PRIVACY NOTICE

Welcome to our website. We are pleased about your interest in our company. We take the protection of your personal data very seriously and therefore, we process your personal data in accordance with the applicable data protection regulations, including without limitation the EU General Data Protection Regulation (GDPR) and the country-specific implementing statutes applicable to us. This privacy notice is to inform you comprehensively about how we process your personal data on our website and about your rights related thereto.

The information below applies to the use of the website of Immobilien-Management GmbH-Gebäudeservice Würzburg (IMG-G) and the functions contained therein.

1. Controller

The Controller responsible for the processing of personal data on our website is

Immobilien- Management GmbH- Gebäudeservice Würzburg (IMG-G)
Skyline Hill Center
Leightonstr. 3
97074 Würzburg
Tel.: +49(0)931-36-1012
Fax: +49(0)931-36-1014
E-mail: service@img-g.de
Web.: www.img-g.de

Responsible for the technical aspects of our website:

3WM GmbH
Oberdürrbacher Str. 6
97029 Veitshöchheim
Telephone: +49(0)931-80998600
Fax: +49(0)931-80998699
E-mail: info@3wm.de
Web: 3wm.de

2. Data protection officer

You may contact IMG-G’s data protection officer at datenschutz@wvv.de.

3. Your rights as the data subject

We would like to inform you of your rights as data subject in accordance with Art. 15-22 of the GDPR. You have the following rights:

The right of access (Art. 15 of the GDPR),
The right to erasure (Art. 17 of the GDPR),
The right to rectification (Art. 16 of the GDPR),
The right to data portability (Art. 20 of the GDPR),
The right to restriction of processing (Art. 18 of the GDPR),
The right to object (Art. 21 of the GDPR)

In order to assert these rights, please go to datenschutz@wvv.de or write to IMG-G’s postal address stated in no. 1 above.
You may also use these contact data if you have any questions on the processing of your data in relation to the use of our website.
In addition, you have the right to lodge a complaint with a supervisory authority (e.g. Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach).

Rights to object

In relation to your rights to object, we would like to inform you as follows:

We do not process your personal data on our website for direct marketing purposes.

If we process your data in order to protect legitimate interests as stipulated in Art. 6(1)(1)(f) of the GDPR (legitimate interest), you have the right to object, at any time, to such processing on grounds relating to your personal situation, including profiling based on those provisions. However, we do not use your personal data for profiling.
In that case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing worthy of protection, which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Please note that in case you object to the processing of your personal data, the use of the portal and of the services offered may be restricted or impossible.

Your objection is free of charge and not subject to formal requirements; please send it via e-mail to datenschutz@wvv.de or via letter to the address stated in no. 1 above (IMG-G).

Categories of personal data we process and origin of such data

The type of data we process depends on the context.

When you use IMG-G’s website, your data will be processed in order to enable you to fully use the functions of the website and in order to guarantee the website’s functionality.

In addition, we process your personal data if you submit an application and in order to execute the application process. You may submit your application documents via other means, e.g. via mail.

We process the following data on our website:

a) When you access and use our website:

Date and time of access;
IP address

b) When you submit an application via IMG-G’s website:

Job description, job information (start date, full-time/part-time/mini job)*
Sex*
Name and address*
Date of birth*
E-mail address*
Mobile number*
Nationality*
Languages spoken*
Start date*
Type of job*
Curriculum vitae (e.g. education, professional training, experience)
Letter of application
Image data/application photo
Other documents (e.g. school certificates, references, work samples, proof of qualification)

The data marked with * are compulsory information.
Additional data and documents may be provided on a voluntary basis.
There will be no negative consequences for you if you do not provide any voluntary data.
The data and documents voluntarily provided by you will only be processed for the application process.

You provide the data listed in no. 4 when you access and use and/or apply for a job on IMG-G’s website.
The data that we process for a job application will be processed for the application process and in order to contact you, if you are deemed suitable for a vacancy.
The data we process when you visit our website will be anonymised immediately upon receipt and analysed in anonymised form in order to further improve our website and make it more user-friendly, in order to enable us to find and remedy errors faster and to control server capacities. For example, these data help us to understand at what times of the day there is more traffic on our website, which in turn enables us to provide more data volume. These data will be deleted after the anonymised data were analysed.

5. Purposes and legal basis of data processing

The use of IMG-G’s website and of its embedded functions is voluntary.
When processing your personal data, we always comply with the provisions contained in the GDPR, the German Federal Data Protection Act and other relevant legal provisions. The legal basis for the processing of your data on IMG-G’s website is based – including without limitation – on Art. 6 of the GDPR and on Section 26 of the Federal Data Protection Act.

On this website, IMG-G processes your data for the advertising of vacancies (Art. 6(1)(1)(f) of the GDPR), for the maintenance of the website’s functionality (Art. 6(1)(1)(f) of the GDPR), in order to obtain job applications online and in order to contact suitable applicants with whom an employment contract is to be concluded (section 26(1) of the Federal Data Protection Act, Art. 6(1)(1)(b) of the GDPR).

The legal basis for the processing of your data for the purpose of the application process as well as for the initiation and signature of an employment contract is section 26(1) of the Federal Data Protection Act, Art. 6(1)(1)(b) of the GDPR) (initiation of employment contract for the establishment and management of an employment relationship). If your consent is necessary for a certain type of data processing as stipulated in Art. 6(1)(a), the controller will obtain such consent from you separately and transparently, unless such consent is deemed given by your voluntary and conclusive behaviour, such as your voluntary participation in a video interview. If your job application is successful, the data you disclosed will be processed and stored at IMG-G for the initiation and management of the employment contract in accordance with section 26(1) of the Federal Data Protection Act and Art. 6(1)(1)(b) of the GDPR.

The legal basis for the processing of your data that are processed when you access and use the website is Art. (6(1)(1)(f) of the GDPR (legitimate interest). These data will be processed in order to make available the reliable functions of our website and to maintain the website’s functionality (data processing required for technical purposes). Our legitimate interest is the provision and optimisation of the website and the guarantee of technical security.

Note on the withdrawal of your consent:

Currently, we do not obtain your consent via our website.

In case you consented to the processing of your personal data by IMG-G at a later time, you may withdraw your consent by writing to: Immobilien- Management GmbH- Gebäudeservice Würzburg (IMG-G), Skyline Hill Center, Leightonstr. 3, 97074 Würzburg, Tel.: +49(0)931-36- 1012, Fax: +49(0)931-36-1014 in writing via letter or e-mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

We exclusively process your data for the purposes stated above.
On this website, no special categories of personal data as stipulated in Art. 9(1) of the GDPR are processed.

6. Disclosure of personal data to third parties

Your personal data will not be disclosed to unauthorised third parties for applicant management purposes. When using the website or managing an application process, your data will only be disclosed to third parties in accordance with statutory regulations or based on your consent. Otherwise, your personal data will not be disclosed to third parties, unless we are obliged to disclose them to external bodies such as regulatory authorities or prosecuting authorities based on mandatory law.

7. Data recipients/Recipient categories

When using our website or managing an application process, only those bodies, departments and persons within our company will receive your data that must receive them in order to fulfil our contractual and statutory obligations.

In some cases, third-party service providers support our departments in fulfilling their tasks. The required privacy policy agreement was concluded with all service providers, guaranteeing that the relevant data protection regulations are complied with.

External recipients:
The group of external recipients, subject to data protection regulations, is restricted to the support and hosting provider for this website. We use 3 WM GmbH, which, as a service provider, creates, hosts and maintains the website for IMG-G, ensures its functionality and availability and executes maintenance work related thereto, and also forwards job applications received via IMG-G’s website. Likewise, 3 WM GmbH transmits data received via IMG-G’s website to IMG-G without storing applicants’ data.
Our website is hosted and data received via our website are processed in Germany exclusively.

8. Intent to transmit your data to a third country

No personal data will be transmitted to a third country.

9. Obligation to provide the data

Several personal data are required for the initiation and implementation of legal obligations and the fulfilment of the related (pre-)contractual and statutory obligations. The same is true for the use of our website and the various functions provided thereon.
For the use of the website and the giving of ratings, you must disclose certain personal data. This is required in order to guarantee the due functioning of the website. Likewise, the disclosure of your data is required for the job application process and thus to enable due processing of the (pre-)contractual relationship with you when you submit an application and for the fulfilment of the related (pre-)contractual and statutory obligations. The disclosure of data is also necessary so that we can contact you if you are suitable for a certain vacancy and we may conclude an employment contract.
In certain cases, data must be collected and/or disclosed based on statutory provisions. Please note that the execution of the underlying legal obligations and/or the initiation and the management of an employment contract is not possible without such data.
Likewise, the use of the website and the filing of an application via our website is not possible without providing certain data.

10. Secure transmission of data

We use technical and organisational security measures in order to protect the data we stored and collected via the website from accidental or wilful manipulations, loss, destruction or access by unauthorised third parties in the best possible manner. The security levels are continually verified and adjusted to current security standards in cooperation with security experts.
The data exchange with the website is encrypted. For security reasons and for the protection of the transfer of confidential contents (including without limitation applicants’ data) you send to IMG-G via the website, this website uses SSL and/or TLS encryption. Such SSL and/or TLS encryption ensures that these data cannot be read by any third party. Only we can decrypt these data.

11. Automated individual decisions

We do not make decisions based on purely automated processing.

12. Cookies

Our websites use so-called cookies in various places. Cookies are small text files which are stored on your end-device. The cookies enable the website to recognise your browser, to follow you when you access different pages on our website and to identify you when you revisit. Cookies do not contain any data which might identify you as a person but the information we store about you can be allocated to the data received by and stored in the cookies. Cookies help us make our website more user-friendly, more efficient and safer.
This website uses so-called session cookies. Session cookies store processed personal data only temporarily, namely during the temporary storage of your IP address. This processing step is required in order to present the website correctly to the user and to keep the session up.
The legal basis for technically required cookies is Art. 6(1)(1)(f) of the GDPR (legitimate interest). Cookies that are required for electronic communications or to provide certain functions you requested will be stored based on Art. 6(1)(1)(f) of the GDPR (legitimate interest). We have a legitimate interest in the storage of cookies in order to be able to provide our services in an optimised manner and without technical errors. Most browsers accept cookies automatically. You may also deactivate, restrict or delete cookies on your end-device via your browser settings or with the aid of a software.
Please note: If you deactivate cookies, you may not be able to fully use all functions of our website.

13. Period for which your data will be stored and erasure of personal data

We store your personal data for the purposes stipulated in no. 5. We will store your data for as long as they are required in order to fulfil the purposes for which they were collected. Our service provider transmits the data collected via the website to us without storing them first. Please note that numerous storage periods require that we (have to) store the data. This includes without limitation trade or tax law storage periods (e.g. Tax Code, Commercial Code, etc.) as well as the provisions contained in the General Equal Treatment Act (AGG).
We will erase your personal data as a matter of routine as soon as they are no longer required for the purpose for which they were collected, when all mutual claims are fulfilled unless other statutory storage periods, e.g. in accordance with the Tax Code or the Commercial Code or statutory reasons for the storage of your data apply. The personal data we collect, process and store in connection with a job application will be erased when the storage and processing of your data is no longer required for the defence against possible legal claims, including without limitation legal claims in accordance with the General Equal Treatment Act (AGG) and other employment law related claims. Your data will be erased six months after receipt of the staffing decision unless you conclude an employment contract with us based on your job application. In the latter case, we will continue to process your data in order to initiate, manage and process our employment relationship.