Privacy Policy.

Thank you for your interest in a position with Bechtle. We understand that your data is a sensitive matter. That’s why all personal information you submit via our application form is exclusively used for the purpose of the application process and we will not contact you for any other reason. No data are transferred to a third party without your consent. This document details how Bechtle processes your personal data and informs you of the rights you have under applicable data protection legislation.

Responsible authority and data protection officer.

Bechtle AG, Bechtle Platz 1, 74172 Neckarsulm, Germany and affiliated companies in accordance with Section 15 ff. of the German Stock Corporation Act (AktG)
Contact informationont: kontakt@bechtle.com, + 49 7132 981 - 0
Data protection officer: privacy@bechtle.com

Your rights as a data subject.

We would first like to inform you of your rights as a data subject as defined in Art. 15 - 22 EU GDPR. These include:

• The right of access (Art. 15 EU GDPR),
• The right to erasure (Art. 17 EU GDPR),
• The right to rectification (Art. 16 EU GDPR),
• The right to data portability (Art. 20 EU GDPR),
• The right to restriction of processing (Art. 18 EU GDPR),
• The right to object (Art. 21 EU GDPR).

To exercise these rights, please contact: privacy@bechtle.com. The same applies if you have questions about data processing in our company. You also have the right to appeal to the data protection supervisory authority.

Purposes and legal bases for data processing.

Your personal data is collected and processed in accordance with the provisions of the EU GDPR, the German Federal Data Protection Act (new), and all other applicable (labour) legislation. In accordance with Art. 88, Para. 1 EU GDPR in conjunction with Art. 26, Para. 1 German Federal Data Protection Act (new), it is permitted to process employees’ personal data for the purposes of an employment relationship to the extent required for recruitment, as well as the performance or termination of a resulting employment contract. Permission to process data, including special categories of personal data, may also be derived from other legislation, in particular industry-specific (compliance) provisions. Your consent is also deemed a legal basis for us to process your data for the specified purposes subject to your right to object pursuant to Art. 7, Para. 3 EU GDPR, Art. 88, Para. 1 EU GDPR in conjunction with Art. 26, Para. 2 German Federal Data Protection Act (BDSG) (new). Should we obtain your consent in order to process special categories of personal data, we will make an express note of such an intent in obtaining your consent (Art. 88 Para. 1 EU GDPR in conjunction with Art. 26, Para. 3 German Federal Data Protection Act (new). We will not process special categories of personal data according to Art. 9 Para. 1 EU GDPR unless we are required to do so by law and there is no reason to assume that your legitimate interest in the exclusion of the processing prevails (Art. 88 Para. 1 EU GDPR in conjunction with Section 26 Para. 3 German Federal Data Protection Act (new)). In order to be able to detect duplicate applications, we store the following data in our systems for the duration of 180 days: your name, date of birth, e-mail address and an (internal) applicant number.

Transfer of data to third parties.

We will only pass on your data to third parties within the framework of legal regulations or with appropriate consent. Otherwise, data will not be passed on to third parties unless we are obliged to do so by mandatory legal provisions (transfer to external bodies such as supervisory authorities or law enforcement authorities).

Data recipients / categories of recipients.

Within our company, we ensure that only those persons receive your data who need them to fulfil their contractual and legal obligations. In some cases, service providers support our specialist departments in performing their fulfill their tasks. For example, we are supported by the service provider SAP (Hasso-Plattner-Ring application portal by the service provider SAP (Hasso-Plattner-Ring 7, 69190 Walldorf). The necessary data protection contract was concluded with all necessary data protection contracts have been concluded with all the service providers used.

Transfers of personal data to third countries / intention to transfer data to a third country.

Data is only transmitted to third countries (countries outside the European Union or the European Economic Area) if required to do so by law , you have given us your consent or if this is necessary for the performance of an obligation.

Obligation to provide data.

A decision regarding establishment of an employment relationship—or regarding an application’s chances for success—is not possible without obtaining certain personal data. Additionally, there are legal rights and obligations that require us to ask for certain data at this stage.
When you visit our website, we collect and process the following data:
When you visit our site, your internet browser transmits the following types of data, which we then save:

• the browser type and language
• the IP address of the computer used to access the site
• the server requests (e.g. accessed pages) including time stamps and
• the referral URL (i.e. the address of the previous website that you visited, if you came to our site by following a hyperlink from there).

These first three data types are technically required to be able to properly display the webpage you accessed. Moreover, this data may be used, if necessary, to maintain secure operation of this website (e.g. to protect against hacking). The IP address and browser language are also used to suggest appropriate language settings for our website. The referral URL is anonymised and used to compile statistics. For reasons of technical security and in particular to prevent attempts to attack our web server, this type of data are also stored for a certain period of time in accordance with Art. 6 Paragraph 1, Sentence 1(f) EU GDPR.

When you apply online, we collect and process the following data:

• Master data (e.g. name, additional names, date of birth, and academic titles, if applicable),
• Contact details (postal address, phone number, email address),
• Qualifications and education information (e.g. C.V., references),
• If necessary and depending on the job application, information regarding language and IT skills, work permits and driving licences or residency permits.

In addition, we collect and process various other (voluntary) data such as earliest start date, regional mobility, desired number of hours and duration of employment, previous employment at Bechtle, information on your social commitments or information on how you became aware of the position. You may also choose to provide information regarding your personal accounts on social networks that may be relevant for your application. We have implemented security measures to ensure that your data remain safe and confidential at all times. All application documents submitted via the application portal are encrypted. Provisions to protect your information always correspond to the latest technological standards. Your data provided in the context of the application process are stored subject to applicable law and purged no later than six months after the application process has concluded. We will retain your data beyond this point only if we are entitled to or have an obligation to do so, e.g. if you have given your express consent for us to retain your data for an extended and specified period of time, or to exercise our rights under applicable law. For instance, we are obliged to retain certain data under the German Tax and Commercial Codes. All statutory periods of limitation are observed. You can find further information in the Privacy Policy on our application portal.

When you subscribe to a newsletter, we collect and process the following data:

• Title
• Last name, first name,
• E-mail address.
• Please be aware that we conduct anonymous link tracking for statistical purposes.

Contact via e-mail or phone.

If you contact us by e-mail, we will process the personal data provided solely for the purpose of processing your enquiry (Art. 6 Abs. 1 lit. a, b EU-DS-GVO). If you request a call back, we collect your name and telephone number. When requesting a call back, you can attach a message if you wish. All data required to complete the form is subject to the principles of data reduction and data economy, meaning you only have to provide the data that is absolutely necessary for processing inquiries and making contact.  For reasons of technical security and in particular to prevent attempts to attack our web server, we will also process your IP address.

Newsletter.

You can subscribe to our free newsletter via our website. The e-mail address and name provided during the registration process are used to send a personalised newsletter in accordance with Art. 6 Para. 1 S. 1(a) EU DS-GVO. The principle of data economy and data reduction is observed, as only the e-mail address, name and title are marked as mandatory fields to enable personalisation. Due to technical and legal reasons, we will also process your IP address. Of course, you can cancel your subscription at any time via the unsubscribe option provided in the newsletter and therefore revoke your consent. You also have the option to unsubscribe directly via our website.

Registration.

You may choose to register an account on our Career Portal. This enables you to access current information regarding the status of applications you have submitted, as well as to bookmark vacancies you’re interested in or set up job subscriptions. To create your account, we require the following data:

• E-Mail with password
• Title
• First and last name
• Country/region of residence
• Visibility setting of your profile
• Notification request about new job postings (optional)

By registering in the career portal, you can access the status of applications already submitted. If you would like to find out about interesting jobs you can also use your user account for the job notification functions.The legal basis for the creation of your user account is Art. 6 para. 1 lit. b) DS-GVO. Upon completion of the registration process, your data is stored with us for the use of the protected application area. As soon as you log in with e-mail address and password, this information can be used for the application for advertised positions. Registered persons are free to make changes or corrections to the information of the deposited information on their own. Of course you can also cancel or delete the registration or your customer account. The deletion of your data will terminate any current applications.

Application  (Art. 6 Abs. 1 lit. a, b DS-GVO, Art. 88 Abs. 1 DS-GVO i.V.m. § 26 Abs. 1 BDSG)

When you fill out the application form, you are asked to provide certain personal information. All data required to complete the application form is subject to the principles of data reduction and data economy, meaning you only have to provide the data that is absolutely needed to process your application, such as a CV, or that we are required to obtain under applicable law. Mandatory information is marked with a * (asterisk). Without this information, we are unable to process your application. It is therefore not possible to submit application documents to our Career Portal without also providing this information. You may also choose to provide additional, optional information via the application form.

When you apply for a position in our company, we collect and process the following data:

• Master data (e.g. last name, first name, additional names, academic titles, date of birth);
• Qualifications and education information (e.g. C.V., references);
• Contact details (postal address, phone number, e-mail address);
• Country/region of residence;
• Language and IT skills, if required;
• Work permits and residency permits, if required;
• Criminal record, if required;
• Driving licence, if required;
• Details of how you became aware of the job, details of the current notice period;
• Notice period and the desired annual salary.

Information on how you became aware of the position, the notice period to terminate your current position, as well as the salary you expect. You may also choose to provide information regarding your personal accounts on social networks that may be relevant to your application. Your personal data is collected directly from you during the application process. In certain, exceptional cases, we also collect your personal data from other sources, such as recruitment agencies. Additionally, we use personal data legally obtained from public directories, such as professional networks.

Purposes and legal bases for data processing.

Your personal data is collected and processed in accordance with the provisions of the EU GDPR, the German Federal Data Protection Act (new), and all other applicable (labour) legislation. In accordance with Art. 88, Para. 1 EU GDPR in conjunction with Art. 26, Para. 1 German Federal Data Protection Act (new), it is permitted to process employees’ personal data for the purposes of an employment relationship to the extent required for recruitment, as well as the performance or termination of a resulting employment contract. Permission to process data, including special categories of personal data, may also be derived from other legislation, in particular industry-specific (compliance) provisions. Your consent is also deemed a legal basis for us to process your data for the specified purposes subject to your right to object pursuant to Art. 7, Para. 3 EU GDPR, Art. 88, Para. 1 EU GDPR in conjunction with Art. 26, Para. 2 German Federal Data Protection Act (BDSG) (new). Should we obtain your consent in order to process special categories of personal data, we will make an express note of such an intent in obtaining your consent (Art. 88 Para. 1 EU GDPR in conjunction with Art. 26, Para. 3 German Federal Data Protection Act (new). We will not process special categories of personal data according to Art. 9 Para. 1 EU GDPR unless we are required to do so by law and there is no reason to assume that your legitimate interest in the exclusion of the processing prevails (Art. 88 Para. 1 EU GDPR in conjunction with Section 26 Para. 3 German Federal Data Protection Act (new)).

Data retention.

Your data will be erased once they are no longer required for the above purposes. We keep your data for the above purposes for the duration of the application process and until all related retention periods have expired; however, for no longer than six months after we have informed you whether your application has been successful. At this point, your data will either be erased or fully anonymised, making it impossible to identify you as the data subject. Any further retention of your data is restricted to cases where this is required by law, or we are authorised to do so, e.g. if you have given your express consent for us to retain your data for an extended and specified period of time, or if we require your data to exercise our rights under applicable law. For instance, we are obliged to retain certain data under the German Tax and Commercial Codes. All statutory periods of limitation are observed. An extended retention of your data in our recruiting systems does not mean that you are automatically included in the lookup routine for future vacancies. We will actively inform you if we include your data in the lookup routine. A data retention period extending beyond six months may also occur if your application to a vacancy was unsuccessful and you continue to use your account on our Career Portal after the application process for this vacancy has been completed. Every time you log in to your account, the retention period for your user data is renewed for another six months. This includes your first and last names, your e-mail and phone number, your country, your CV, as well as information on your educational background (school/university and related qualifications). If you continue to use your account, we assume that you are still interested in a position at Bechtle, and by retaining your account information we strive to make it easier for you to submit future applications. However, should you no longer log in to your account once the application process has been completed, all your user data and application documents are subject to the retention period of six months as laid out above, after which your information will be anonymised. Further to this, we store and process anonymised application data for statistical purposes, i.e. without personal information, making it impossible to infer your person from such data.

Job notification (Art. 6 Abs. 1 lit. a DS-GVO).

If you would like to be informed about interesting jobs, you can also activate your account also for the functions of the job notification. These notifications will be sent to your specified e-mail address. Your consent to receive this information at any time by using the unsubscribe option provided in the unsubscribe option provided in the e-mail and in the settings of your profile.

Cookies (Art. 6 Abs. 1 S. 1 lit. a, f DS-GVO, § 25 Abs. 1, 2 TTDSG).

Our websites use cookies to make your experience more effective, secure and user-friendly. Cookies are small text files that are saved by your browser and stored on your local hard drive. We use cookies that are required to operate our Career Portal and ensure its functionality within the scope of our legitimate interest in accordance with Art 6 Para. 1 S. 1(f) EU GDPR. These include persistent cookies (e.g. “opt-out”) that reside on your hard drive beyond your current session, as well as session cookies that are automatically deleted when you close your browser. With your consent, we also use other cookies in order to analyse site usage, enabling us to design the website content according to the visitor’s needs. In addition, cookies enable us to measure the effectiveness of a particular advert and to place it according, for example, to the user’s thematic interests. The legal basis for this is your consent (Art. 6 Para. 1 S. 1(a) EU GDPR). If you have given your consent, this can be revoked at any time without providing a reason. Most web browsers automatically accept cookies as default. Of course, you may also disable, restrict or delete cookies stored on your end device manually via your browser settings or other software. Please note: If you deactivate cookies, not all functions of our website may be fully usable. You can revoke your consent via our Consent banner at any time with effect for the future and change the cookie settings. Please note that changes must be made separately for each end device. If you maintain accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not granting or revoking your consent to the relevant cookies or by logging out of the respective third-party providers in advance. Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your end device manually via your browser settings or software-supported. If you deactivate the setting of cookies, the full use of our website is not possible or only possible to a limited extent. Please also note our instructions in the following section of the respective service that uses cookies.

User profiles and non-essential cookies.

Google Analytics.

We use the Google Analytics tracking tool provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland on our Career Portal. This tool enables us to analyse how you use our website, by collecting the following information:

• IP address
• Usage data
• Click path
• App activity
• Browser information
• Device information
• JavaScript support
• Pages visited
• Referrer URL
• Downloads
• Flash version
• Network location
• Interaction with site widgets
• Date and time of visit

The legal basis for the processing of your personal data is your consent in accordance with Art. 6 Para. 1 S. 1(a) EU GDPR. You may revoke your consent at any time here. The purpose of processing your personal data by the Google Analytics service is to analyse how website visitors interact with our website. in order to optimise its content and improve user-friendliness. We delete or anonymise data collected with Google Analytics as soon as they are no longer required for our purposes after 24 months. The Google Analytics service can transfer collected data to another country, including to third countries countries outside of the European Union or the European Economic Area, which may not offer a suitable level of data protection. Should your data be transferred to a server located in the USA, there is a risk that they will be processed by US authorities for purposes of monitoring and surveillance. In this case, you may not be entitled to legal recourse. We do, however, take all possible and necessary measures in accordance with Art. 44 et seqq. EU GDPR to establish a suitable level of data protection in the third country. You may revoke your consent at any time in the footer.

Google Tag Manager.

This website uses Google Tag Manager. This service enables website tags to be managed via a graphical user interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain  and does not collect personal data. Google Tag Manager triggers other tags that, in turn, may collect data. Google Tag Manager does not access this data. If you have disabled domains or cookies, this also applies to all tracking tags that are implemented with Google Tag Manager. For more information, please visit http://www.google.de/tagmanager/use-policy.html. The Google service can transfer collected data to another country, including to third countries countries outside of the European Union or the European Economic Area, which may not offer a suitable level of data protection. Should your data be transferred to a server located in the USA, there is a risk that they will be processed by US authorities for purposes of monitoring and surveillance. In this case, you may not be entitled to legal recourse. We do, however, take all possible and necessary measures in accordance with Art. 44 et seqq. EU GDPR to establish a suitable level of data protection in the third country. You may revoke your consent at any time in the footer.

Youtube.

The embedding of YouTube content is carried out using a technical process called framing. Framing describes the process of inserting a YouTube HTML link into a website’s code to create a frame on the third-party site, which enables the video stored on YouTube servers to be played. We use the framing codes generated by YouTube in privacy-enhanced mode. According to the information provided by YouTube, cookie activity and the resulting data collection are only linked to the playback of the video itself. Data collection from simply using a website with framed content is therefore prohibited. In order to play YouTube content, we need your consent (Art. 6 Para. 1(a) EU GDPR), which you can give (if you have not already done so within the scope of your cookie selection) via the button in the respective section of the video. By clicking on the Play-Button, you consent to your IP address being transferred to YouTube (YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA) and to the provider saving a cooking in your browser. For the display of the videos, the Google fonts are also downloaded, so that your consent also extends to this service. For your convenience, your consent is valid for 30 days and saved in a local storage object, which we store in your browser. You may revoke your consent at any time in the footer.

Secure data transfer.

In order to protect data from accidental or deliberate manipulation, loss, damage or access by an unauthorised person, we have taken appropriate technical and organisational security measures. To this end, the level of security is continually tested and adjusted to reflect new standards in security, in collaboration with security experts.
Data transferred to and from our website is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols.
In addition, we offer our users content encryption for contact forms and applications. Only we are able to decrypt this data.

Obligation to provide data.

A decision regarding establishment of an employment relationship - or regarding an application’s chances for success - is not possible without obtaining certain personal data. Additionally, there are legal rights and obligations that require us to ask for certain data at this stage. 

Social network plug-ins.

No social plug-ins are enabled on our website.

Social media links.

You’ll find to social media services from Facebook, Twitter, YouTube, Instagram, LinkedIn and Xing on our website. Links to the webpages of these social media providers are recognisable by the respective company logo. When you click on the links, you will be forwarded to our page on the various social media platforms. Clicking on these links creates a connection to the social media providers’ servers, which then receive the information that you have visited our website. Additional data are also transferred to the social media service, for example:

• Address of the website where the activated link is located
• Date and time of your visit to the website or link activation
• Information about the browser and operating system used
• IP address.

If you are already logged in to the social media site at the time the link is activated, the provider may be able to determine your user name and possibly even your real name from the data transferred and assign this information to your personal user account. To prevent this from happening, please make sure you are logged out of your account. The social media providers’ servers are located in the USA and other countries outside of the European Union. For this reason, data can also be processed by the social media provider in countries outside of the European Union. Please be aware that business in these countries are not subject to the same strict levels of data protection as those who are member states of the European Union. Please also be aware that we have no influence on the scope, type and purpose of data processing carried out by these social media providers. Further information about the use of your data by the social media platforms embedded on our website can be found in the Privacy Policies of the respective social media provider.  We also use Twitter’s Click To Tweet feature. Click To Tweet gives us the opportunity to pre-formulate the perfect tweet, which is then embedded in a link on our website. When you click on this link, the pre-formulated tweet is opened in Twitter and can be published. This means it only takes a click of a button to share website content on Twitter. No personal data is transferred during this process.

Links to other providers.

Our website contains other links to internet sites of other companies, and these links are clearly recognisable as such. We do not have any influence on the content of these sites and cannot, therefore, be held responsible for them. The respective provider or operator is always responsible for the content on the page. The linked pages were tested for possible legal violations and recognisable infringements at the time at which they were added. No illegal content was detected at the time of creating the links. However, we cannot be expected to continuously check the content of the external websites without specific knowledge of illegal content. Should we be informed of any illegal content on the external sites, we will promptly remove the links.

Use of online services by children.

Individuals under the age of 16 may not submit personal information or a declaration of consent to us without the consent of their legal guardian. We ask parents and legal guardians to actively participate in the online activities and interests of their children.

Copyright information.

If you would like to publish images, texts, plans, videos, music etc. on our pages, please be aware that you may be transferring all usage rights to the network, which could ultimately have legal consequences for you if you are not the copyright holder yourself.

Automated case-by-case decision.

Please note that we generally do not use purely automated processes to make a decision.

Our social media presence.

We have a presence on a range of social media platforms to communicate with registered customers and interested parties and inform them of our offers. Please be aware that using these platforms and their functions is at your own risk. This is especially the case when using interactive functions such as commenting, sharing and leaving reviews. We also wish to inform you that your data may be processed outside of the European Union. Your data may additionally be processed for market research and marketing reasons, meaning, for example, that a user profile may be created based on your usage and interests. As a result, advertising both on and external to the platforms may be activated, which supposedly correspond to your interests. In order for this to happen, cookies are usually saved on your computer. Independently, data that is not collected directly from your end devices may also be stored in the user profiles (especially if you are member of a platform and are logged in). Moreover, we, as the provider of this information service, collect and process no data from your use of our services. The processing of users’ personal data is based on our legitimate interest in effectively informing and communicating with users in accordance with Art. 6 Para. 1 S. 1(f) EU GDPR. If a provider asks for your consent to data processing (e.g. by ticking a box or by clicking “confirm”), then processing is lawful in accordance with Art. 6 Para. 1 S. 1(a) and Art. 7 EU GDPR.

Opting out.

If you are a member of a social network and do not want your personal data to be collected through our website and linked to your membership data on the respective network, you must:

• sign-out of the network before visiting our website,
• delete cookies stored on your device and
• re-start your browser.

After logging in again, you will once again be recognised by the network as a specific user. For more detailed information on how data is processed and how you can opt out, please visit the pages of the respective providers listed below. If you would like to request information or exercise your rights as a user, this can be done most effectively directly with the providers themselves as only they have direct access to user data and can therefore take appropriate action and provide information. If you do have any problems, you can of course contact us.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy policy: https://www.facebook.com/about/privacy/, Opt out: https://www.facebook.com/settings?tab=ads and https://www.youronlinechoices.com,.
• Google / YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy Policy:  https://policies.google.com/privacy, Opt out: https://adssettings.google.com/authenticated,
• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy policy / Opt out: https://instagram.com/about/legal/privacy/.
• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy policy: https://twitter.com/de/privacy, Opt out: https://twitter.com/personalization,.
• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy policy https://www.linkedin.com/legal/privacy-policy, Opt out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out,
• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Privacy policy / Opt out: https://privacy.xing.com/de/datenschutzerklaerung.