GCD - Logo

With the following we would like to inform our employees on our handling of their personal data during the employment contract.

Purpose of Data Collection

During the period of the employment we will mainly process your personal data to perform and/or the termination of the contractual relationship including the tasks connected to the respective function. Further purposes may be the processing to follow legal requirements (including rights to information of third parties) or in measures to develop the company or company communication.

Types of processed data

During the effectiveness of the employment contract we will process the following personal data:

  • Applicant’s data: Name, date of birth, CV, nationality/work permit, etc. for the procedures of selection, hiring, entering and exiting;
  • Private contact data: Address, phone number, e-mail;
  • Official contact data: e.g. phone numbers, e-mail, place of work, job title, if so, photo;
  • Identification/payment data: ID card data, respectively work permit to identify and establish the legitimacy of the employment, place of birth, marital status, tax ID, health insurance membership, tax bracket, tax exemption limits, religious denomination for church tax purposes, bank account number, possible garnishment of wages (in order to calculate salaries and to fulfil obligations regarding social security, taxes and others);
  • Health data: e.g. in connection with salary accounting, clearing with health insurances and employers’ liability insurance, or for the purpose of pursuing legal requirements from the employers like, e.g., the internal re-entry management, or as the fulfilment of duties for the protection of disabled persons or in relation to the operational self-control as safety at work or examinations by the company’s physician;
  • Time recording and access data: vacation time, work time accounts, if so shift schedules, closure times, access protocols, etc;
  • Data in connection with the Personnel Screening: e.g. clearance certificates, reliability tests;
  • Data on Aptitude and Efficiency/Behaviour control: Information on trainings, data to measure the degree of target achievement, for example for the variable part of the remuneration, data on infringements of traffic regulations (speeding fines);
  • Other data in the personnel administration: Data from the operational health care and the operational health management, the work safety, if so degree of disability, driving license holder ship, possible garnishment of wages;

Categories of Recipients

Your personal data will be transmitted to the following recipients, e.g. to comply to legal requirements or requirements resulting from the employment contract:

  • Banks, and, if so, service providers calculating pension provisions
  • Service providers calculating salaries (tax counsellor), auditors, service providers for information and communication technology, companies maintaining software and devices;
  • Health insurance, social security, old age insurance companies, accident insurance and other insurance companies;
  • Authorities like tax authorities, social authorities, employment agencies, authorities for security, health care, traffic and related authorities collecting fines, customs authorities, monitoring authorities against black labour and minimum wages, other authorities;
  • Company’s physician;
  • Group companies as being jointly liable, the main contents of the regulations regarding the rights of people concerned may be requested under the named contact address. However, according to section 26 paragraph 3 DSGVO these rights may be claimed by all people concerned within all companies involved.
  • Business partners and customers (official contact data), temporary employment agencies.

Legal basis for the processing

We will obey applicable law, of course, regarding the processing of your personal data. Therefore, the processing is only made on that legal basis. The following legal regulations may be of importance regarding employment contracts:

1. Art. 6 para. 1 lit . a) on the basis of consent from you, if you provide us with data voluntarily or only use, whereby for a contract or the continuation of an existing contract in principle none is required,
2. Art. 6 para 1 lit.b ) for the establishment, performance and termination of a contractual relationship : this concerns in particular your master data and qualification data and other data for the organization and coordination of operations ,
3. Art. 6 para. 1 lit.c ) for the fulfillment of a legal obligation : in particular tax and health and social security relevant data ,
4. art. 6 para. 1 lit . f) for the protection of a legitimate interest.

If we process your personal data within the scope of our legitimate interests, these lie for example in:

  • The performance of electronic access checks,
  • The optimization of personnel plans,
  • The achievement of efficiency improvements by grouping of services within individual group companies (particularly personnel, IT, procurement)
  • The securing of the compliance with safety regulations, obligations, common standards and other contractual responsibilities,
  • The assertion, execution or defence of legal claims, including data to document flows of goods services,
  • The prevention of damages and/or liabilities of the company by appropriate measures,
  • The execution of internal information and communication measures.
  • The reporting on company information.

Contrary to the processing of personal data in the course of pursuing a legitimate interest you are entitled to object to the processing for reasons resulting from your personal situation. Then, we will not process your data any longer unless we are able to prove compelling reasons requiring protection on our side predominating your rights and freedoms, or the processing serves purposes of assertion, execution or defence of legal claims.

We do not use the personal data provided by you to make automated decisions concerning you.

Data collected by third parties

We are collecting data for the payroll accounting by the ELSTAM system which we are provided by the tax authorities for reasons of correct payroll accounting. This concerns mainly the above-named data on payroll accounting.

Storage time

After achieving the respective purpose your data will be deleted observing the legal retention periods, generally after 6 or 10 years, 30 years or more with certain data categories like old age provisions.