Privacy Policy

Declaration of Consent to Data Processing regarding eRecruiting at KOSTAL Group 

Hereby we inform you about how your personal data is processed as part of the application process at the KOSTAL Group. In addition, we inform you about your rights under the applicable data protection law. Personal data is all data that relates to an identified or identifiable natural person, such as date of birth, address or billing data, as well as data that indicates their identity.

The personal data that you have entered into our applicant management system will be processed by the relevant legal entities of the KOSTAL Group for the purpose of processing your application.

By accepting our Declaration of Consent to Data Processing regarding eRecruiting at KOSTAL Boup you agree that the data you submit may be stored and processed by all legal entities of KOSTAL worldwide for recruitment, staffing and employment purposes.

The intended purposes (Application, Unsolicited Application Usage and Hiring) are explained below.

The protection of personal data and ensuring the security of business data are an integral part of the KOSTAL Group's corporate policy. 

Personal data is therefore always processed with great care in order to protect the privacy of the data subjects and the security of all data. The personal data collected during your online application will always be processed confidentially and strictly in accordance with the statutory provisions. For detailed information, please refer to the privacy policy at https://kostal-career.com .

A.        Contact information of the data controller and the data protection officer

The KOSTAL Group legal entity to which you submit your application is responsible for the processing of your data. You can find the contact details of the legal entity in the United States of America: 

KOSTAL of America, Inc.

350 Stephenson Highway

Troy, MI 48083

KOSTAL Kontakt Systeme, Inc.

1350 West Hamlin Road

Rochester, MI 48309

Below you will find the contact details of our data protection officer

Data Protection Officer of the KOSTAL Group

At the Bellmerei 10

58513 Lüdenscheid 

dataprotection@kostal.com.

To assert your rights or report data protection incidents, please use the above address or the following link https://kostalgroup.speakup.report/kostalgroupexternal

B.        Information on the processing of personal data

Below you will find information about the processing of your personal data for the purposes listed in more detail and, among other things, about the legal basis for the processing. Insofar as the legal basis for processing is mentioned there as the balancing of interests, you can request further information on the balancing of interests from us using the contact details given in Section A. 

I.          Purposes of the processing

We and the external service providers commissioned by us process your personal data in accordance with the General Data Protection Regulation of the EU General Data Protection Regulation (GDPR), with national data protection laws and with all other applicable national laws. 

The data is processed to decide on the establishment of an employment relationship.

KOSTAL will treat your data as as confidential worldwide in accordance with the applicable data privacy laws. Details on the collection of data can be found at https://kostal-career.com/privacy-policy.

II.         Disclosure of personal data to third parties

Only persons who are involved in the selection process (e.g. line managers, employees in the recruitment departments, HR employees, members of employee representatives) have access to your personal data. 

In addition, in certain cases your application data may be shared with other job vacancies within the KOSTAL Group, in each case you will be notified by email and your consent will be obtained. The list of all legal entities of the KOSTAL Group can be found in Appendix 1. 

In some cases, we use external service providers to help us fulfill our relevant contractual or legal obligations. These act as processors for us:

We may also transfer personal data to other data controllers if we are obliged to do so by law or by an enforceable official or court order.

Your data will only be supplied to government institutions where required by law. KOSTL uses security measures in order to protect the data we have under our control against manipulation, loss, destruction, access by unauthorized persons or against unauthorized disclosure. Our security procedures are continually enhanced as new technology becomes available. The data transfer between your local browser and our eRecruiting system is encrypted via https.

III.        Duration of storage; retention periods

We delete your personal data as soon as it is no longer required for the above-mentioned purposes or we no longer have a legitimate interest in storing it. 

After completion of the application process, your personal data will continue to be stored for a period of one year, unless such storage is prevented by national law or candidates, applying for positions in the US, the profile and data as it existed for that US position is retained in accordance with applicable law for a period of three years.

Appendix 1: Legal entities of the KOSTAL Group(EU/EEA)

ADDITIONAL INFORMATION FOR INDIVIDUALS RESIDING IN CALIFORNIA

With this Privacy Policy we inform you about how your personal data is processed as part of the application process at the KOSTAL Group. In addition, we inform you about your rights under the applicable data protection law. Personal data is all data that relates to an identified or identifiable natural person, such as date of birth, address or billing data, as well as data that indicates their identity. Details will be defined in Annex 1. 

The personal data that you have entered into our applicant management system will be processed by the relevant legal entities of the KOSTAL Group for the purpose of processing your application.

The protection of personal data and ensuring the security of business data are an integral part of the KOSTAL Group's corporate policy. 

Personal data is therefore always processed with great care in order to protect the privacy of the data subjects and the security of all data. The personal data collected during your online application will always be processed confidentially and strictly in accordance with the statutory provisions. For detailed information, please refer to the privacy policy at https://kostal-career.com .

A.        Contact information of the data controller and the data protection officer

The KOSTAL Group legal entity to which you submit your application is responsible for the processing of your data. You can find the contact details of the legal entity in the United States of America: 

KOSTAL of America, Inc.

350 Stephenson Highway

Troy, MI 48083

KOSTAL Kontakt Systeme, Inc.

1350 West Hamlin Road

Rochester, MI 48309

Below you will find the contact details of our data protection officer

Data Protection Officer of the KOSTAL Group, 

At the Bellmerei 10,

58513 Lüdenscheid 

dataprotection@kostal.com.

To assert your rights or report data protection incidents, please use the above address or the following link https://kostalgroup.speakup.report/kostalgroupexternal

B.        Information on the processing of personal data

Below you will find information about the processing of your personal data for the purposes listed in more detail and, among other things, about the legal basis for the processing. Insofar as the legal basis for processing is mentioned there as the balancing of interests, you can request further information on the balancing of interests from us using the contact details given in Section A. 

I.          Data categories

We process the following categories of personal data in order to recruit new employees and to carry out an application process: 

-          Assignment to a specific job advertisement (i.e. linking your entries to such an advertisement); 

-           Your personal master data (first name, surname, address, contact details, date of birth, place of birth); 

-           the photo you have provided; 

-           Information about your CV to date, including educational background and professional experience, as well as references from previous employers and/or educational institutions; 

-           Your letter of application; 

-           Information about how you became aware of us (voluntary as well as 

-           Login data

-           Special categories of personal data (e.g. health data) (voluntary)

In general, the personal data is generally collected directly from the applicant. Details on the collection of data can be found at kostal-career/com/dataprotection  and Annex 1.

The applicant management platform is not intended for children under the age of 16.

II.         Purposes of the processing

We and the external service providers commissioned by us process your personal data in accordance with the General Data Protection Regulation of the EU General Data Protection Regulation (GDPR), e California Consumer Privacy Act of 2018 (the “CCPA”), as amended by the California Privacy Rights Act of 2020 (the “CPRA”)with national data protection laws and with all other applicable national laws. 

The data is processed to decide on the establishment of an employment relationship (hiring).

KOSTAL will treat your data as as confidential worldwide in accordance with the applicable data privacy laws. Details on the collection of data can be found at https://kostal-career/com/dataprotection.

III.        Disclosure of personal data to third parties

Only persons who are involved in the selection process (e.g. line managers, employees in the recruitment departments, HR employees, members of employee representatives) have access to your personal data. KOSTAL will not sell any of the Personal Information.

However, in certain cases the Personal data a may be shared with other job vacancies within the KOSTAL Group, in each case you will be notified by email and your consent will be obtained. The list of all legal entities of the KOSTAL Group can be found in Appendix 1. 

In some cases, we use external service providers to help us fulfill our relevant contractual or legal obligations. Following you will find the list of service provider who act as processors for KOSTAL:

We may also transfer personal data to other data controllers if we are obliged to do so by law or by an enforceable official or court order 

Your data will only be supplied to government institutions where required by law. KOSTL uses security measures in order to protect the data we have under our control against manipulation, loss, destruction, access by unauthorized persons or against unauthorized disclosure. Our security procedures are continually enhanced as new technology becomes available. The data transfer between your local browser- and our eRecruiting system is encrypted via https.

IV.        Duration of storage; retention periods

We delete your personal data as soon as it is no longer required for the above-mentioned purposes or we no longer have a legitimate interest in storing it. 

After completion of the application process, your personal data will continue to be stored for a period of one (1) year, unless such storage is prevented by national law  or candidates, applying for positions in the US, the profile and data as it existed for that US position is retained in accordance with applicable law for a period of three years.

C.        Rights of the data subjects

As a data subject, you have the following rights in relation to the processing of your personal data, which you can exercise by contacting us using the contact details provided (see above):

• A right to information about which of your personal data we process. This includes further information about the data processing, such as the purpose and legal basis as well as the recipients of this data. You also have the right to request a copy of this data. 
• The right to obtain from us the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.
• A right to request the erasure of personal data concerning you in the cases provided for by law , for example if the data is no longer required for the purposes for which it was collected or if it has been processed unlawfully. 
• A right to request the restriction of processing in the cases prescribed by law. 
• The right to access the personal data concerning you that we have collected on the basis of your consent or for the performance of a contract (see section B) in a structured, commonly used and machine-readable format (right to data portability). 
• The right to withdraw consent given to us at any time. This does not affect the lawfulness of the processing carried out up to the point of withdrawal.

• Right to lodge a complaint with a supervisory authority. Right to lodge a complaint with a data protection authority:. You can contact either the data protection authority responsible for your place of residence or your federal state or the data protection authority responsible for KOSTAL in Germany:

   

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Kavalleriestr. 2-4, 40213 Düsseldorf

P.O. Box 20 04 44, 40102 Düsseldorf

Phone: +49 (0)211/384 24-0

Fax: +49 (0)211/38424-999

E-mail: poststelle@ldi.nrw.de

https://www.ldi.nrw.de

USA:

Federal Trade Commission
600 Pennsylvania Avenue, NW
Washington, DC 20580
Phone: (202) 326-2222

https://www.ftc.gov/ 

Appendix 2: Collection of Personal Information

Collection of Personal Information. 

If you submit an application for employment, KOSTAL may collect and use your Personal Information. In particular, KOSTAL collects the following Personal Information in connection with employment and human resources practices: