Data protection statement and notes on data processing – information to be provided pursuant to Art. 13 and 14 GDPR
At Baden-Württemberg International (bw-i), we take the protection of your personal data very seriously. We treat your personal data confidentially and in line with the statutory data protection regulations. The following explains how we manage your personal data.
If you have any further questions, please do not hesitate to contact us.
1. General notes and mandatory information
Personal data are data that can be used to identify you personally. This data protection statement explains which data we collect and what we use them for.
a. Contact responsible
Gesellschaft für internationale wirtschaftliche und wissenschaftliche Zusammenarbeit mbH,
represented by managing director Dr. Christian Herzog
Telephone: +49(0)711/ 227 87-15
Fax: +49(0)711 / 227 87-22
b. Contact details for our external data protection officer
Technische Akademie f. berufliche Bildung e. V.
Lorcher Straße 119
73529 Schwäbisch Gmünd
Telephone: +49(0)7171 31 -4091
c. Your rights as the data subject
You have the right to receive information free of charge at all times relating to the source, recipient and purpose of your stored personal data.
You have the rights afforded by Art. 15 to 21 GDPR:
- Right of access (Art. 15 GDPR): If your personal data are processed, you have the right to obtain access to your stored personal data.
- Right to rectification (Art. 16 GDPR): If inaccurate personal data are processed, you have the right to rectification.
- Right to erasure, to restriction of processing and to object (Art. 17, 18 and 21 GDPR): If the statutory prerequisites are met, you can demand the erasure or restriction of processing of data and can object to processing.
- Right to data portability (Art. 20 GDPR): If you have consented to data processing or a data processing contract is in place and data processing is carried out by automated means, you have a right to data portability as appropriate.
Where data processing is carried out based on your consent pursuant to Art. 6 No. 1 (a) GDPR, such consent can be revoked for the future at any time. This will not affect the lawfulness of data processing carried out before revocation of consent. If we process your data for the purposes of legitimate interests on the basis of Art. 6 No. 1 Sentence 1 (f) GDPR, you can object to such processing for reasons relating to your specific situation.
If you wish to object or assert any other of the aforementioned rights, please get in touch with us directly:
Gesellschaft für internationale wirtschaftliche und wissenschaftliche Zusammenarbeit mbH, represented by managing director Dr. Christian Herzog
Telephone: +49(0)711/ 227 87-15
Fax: +49(0)711 / 227 87-22
d. Right to lodge a complaint
You also have the option to contact the data protection offer (contact details provided above) or the data protection supervisory authority with a complaint. The data protection supervisory authority responsible is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Telephone: +49(0)711/ 61 55 41-0
Fax: +49(0)711 / 61 55 41 -15
2. Data recording on our website
Data processing on this website is carried out by the website host. You can find the host’s contact details in the legal notice for this website.
One way in which your data are collected is when you provide these data to us. For example, these can be data that you enter in a contact form. Other data are recorded automatically or after your consent by our IT systems when visiting the website. These mainly involve technical data (e.g. internet browser, operating system or time the site was accessed). These data are recorded automatically as soon as you enter our website.
Some of the data are recorded to ensure that the website can be displayed properly.
We will only pass on your personal data to external recipients within the EU or in third countries if this is necessary in order to process your request, you have given your consent or this is otherwise permitted by law.
a. SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, for example orders or enquiries that you send to us as the website host. You can recognise an encrypted connection because the browser address switches from “http://” to “https://” and by the padlock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Most of the cookies we use are what are called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain on your end device until you delete them. These cookies allow us to recognise your browser next time you visit our site.
You can also choose browser settings to notify you when cookies are sent and to only allow cookies in individual cases, to not allow the acceptance of cookies for certain cases or in general and to automatically delete cookies when the browser is closed. The functionality of this website may be restricted if cookies are deactivated.
Cookies necessary for electronic communication or for the provision of certain technical functions are stored on the basis of Art. 6 No. 1 (f) GDPR.
c. Server log files
The site provider records and automatically stores information in server log files that your browser automatically sends to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the computer accessing the site
- Time of the server request
- IP address
These data are not merged with other data sources.
These data are recorded on the basis of Art. 6 No. 1 (f) GDPR. The website host has a legitimate interest in the presentation and optimisation of its website free of technical errors – to do this, the server log files must be recorded.
3. Additional information for applicants
a. Purposes and legal basis for processing
We process your data for the purpose of managing applications. The legal basis is Art. 88 GDPR in conjunction with Sec. 26 BDSG (new) [“Bundesdatenschutzgesetz”: German Federal Data Protection Act] as well as Art. 6 No. 1 (b) GDPR, where applicable, for the preliminary steps for or performance of a contract. We can also process your personal data if this is necessary for compliance with a legal obligation (Art. 6 No. 1 (c) GDPR) or to protect ourselves against legal claims against us. The legal basis is provided by Art. 6 No. 1 (f) GDPR. If you grant us express consent to process personal data for specific purposes, the lawfulness of such processing is ensured based on your consent pursuant to Art. 6 No. 1 (a) GDPR. Any consent granted can be revoked at any time with effect for the future.
If you enter into an employment arrangement with us, we can process the personal data already received from you for the purpose of the employment arrangement pursuant to Art. 88 GDPR in conjunction with Sec. 26 BDSG (new) to the extent that this is necessary for performance or termination of the employment arrangement or to exercise rights and/or meet responsibilities to represent employee interests under a law or a collectively bargained wage agreement, a company agreement or a work agreement (collective agreement).
b. Categories of personal data
We only process data related to your application. These can be general data relating to your person (name, address, contact details, etc.), information regarding your professional qualifications and education, details on your professional training and other data that you provide to us as part of your application.
c. Data source
We process personal data that we receive from you by post or by e-mail when you contact us or send an application.
d. Passing on data
We pass on your personal data within our company only to those areas and persons that require these data to fulfil contractual and statutory duties and/or to preserve our legitimate interest. Otherwise, data are passed on to recipients outside of the company only to the extent permitted or required by statutory provisions or required to fulfil legal obligations or where you have granted consent.
Your data are passed on to third parties within the EU and outside of the EU only if this is necessary to fulfil the purpose of processing.
e. Storage period
We will store your personal data for as long as is necessary to make a decision regarding your application. Your personal data and/or application will be erased no later than six months after the application process has ended (e.g. announcement that your application has been unsuccessful) unless a longer storage period is legally required or permissible.
Beyond that, we will store your personal data only to the extent legally necessary or necessary in the specific case to assert, exercise or defend legal entitlements for the duration of a legal dispute.
In the event that you have consented to longer storage of your personal data, we will store these in accordance with your declaration of consent. Erasure will take place after no more than 12 months in such cases. If you have consented to processing of your data (e.g. for consideration of your application at a later date), you can revoke such consent at any time by sending an e-mail to email@example.com.
If the application process results in employment, an apprenticeship or internship, your data will initially continue to be stored and will then be transferred to the HR file, to the extent necessary and permissible.
f. Rights of affected parties
The same rights as in 1 c) of this statement apply.
The provision of personal data as part of application processes is not prescribed by law or contract. This means you are not obliged to provide details of your personal data. However, please note that these are necessary in order to make a decision regarding an application and/or to conclude a contract in the event of an employment arrangement with us. If you do not provide us with personal data, we cannot make a decision regarding an employment arrangement. We recommend that you only provide such personal data as part of your application that are necessary in order to process the application.