Information on the processing of your application data

In the following, we provide you with information on the processing of your personal data by MSIG Insurance Europe AG and your rights under data protection law.

Who is responsible for data processing and how can you reach the data protection officer?

Controller for data processing is

MSIG Insurance Europe AG
An den Dominikanern 11-27
50668 Cologne

Tel. 0221-37991-0
Fax 0221-37991-200
E-Mail info@msig-europe.com

You can reach our data protection officerat the above mentioned address or at: datenschutz@msig-europe.com. The contact data are also available online at https://msig-europe.de/de-en/data-protection

Which categories of data do we use and where do they come from?

The categories of personal data processed include in particular your master data (such as first name, surname, name affixes and nationality), contact data (such as private address, (mobile) telephone number, email address) as well as the data of the entire application procedure (letter, references, questionnaires, interviews, qualifications and previous jobs). Where you have also voluntarily provided special categories of personal data (such as health data, religion, degree of disability) in the application letter or during the course of the application procedure, data will only be processed if you have given your consent to this or a legal basis so justifies.

Your personal data are usually collected directly from you during the hiring process. We can also have obtained data from third parties (e.g. job agency) to whom you have provided your data for the purposes of forwarding.

For which purposes and on which legal foundation are data processed?

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG)[1] as well as all other pertinent acts (e.g. Works Constitution Act - BetrVG, General Equal Treatment Act - AGG etc.).

Data processing primarily serves the purpose of conducting and handling the application procedure and determining the extent to which a candidate is suitable for the respective position. It is necessary to process your application data so as to be able to decide on whether to enter into an employment relationship. The prime legal foundation here is provided by Art. 6 (1) b) GDPR in conjunction with Section 26 (1) BDSG. In addition, it may be necessary to obtain your separate consent under Art. 6 (1) a), 7 GDPR in conjunction with Section 26 (2) BDSG as permission provision under data protection law.

Where necessary, we also process your data on the basis of Art. 6 (1) f) GDPR in order to safeguard justified interests of ours or of third parties (e.g. authorities).

We are also obliged by virtue of the European Anti-terrorism Regulations 2580/2001 and 881/2002to compare your data against the so-called “EU terror lists” to ensure that in future no monies or other economic resources are provided for terrorist purposes.

The processing of special categories of personal data (e.g. health data) is based on your consent in accordance with Art. 9 (2) a)GDPR in conjunction with Section 26 (2) BDSG, unless statutory foundations such as Art. 9 (2) b)in conjunction with Section 26 (3) BDSG are pertinent.

Your application data will be treated confidentially at all times. We will notify you beforehand should we wish to process your personal data for a purpose which is not mentioned above.

Who receives your data?

Within our company only those individuals and offices (e.g. technical unit, representative for the severely disabled) receive your personal data which require such for the hiring decision and to satisfy our pre-contractual, contractual and statutory duties.

In addition, we may also make use of different service providers as part of the application process. A list of the contractors and service providers we use and with whom a not only temporary business relationship exists can be obtained on request using the above mentioned contact data.

Which data protection rights may you assert as data subject?

You can obtain information on your stored personal data from the above mentioned address. You may also request that your data be rectified or erased under certain circumstances. You may also have a right to restriction of processing your data and a right to receive the data provided to you in a structured, commonly used and machine-readable format.

Right to object

If we process your data to safeguard our justified interests, you can object to this processing on grounds relating to your particular situation. We will no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise and defence of legal claims.

Who can you complain to?

You have the possibility to address a complaint to the above mentioned data protection officer or to a data protection supervisory authority. The data protection supervisory authority responsible for us is as follows:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
(Regional officer for data protection and freedom of information in North Rhine-Westphalia)
Kavalleriestraße 2-4
40213 Düsseldorf

How long are your data stored?

We delete your personal data six months after completion of the application procedure unless an employment relationship comes about. This shall not apply if statutory provisions are contrary to deletion or the further storage is necessary for purposes of evidence or you have given your consent to a longer storage period.

If we are unable to offer you any free position, but are of the opinion based on your profile that your application could be of relevance to future job offers, we will process your personal application data for 24 months in our applicants’ database if you have given us your explicit consent hereto.

Will your data be transmitted to a third country?

If we transmit personal data to Group companies outside of the European Economic Area (EEA), the transmission shall be made only to the extent that the third country has been confirmed as having a suitable level of data protection by the EU Commission or where other suitable data protection guarantees (e. g. binding internal data protection provisions or EU standard contractual clauses) exist. You can request detailed information on this using the above mentioned contact information.

Are you obliged to provide your data?

As part of your application you must provide the personal data which are necessary to conduct the application procedure and assess suitability. Without these data we will be unable to conduct the application procedure and make a decision on entering into an employment relationship.