V2 (022024)
ARRK Engineering GmbH uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by ARRK Engineering GmbH.
With regard to interaction within the company account of ARRK Engineering GmbH, ARRK Engineering GmbH and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with ARRK Engineering GmbH, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of ARRK Engineering GmbH in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to ARRK Engineering GmbH only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
Dear applicant,
Section 1 contains information about processing of personal data in connection with job applications to ARRK Engineering GmbH, and section 2 below that contains information about processing of personal data in connection with job applications to ARRK Research & Development S.R.L.
We are delighted that you are interested in applying for a job with ARRK Engineering GmbH. To enable us to consider your application, we will need to process personal data. This data processing notice explains how your data is processed during the application process.
This notice concerns the processing of personal data in connection with applications to ARRK Engineering GmbH only. If you apply for a position with another ARRK Group company, please note that that company’s own privacy notice will apply.
möchten, beachten Sie bitte, dass hierfür jeweils eigene Datenschutzinformationen gelten.
We will process the data and documents you send to us in connection with your application for the purpose of processing your application and carrying out the application process only.
As a general rule, applications should be submitted online via a website and an applicant profile set up for this purpose using an online form. Once you have created your applicant profile, you can use it to submit applications to us. When you apply online via your applicant account in this way, we will also process the data collected in connection with that account for the purposes of the application process.
Before creating your applicant profile, you can also consent separately to the continued storage of your data in our Talent Pool. The ARRK Talent Pool is a database which the HR department and managers can use to identify potential candidates for vacancies even if those roles have not been advertised.
Should your application result in employment, your data will also be processed for purposes related to that employment.
The legal basis for processing of your application data is Article 6(1)(b) of the GDPR and section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) (new).
If your application data is added to our Talent Pool, that data will be processed on the basis of the consent you gave when setting up your applicant profile (Article 6(1)(a) GDPR).
It may also be necessary to process data after completion of the application process in order to pursue legitimate interests in accordance with Article 6(1)(f) GDPR. We may need to do this if any legal claims are filed in connection with an unsuccessful application, for example. In that case, we would have a legitimate interest in the establishment or defence of legal claims.
If we are required to disclose personal data to a public or private body in order to comply with a legal obligation, the legal basis for this is Article 6(1)(c) GDPR.
When your application details are received, they will be viewed by the HR department. Suitable applications will be forwarded internally to the manager of the department with the vacancy concerned. Next steps will then be agreed.
If you have consented to the inclusion of your data in our Talent Pool, please see point 3 (third paragraph).
Your data will only be accessed by individuals who need to do so for the purposes of the application process. Alongside members of the HR department, these also include managerial staff in the department you are applying to join.
If you submit a speculative application, the staff members who may access your data include, alongside members of the HR department, managerial staff in departments with suitable vacancies.
If we use external service providers or contractors in connection with the recruitment process (currently we only use providers or contractors within the EU/EEA and in particular our affiliated company ARRK Research & Development SRL Romania in Romania), their activities, and the activities of any subcontractors engaged by them with our authorisation, may include the processing of personal data.
In this case, we will enter into a specific contractual agreement concerning processing on our behalf in accordance with Article 28 GDPR. This will oblige those service providers to comply with the same data protection rules as us, and they will only process your personal data on our instructions.
We may also be required to disclose personal data to public or private bodies in order to comply with a legal obligation.
Applicant data is normally erased no later than six months following final rejection of an application.
If you have agreed that your data can be added to our Talent Pool, that data will be erased no later 12 months after you create your applicant profile and send us your application data.
Once these periods have expired, or if you delete your applicant profile yourself or withdraw consent to continued storage of your data, the data you have provided will be anonymised and the documents you have sent to us will be erased.
Aside from this, your data may be processed for longer than six months if necessary in order to pursue legitimate interests after completion of the application process (see also point 3).
In addition, we may need to retain your data to comply with legal obligations (such as retention periods laid down in commercial or tax law) even if you delete your profile or withdraw your consent.
We may also need to process your data for longer than six months if we have a legal obligation to disclose personal data to a public or private body. If your application is successful, we will transfer your data from the application data system into our HR information system.
(1) You have the right to access personal data concerning you that we process (Article 15 GDPR).
If you request access to your personal data in a manner other than in writing, please note that we may need to ask you to provide proof that you are the person entitled to access the data.
(2) In the circumstances provided for in law, you also have the right to rectification of inaccurate data concerning you (Article 16 GDPR).
(3) You have right to erasure in particular if you withdraw your consent to processing of your data and there is no other legal basis for storage of that data. You also have this right if we have a legal obligation to erase your data (“right to be forgotten”, Article 17 GDPR).
(4) You have the right to obtain restriction of processing of your data (Article 18 GDPR).
(5) You can withdraw your consent to processing of your data at any time.
However, please note that in this case we will not be able to consider your application further. It will not affect the application process in any way if you withdraw your consent to storage of your data in our Talent Pool.
(6) You have the right to data portability (Article 20 GDPR) as set out in data protection law.
(7) You have the right to right to lodge a complaint with the appropriate data protection supervisory authority at any time.
Provision of personal data for recruitment purposes is voluntary and you are not legally or contractually obliged to do so. However, please note that we may not be able to process your application without this necessary information.
If we need any specific personal data or documents in order to continue considering your application (i.e. data or documents which are necessary for the application process), this will either be stated in the job advertisement or we will let you know during the online application process.
Storage of your applicant data in the Talent Pool is always voluntary. Your application will be considered regardless of whether or not you consent to inclusion in the Talent Pool.We are delighted that you are interested in applying for a job with ARRK Research & Development S.R.L. To enable us to consider your application, we will need to process personal data. This data processing notice explains how your data is processed during the application process.
This notice concerns the processing of personal data in connection with applications to ARRK Research & Development S.R.L. only. If you apply for a position with another ARRK Group company, please note that that company’s own privacy notice will apply.
Purposes of and lawful basis for data processing
We will process the data and documents you send to us in connection with your application for the purpose of processing your application and carrying out the application process only.
As a general rule, applications should be submitted online via a website and an applicant profile set up for this purpose using an online form. Once you have created your applicant profile, you can use it to submit applications to us. When you apply online via your applicant account in this way, we will also process the data collected in connection with that account for the purposes of the application process.
Before creating your applicant profile, you can also consent separately to the continued storage of your data in our Talent Pool. The ARRK Talent Pool is a database which the HR department and managers can use to identify potential candidates for vacancies even if those roles have not been advertised.
Should your application result in employment, your data will also be processed for purposes related to that employment.
The legal basis for processing of your application data is Article 6(1)(b) of the GDPR.
If your application data is added to our Talent Pool, that data will be processed on the basis of the consent you gave when setting up your applicant profile (Article 6(1)(a) GDPR).
It may also be necessary to process data after completion of the application process in order to pursue legitimate interests in accordance with Article 6(1)(f) GDPR. We may need to do this if any legal claims are filed in connection with an unsuccessful application, for example. In that case, we would have a legitimate interest in the establishment or defence of legal claims.
If we are required to disclose personal data to a public or private body in order to comply with a legal obligation, the legal basis for this is Article 6(1)(c) GDPR.
Recipients/categories of recipients of personal data
When your application details are received, they will be viewed by the HR department. Suitable applications will be forwarded internally to the manager of the department with the vacancy concerned. Next steps will then be agreed.
If you have consented to the inclusion of your data in our Talent Pool, please see point 2 (third paragraph).
Your data will only be accessed by individuals who need to do so for the purposes of the application process. Alongside members of the HR department, these also include managerial staff in the department you are applying to join.
If you submit a speculative application, the staff members who may access your data include, alongside members of the HR department, managerial staff in departments with suitable vacancies.
If we use external service providers or contractors in connection with the recruitment process (currently we only use providers or contractors within the EU/EEA and in particular our parent company ARRK Engineering GmbH in Munich, Germany), their activities, and the activities of any subcontractors engaged by them with our authorisation, may also include the processing of personal data.
In this case, we will enter into a specific contractual agreement concerning processing on our behalf in accordance with Article 28 GDPR. This will oblige those service providers to comply with the same data protection rules as us, and they will only process your personal data on our instructions.
We may also be required to disclose personal data to public or private bodies in order to comply with a legal obligation.
How long your personal data will be retained
Applicant data is normally erased no later than six months following final rejection of an application.
If you have agreed that your data can be added to our Talent Pool, that data will be erased no later 12 months after you create your applicant profile and send us your application data.
Once these periods have expired, or if you delete your applicant profile yourself or withdraw consent to continued storage of your data, the data you have provided will be anonymised and the documents you have sent to us will be erased.
Aside from this, your data may be processed for longer than six months if necessary in order to pursue legitimate interests after completion of the application process (see also point 3).
In addition, we may need to retain your data to comply with legal obligations (such as retention periods laid down in commercial or tax law) even if you delete your profile or withdraw your consent.
We may also need to process your data for longer than six months if we have a legal obligation to disclose personal data to a public or private body. If your application is successful, we will transfer your data from the application data system into our HR information system.Your rights in relation to processing of personal data
(1) You have the right to access personal data concerning you that we process (Article 15 GDPR).
If you request access to your personal data in a manner other than in writing, please note that we may need to ask you to provide proof that you are the person entitled to access the data.
(2) In the circumstances provided for in law, you also have the right to rectification of inaccurate data concerning you (Article 16 GDPR).
(3) You have right to erasure in particular if you withdraw your consent to processing of your data and there is no other legal basis for storage of that data. You also have this right if we have a legal obligation to erase your data (“right to be forgotten”, Article 17 GDPR).
(4) You have the right to obtain restriction of processing of your data (Article 18 GDPR).
(5) You can withdraw your consent to processing of your data at any time.
However, please note that in this case we will not be able to consider your application further. It will not affect the application process in any way if you withdraw your consent to storage of your data in our Talent Pool.
(6) You have the right to data portability (Article 20 GDPR) as set out in data protection law.
(7) You have the right to right to lodge a complaint with the appropriate data protection supervisory authority at any time.
Provision of personal data for recruitment purposes is voluntary and you are not legally or contractually obliged to do so. However, please note that we may not be able to process your application without this necessary information.
If we need any specific personal data or documents in order to continue considering your application (i.e. data or documents which are necessary for the application process), this will either be stated in the job advertisement or we will let you know during the online application process.
Storage of your applicant data in the Talent Pool is always voluntary. Your application will be considered regardless of whether or not you consent to inclusion in the Talent Pool.
