Skip to main content- If personal data is collected from the data subject, the controller shall inform the data subject of the following at the time such data is collected:
- den Namen und die Kontaktdaten des Verantwortlichen
marcapo GmbH
Bahnhofstraße 4, 96106 Ebern
Telefon: +49 9531 9220 0
E-Mail: info@marcapo.com
sowie gegebenenfalls seines Vertreters;
Geschäftsführer: Thomas Ötinger, Marc-Stephan Vogt, Christian Schwarzenberger
- gegebenenfalls die Kontaktdaten des Datenschutzbeauftragten;
THALES Rechtsanwälte.Datenschutz
Dr. Christian Szidzek & Partner
Kantstraße 38, 97074 Würzburg
Telefon: +49 931 46599018
E-Mail: info@thales-datenschutz.de
- the purposes for which the personal data will be processed,
Hiring an employee
as well as the legal basis for the processing;
pursuant to Article 6(1) of the GDPR:
a) The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes [possibly consent to the use of images];
b) the processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of precontractual measures taken at the data subject’s request;
c) processing is necessary for compliance with a legal obligation to which the controller is subject [Social Security Code, Income Tax Act];
f) the processing is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject that require the protection of personal data prevail, particularly if the data subject is a child.
- if the processing is based on Article 6(1)(f), the legitimate interests pursued by the controller or by a third party;
Data processing for employee management
- where applicable, the recipients or categories of recipients of the personal data, and
Internal departments responsible for the employee (Human Resources and line departments, management, works council, and, if applicable, the representative for employees with severe disabilities); statutory recipients (e.g., social security agencies, tax office); other entities involved in personnel development (e.g., Chamber of Industry and Commerce, vocational school, Employment Agency...)
- where applicable, the controller’s intention to transfer the personal data to a third country or an international organization, as well as the existence or absence of an adequacy decision by the Commission or, in the case of transfers pursuant to Article 46, Article 47, or the second subparagraph of Article 49(1), a reference to the appropriate or adequate safeguards and how to obtain a copy of them or where they are available.
No—no transfers to third countries are planned
- In addition to the information provided in paragraph 1, the controller shall provide the data subject, at the time of collection of such data, with the following additional information necessary to ensure fair and transparent processing:
- the period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
Ten years after the termination of employment, a review will be conducted to determine whether the data can be deleted. The data will not be deleted if the employee wishes to participate in or is participating in a company pension plan.
- the existence of a right to obtain from the controller information regarding the personal data in question, as well as the right to rectification, erasure, restriction of processing, or objection to processing, and the right to data portability;
Pursuant to Article 15(1), the data subject has the right to access his or her personal data.
The data subject has the right to rectification under Article 16.
The data subject has the right to erasure (“right to be forgotten”) under Article 17.
The data subject has the right to restriction of processing under Article 18.
The data subject has the right to data portability under Article 20.
The data subject has the right to object under Article 21.
- if the processing is based on Article 6(1)(a) or Article 9(2)(a), the existence of a right to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of consent prior to withdrawal;
Yes—the data subject has the right to withdraw consent previously given
any consent that may have been given: e.g., consent to the use of images
- das Bestehen eines Beschwerderechts bei einer Aufsichtsbehörde
Dem Betroffenen steht ein Beschwerderecht bei der zuständigen Aufsichtsbehörde nach Art. 56 DS-GVO zu. Kontaktdaten:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach
Telefon: +49 981 180093 0, Telefax: +49 981 180093 800
E-Mail: poststelle@lda.bayern.de
- whether the provision of personal data is required by law or contract, or is necessary for the conclusion of a contract; whether the data subject is obligated to provide the personal data; and what possible consequences failure to provide such data would entail; and
Yes—the data is necessary for the purpose of processing
Justification: in accordance with contractual and legal obligations within the framework of the employment relationship
- the existence of automated decision-making, including profiling, pursuant to Article 22, paragraphs 1 and 4, and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended effects of such processing on the data subject.
No—no automated decision-making
- If the controller intends to further process the personal data for a purpose other than that for which the personal data was collected, the controller shall provide the data subject, prior to such further processing, with information regarding that other purpose and all other relevant information in accordance with paragraph 2.
Yes — The collected data will be used for other processing purposes
Data use in the context of further processing activities: Access and time management, possibly travel expense reimbursement, occupational safety, and, if applicable, occupational health services.
