We hereby inform you about the processing of your personal data by Odenwald Faserplattenwerk GmbH and your rights in accordance with data protection provisions.
The data controller for data processing is your employer:
Odenwald Faserplattenwerk GmbH
Dr.-F.-A.-Freundt-Straße 3
63916 Amorbach
tel +49 93 73.2 01-0
fax +49 93 73.2 01-130
info@owa.de
Our Data Protection Officer (Thorsten Barino) can be contacted at the above-mentioned address or at: datenschutz@owa.de. Contact details are also available on the Internet at www.owa.de.
Data categories The categories of personal data that is processed include in particular your master data (such as first name, last name, name affixes, nationality and personnel number), contact details (such as your private address, (mobile) telephone number, e-mail address), CV data, logging data that is incurred during use of the IT systems as well as additional data arising from your employment (such as time recording data, holiday times, incapacity periods, skills data and, where applicable, previous convictions, social data, bank details, social security number, salary data and tax ID number). This can also include special categories of personal data such as health data.
Your personal data is usually collected directly from you as part of the hiring process or during your employment. In certain circumstances, your personal data may also be collected from other departments due to statutory provisions. This includes in particular event-driven queries of tax-relevant information with the responsible tax office as well as information relating to periods of incapacity from the respective health insurance provider. In addition, we may have collected data from third parties (such as employment agencies). We also process personal data that we have permissibly obtained from publicly accessible sources (such as professional networks).
We process your personal data considering the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-New) and all other applicable laws (such as Works Constitution Act (BetrVG), Working Hours Act (ArbZG), etc.).
Primarily, the data processing serves to justify, perform and end the employment relationship. The predominant legal basis for this is Article 6 Paragraph 1 b) GDPR in connection with Section 26 Paragraph 1 BDSG-New. Furthermore, collective agreement provisions (Group, overall and company agreements as well as regulations established by collective agreement) in accordance with Article 88 Paragraph 1 GDPR in connection with Section 26 Paragraph 4 BDSG-New and,
where applicable, your separate consent in accordance with Article 6 Paragraph 1 a), 7 GDPR in connection with Section 26 Paragraph 2 BDSG-New (during video recordings, for example) may be used as consent for reasons of data protection.
We also process your data so that we can fulfil our legal obligations as an employer especially in the area of tax and social security regulations. This is done on the basis of Article 6 Paragraph 1 c) GDPR in connection with Section 26 BDSG-New.
If necessary, we also process your data on the basis of Article 6 Paragraph 1 f) GDPR to protect our legitimate interests or those of third parties (such as authorities). This particularly applies when investigating criminal offences (the legal basis is Section 26 Paragraph 1 P. 2 BDSG-New) or in the Group for purposes of corporate control, internal communication and other administrative purposes.
Furthermore, on the basis of European Anti-Terror Directives 2580/2001 and 881/2002 we are obliged to compare your data against the “EU Terror Lists” to ensure that no money or other economic resources are being provided for terrorist purposes.
If special categories of personal data are processed in accordance with Article 9 Paragraph 1 GDPR, this serves in the context of the employment relationship to exercise rights or to fulfil legal obligations from employment law, legislation from social security and social protection (such as the provision of health data to the health insurance provider, recording of severe disability due to additional leave and determining disability contributions). This is based on Article 9 Paragraph 2 b) GDPR in connection with Section 26 Paragraph 3 BDSG-New. Furthermore, the processing of health data may be necessary to assess your ability to work in accordance with Article 9 Paragraph 2 h) in connection with Section 22 Paragraph 1 b) BDSG-New.
Moreover, the processing of special categories of personal data may be based on consent in accordance with Article 9 Paragraph 2 a) GDPR in connection with Section 26 Paragraph 2 BDSG-New (such as operational health management).
We will inform you beforehand if we want to process your personal data for a purpose other than those mentioned above.
In the context of your employment, you must provide the personal data that is necessary to justify, perform and end the employment relationship, and to fulfil the contractual obligations associated with it, or that data which we are legally required to collect. We will not be able to conduct a contract of employment with you in the absence of this data.
Within our company, only those persons and departments (such as the specialist department, works council, representatives for persons with disabilities) will receive your personal data if this is required to fulfil our contractual and legal obligations.
Within our corporate group, your data will be transmitted to specific companies if they centrally undertake data processing tasks for the companies within the Group (such as payroll accounting, disposal of documents).
In addition, we sometimes use different third parties to fulfil our contractual and legal obligations.
Furthermore, we can transmit your personal data to additional recipients outside of the company if this is necessary for the fulfilment of our contractual and legal obligations as an employer. This may be, for example:
We process and store your personal data for as long as this is necessary for fulfilling the purposes of data processing or legal, contractual and statutory obligations (such as evidence and retention periods in accordance with the German Commercial Code (HGB) and the German Revenue Code (AO). Afterwards, the data is deleted or its processing is restricted.
You can request information about the data that is stored relating to your person from the above-mentioned address. Furthermore, under certain conditions you can also demand the correction or deletion of your data. You also have a right to restrict the processing of your data and a right to surrender of the information provided by you in a structured, common and machine-readable format.
You also have a right of objection under the provisions of Art. 21 GDPR.
You have the option of making a complaint to the above-mentioned Data Protection Officer or to a data protection supervisory authority.
The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27 (Schloss)
91522 Ansbach