PRIVACY NOTICE FOR JOB APPLICANTS
(Information on data protection regarding our processing of applicant data in accordance with Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR))

LISSMAC Maschinenbau GmbH
Lanzstr. 4
88410 Bad Wurzach

Dear Applicant,
We appreciate your interest in our company. In accordance with Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you provide during the application process, as well as any personal data we may collect, and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please review the information below.

1. DATA CONTROLLER UNDER DATA PROTECTION LAW
LISSMAC Maschinebau GmbH
Lanzstr. 4
88410 Bad Wurzach
07564 307-0
lissmac@lissmac.com
www.lissmac.com

2. CONTACT INFORMATION FOR OUR DATA PROTECTION OFFICER
PROLIANCE GmbH
Leopoldstr. 21
80802 Munich
Datenschutzbeauftragter@datenschutzexperte.de

3. PURPOSES AND LEGAL BASIS FOR PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), to the extent necessary for the decision regarding the establishment of an employment relationship with us. The legal basis for this is Article 88 of the GDPR
in conjunction with Section 26 of the BDSG for the purposes of the employment relationship, if this is necessary for the decision regarding the establishment of an employment relationship.

Furthermore, we may process your personal data to the extent that this is necessary to fulfill legal obligations (Article 6(1)(c) of the GDPR) or to defend against or assert legal claims. The legal basis for this is Article 6
(1)(f) of the GDPR. A legitimate interest is, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

If you give us your explicit consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Article 6(1)(a) of the GDPR and Section 26(2) of the Federal Data Protection Act (BDSG). Consent that has been given may be revoked at any time with future effect (see Section 9 of this Privacy Policy).

If an employment relationship is established between you and us, we may, pursuant to Art. 88 of the GDPR in conjunction with
§ 26 of the Federal Data Protection Act (BDSG), further process the personal data we have already received from you for the purposes of the employment relationship, to the extent that this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of employee representation arising from a law, a collective bargaining agreement, or a company or service agreement (collective agreement).

4. CATEGORIES OF PERSONAL DATA
We process only data related to your application. This may include general personal information (name, address, contact information, etc.), details regarding your professional qualifications and educational background, information on professional development, and, if applicable, any other data you provide to us in connection with your application.

5. SOURCES OF DATA
We process personal data that we receive from you by mail or email when you contact us or submit your application, or that you provide to us through recruitment consultants.

6. RECIPIENTS OF THE DATA
Within our company, we disclose your personal data exclusively to those departments and individuals who require this data to fulfill contractual and legal obligations or to pursue our legitimate interests.

We may transfer your personal data to our affiliated companies to the extent permitted by the purposes and legal bases set forth in Section 3 of this Privacy Notice.

Your personal data is processed on our behalf based on data processing agreements pursuant to Article 28 of the GDPR. In these cases, we ensure that the processing of personal data complies with the provisions of the GDPR. The categories of recipients in this case include internet service providers as well as providers of applicant tracking systems and software.

Otherwise, data will only be disclosed to recipients outside the company to the extent that statutory provisions permit or require it, the disclosure is necessary to fulfill legal obligations, or we have your consent.

7. TRANSFER TO A THIRD COUNTRY
A transfer to a third country is not intended.

8. DURATION OF DATA RETENTION
We store your personal data for as long as is necessary to make a decision regarding your application. Your personal data and application documents will be deleted no later than 6 months after the conclusion of the application process (e.g., notification of a rejection), unless longer retention is required or permitted by law. Furthermore, we will store your personal data only to the extent required by law or, in specific cases, to assert, exercise, or defend legal claims for the duration of any legal dispute.

If you have consented to the longer retention of your personal data, we will store it in accordance with your declaration of consent.

If, following the application process, an employment, apprenticeship, or internship relationship is established, your data will, to the extent necessary and permissible, initially continue to be stored and subsequently transferred to your personnel file.

If applicable, you may receive an invitation to join our talent pool following the application process. This allows us to consider you in the future when selecting candidates for suitable vacancies. If we have received your consent to do so, we will store your application data in our talent pool in accordance with your consent or, if applicable, any future consents.

9. YOUR RIGHTS
Every data subject has the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to notification under Article 19 of the GDPR, and the right to data portability under Article 20 of the GDPR.

In addition, you have the right to lodge a complaint with a data protection supervisory authority under Article 77 of the GDPR if you believe that the processing of your personal data is not lawful. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

If the processing of data is based on your consent, you are entitled under Article 7 of the GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal of consent takes effect only for the future. Processing that took place prior to the withdrawal is not affected. Please also note that we may be required to retain certain data for a specific period of time to comply with legal requirements (see Section 8 of this Privacy Policy).

Right to Object:
To the extent that the processing of your personal data is carried out pursuant to Article 6(1)(f) of the GDPR to safeguard legitimate interests, you have the right, pursuant to Article 21 of the GDPR, to object at any time to the processing of this data for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These grounds must override your interests, rights, and freedoms, or the processing must be necessary for the establishment, exercise, or defense of legal claims.

To exercise your rights, you may contact us using the contact information provided in Section 1.

10. REQUIREMENT TO PROVIDE PERSONAL DATA
The provision of your personal data as part of the application process is voluntary. However, we can only make a decision to establish an employment relationship—or actually establish such a relationship with you—if you provide the personal data necessary to process your application.

11. AUTOMATED DECISION-MAKING
The decision regarding your application is not based exclusively on automated processing. Therefore, no automated decision is made in individual cases within the meaning of Article 22 of the GDPR.

Ausbildung zum Industriekaufmann/-frau - Sept. 2027 [m/w/d]

We look forward to seeing your application!

Documents