Dear applicant,
due to the legal regulations of the European General Data Protection Regulation (hereinafter referred to as “GDPR”) we are obliged to provide you with comprehensive information about the processing of your personal data within the scope of your application, which we are very happy to do.
Data protection and the handling of your personal data is very important to us, so that we always ensure that your personal data is processed properly.
If you have any questions about your applicant data and its processing, our data protection officer will be happy to answer them at any time. She is not subject to any instructions, is independent in her position and legally obliged to maintain secrecy and confidentiality, so that you can contact her in confidence.
With regard to the processing of your personal data within the scope of your application process, we would like to inform you of the following:
Your contact point as controller within the meaning of the GDPR and other national data protection regulations of the EU member states as well as other provisions of data protection law is:
Eurofighter Jagdflugzeug GmbH
Am Söldnermoos 17
85399 Hallbergmoos
Germany
Email: datenschutz(at)eurofighter.com
and
Panavia Aircraft GmbH
Am Söldnermoos 17
85399 Hallbergmoos
Germany
Email: datenschutz(at)panavia.com
(here after "we", "us" or "our")
In many areas, the data is jointly processed. The joint responsibility is arranged through an agreement between the companies. The companies use the same database for their respective activities and access the same data as necessary. The companies are each independently responsible for the lawful processing of personal data and the granting of data subject rights including making required information available. The companies support each other as necessary.
Our external data protection officer can be contacted at the following address:
c/o activeMind.legal Rechtsanwaltsgesellschaft mbH
Potsdamer Straße 3
80802 Munich
Phone: +49 (0) 89 / 919294-900
Email: eurofighter@activemind.legal and panavia(at)activemind.legal
For the purposes of the application process and establishing the employment relationship we process the data listed below which you have provided to us (directly, through an agency or one of our partner companies /your employer).
Personal data include in particular:
Other relevant personal data may include:
as well as other data comparable to the above categories.
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes:
a) Processing is carried out for the establishment of the implementation of pre-contractual measures (Art. 6(1)(b) GDPR)
When you submit your application to Eurofighter Jagdflugzeug GmbH or Panavia Aircraft GmbH, we will process the data you provide exclusively for the purpose of evaluating your professional suitability and contacting you.
b) Consent (Art. 6(1)(c) GDPR)
If you have provided us with the required consent we will keep your application longer in order to consider you for future positions which may become available.
Within the companies, access to their data is granted to those entities that need it to fulfill contractual, legal and regulatory obligations.
Your data will only be forwarded to service providers (processors) when necessary to perform our contractual duties (e.g., support, EDP maintenance, IT applications, accounting, data erasure). All service providers are obliged to handle your data confidentially pursuant to a data processing contract.
Data is transferred to bodies in countries outside the European Economic Area (so-called third countries) if
For certain tasks, we use service providers who may use sub-service providers that may have their registered office, parent company or data centers in a third country.
A transfer is permitted if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR). If the Commission has not made such a decision, the companies or the service provider may only transfer personal data to service providers in a third country if appropriate safeguards are provided (standard data protection clauses adopted by the EU Commission or the supervisory authority in a specific procedure) and enforceable rights and effective remedies are available.
We have contractually agreed with our service providers that data protection guarantees must always be in place. This also applies to their contractual partners as well. We will provide you with a copy of these guarantees upon request.
Currently, your data (e.g., start date, end date, job title, family status) is only transferred to our partner company in the UK, as an affiliated company, if the employment contract is concluded.
In the event that your application is rejected, it will be deleted 6 months after notification of the decision.
If an employment relationship is established, the application documents will be stored for at least the period of employment.
If you have given your consent to be included in our talent pool, we will store your application documents for a maximum of 1 year.
Every data subject has the right to access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR.
With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply.
You may withdraw your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent given to us before the applicability of the General Data Protection Regulation, i.e. before May 25, 2018. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
The provision of the aforementioned personal data is neither legally nor contractually required. However, it is not possible to process the application without this information.