Data protection policy for online applications
The use of your data as part of the online application process
Toll Collect processes your application data solely as part of the application process. Your application data is processed for the purposes of personnel pre-selection and selection on the basis of Section 26 (1) sentence 1 BDSG. If we do not select you as part of the application process, we will delete your data six months following the end of the application process. The legal basis for this storage duration is Art. 6 para. 1 subpara. 1 lit. f of the EU General Data Protection Regulation (GDPR). It serves as a safeguard in the event that you file an appeal under the AGG on the basis that you were not considered in the application process. Should you decide to do so, we will process your application data on the basis of Art. 6 para. 1 subpara. 1 lit. f GDPR within the framework of the procedure and then delete it. If you have been invited by us to a job interview and you have applied for reimbursement of your travel expenses, we will process reimbursement-related data on the basis of Art. 6 para. 1 subpara. 1 point b of the General Data Protection Regulation (GDPR). We delete this data after 12 years due to statutory retention periods. Should we select as part of the application process, we will transfer your data to the ordinary personnel administration process, in which they will be processed in accordance with the legal requirements.
Provision of personal data
The provision of data is neither legally nor contractually required; however, it is necessary for the purpose of carrying out the application process. There is no obligation to provide the data. However, failure to provide the data could result in us not being able to consider you for a vacant position. Failure to provide data required for travel reimbursement will also mean that we may not be able to reimburse you for travel expenses incurred.
Transfer to a third country
If you apply directly to Toll Collect via the StepStone job portal, StepStone Deutschland GmbH will act as a processor for Toll Collect. StepStone Deutschland GmbH uses the service provider Akamai Technologies, Inc. for security services, which may result in transmission to the USA. Akamai Technologies, Inc. has submitted to the EU-US Privacy Shield, for which the European Commission has determined the adequacy of the level of data protection.
No automated decision-making
Toll Collect does not subject you to automated decision-making in the application process for individual cases that have legal consequences for you or which affect you in a similar manner.
You have the following rights vis-a-vis Toll Collect with regard to personal data that relates to you:
- Right to information,
- Right to correction,
- Right to deletion ("right to be forgotten"),
- Right to restrict processing,
- Right to revoke permission for processing,
- Right to data communicability.
Once consent is granted, you have the right to revoke that consent at any time. The legality of processing remains unaffected before the time at which consent is revoked. You have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data by Toll Collect.