B. Application Process
1. Controller pursuant to Art. 4 No. 7 GDPR
1.1. Application to Specific Entities If you apply for a position at one of the following companies:
- PreZero Polymers Austria GmbH, Industriezone Ost 5, 9111 Haimburg
- PreZero Polymers GmbH, Industriezone Ost 5, 9111 Haimburg
- PreZero Sorting Austria GmbH, Blumauerstraße 202, 2601 Sollenau
the respective company is jointly responsible (Joint Controller) for the data processing occurring in connection with the application process together with:
PreZero Polymers Austria GmbH
Industriezone Ost 5
9111 Haimburg
E-Mail: hr-at@prezero.com
This is because PreZero Polymers Austria GmbH conducts the application process jointly with the respective company. Consequently, the respective company and PreZero Polymers Austria GmbH are jointly responsible for the protection of your personal data (Art. 26 GDPR).
Within the framework of their joint responsibility, the aforementioned companies have determined who fulfills which obligations under the GDPR. This specifically concerns the fulfillment of the rights of data subjects and the information duties pursuant to Art. 13 and 14 GDPR.
| Prozessabschnitt der Datenverarbeitung/Pflicht | Erfüllung der Pflichten durch |
| Information duties pursuant to Art. 13, 14 GDPR | PreZero Polymers Austria GmbH |
| Collection | PreZero Polymers Austria GmbH |
| Storage | All Companies |
| Transmission | PreZero Polymers Austria GmbH |
| Use | All Companies |
| Modification | All Companies |
| Restriction (Blocking) | All Companies |
| Erasure (Deletion) | All Companies |
| Right of access pursuant to Art. 15 GDPR | All Companies |
For applications for a position at PreZero Polymers Austria GmbH itself, this entity is the sole Controller pursuant to Art. 4 No. 7 GDPR.
1.2. Further Information on Responsibility and Art. 26 GDPR
Notwithstanding the joint responsibility, the parties fulfill their data protection obligations according to their respective areas of competence for the individual process stages as follows:
Within the scope of joint responsibility, each company is responsible according to the tables above. The companies shall immediately inform each other of legal positions asserted by data subjects. They shall provide each other with all information necessary to respond to requests for access.
Data protection rights may be asserted against any of the participating companies.
2. Execution of the Application Process
2.1. Use of an External Service Provider
We utilize New Work SE as an external service provider. New Work SE, Am Strandkai 1, 20457 Hamburg (hereinafter "Prescreen"), operates the e-recruiting system "Prescreen" under the domain *.jobbase.io (hereinafter "jobbase.io"), where companies can post job advertisements and receive and manage applications. In the context of these activities,
Prescreen processes personal data solely on behalf of and for the purposes of the respective company and is therefore a Processor within the meaning of Art. 4 No. 8 GDPR.
Jobbase.io is the central platform for our applicant management. When using our online form, your personal data is recorded directly in jobbase.io. Even in the case of applications via post or email, your data is transferred into the e-recruiting system.
2.2. Purposes of Data Processing / Legal Basis
You have the option to register for our career portal, create a personal profile, and use it to, for example, manage your profile data, upload and submit applications and associated documents, or view your current applications. We process the personal data you submit during registration or application for the stated purposes and the associated applicant selection and, if applicable, hiring. Processing for selection and hiring also occurs if you submit application documents outside our career portal, e.g., via email or post.
The only data stored is that which you provide to us. This may include, in particular:
Master data (e.g., name, address, date of birth, data on dependents, VAT ID);
Contact data (e.g., email addresses, telephone numbers, messenger services);
Content data (e.g., text entries, photographs, videos, contents of documents/files);
Employment data (e.g., working hours, qualifications, degrees, public offices held, social security data, data on professional reintegration management, salary expectations).
Please note that you determine the scope and content of your application data yourself. Please only provide information that you wish to be considered in the process. Irrelevant data (e.g., details on parents or denomination) will not be considered for the selection decision.
The legal basis for data processing is Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG (German Federal Data Protection Act) and/or Art. 6 (1) (b) GDPR. We may process special categories of personal data pursuant to Art. 9 (1) GDPR (e.g., health data) if required for the position. In this case, processing is based on Section 26 (3) BDSG. Where we reimburse travel expenses for interviews, the processing of required data is based on Art. 6 (1) (c) GDPR.
2.3. Applications by Post
Please note: If you send your application documents by post, the data contained therein will be manually transferred to the Onlyfy applicant system. Participation in the application process without processing your data in SuccessFactors is currently not possible.
2.4. Application via Online Portal
When applying without registration, a candidate profile is created: By entering and submitting data and documents in the application mask, a candidate profile is simultaneously created and the application is sent. You will subsequently receive login information. Upon first login and password creation, the candidate profile can be fully utilized.
2.5. Document Upload
Documents such as a CV can be uploaded to the candidate profile. If stored there, they are visible to the recruiter for every application submitted via that profile. Alternatively, documents specific to a single application can be uploaded, which are then associated only with that application and not the general profile.
2.6. Recipients / Categories of Recipients
If you apply for a vacancy, the HR department of PreZero Polymers Austria GmbH and the respective hiring department receive access to your data to the extent necessary. If necessary, your data may be accessible to other Schwarz Group companies involved in the process (e.g., for internal advisory purposes). Where a Works Council exists at the respective company, its members will also have access as required. This applies accordingly to unsolicited applications. If not limited to a specific department, multiple companies/departments may gain access to determine potential placement.
If travel expenses are reimbursed, your data is processed by PreZero Polymers Austria GmbH to facilitate payment. In exceptional cases, your data may be accessible to New Work SE for support/maintenance purposes, as they provide the servers. This also applies to data submitted via email or post, as we assign these to the portal. Upon conclusion of a contract, data required for contract drafting is transmitted to PreZero Polymers Austria GmbH. If a digital signature (e.g., Adobe Sign) is used, data is accessible to all persons involved in the approval and signing process, as they receive a log showing processing steps, including email, IP address, date, and time. Data may also be accessible to the service provider (Adobe Systems Software Ireland Limited). Transfer to other third parties is generally excluded unless processed by carefully selected Processors contractually bound under Art. 28 GDPR.
2.7. Obligation to Provide Your Data
You are under no contractual or legal obligation to provide personal data. However, without it, we cannot contact you or conduct the process. The data is also required for hiring in the event of a contract offer.
2.8. Storage Period / Criteria for Determination
In the event of a rejection, we store your data for six months from the time of rejection. Paper applications are digitized and stored for the same period; original documents are returned after digitization. If your application is successful, the data is transferred to your personnel file. Further information is provided in the Employee Data Protection Notice upon hiring. Your profile in the online system remains stored independently of an active application, allowing you to apply for other positions. If a profile is inactive for 12 months and no application is in progress, it is automatically deleted. You may also delete your profile at any time; active applications will be withdrawn and deleted according to applicable law.
2.9. Feedback Questionnaire
To optimize our processes, we may send a feedback questionnaire to your email. If you participate, our provider Prescreen (see Point 5) collects feedback, job title, location, category, and employment type. This info is transmitted to kununu GmbH and other platforms for anonymous publication. Kununu cannot identify you personally, though others (e.g., your current employer) might identify you based on the specific content of your feedback.
2.10. Calendar Function
If the calendar function is used for scheduling, processing is based on Art. 6 (1) (f) GDPR. This is provided by Cronofy Ltd. (UK). The UK is deemed a secure third country via an EU Adequacy Decision. More information: https://www.cronofy.com/gdpr/ uand https://docs.cronofy.com/policies/privacy-notice/