exercising the right of freedom of expression and information, for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject; or for the establishment, exercise or defence of legal claims.

d) Right to restriction of processing

According to Art. 18 GDPR, you have the right under certain conditions to obtain restriction of processing of personal data concerning you. This is the case if

• you contest the accuracy of your personal data for a period, and the controller must be given the opportunity to verify the accuracy of your personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
• the controller no longer needs personal information for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or
• if you have objected to processing pursuant to Art. 21 (1) GDPR and pending the verification whether the legitimate grounds of the controller override yours.

Where processing your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If processing has been restricted in accordance with the above conditions, you shall be informed by the controller before the restriction of processing is lifted.

e) Notification to recipients and right to information

In accordance with Article 17 GDPR, you have the right to rectification, erasure or restriction of processing to be exercised by the controller, and the latter must notify all recipients to whom the personal data relating to you has been disclosed and to report any corrections or erasures of the data or restrictions of the data processing, unless this proves impossible or involves disproportionate effort. You have a right to be informed by the controller about these recipients.

f) Right to data portability

Art. 20 of the GDPR grants you the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit that data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on your consent or on a contract and the processing is carried out by automated means. In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons may not be adversely affected.

g) Right to object

If processing your personal data becomes necessary pursuant to Art. 6 (1) (e) GDPR for the performance of a task carried out in the public interest or in the exercise of official authority, or pursuant to Art. 6 (1) (f) GDPR for the purposes of the legitimate interests pursued by the controller or by a third party, you shall have the right under Art. 21 of the GDPR to object at any time against the processing of your personal data on grounds relating to your own particular situation. This also applies to profiling based on these provisions.

The controller shall no longer process the personal data relating to you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

h) Right to withdraw from the data protection declaration of consent

If you give your consent to the processing of your personal data in accordance with Art. 6 (1) (a) you shall have the right to withdraw your consent at any time (Art. 7 (3) GDPR). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

i) Right to lodge a complaint with a supervisory authority

Under Article 77 of the GDPR, you have the right without prejudice to any other administrative or judicial remedy to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data infringes the GDPR.

j) Automated decision-making, including profiling

Your personal information will not be used for automated decision-making.
If you have any questions about the processing of your personal data and your data subject rights, you can contact us free of charge.
You can reach us at privacy-europe@rell.com

Richardson Electronics GmbH
Boschstr. 8
82178 Puchheim
Germany
Phone: +49 (0)89 - 8189128-0
Fax: +49 (0)89 - 8189128-10

Canvys – Visual Technology Solutions
A Division of Richardson Electronics
Richardson Electronics GmbH
Raiffeisenstr. 5
78166 Donaueschingen
Germany
Phone: +49(0)771 - 8300-0
Fax: +49(0)771 - 8300-80