We Take Data Protection Seriously
Protecting your privacy when processing personal information is paramount to us. When you visit our website, we routinely collect your IP address, the URL of the page you used to access our site, the URL of any of our site’s internal pages you browse as a part of your visit, the session date and the time you spent on our site. Collecting this information constitutes internet protocol that ensures the safe operation of our servers. This type of information transfer is depersonalised.
Any details you provide when completing an online application form are stored on our servers for data backup purposes. In the same way, if you enter your data as a recruitment agency. We only use the information supplied to us to deal with your enquiry. We keep your personal information strictly confidential. We do not pass on your personal details to third parties.
Data protection responsibilities:
Conrad Electronic SE
Data protection responsibilities:
rexx systems GmbH
Phone: +49 40 8 900 800
In accordance with Art. 26 General Data Protection Regulation (GDPR), above constitutes a shared responsibility. Full details are available here:
Shared Responsibility Based on Art. 26 para. 2 sentence 2 of the General Data Protection Regulation (GDPR)
Why Share Responsibility?When it comes to operating our Jobs & Careers pages, rexx systems GmbH and Conrad Electronic SE are working closely together. This also involves the processing of your personal information. As the individual stages in which this information is being processed (see below) have been mutually agreed upon between both parties, this results in a shared responsibility with regard to protecting your personal information (Art. 26 GDPR).
Which Stages Are Subject to Shared Responsibility?The steps involved in operating the job application management page at https://career.conrad.com/
What Precisely Has Been Agreed?In compliance with their shared data protection responsibility, rexx systems GmbH and Conrad Electronic SE have agreed on which of the two parties will be accountable for each individual processing stage. This first and foremost applies to the rights and obligations stipulated in Art. 13 and 14 of the GDPR.
The present agreement is necessitated by the fact that processing the personal information provided on https://career.conrad.com/ is carried out in individual stages using different EDP systems operated independently by rexx systems GmbH and Conrad Electronic SE.
|Stages of data processing / EDP system||Responsibility of|
|Processing of applicant data||Conrad Electronic SE|
|Hosting and operating the webpage on in-house servers, analysis of the server logs||rexx systems GmbH|
|Operating Matomo Analytics||Conrad Electronic SE (subcontracted to rexx systems GmbH)|
What Does This Mean for You?Regardless of sharing responsibility, both parties shall fulfil their legal obligations according to their respective accountabilities for individual data processing stages.
- In this context, sharing responsibility constitutes
- rexx systems GmbH being responsible for the processing of personal information required to operate the webpage which includes processing server logs;
- Conrad Electronic SE being responsible for processing personal information provided by job applicants via the Career gateway, and processing visitor web stats collected by Matomo Analytics;
- rexx systems GmbH and Conrad Electronic SE providing website users with any information governed by Art. 13 and 14 of the GDPR free of charge in a clear, accurate, transparent and easily accessible fashion. To achieve this, both parties will share any required information held by either of them.
- each party immediately notifying the other party in the event of a claim being made against them. Both parties will share any information required to answer such requests;
- people exerting their rights related to data protection law being able to request the relevant information from either rexx systems GmbH or Conrad Electronic SE. As a rule, the information will be provided by the party that received the request.
Personal information is any information that renders an individual identifiable. It includes among other things your name, your address, and your email address. You may browse our webpage without providing any personal or otherwise sensitive information. However, in some cases, we may ask you to provide your name, your address and other related details to be able to provide the service requested by you.
This also applies if we send you any information explicitly requested by you, or if we reply to any enquiries made by you. We will, however, notify you accordingly. Moreover, we only store data provided by you voluntarily, or being automatically generated when using our platform.
Whenever you use one of our services, we only collect the data necessary to deliver the service. We may ask you for further details which you may or may not provide. Also, we shall only process your personal information to deliver our services, or to meet our business objectives.
Extent and Purpose of Data Processing
We process any personal information provided by you using our job application tool in full compliance of all applicable law, including German Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Works Constitution Act (BetrVG), the Working Time Regulations (ArbZG), etc.
Concerning you as an applicant: The main reason for processing personal information is the formation, administration and termination of employment contracts based on Art. 6 para. 1 b) GDPR and § 26 para. 1 BDSG. In addition, collective agreements (entered in to by company, staff associations and trade unions) based on Art. 6 para. 1 b) GDPR, Art. 88 para. 1 GDPR and § 26 para. 4 BDSG as well as individual agreements based on your consent (Art. 6 para. 1 a) GDPR), Art. 7 GDPR, § 26 para. 2 BDSG e.g. in the event of recording video footage) may also apply.
We are processing specific categories of personal information of employees in compliance with Art. 9 para. 1 of the GDPR to exert our rights, or fulfil our obligations, with regard to employment law, social security and insurance (e.g. providing personal health data to the national health service, reporting any severe disabilities with regard to additional annual leave allowance and compensatory levy). This happens in compliance with Art. 9 para. 2 b) GDPR and § 26 para. 3 BDSG. In some cases, processing personal health data will be required to assess your fitness to work (based on Art. 9 para. 2 h) GDPR and § 22 para. 1 b) BDSG. Moreover, specific personal information categories may also be processed after obtaining consent on the grounds of Art. 9 para. 2 a) GDPR and § 26 para. 2 BDSG (e.g. in-house occupational health management).
We also process your personal information to comply with our legal obligations as an employer, mainly with regard to social insurance and taxes (Art. 6 para. 1 c) GDPR and § 26 BDSG).
Concerning you as an recruitment agency: We process your business contact data and (in the case of cooperation) other data on the basis of contract processing with you (Art. 6 para. 1 b) GDPR).
As a general rule:
If necessary, your personal data will be processed in compliance with Art. 6 para. 1 f) of the GDPR, to protect our legitimate interests, and those of third parties (e.g. authorities). This first and foremost applies to matters that involve solving a crime (based on § 26 para. 1 p. 2 BDSG), operating a holding company, in-house communication and other administrative tasks.
We also collect the URL of the (employment) webpage you used to submit your application, to optimise the way our job adverts are served. We only pass on your application to parties involved in the candidate selection process, and to parties that require your application to form an employment contract (Human Resources, department that employs you, our legal department, Conrad Electronic SE general management). In compliance with Art. 28 of the GDPR, we process job applications using the rexx HR tool provided by rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg, Germany (https://www.rexx-systems.com).
In the event of your application being unsuccessful, we automatically delete any personal information you provided in the process 6 months after the rejection date. For statistical reasons, we store truncated information (master data) for 36 months. Truncated information comprises salutation, the date we received your application, the way you found us, submission type, year of birth, postcode, country, and job applied for. These anonymised data will be automatically deleted after 36 months unless we are prevented from doing so by law, or have obtained your prior consent to hold on to your data.
If you plan to apply for jobs at our company in the future, you may consent to an extended storage of your personal information, to become part of our applicant pool. This means all your data will be automatically deleted/anonymised (see above) 12 months after your joining the applicant pool.
If you have provided us with your data as a recruitment agency, we will store your data for the duration of the cooperation or, if necessary, until the statutory retention obligations have been fulfilled.
Applying for Jobs
We only store and process personal information and any documents enclosed (e.g. your CV) that you provide using our job application tool to initiate and complete the application process.
To maximise your chance of success, we also pass on your application form to other members of the Conrad Group. If you do not want us to do this, please let us know. It is your responsibility to ensure that the information you provide us with is both accurate and true.
A list of subsidiaries that make up the Conrad Group is available below.
Conrad Electronic SE
Conrad Electronic Stores GmbH & Co. KG
Conrad Electronic Wernberg GmbH
Conrad Electronic Regensburg GmbH & Co KG
Conrad Holding SE
Conrad Connect GmbH
Re-In Retail International GmbH
Conrad Electronic GmbH & Co.KG
Conrad Electronic GmbH & Co Vösendorf KG
Conrad Electronic GmbH & Co Graz KG
Conrad Electronic GmbH & Co Wien Stadlau KG
Conrad Electronic GmbH & Co Wien Meiselmarkt KG
Conrad Electronic Linz GmbH
Conrad Electronic International GmbH & Co KG
Conrad Electronic AG
We only collect certain types of personal information (such as race, ethnic background, political views, religious belief, personal philosophy, trade union membership, health and sexual preference) if the laws of the country the employment is based in require us to do so.
You may use the provided form to submit your application. Moreover, you may also opt to join a applicant pool both when responding to a job advert, and when sending us a speculative application.
If we employ you, your personal information will be stored and processed as part of your employment record at our company.
Automated Collection of Data
Server LogsEvery time you visit our website, your browser automatically collects and forwards a certain type of information to our servers contained in so-called server logs. The collected information includes:
time and date of the visit
result status codes (URL found, URL not found, etc.)
type and version of browser and operating system used
IP address of the visitor
number of bytes served
For data security reasons, and to protect our servers against cyber-attacks in particular, we store server log information for a limited time only. These data do not enable us to identify you as a person. We anonymize the data by truncating the IP address after seven days at the latest, to prevent individual users from being rendered identifiable. We use the anonymized data for producing web analysis reports. However, we do not correlate the data to other user-related information, or pass on information, in parts or otherwise, to any third party.
Goes without saying that you are able to visit our webpage without having to accept cookies. If you do not agree with using cookies to recognise your PC when visiting our website again, you can usually modify your browser setting to decline cookies. For details, see your browser user manual. However, declining cookies means that certain functional aspects of our webpage may no longer be available to you.
MATOMO Cloud Solutions
Our website gives you the opportunity to subscribe to our newsletter (Job Alert). Signing up to our newsletter involves the data you provide via the registration form being passed on to Conrad Electronic SE.
We also collect the following information:
- the IP address of the visitor
- the registration date and time
- the URL of the page you used to sign up to our newsletter
Subscribing to our newsletter requires a double opt-in. You may unsubscribe at any time by clicking the respective link, or notifying us accordingly. This results in your email address being immediately removed from our mailing list.
We use state-of-the-art technology to protect your personal information against theft and misuse. Personal information will only be transferred in encrypted form (TLS). We shall not pass on any of your information to third parties.
After signing up to our newsletter and obtaining user consent of the user, the provided information will be processed in compliance with Art. 6 para. 1 a) GDPR.
Collecting subscriber email addresses is necessary to send out the newsletter.
The collection of any other personal information helps us prevent the misuse of both the provided service and the email address used.
We delete any data after they have served their purpose. We only store subscriber email addresses for the term of the subscription.
You may unsubscribe at any time using the according link contained in each newsletter.
We have taken suitable physical and electronic, organisational and technical measures to prevent unauthorised access or disclosure, damage or loss of your personal information. Both, our members of staff and our suppliers are providing services in full compliance with the current data protection laws.
Data Privacy: What Are My Rights?
You have the right to request the personal data we hold about you to be disclosed to you, to request your personal data to be amended, deleted and to object to their use by us. You have the right to data portability, and the right to make a complaint to the respective data protection authority of your state/country.
Right to Access:
You may request to be informed as to whether we collect your personal information, and if we do, how we use your data.
Right to Rectification:
If we process personal data that are incomplete or incorrect, you may request the respective information to be supplemented/amended at any time.
Right to Erasure:
You may request personal information we hold on you to be deleted if our use of your data is against the law, or constitutes an infringement of your interest deemed unacceptable. We will delete your personal information immediately unless required otherwise by law.
Regardless of your exerting your Right to Erasure, we shall delete all personal information we hold on you immediately whenever there is no longer a legal obligation, statutory or otherwise, to store your data.
Right to Restrict Processing:
You may request limited processing of your personal information if
- you contest the accuracy of the data we hold on you. In this case, we limit the use to an absolute minimum until we have ascertained whether your personal details are correct;
- our use of your data does no conform with the law, however, you do not want your data to be deleted but requesting limited use instead;
- we do no longer require your data for the purpose they were collected for but you still need the information to exercise your rights or make a complaint;
- you objected to your personal information being processed by our company.
Right to Portability:
You have the right to receive your personal data from us in a structured, commonly used and machine-readable format that enables you to transfer the information to another party without the necessity of our involvement if
- the data are processed by us with your consent or for the purpose of fulfilling a contractual agreement entered into by you and us, and
- such processing is carried out by automated means.
You may request your personal data being transferred directly from us to a party of your choice subject to the technical requirements being in place.
Right to Withdraw Consent:
Although we process your personal information with your consent on the basis of legitimate interest, you have the right to withdraw that consent at any time. This also applies to all types of profiling carried out in compliance with above regulations. If you withdraw your consent we will stop collecting and using your personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You may withdraw your consent to us processing your personal information for marketing purposes at any time without giving a reason.
Right to Complain:
If you believe our processing of your personal information infringes German or EU data protection laws, please get in touch immediately. It goes without saying that you may also contact the respective supervisory data protection authority in your country.
If you would lodge a complaint please call or email our data protection officer. N.B. We are entitled to ask for proof of identity.
Do I Have to Provide Personal Information?
Processing your personal information is necessary to form/fulfil the employment contract you and us will enter/have entered into. If you do not provide the required details, as a rule, we will not be able to employ you. However, you do not have to consent to our processing of any non-contract related data, and of any data you do not have to provide by law.
If you have any questions about the protection of your personal information, please contact
Projekt 29 GmbH & Co. KG
Phone: + 49 941 2986930
Fax: + 49 941 29869316