Processing of (personal) data by the entity in charge of the online application process

Privacy Notice
Kolmar Group AG values the right to privacy and strives to protect the personal data we collect and use in accordance with applicable data protection legislation and more specifically with the General Data Protection Regulation (GDPR) and its relevant national implementing legislation. Kolmar Group AG will be the data controller with respect to any personal data collected from or about you as described in this Privacy Notice (“Notice”).
This Notice sets forth the basis on which any personal data we collect from you, or that you provide to us, will be processed.
Please read the following carefully to understand how and why we process your personal data and the measures we undertake to safeguard it.
What is Personal Data?
Personal data refers to any information that relates to an identifiable person. This may include, for example, your name, job title, postal address, e-mail address, phone number, date of birth, age or gender. We do not collect personal data from the Kolmar Group AG website except when provided by you via the contact form, or via the cookies.
What Information Do We Collect From You?
When you visit our website or communicate with us via e-mail, verbally or otherwise, we may collect and process the following:
Information you provide to us
We collect information that you voluntarily provide to us, including when you communicate with us via the website’s Contact Form, e-mail or by phone; when you submit an application for a position with us; and when you inquire about opportunities to do business with us. The information you provide may include your name, nationality, contact information, title, and information about the organization with which you are affiliated.
Information we may collect automatically
We use browser cookies to collect and store certain information when you use, access, or interact with our website. Cookies make it easier for users to utilize our website.
A cookie is a small text file that is sent by a website to your computer or mobile device where it is stored by your web browser. Cookies may store information such as your IP address or other identifier, your browser type, and information about the content you view and interact with on our website. By storing such information, cookies can remember your preferences and settings.
You can choose how cookies are handled by your device via your browser settings, including the option to refuse or delete all cookies. Some devices allow you to control this through your device settings. If you choose to not receive cookies at any time, not all functions of our website may be entirely usable. Each browser and device is different, so check the settings menu of browser or device to learn how to change your advertising settings/cookie preferences.
We also use Google Analytics to collect statistical information about how our website is used. Google Analytics services involve the use of cookies that collect information such as your IP address or other identifiers, browser information, and information about the content you view and interact with to record how you use our website.
These analytics services help us to know how many users we have, which parts of our site are visited, how frequently a user has visited our site, what browsers are used (so we can maximize compatibility), and the country or region where our users are located. This enables us to better understand who is using our website and how to improve the presentation of content on our website.
Google Analytics cookies may retain information for up to two years. To find out more about the Google Analytics services used on our website or to opt-out please visit: https://tools.google.com/dlpage/gaoptout.
If you have provided your business card to (an employee or representative of) Kolmar Group AG or otherwise provided us with your contact details, we will process your personal data, such as your name, contact details, company and position. We will use your personal data in order to contact you, for example, to further discussions of an employment or commercial nature.
Why Do We Collect Personal Data?
We have set out in the table below what personal data we may collect about you and for what purposes:
Name
To identify you and address you correctly in our communications; to maintain our contact lists; to respond to your queries
Addresses (business and private)
To contact you; to maintain our contact lists; to respond to your queries
Position or profession
To correctly address you; to maintain our contacts list
Title(s)
To correctly address you; to maintain our contacts list
E-mail address
To contact you; to respond to your queries; to maintain our contacts list
Telephone number, mobile telephone number or facsimile number
To contact you; to respond to your queries; to maintain our contacts list
Gender
To correctly address you; to maintain our contact list
Company or organization
To reflect your company or organization in our communications; to maintain our contact list
Nationality (if seeking employment with us)
To assess legal requirements for employment
Education, competencies, professional experience (if seeking employment with us)
To determine whether you are suitable for and meet all relevant requirements for fulfilling the position for which you have applied
IP Address
To understand how users utilize our website and from which geographic region our website is being accessed; to improve our website
Racial/ethnic origin (if supplied by you in an application for employment)
To provide equal opportunities
On What Basis Do We Collect Personal Data?
We collect personal data on the following legal grounds:

Performance of a contract: We may need to collect and use your personal information to enter into a contract with you or to perform a contract that you have with us. For example, when you submit an employment application to us via the Contact Form on our website, we will use your personal information to evaluate your application for the purpose of potential employment. Similarly, if you contact us with a commercial offer or opportunity, we will use your personal information for the purpose of potentially entering into a business arrangement with you or your company.
Legitimate interests: We may use your personal information for our legitimate interest in receiving and responding to correspondence from visitors to our website; to potentially conduct business with people who have contacted us or expressed an interest in being contacted by us; to develop business contacts and vet commercial opportunities; to evaluate the suitability of an applicant for employment; to maintain the safe operation or improvement of our website.

With Whom Do We Share Personal Data?
We may share personal data with our affiliated entities in order to facilitate business operations. These affiliated entities may be located in countries outside the European Union and Switzerland, such as the United States and Singapore, where a lower level of data protection may exist than in the EU or Switzerland. We may also share personal data with our third-party service providers that perform services on our behalf, such as analytics providers (i.e., Google Analytics), information technology providers, consultants and other professional advisors.
We will ensure that, where relevant, contractual safeguards—approved by the European Commission—are implemented to ensure the protection of your personal data for international data transfers.
How Long Do We Keep Your Personal Data?
Personal data will be kept for no longer than is necessary for the purposes for which the personal data are processed.
In some circumstances, we are required to retain personal data by law and to comply with our regulatory obligations. Where this is the case, we will keep such personal data in a form that identifies you only for so long as it is necessary.
What Are Your Rights?
You have the following rights:

To access: you can obtain information relating to the processing of your personal data.
To rectify: you can have inaccurate or incomplete information about you rectified or modified.
To erase: you can require the deletion of your personal data, to the extent permitted by law.
To restrict: you can request the restriction of the processing of your personal data.
To object: you can object to the processing of your personal data.
To withdraw consent: where you have given your consent for the processing of your personal data, you have the right to withdraw your consent.
To data portability: where applicable, you have the right to have the personal data you provided to us returned to you.
To lodge a complaint: you have the right to lodge a complaint with the relevant supervisory authority.

Updates to this Privacy Notice
We may update this Notice from time to time, and we encourage you to periodically review this page.
Contact Us
If you have any questions regarding this Notice, or if you wish to exercise your rights, please contact legal@kolmargroup.com.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.