Privacy policy statement

Privacy policy for applications

We are delighted that you wish to send us an application. The policy below explains how we process your personal data in the context of an application as well as providing other relevant information.

1. Who is responsible for processing your personal data?
In accordance with the General Data Protection Regulation and other national data protection legislation of the member states as well as other data protection regulations, responsibility for an application lies with

Geberit International AG
Schachenstrasse 77
8645 Jona
Switzerland

2. Data Protection Officer
Our Data Protection Officers can be reached on the following contact details:

KREMER Rechtsanwälte
Disch-Haus
Brückenstraße 21
50667 Köln
GERMANY

DPO@geberit.com

3. For what purposes and on what legal basis do we process personal data?
We process personal data about you for the purpose of your application for employment to the extent that this is necessary in order to make a decision about establishing an employment relationship. The legal basis is Section 26, Para. 1 of the German Federal Data Protection Act (BDSG) in conjunction with Para. 8(2).

If an employment relationship is established between you and us, we can further process the personal data that we have already received from you for the purposes of the employment relationship in accordance with Section 26, Para. 1 of the German Federal Data Protection Act (BDSG) if this is necessary in order to conduct or terminate the employment relationship or to exercise or fulfil the rights and obligations of the interest group or employees resulting from a law or collective agreement.

4. Which categories of personal data do we process?
We process data that is connected to your application. This may include general information about you (such as your name, address and contact details), information about your professional qualifications and education or information about professional training or other information you provide us with in connection with your application. In addition, we may process job-related information made publicly available by you, such as a profile on professional social media networks such as Xing, LinkedIn, etc.

5. From which sources is personal data taken if we do not collect it from you?
As a rule, we collect personal data from you. In connection with an application, however, we may also collect personal data about you on professional social networks (e.g. LinkedIn, Xing), insofar as this is necessary in order to make a decision about establishing an employment relationship.

6. What categories of data recipients are there?
6.1 Affiliated companies
Your personal data will be made available to companies affiliated with us within the Geberit Group, insofar as this is permissible within the scope of the purposes and legal bases set out in Section 3, because we maintain a central applicant management system.

6.2 Contract data processors
We also use contract data processors, i.e. companies that process personal data on our behalf and in accordance with our instructions, within the scope of contracts concluded with us. These contract data processors are:

6.2.1 Haufe-umantis AG, Unterstrasse 11, 9001 St.Gallen, Switzerland, which provides the applicant management system as a contractor of Geberit International AG
6.2.2 Various personnel recruiters who help us with applicant management

7. How long will your data be stored?
7.1 We store your personal data for as long as it is necessary to make a decision concerning your application. In the event that your application does not result in an employment relationship between you and us, we may continue to retain your data insofar as this is necessary to defend against possible legal claims. Application documents will be deleted three months after notification of the decision to reject your application, unless retention for a longer period is required in connection with legal disputes.

7.2 If you have declared that you do not wish your application data to be deleted even if the application does not result in an employment relationship between you and us, the data will be stored until you ask for it to be deleted and for at least three months after notification of the decision to reject your application.

8. What are your rights?
Depending on the situation applicable to a specific case, as an applicant you have the data protection rights described below which you may exercise by contacting us or our Data Protection Officer at any time using the contact details provided in Sections 1 and 2.

8.1 Information
You have the right to request confirmation from us regarding whether personal data concerning you is being processed. If this is the case, you have a right to receive information about this personal data free of charge, including the right to receive a copy of this data and to receive the following information:

8.1.1 the processing purposes
8.1.2 the categories of personal data being processed
8.1.3 the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations
8.1.4 if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this period
8.1.5 the existence of a right to rectification or erasure of personal data concerning you or to restrict processing by the controller or a right to object to such processing
8.1.6 the existence of a right to lodge a complaint with a supervisory authority
8.1.7 if the personal data is not collected from the data subject: all available information about the origin of the data
8.1.8 the existence of automated decision-making including profiling in accordance with Article 22, Para. 1 and 4 of the GDPR and – at least in these cases – meaningful information about the logic involved and the scope and the intended effects of such processing for you

8.2 Rectification
You have the right to ask us to rectify any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – including by means of a supplementary statement.

8.3 Right to object
To the extent that data concerning you is processed on the basis of Art. 6, Para. 1, point f of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of such personal data. In such cases, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or unless the circumstances involve the establishment, exercise or defence of legal claims.

8.4 Right to withdraw consent
If processing is based on consent, you have the right to withdraw such consent at any time without affecting the legality of the processing carried out on the basis of the consent prior to its revocation. You can contact us or our Data Protection Officer at any time using the contact details provided above.

8.5 Right to erasure
You have the right to request the erasure of personal data concerning you without undue delay and we shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

8.5.1 the personal data is no longer necessary for the purposes for which it was collected or otherwise processed
8.5.2 you submit an objection to processing pursuant to Section 8.3 and there are no overriding legitimate grounds for processing
8.5.3 the personal data has been processed unlawfully
8.5.4 the personal data has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject
8.5.5 This does not apply if processing is necessary:
8.5.6 to fulfil a legal obligation which requires processing under the law of the Union or of the Member States to which we are subject
8.5.7 to establish, exercise, or defend legal claims

8.6 Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the following applies:

8.6.1 the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data
8.6.2 the processing is unlawful and you oppose the erasure of the personal data and instead request a restriction of the use of the personal data
8.6.3 we no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims, or
8.6.4 you have objected to processing pursuant to Section 8.3 above pending verification of whether our legitimate grounds override yours

If processing has been limited pursuant to this section, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained a restriction on processing, we will inform you before the restriction is lifted.

8.7 Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, Art. 77 of the GDPR provides you with the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of personal data relating to you infringes the GDPR.

9. The requirement to provide personal data
The provision of personal data is neither required by law nor by contract, nor are you obliged to provide the personal data. However, the provision of personal data is required for a contract of employment with us. This means that we will not enter into an employment relationship with you if you do not provide us with the data we have marked as required for an application.

10. Automated individual decision-making or profiling
We do not use any automated processing systems for coming to specific decisions – including profiling.


Version: December 2022