1. The Data Controller
ROTZINGER Group can be contacted via the following information:
ROTZINGER Group AG
2. Types of personal data collected
We collect and process your personal data when you engage with us through various channels.
Some of the personal data we collect is necessary to provide our services to you or your company; other personal data you may choose to provide voluntarily. We will let you know, if and why our processing of your personal data is necessary.
ROTZINGER Group collects and processes the following categories of “ordinary personal data” according to article 6 of the GDPR:
3. Purposes for processing your personal data
ROTZINGER Group collects and processes personal data for the following purposes:
4. Legal grounds for processing your personal data
ROTZINGER Group will only process your personal data if one of the following applies:
ROTZINGER Group takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of your personal data.
In order to protect your personal data, we continuously assess the risks that may be associated with our processing activities. We have therefore adopted internal information security rules, which contain instructions and measures to protect your personal data from being destroyed, lost/altered and against any unauthorized disclosure or unintended access.
To avoid loss of personal data, we continuously backup our systems, and we make use of encryption or other security measures where necessary. Finally, we train our employees in handling personal data.
In the event of a data breach that involves a high risk to your rights, we will notify you of the breach as soon as possible under the given circumstances.
7. Disclosure of personal data
If necessary, ROTZINGER Group may disclose your personal data to external parties. Our disclosure of your personal data is always subject to the existence of an adequate level of data protection. ROTZINGER Group may disclose or make personal data available to third parties under the following circumstances:
If the recipient is located in a third country not ensuring an adequate level of data protection, ROTZINGER Group will only disclose your personal data to the third party following the execution of an agreement based on the EU Commission’s Standard Contractual Clauses.
8. ROTZINGER Group
ROTZINGER Group is an international organization, and the personal data we collect and process may be transferred internationally between entities of the ROTZINGER Group for the purposes for which the personal data was collected.
Concerning the ROTZINGER Group entities established in countries outside the EU/EEA that are not considered as safe third countries and therefore not ensuring an adequate level of data protection, agreements based on the EU Commission’s Standard Contractual Clauses are considered the legitimate basis for the transfer of your personal data.
An overview of the ROTZINGER Group organization and more information regarding the legitimate basis for the transfer of personal data to third countries can be obtained by submitting a request for such information to email@example.com.
9. Retention period
The personal data ROTZINGER Group collects shall be processed and stored for as long as required by the purpose for which the personal data has been collected.
ROTZINGER Group may be allowed to retain your personal data for a longer period if you have given your consent to the processing activity. Furthermore, ROTZINGER Group may be obliged to retain your personal data for a longer period, whenever required to do so for the performance of a legal obligation or to establish, exercise or defend a legal claim.
Once the retention period expires, your personal data shall be deleted.
For applicants the personal data will be stored for up to six (6) months after the application has been completed and for twenty-four (24) months after the application has been completed, provided you have consented to the inclusion into the Talent Pool. After this period, your personal data is deleted automatically.
10. Your rights
When we process your personal data, you may exercise certain rights regarding our processing activities. In particular, you have the right to:
11. How to exercise your rights or file a complaint
You may also – at any time – file a complaint to your local data protection agency if you are dissatisfied with how we process your personal data.
Version 2.1, January 2022