KODIAK GmbH (hereinafter referred to as KODIAK) treats your personal data confidentially and in accordance with the requirements of data protection law. With this Privacy Statement we inform you about how, to what extent and for what purpose we process your personal data when using the KODIAK website.

1. COLLECTION, PROCESSING AND USE OF PERSONAL DATA ON REQUEST

The use of our website is generally possible without providing personal data. You are neither obliged to access this website nor to provide personal data. If you do not provide us with any personal data, you may not be able to use individual functions of this website. Otherwise there will be no consequences for you. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our site, this is done on a voluntary basis, except in the cases expressly described below. This data will not be passed on to third parties without your express consent. We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can be subject to security vulnerabilities. It is impossible to completely protect data against unauthorised access by third parties.

2. DATA PROCESSING TO ENABLE THE USE OF OUR WEBSITE

When you visit our website, we collect the necessary data to enable you to use it. This includes your IP address and data about the beginning, end and subject of your use of the website as well as any identification data (e.g. your login data if you log into a secure area). This data is used to provide the service and to tailor it to your needs. They are generally deleted as soon as they are no longer needed and no storage obligations exist.

3. LEGAL BASIS FOR DATA PROCESSING

The legal basis for data processing depends on the purpose for which the data is processed. If the processing of your personal data is based on your consent, you have the right to revoke this consent at any time with the result that the processing of your personal data will be inadmissible for the future. This does not, however, affect the legality of the processing which took place on the basis of your consent up until its revocation.

4. LINKEDIN ADS, LINKEDIN ANALYTICS AND LINKEDIN MARKETING SOLUTIONS

We use the services of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Within the scope of these services, LinkedIn collects and stores user data in pseudonymous profiles to allow for statistical evaluations of website use and the success of advertisements as well as interest-based advertising on our website and on LinkedIn and LinkedIn’s partner sites. If you are a LinkedIn user, LinkedIn may also merge this data with your user account. You can deactivate these and the data collection associated with them on the following websites:

www.linkedin.com/psettings/guest-controls
optout.aboutads.info
www.youronlinechoices.com/de/praferenzmanagement/

Their deactivation is usually saved in a cookie. It must therefore be reset if you delete the cookies on your computer. In addition, deactivation must be carried out separately for each browser.
Further information on data protection within the scope of LinkedIn services can be found at: www.linkedin.com/legal/privacy-policy.

5. TRANSFER TO THIRD PARTIES AND STATES OUTSIDE OF THE EU

Your personal data will only be transferred to third parties if you have obtained legal permission to do so or if you have given your prior consent. We will only pass on your data to government agencies within the framework of legal obligations or on the basis of an official order or court decision. Transfer to recipients outside the EU only takes place if it is ensured that the data recipient guarantees an adequate level of data protection and that no other legitimate interests speak against its transfer.

6. DATA SECURITY

KODIAK has taken technical and organisational measures to protect the personal data that you have provided against loss, destruction, manipulation and unauthorised access. All persons at KODIAK involved in data processing are obliged to comply with the data protection laws and handle personal data confidentially and are trained to do so accordingly. To protect our users’ personal data, we implement Secure Socket Layer (SSL) transfer as a secure method of online transfer. You can recognise this by the “s” (“https://”) or a green, closed lock icon displayed in front of the http address string. Clicking on the icon gives you information about the SSL certificate used. The icon displayed depends on the browser version you are using. SSL encryption ensures the encrypted and complete transfer of your data.

7. YOUR RIGHTS REGARDING PERSONAL DATA

Data protection law grants you a number of rights with regard to data relating to your person (known as the data subject rights). In general, you have the right to request information about the personal data we have stored about your person, and the right to have it corrected, deleted or have its processing restricted and to object to the processing. Data protection law determines whether and to what extent these rights exist in individual cases and what conditions apply. The EU General Data Protection Regulation also grants you the right to data portability. Insofar as you have granted us consent to process your personal data, you can revoke this at any time with effect for the future. You also have the right to appeal to the competent data protection supervisory authority. If you have any questions or complaints concerning data protection at KODIAK, we do recommend that you contact us first (see Section 9).

8. NO AUTOMATED INDIVIDUAL DECISION-MAKING

We do not use your personal data to make automated individual decisions unless it is required in exceptional cases to conclude a contract or is permitted by law (as in the case of age verification).

9. HOW TO CONTACT US

Our contact details as the Data Controller can be found in the Imprint. You can also use these contact details to exercise your rights as stated in Sec. 6 or to ask questions concerning data protection in our organisation or about this Privacy Statement.

10. AMENDMENTS TO THIS PRIVACY STATEMENT

New legal requirements, business decisions or technical developments may require changes to be made to our Privacy Statement. This Privacy Statement will then be amended accordingly. You can always find the latest version on our website.

11. CONSENT – APPLICATIONS

In case of an active application, I consent to KODIAK processing my personal data for the purposes and to the extent described below.

11.1. Application information

We collect various items of personal data through the application process. Personal data refers to all information which allows conclusions to be drawn about your personal or professional circumstances or which makes you identifiable. The following data is collected and processed for the purpose of automatically processing your application:

• First name, last name, address, e-mail address, date of birth, title, phone number, country of residence and nationality / citizenship
• Additional questions depending on the respective call for applications (e.g. driving licence)
• Curriculum vitae, in particular details of work experience and training
• Skills and knowledge for the advertised position
• Photo of the applicant
• Qualifications, awards and language skills
• Letter of motivation
• Files and documents that you would like to send us or upload in connection with your application

When submitting your applicant data, you, as the applicant, grant us your consent to process your personal data for the purpose set out in this Privacy Statement. To process your application no information is required which is not allowed to be processed under the General Act on Equal Treatment (AGG) (including but not limited to race, ethnic origin, gender, disability, religion and belief or age). Please do not provide any information irrelevant to processing your application under the Act on Equal Treatment (AGG) (including but not limited to illnesses, pregnancy, trade union memberships or sex life).

Please do not submit any information that could violate, for instance, copyright or the third-party press rights.

11.2. Personal data affected by the processing

All the data I have submitted in connection with my applicant profile and all the documents uploaded as files will be processed.

11.3. Purpose of data processing

I consent to my data being collected, processed and used for the following purposes:

• The creation and continuous updating of an applicant profile including documents (e.g. CV) attached by the applicant
• Use of the applicant profile within the scope of the application process by the employees who are responsible for the application process
• If my application is successful: use of the data for administrative tasks in Human Resource in the context of employment

11.4. Scope of consent

Processing of the data is only permitted to the extent that it is absolutely necessary to fulfil the stated purposes.
Any use beyond this requires separate consent unless the processing is already permitted or ordered by law or other legal regulation.
The use of my data for statistical purposes is permitted, provided that any personal reference to me is excluded (anonymisation).

11.5. Deletion of data

My data will be anonymised automatically after 6 months and deleted after the period of intended use and statutory retention period have expired unless I actively consent to its processing and use by KODIAK for a further 6 months. In addition to said automatically scheduled deletion, I can delete my applicant profile on my own volition at any time. The data is also deleted in this case once the intended purpose no longer applies and the legal retention period has expired.

11.6. Voluntary nature of consent

My consent is voluntary and can be revoked at any time. In this case, the data is deleted once the intended purpose no longer applies and the legal retention period has expired. Revoking your consent does not affect the legality of any processing performed based on the consent you granted up to the point of revocation.

11.7. Responsibility

Responsible for the collection of personal data is KODIAK, represented by its management.