We hereby inform you about the processing of your personal data by our
company and the rights to which you are entitled under data protection law.
1. Person responsible for data processing
The responsible body within the meaning of the General Data Protection Regulation (DSGVO) and other national
data protection laws of the member states as well as other provisions of data protection law is the:
XTRAS forward thinking GmbH & Co. KG
Bergiusstraße 1
28816 Stuhr-Brinkum
Telefon: 0421 408948 – 0
E-Mail: info@xtras-log.de
2. Contact details of the data protection officer
You can reach our data protection officer at the above address with the addition of
“Data Protection Officer” or by email at datenschutz@xtras-log.de
3. Purpose and lawfulness of data processing
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
First and foremost, data processing serves to establish the employment relationship. The
primary legal basis for this is Art. 88 Abs. 1 DSGVO i. V. m. § 26 Abs. 1 BDSG. Your data will be
processed exclusively for filling the specific position for which you have applied. In addition
may process health data for the assessment of your ability to work pursuant to Art. 9 Abs. 2
lit. h i. V. m. § 22 Abs. 1 b) BDSG be required. In the event of a rejection, would you like to enter our applicant pool
we require a declaration of consent from you. Should your application for
other vacancies in the company are taken into account, we require for this purpose a
Statement of consent from you.
In addition, due to the European anti-terrorism regulations 2580/2001 and 881/2002, we are
obliged to check your data against the so-called “EU terror lists” in order to ensure that no
funds or other economic resources are provided for terrorist purposes.
4. Categories of the processed data
We process the following personal data as part of the application process:
• Your master data (such as first name, last name, name affixes, date of birth)
• Work permit/residence title, if applicable
• Contact details (such as home address, (mobile) phone number, e-mail address)
• Skill data (e.g. special knowledge and skills)
• if relevant for the advertised position: health suitability
• Further data from the application documents: qualification, activities, certificates
In order to be able to consider your application, we require the following personal data from you
Data required for the decision on the establishment of the employment relationship.
5. Origin of your data
Your personal data is generally collected directly from you as part of the
The data collected during the recruitment process, in particular from the application documents, interview
and from the personnel questionnaire.
6. Access to your data
Within our company, only those persons receive your personal data who are involved in the
decision about your employment. An active transfer of data outside of our
company does not occur.
However, service providers (order processors) and vicarious agents used by us may store data in the
We receive or collect data in the course of fulfilling our legal duties and obligations if
these comply with our instructions under data protection law. Any further transfer of data to third parties shall be
Recipients outside our company only if required by legal provisions
or you have consented.
7. Transfer of data to a third country
A transfer of data to countries outside the European Union (so-called third countries) or a
international organization does not take place as a matter of principle.
8. Duration of data processing
If you are hired, we will transfer your application documents to your personnel file. After
Termination of the employment relationship, those personal data will continue to be
which we are legally obligated to store. This regularly results from
legal obligations to provide evidence and to retain records, which are set out, among other things, in the German Commercial Code and the
Tax Code are regulated. The storage periods are then up to ten years. Also can
it may happen that personal data are retained for the time during which claims against
can be asserted against us (statutory limitation period of three or up to thirty years).
In the event of rejection, your application documents will be deleted no later than six months after completion of the
deleted or destroyed, unless you have given us permission to retain your data for a longer period of time.
retention (applicant pool) have given.
9. Automated individual case decisions or profiling measures
We do not use purely automated processing to arrive at a decision.
10. Your rights
As a data subject, you have the following rights pursuant to Art. 15 DSGVO the right to be informed about the
to receive information about personal data. You can also request the correction of inaccurate data to
Art. 16 DSGVO .
In addition, under certain conditions, you have the right to delete data pursuant to
Art. 17 DSGVO, the right to restrict data processing pursuant to Art. 17 DSGVO. Art. 18 DSGVO and the right
to data portability pursuant to Art. 20 DSGVO.
The restrictions according to §§ 34, 35 BDSG apply to the right to information and the right to deletion.
If data is collected on the basis of Art. 6 Abs. 1 S. 1 lit. f DSGVO (data processing for the protection
of legitimate interests), you have the right to object to the processing
at any time on grounds relating to your particular situation. We will
then no longer process the personal data unless there are demonstrably compelling legitimate grounds
for the processing which override your interests, rights and freedoms,
or the processing serves to assert, exercise or defend
legal claims.
If we process your data on the basis of a consent granted to us pursuant to Art. 6 Abs. 1 lit. a DSGVO
process, you have the right to revoke your consent at any time. The revocation of your consent
does not affect the lawfulness of the processing carried out on the basis of the consent
until the revocation.
You also have the right to complain to the data protection supervisory authority responsible
or us if you believe that the processing of your personal data
is not lawful. The supervisory authority responsible for us is:
Die Landesbeauftragte für Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover
Phone: 0511120 45-00, E-Mail: poststelle@lfd.niedersachsen.de