Unsolicited application

Data protection declaration for applicants

WashTec AG, WashTec Carwash Management GmbH, AUWA-Chemie GmbH, WashTec Holding GmbH, WashTec Financial Services GmbH and WashTec Cleaning Technology GmbH, all located at Argonstrasse 7, 86153 Augsburg, Germany, 0821/5584-0, washtec@washtec.de (“WashTec” or “we” or “our”) provide this Applicant Data Protection Notice (“Notice”) in order to explain our activities, in each case as controller, for the collection, processing and use of personal data in connection with your application with WashTec. This Notice takes into account the requirements of the European General Data Protection Regulation (“GDPR”).

1. Scope

WashTec is committed to ensuring the highest possible level of protection for your personal data. All personal data from your application and all attachments that you provide with your online application will only be collected, processed and used by WashTec for storing, processing, evaluating, sorting and forwarding your application and for optimizing our recruitment process.

2. Categories of personal data

We process the following personal data on you that we obtain in the application and recruitment process:

1. Your name and other identification data;
2. Contact details such as your email address and telephone number;
3. To the extent that you provide it in your application or in the application form: Information about your qualifications, previous jobs, salary expectations and special benefits;
4. Date of birth;
5. Marital status;
6. Photo;
7. Evaluations;
8. Interview data and similar;
9. Data that you provide to us in surveys.

If you decide to provide us with health data, your religious affiliation or other data that we do not need in order to process your application, we will process this data initially but will not make any further use of it.

3. Purposes and legal basis of processing

We process your personal data for the following purposes:

• Applicant data administration, such as collection, storage, processing, evaluation, sorting and forwarding of your application (relates to all data);
• Optimization of our recruitment process, for example using voluntary responses to our surveys (relates to data categories iii, iv and ix).

We principally make use of the following lawful purposes:

The processing of your application is necessary in accordance with Article 6(1)(b) GDPR for the performance of a contract or to take steps prior to entering into a contract, in accordance with Section 26 (1) BDSG (revised) for hiring decisions and (in accordance with Article 6(1)(f) GDPR, “for the purposes of legitimate interests”) for the purposes of a legitimate interest such as establishing contact. Your data may also be processed in part on the basis of consent (Article 6(1)(a) GDPR, in which case we obtain your consent in advance. To the extent that you provide us with sensitive data, this initial processing is based on implied consent in accordance with Article 9(2)(a) GDPR, as you provide the information to us voluntarily.

4. Categories of recipients

WashTec may cooperate with other companies within the WashTec Group and other third-party data processors (such as IT service providers). These may be located in a country that does not ensure the same standard of data protection as your home country. In such a case, WashTec ensures by contract (such as using EU standard contractual clauses) and/or by other means that the recipients give suitable or appropriate guarantees of compliance with an adequate standard of data protection.

All data collected and processed at WashTec is protected against unauthorized access and manipulation. Your data is stored and collected on our behalf by an external service provider in selected data centers in Germany for processing in accordance with the relevant legal requirements. This provider is prohibited from using the data for its own purposes.

In addition, if you click on external links, such as for a rating site, you will be directed to the websites of third parties who process your data under their own responsibility. For further information, please read the data protection notice of the respective third party.

5. Storage period

Your data will be used for the duration of the processing of your application. Upon completion of the application process and if your application is unsuccessful, your data will – unless otherwise required by law – be automatically deleted after no more than six (6) months unless you give your consent to be included in the candidate database. In the latter case, your data will be collected, processed and used in an electronic database for the purposes of that database and in accordance with the applicable data protection requirements. With your separate consent via our website, you will generally be included in our candidate pool for three (3) months. It this period is to be extended to two (2) years, you will receive an email requesting your consent. If your application is successful, the necessary information from your application will be transferred to your personnel file.

6. Your rights

In accordance with applicable data protection laws, you have the right (i) to withdraw your consent, (ii) of access to your personal data, (Iii) to rectification of your personal data, (iv) to erasure of your personal data, (v) to restrict the processing of your personal data (vi) to data portability; and/or (vii) to object to the processing of your personal data. In the following, you will find more information about your rights as far as the GDPR applies. Please note that these rights may be restricted under applicable (local) data protection law.

• Right to revoke your consent: If you have given your consent for certain types of processing activities, you may revoke that consent at any time with future effect, without having to state the reason. Revoking consent does not affect the lawfulness of the processing performed on the basis of the consent until the revocation. If you wish to revoke your consent, please notify us as specified in Section 7.
• Right of access to your personal data: To the extent provided for by applicable data protection law, you have the right to obtain confirmation from us as to whether or not your personal data is processed, and, where that is the case, to access to that personal data. The right of access includes – among other things – the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed. This is not an absolute right, however, and the interests of other persons may limit your right of access.

You also have the right to receive a copy of the personal data undergoing processing. If you request any further copies, we may charge a reasonable fee based on administrative costs.

• Right to rectification: To the extent provided for by applicable data protection law, you have the right to obtain from us the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Right to erasure (right to be forgotten): To the extent provided for by applicable data protection law, you have the right to obtain from us the erasure of personal data concerning you and we can be obliged to erase such personal data.
• Right to restriction of processing: To the extent provided for by applicable data protection law, you have the right to obtain from us the restriction of processing of your personal data and we can be obliged to restrict the processing of your personal data. In this event, the personal data concerned will be marked and may only be processed by us for specific purposes. As WashTec processes and uses your personal data primarily for the purpose of performing the employment relationship with you, WashTec will normally have a legitimate interest in the processing that will override your request for restriction.
• Right to data portability: To the extent provided by applicable data protection law, you have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that personal information to another entity without hindrance on our part provided that the processing is carried out by automated means and is based on a consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR.
• Right to object: If the processing is based on our legitimate interest, you have the right to object to the processing on grounds relating to your particular situation.
• Right to lodge a complaint: You also have the right to lodge a complaint with a competent data protection supervisory authority in the relevant Member State (for example, in the Member State of your habitual residence, place of work or place of the alleged infringement of the GDPR).

Please direct your questions to the relevant controller:

7. Questions and contact information

If you have any questions about this data protection notice, or if you wish to exercise your rights as a data subject, you may contact the data controller or the data protection officer.

Please contact the controller as follows:

The data protection officer for the following WashTec companies can be contacted at: