A. Basic information according to Art. 13 / 14 DS-GVO/GDPR
1. Responsibility for data processing
Pfiffikus Lohnverpackungsservice GmbH & Co. KG
Hofener Weg 33
Fon: 0 71 46 / 95 22
Fax: 0 71 46 / 95 23
2. Data protection officer of the Pfiffikus GmbH & Co. KG
Hofener Weg 33
Fon: 0 71 46 / 95 22
Fax: 0 71 46 / 95 23
3. Regulatory Authority
If you are of the opinion that the processing of your personal data by Pfiffikus GmbH & Co. KG is not carried out lawfully, you can contact any data protection supervisory authority with your complaint.
The competent regulatory authority pursuant to Art. 55 DS-GVO/GDPR is:
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg:
Dr. Stefan Brink - Königstraße 10a - 70173 Stuttgart, 0711 / 61 55 41 – 0, firstname.lastname@example.org
4. Your rights
In accordance with the statutory provisions, you as the data subject have the right to obtain information free of charge at any time about your data stored by Pfiffikus GmbH & Co. KG at any time and free of charge, at any time. In addition, you have the right to rectification, deletion or restriction of processing, or also the right to object, vis-à-vis the Pfiffikus GmbH & Co. KG.
This also applies to the right to data portability.
If you have provided us with your personal data on the basis of voluntary consent, you can revoke your consent at any time for the future.
B. Purposes and scope of data processing
Communication data processing
Each time a user accesses a page of Pfiffikus GmbH & Co. KG and each time a file is retrieved, access data about this process is stored in a log file on our server.
Each record consists of:
- the page from which the file was requested (so-called referrer URL)
- the name of the file
- the date and time of the request (so-called "time stamp")
- the amount of data transferred
- the access status (file transferred, file not found, etc.)
- a description of the type of browser used (e.g. Mozilla Firefox,
Google Chrome or Microsoft Edge, Apple Safari, Opera, etc.)
- a technically necessary cookie
- the IP address of the caller
Content data processing & legal basis
If there is the possibility to enter personal or business data (e-mail address, name, address) within the internet offer (e.g. via a contact form), the collection of the data is explicitly based on a voluntary declaration of consent according to Art. 6 para. 1 lit. a DS-GVO/GDPR.
Here, too, your data will be treated confidentially and will not be passed on to third parties without your consent. A link with the communication data does not take place.
In general, Pfiffikus GmbH & Co. KG processes personal data on the following legal basis: §26 BDSG (new) paragraph 1 and Article 6 of DSGVO/GDPR paragraph 1.
Recipient of the data
For the hosting and maintenance of our website, we rely on the use of service providers, whom we oblige to comply with the legal requirements via a contract pursuant to Art. 28 DS-GVO/GDPR.
2. Application procedure / employee data
How does Pfiffikus GmbH & Co. KG process the data of employees / applicants?
Your personal data is generally collected directly from you, e.g. as part of the application process - on the basis of Section 26 (1) BDSG (new). In addition, we may have received data from third parties (e.g. job boards such as Indeed, Stepstone, etc. or employment agencies).
If you have also voluntarily provided special categories of personal data such as (health data, religious affiliation, degree of disability) in the letter of application or in the course of the application process, processing will only take place if you have consented to this.
Pfiffikus GmbH & Co. KG processes personal employee and applicant data on the basis of and in compliance with the German Data Protection Regulation (DS-GVO/GDPR), the German Federal Data Protection Act (BDSG) and all other relevant regulations in German labor law (e.g. SGB, AGG, BetrVG, etc.). The processing of your personal data as part of the application process primarily serves to carry out the application procedure, in particular to determine your suitability for the advertised position. The processing of your applicant data is necessary for the decision on the establishment of an employment relationship.
The legal basis for this is Art. 88 DS-GVO/GDPR in conjunction with. § Section 26 (1) BDSG.
Who receives your data?
Within Pfiffikus GmbH & Co. KG, your personal data will only be disclosed to those persons and departments that need it to make a decision about your employment and to fulfill our legal and contractual obligations.
In deviation from this, we only transmit your personal data - e.g. to investigating authorities - if we are legally obligated to do so.
How long does Pfiffikus GmbH & Co. KG store your data?
Personal data transmitted to Pfiffikus GmbH & Co. KG will be deleted as soon as they are no longer required for the above-mentioned purposes; at the latest after 6 months.
This does not apply if you have agreed to a longer storage period, the storage is necessary for evidence purposes or legal regulations prevent deletion.
For example, we retain your applicant data for as long as there is a possibility that you could assert legal claims against Pfiffikus GmbH & Co. KG, e.g. due to a violation of the General Equal Treatment Act (AGG).
If your application leads to the establishment of an employment relationship, your data will continue to be stored and used for the purposes of the usual administrative and organizational processes and for the implementation of the employment relationship in compliance with the applicable legal provisions.
What rights can you assert as a data subject?
Applicants and employees - like all other affected parties - have that:
• Right to information according to Art. 15 DS-GVO/GDPR
• Right to rectification according to Art. 16 DS-GVO/GDPR
• Right to erasure ("right to be forgotten") pursuant to Art. 17 DS-GVO/GDPR
• Right to restriction of processing pursuant to Art. 18 DS-GVO/GDPR
• Right to data portability according to Art. 20 DS-GVO/GDPR
• Right of objection according to Art. 21 DS-GVO/GDPR
Furthermore, you have the right to lodge a complaint with the above-mentioned data protection officer or with a data protection supervisory authority (see above).