1. Data protection at a glance
The following information provides a basic overview of what happens with your personal data when you visit our website. Personal data refers to all data which allows you to be personally identified. For detailed information on the topic of data protection, please refer to our privacy notice, which you will find below this text.
Data collection on our website
Who is responsible for the collection of data on this website?
The processing of data on this website is performed by the website operator. You will find the operator’s contact information in this website’s legal notice.
How do we collect your data?
For one, your data is collected when you provide it to us. This includes, for example, the data you enter in a contact form.
Other data is automatically collected by our IT systems upon visiting the website. Above all, this includes technical data (e.g. Internet browser, operating system, or time of the page request). The collection of this data takes place automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure that the website is error-free. Other data may be used to analyze user behavior.
What rights do you have with regard to your data?
You have the right to obtain information on the origin, recipient, and purpose of the personal data stored about you, at any time and at no cost. You also have the right to request the rectification, blocking, or erasure of this data. For inquiries regarding this as well as other questions on the topic of data protection, you can contact us at any time via the address specified in the legal notice. Furthermore, you are also entitled to lodge a complaint with the competent supervisory authority.
In addition, under certain circumstances, you also have the right to request the restriction of processing of your personal data. For details on this, please refer to the privacy notice under: “Right to restriction of processing.”
2. General and mandatory information
The operators of this website take the protection of your personal data extremely seriously. We handle your personal data in strict confidence and in compliance with statutory data protection regulations, as well as according to this privacy notice.
When you use this website, various forms of personal data are collected. Personal data refers to data which allows you to be personally identified. This privacy notice explains which data we collect and what we use it for. It also explains how and for what purpose this takes place.
We would like to point out that data transmission on the Internet (e.g. during communications via email) may have security gaps. Absolute protection of data against access by third parties is not possible.
Information on the controller
The controller for data processing on this website is:
48155 Muenster, Germany
Telephone: +49 251 986 330
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data (e.g. names, email addresses, or similar).
Withdrawal of your consent for data processing
Many data processing operations are only possible with your express consent. You may withdraw consent that was previously given at any time. To do so, sending us an informal message via email shall suffice. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to object to data collection in special cases, as well as to direct marketing (Art. 21 GDPR)
When data processing takes place based on Art. 6(1)(e) or (f) of the GDPR, you have the right to object to the processing of your personal data at any time due to reasons arising from your special situation; this also applies to profiling based on these provisions. For the respective legal basis on which processing is based, please refer to this privacy notice. When you object, we will no longer process the personal data of yours in question, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims (objection in accordance with Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection in accordance with Art. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In cases of violations of the GDPR, data subjects are entitled to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint shall exist without prejudice to other administrative law or judicial remedy.
Right to data portability
You have the right to have data which we automatically process based on your consent or as part of the fulfillment of a contract handed over to you or a third party in a commonly used, machine-readable format. If you request direct transmission of the data to another controller, this shall only take place where technically feasible.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries which you send to us, the website operators, this website utilizes SSL and/or TLS encryption. You can identify an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and a lock symbol appears in your browser’s address bar.
When SSL and/or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Information, blocking, erasure, and rectification
According to prevailing statutory provisions, you have the right to obtain information on the origin, recipient, and purpose of the personal data stored about you, at any time and at no cost, and where applicable, the right to have this data rectified, blocked, or erased. For inquiries regarding this as well as other questions on the topic of personal data, you can contact us at any time via the address specified in the legal notice.
Right to restriction of processing
You have the right to request the restriction of processing of your personal data. For inquiries regarding this, you can contact us at any time via the address specified in the legal notice. The right to restriction of processing exists in the following cases:
If you dispute the correctness of personal data we have stored concerning you, we generally require time to verify this claim. For the duration of the verification process, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data took/is taking place unlawfully, you may request the restriction of processing of the data instead of its deletion.
If we no longer require your personal data, but you require it in order to establish, exercise, or defend legal claims, you have the right to request the restriction of processing of your personal data instead of its deletion.
If you have filed an objection in accordance with Art. 21(1) GDPR, your interests must be weighed against our interests. Until it is determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
Where processing has been restricted, your personal data will, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a member state.
3. Data Protection Officer
Legally required Data Protection Officer
We have appointed a Data Protection Officer for our company.
Zert. Datenschutzbeauftragter (TÜV) | Certified Data Protection Officer
Dawid Majerski, LL.M.
Phone: +49 251 986 33-5633
4. Data collection on our website
Inquiries via email, telephone, or fax
When you contact us via email, telephone, or fax, we will store and process your inquiry including all the resulting personal data (name, inquiry) for the purposes of processing your concern. We will not disclose this data without your consent.
The processing of this data takes place based on Art. 6(1)(b) GDPR in cases where your inquiry is related to the fulfillment of a contract or is necessary to perform pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our justified interests (Art. 6(1)(f) GDPR), as we have a justified interest in the effective processing of inquiries addressed to us.
The data you transmit to us via contact inquiries remains with us until you request its deletion, withdraw your consent for its storage, or the purpose for storing the data no longer exists (e.g. after processing of your inquiry is complete). Mandatory legal regulations—in particular statutory retention periods—remain unaffected.
When you send us inquiries via a contact form, we will save your information from the inquiry form including the contact data you have specified in it for the purpose of processing the inquiry and in case of follow-up questions. We will not disclose this data without your consent.
The processing of the data entered into the contact form therefore takes place exclusively based on your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time. To do so, sending us an informal message via email shall suffice. The withdrawal of consent shall not affect the lawfulness of processing operations based on consent before its withdrawal.
The data you enter into the contact form remains with us until you request its deletion, withdraw your consent for its storage, or the purpose for storing the data no longer exists (e.g. after processing of your inquiry is complete). Mandatory legal regulations—in particular retention periods—remain unaffected.
5. Analysis tools and advertising
This website utilizes functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The storage of Google Analytics cookies takes place based on Art. 6(1)(f) GDPR. The website operator has a justified interest in the analysis of user behavior in order to optimize both its web offerings as well as its advertising.
We have activated the IP anonymization feature on this website. This means that Google will truncate your IP address within member states of the European Union or in other countries which are contracting parties to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports on website activity and to provide the website operator with additional services related to website and Internet use. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data from Google.
You can prevent the storage of cookies by configuring your browser software accordingly. However, we would like to point out that if you do so, you may not be able to use all the functions of this website in their entirety. Furthermore, you can also prevent the collection of data generated by the cookie regarding your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data during future visits to this website: Deactivate Google Analytics.
Commissioned data processing
We have signed a contract with Google for commissioned data processing and fully implement the strict regulations of the German data protection authorities for the use of Google Analytics.
Demographics by Google Analytics
This website uses the “Demographics” feature of Google Analytics. This allows reports to be compiled that contain information on the age, gender, and interests of website visitors. This data comes from interest-related advertising from Google as well as from user data from third-party providers. This data cannot be linked to any particular person. You can deactivate this feature at any time via the advertising settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection.”
6. Plugins und tools
This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence over this data transmission.
The use of Google Maps takes place in the interest of an attractive presentation of our online offerings and to make it easier to find the locations specified on our website. This constitutes a justified interest as specified in Art. 6(1)(f) GDPR.
Liability for links
Our offering contains links to external third-party websites. We have no influence over the content of these websites. We are therefore unable to provide any guarantee for this third-party content. The respective provider or operator of the website is always responsible for the content of the linked pages. The linked pages were reviewed for possible legal violations at the point in time at which they were linked. Illegal content was not identified at that point in time. However, continuous monitoring of the content of the linked pages is not feasible without specific indications of legal violations. Should we become aware of any legal violations, we will remove such links without delay.
The content and works created by the website operators are governed by German copyright law. The reproduction, processing, dissemination, and any form of exploitation outside the limits of copyright law require written consent from the respective author and/or creator. Downloads and copies of this website are only permitted for private, non-commercial use. In cases where content on this website was not created by the operator, third-party copyrights were observed. In particular, third-party content is identified as such. If you should nevertheless notice a copyright violation, please inform us. Should we become aware of any legal violations, we will remove such content without delay.
Liability for content
As a service provider, we are responsible for our own content on this website under general law according to Section 7(1) TMG (Telemedia Act). However, according to Sections 8 to 10 TMG, we, as a service provider, are not obliged to monitor communicated or stored third-party information or to search for circumstances that might indicate illegal activities. Obligations to remove or block the use of information according to generally applicable laws remain unaffected by this. Any liability in this respect, however, exists only after we have learned of a specific legal violation. Should we become aware of any such legal violations, we will remove the content without delay.
This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.
The controller under data protection law is:
48155 Muenster, Germany
Phone: +49 251 986 33-0
Commercial register entry number: HRB 5908
Registration court: Muenster District Court
Data Protection Officer:
Zert. Datenschutzbeauftragter (TÜV) | Certified Data Protection Officer
Dawid Majerski, LL.M.
Phone: +49 251 986 33-5633
1. Personal data collected as part of the application process
Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
2. Fundamentals and purposes of processing personal data collected from application documents and during the application process
If you apply to us electronically, i.e. via email or using our online form, we will collect and process your personal data for the purpose of executing the application process and preparing contracts.
By submitting an application via our recruitment website, you express your interest in taking up work with us. In this context, you transmit personal data, which we will use and store exclusively for the purpose of your job search / application process.
In particular, the following data is collected during this process:
- name (first and last names)
- email address
- phone number
- LinkedIn profile (optional)
- channel through which you found us
Furthermore, you can choose to upload expressive documents such as a cover letter, your CV and reference letters. These may contain additional personal data such as date of birth, address etc.
Only authorized HR staff and/or staff involved in the application process have access to your data.
The personal data is stored, as a rule, exclusively for the purpose of filling the vacancy for which you have applied.
Your data will be stored for a period of 180 days after the application process has been concluded. This is usually done to fulfill legal requirements and/or defending ourselves against any claims arising from legal provisions. After this period, we are obligated to delete or anonymize your data. In case of anonymization, the data will only be available to us in the form of so-called metadata, without any direct personal reference, for statistical analysis (for example, share of male and/or female applicants, number of applications per specified period of time etc.).
Furthermore, we reserve the right to store your data for 365 days after the application process has been concluded for the purpose of adding it to our Talent Pool in order to identify any other vacancies that may be of interest to you. This includes, for example, applications for apprenticeships or internships. By accepting the data privacy statement, you consent to any further storage of your data as well as its inclusion in our Talent Pool.
Should you be offered and accept a position with us during the application process, we will store the personal data collected as part of the application process for at least the duration of your employment.
3. Disclosure of data to third parties
Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor under Art. 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio.
4. Rights of data subjects
If we as the controller process personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing.
Rights of data subjects involved in data processing
As a data subject, you are entitled to the following rights in principle, provided that contractual and legal obligations do not prevent this and that the conditions specified in the individual articles are met:
- right of access (Art. 15 of the GDPR) with the restrictions according to §§ 34, 35 BDSG n.F. (Bundesdatenschutzgesetz, German Federal Data Protection Act)
- right to rectification (Art. 16 of the GDPR)
- right to erasure (Art. 17 of the GDPR) with the restrictions according to §§ 34, 35 BDSG n.F. (Bundesdatenschutzgesetz, German Federal Data Protection Act)
- right to restriction of processing (Art. 18 of the GDPR)
- right to data portability (Art. 20 of the GDPR)
- right to object with a data protection supervisory authority (Art. 77 of the GDPR)
- individual right of objection (Art. 21 (1) GDPR) or reasons arising from your particular situation and relating to data processing pursuant to Art. 6 para. 1 e) GDPR and Art. 6 para. 1 f) GDPR. The objection can be addressed to the contact data mentioned above.
The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Duesseldorf, Germany, telephone: 0211/38424-0, email: email@example.com
To assert your rights as a data subject in relation to the data processed during this online application process, please refer to our Data Protection Officer (see above).
5. Concluding provisions
We reserve the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.
In addition to this data privacy statement, please view our general data privacy statement at https://www.nicos-ag.com/en/privacy-policy/.