Privacy Information for Applicants in accordance with Art. 13 and 14 GDPR
We, GO! Express & Logistics Deutschland GmbH (hereinafter also "we" or "us"), take the protection of personal data and its confidential handling very seriously. We therefore hereby inform you about the processing of your personal data in the course of your application process with us and the rights to which you are entitled.
1. Name and Contact Details of the Controller
GO! Express & Logistics Deutschland GmbH
Brühler Straße 9
53119 Bonn
Germany
Phone: +49 228 24393-0
Fax: +49 228 24393-590
2. Contact Details of the Data Protection Officer
Herr Rechtsanwalt Boris Reibach
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn
Deutschland
Tel.: (+49) 0228-227 226 0
3. Information on Relevant Processing Purposes
3.1 Data Processing for the Purpose of the Application Procedure
We process your personal data for the purpose of deciding on the establishment of an employment relationship (conducting the application process) and, where applicable, to enable defence in the context of legal disputes.
Data processing for conducting the application procedure is carried out on the basis of Art. 6(1)(b) GDPR (contract performance/contract initiation). We may also process special categories of personal data on the basis of Section 26(3) sentence 1 BDSG and Art. 9(2)(b) GDPR.
Any data processing for the purpose of defence in legal disputes is based on Art. 6(1)(f) GDPR (balancing of interests). Our legitimate interest lies in being able to prove the lawful conduct of the application procedure in any legal proceedings. In this context, we may also process special categories of personal data on the basis of Art. 9(2)(f) GDPR.
If an employment relationship between you and us is established, we do not completely delete the data from your application process but instead transfer it to your personnel file to the extent necessary. We will then process these data for the purpose of performing the employment relationship. We will provide you with separate information regarding this.
If your application is unsuccessful, we will either continue to store your application data based on any consent you may have granted for inclusion in our applicant pool (see section 3.2) or delete it no later than six months after completion of your application procedure. If your data is also processed for other purposes listed in this privacy notice, please also note the respective storage periods for those purposes.
You are neither contractually nor legally obliged to provide us with personal data. However, if you do not provide all personal data required for the application procedure, we will unfortunately not be able to consider you in the application process.
3.2 Inclusion in the Talent Pool
If your application has not led to employment with us and you have permitted us to include your application data in our talent pool for future job postings, we will process your personal data to consider and contact you for future job openings and to document your consent.
Data processing for inclusion in the talent pool is carried out on the basis of Art. 6(1)(a) GDPR (consent) in conjunction with Section 26(2) BDSG.
If we process special categories of personal data on the basis of your consent, processing is also carried out on the basis of Art. 9(2)(a) GDPR in conjunction with Section 26(2)(3) BDSG.
You have the right to withdraw your consent at any time. In such cases, we will no longer process your personal data on the basis of your consent. The withdrawal does not affect the lawfulness of processing that took place prior to the withdrawal. You may withdraw your consent by contacting: datenschutz@general-overnight.com.
Data processing for the purpose of documenting your consent is carried out on the basis of Art. 6(1)(c) in conjunction with Art. 5(1)(a), (2), Art. 7(1) GDPR and Art. 6(1)(f) GDPR.
If you have granted your consent, we retain your data for no longer than 12 months after the conclusion of your application procedure (expiry of consent). If you withdraw your consent before that time, your data will be deleted immediately.
We retain personal data processed for the purpose of documenting your consent for three years after the end of the year in which you withdrew your consent or it expired. If your data is also processed for other purposes, please refer to the respective storage periods stated for those purposes.
You are neither contractually nor legally obliged to provide personal data for this purpose. However, if you do not allow us to include your data in our applicant pool, we will not be able to process your data to consider you for future job postings
4. Recipients or Categories of Recipients
Internally, only those departments and employees who require your personal data to fulfil the purposes listed in section 3 have access to your data.
Externally, the following recipients/categories of recipients may have access to your data:
- Processors, e.g., for providing IT services in the personnel department.
- Public bodies: Authorities and state institutions, such as public prosecutors, courts, or tax authorities, to whom we may transmit personal data in individual cases if a legal basis, particularly a legal obligation, exists.
- Private bodies: External lawyers.
5. Data Processing in Third Countries
We use service providers for IT services and IT infrastructure whose headquarters are located outside the European Union or European Economic Area. Except in legally permitted exceptional cases, we ensure before any transfer that the recipient either ensures an adequate level of data protection or appropriate safeguards are in place. You may request an overview of the recipients in third countries and a copy of the appropriate or adequate safeguards. Please refer to the contact details listed in section 1. Apart from this, no transfer of your personal data to third countries takes place.
6. Sources and Categories of Personal Data in Case of Third‑party Collection
We do not only process personal data that we collect directly from you. In certain cases, we collect your personal data from third parties. Below you will find an overview of the sources of such third‑party data collection:
- Employment agencies / personnel recruiters / headhunters
- Publicly accessible profiles on career‑related social media networks (such as StepStone, Monster, LinkedIn, Xing)
These usually include the following categories of personal data, the scope of which you largely determine yourself:
- General personal data (first and last name, contact details, date of birth)
- Data relating to your professional career, education, and qualifications
- Data on any training and additional qualifications
- Religious affiliation
- Disability status
7. Automated Individual Decision‑making Including Profiling
We do not use automated individual decision‑making, including profiling pursuant to Art. 22 GDPR.
8. Rights of Data Subjects
As a subject of data, you have the following rights:
- To request confirmation as to whether we process personal data concerning you; if so, you have the right to access this data.
- To request rectification of inaccurate personal data concerning you and completion of incomplete personal data.
- To request erasure of your personal data under the conditions of Art. 17 GDPR, e.g., if processing is unlawful or no longer necessary.
- To request restriction of processing under Art. 18 GDPR, e.g., instead of erasure.
- To receive personal data concerning you that you have provided to us in a structured, commonly used, and machine‑readable format or to request that it be transferred to another controller (data portability), where processing is automated and based on your consent or a contract.
- To withdraw consent, you have granted at any time with effect for the future (withdrawal of consent). The lawfulness of processing carried out up to the time of withdrawal remains unaffected.
Right to Object
Individual Right to Object
You have the right, for reasons arising from your particular situation, to object at any time to processing of personal data concerning you that is based on Art. 6(1)(e) GDPR (performance of a task carried out in the public interest or in the exercise of official authority) or Art. 6(1)(f) GDPR (balancing of interests), including profiling based on these provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
To exercise your data subject rights, you may contact us at any time using the contact details listed above under section 1.
If you believe that the processing of your personal data violates data protection law, you may also lodge a complaint with a supervisory authority, in particular in the EU Member State or federal state of your habitual residence, workplace, or the location of the alleged infringement.
The competent supervisory authority for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine‑Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
E-Mail: poststelle@ldi.nrw.de