Data protection informationfor applicants of Roadsurfer GmbH

This data protection information for applicants informs you about the processing of your personal data at Roadsurfer GmbH, Winzerer Strasse 47D in 80797 Munich (hereinafter referred to as “Roadsurfer GmbH” or “we”).

Pursuant to Art. 4 lit. 1 of the EU General Data Protection Regulation (hereinafter referred to as “GDPR”), your personal data includes all information that relates or can be related to your person, in particular by reference to an identifier such as a name or to an organisation or personnel number by which your person can be identified.

Personal information and personal data

Roadsurfer GmbH collects and processes the following personal data (both in paper format and in digital form) that you have provided with your application (hereinafter also referred to as “applicant data”):

Contact data such as your name, address, telephone number and email address;
Information about your professional experience and skills, as well as previous employment, language skills, performance appraisals, ratings and quotas;
Photo (if attached voluntarily).

It is not envisaged that specific types of personal data will be processed. However, should you inform us, about health data, this data is also processed.

Data processing purposes, legal basis and consequences

Applicant data is collected and processed for recruitment and employment purposes in order to determine the skills and suitability of applicants who have applied for a position (hereinafter referred to as “onboarding processes”). Roadsurfer GmbH relies on the following legal bases with regard to data processing:

Necessity of recruitment (Art. 88 GDPR in conjunction with Section 26 of the Federal Data Protection Act, hereinafter referred to as “BDSG”(Bundesdatenschutzgesetz));
Legitimate interest of Roadsurfer GmbH (Art. 6 (1) lit. f GDPR);
Consent, if provided by you and prescribed by law (Art. 6 (1) lit. a GDPR in conjunction with Art. 88 GDPR and Section 26 (2) BDSG);
Compliance with a legal obligation (Art. 6 (1) lit. c GDPR);
Personal data is provided on a voluntary basis. However, if you do not provide this data, it could prevent the employment process, so that Roadsurfer GmbH will unfortunately not be able to consider your application.

Categories of recipients

Roadsurfer GmbH may use service providers who act as processors so that they can provide IT and other administrative support (e.g. service providers who offer IT hosting or maintenance support). These service providers may have access to your personal data insofar as this is necessary for the provision of such services. Any access to your personal data is restricted to the person who needs the information to carry out their work. A transfer of your personal data to third parties does not take place outside of order processing in which the recipient is subject to an agreement regarding the processing of personal data.

Storage period

The application data will be stored for as long as necessary by Roadsurfer GmbH and, if applicable, our service providers to the extent that is necessary for the fulfilment of their obligations and in accordance with the applicable data protection law for the time necessary to achieve the purposes to reach. Roadsurfer GmbH will delete your application data no later than six months after the point in time at which we have informed you that your application will not be considered.

This does not apply if, at our request, you have expressly consented to longer storage because we want to include you in a talent pool. In this case, the deletion takes place after the time specified in the consent or after you revoke your consent.

The deletion takes place subject to a right to storage according to Art. 17 (3) GDPR or in accordance with the applicable provisions in the BDSG. If the decision is in your favour, the application will be assigned to your personnel file created when the employment relationship was established and considered part of the same in terms of data protection law.

Your rights

If you have given your consent to certain processing activities, you can revoke this at any time with future effect. This revocation will not affect the previous processing of data. According to the applicable data protection laws, you have the following rights:

Right of access, Art. 15 GDPR: You have the right of access to your stored personal data.
Right to rectification, Art. 16 GDPR: If you discover that inaccurate data about you is being processed, you can request rectification. Incomplete data must be completed taking into account the purpose of the processing.
Right to erasure, Art. 17 GDPR: You have the right to request the erasure of your data if certain grounds for erasure apply. This is particularly the case if they are no longer required for the purpose for which they were originally collected or processed.
Right to restriction of processing, Art. 18 GDPR: You have the right to restrict processing of your data. This means that your data will not be deleted but will be flagged in order to restrict further processing or use.
Right to data portability, Art. 20 GDPR: You have the right to receive the personal data you have provided to Roadsurfer GmbH in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from Roadsurfer GmbH.
If your personal data are processed on the basis of legitimate interests under Art. 6 (1), sentence, 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data if there are reasons for this that arise from your particular situation.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 lit. e or f of the GDPR.

Since Roadsurfer GmbH processes and uses your personal data primarily for the purposes of the contractual relationship with you, Roadsurfer GmbH basically has a legitimate interest in processing your data, which, on the other hand, will override your restriction request. To exercise your rights, you can contact us at any time using the contact details provided in the “Questions” section (see below).

Complaining to the supervisory authority about data protection violations

If you have any questions or concerns about the processing of your data, you can also contact the data protection authority in the member state of your habitual residence or the data protection authority responsible for us:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Bavarian State Office for Data Protection Supervision); Promenade 18; 91522 Ansbach
Email: poststelle@lda.bayern.de

Right of revocation

If you have given your consent to certain processing activities, you can revoke this at any time with future effect. This revocation will not affect the previous processing of data. If you wish to exercise your right of revocation, simply send an email to datenschutz@roadsurfer.com

Automated decision-making/profiling

Roadsurfer GmbH does not carry out any automatic decision-making.

Data security

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Questions

You can contact the data protection officer at Roadsurfer GmbH at the following email address datenschutz@roadsurfer.com

You can find our general data protection information here.