Data protection information for applicants

under Art. 13 and Art.14 of the General Data Protection Regulation GDPR

Data protection is an important concern for us. We provide information below on how we process your data and what rights you have.

1. Who is responsible for data processing and who can you contact?

Ernst Granzow GmbH & Co. KG
Hertichstr. 27
71229 Leonberg
Telefon: 07152/18-0
Fax: 07152/18-108

2. Contact details of the data protection officer

Edmund Hilt, hilt evolution

3. Processing purposes and legal basis

Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other relevant data protection regulations. Our contractual documents, forms, declarations of consent and other information provided to you (e.g. on the website or in the terms and conditions) contain further details and supplements for processing purposes.

3.1 Consent (Art. 6(1)(a) GDPR)

If you have given us your consent to the processing of personal data, the respective consent is the legal basis for the processing indicated there.You can revoke your consent at any time with effect for the future.

3.2 Fulfilment of contractual obligations (Article 6(1)(b) GDPR)

We process your personal data for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if you submit your application documents to us electronically, for example by email or via a web form on the website.

3.3 Fulfilment of legal obligations (Art. 6(1)(c) GDPR)

We process your personal data if this is necessary to fulfil legal obligations.

3.4 Legitimate interest of ourselves or third parties (Art. 6(1)(f) GDPR)

We may also use your personal data on the basis of a balance of interests to protect the legitimate interests of ourselves or of third parties. This is done for the following purposes:
  • for the limited storage of your data, if deletion is not possible or only possible with disproportionate effort due to the special type of storage.
  • for the supplementation of our data through the use or research of publicly accessible data.
  • for the assertion of legal claims and defence in legal disputes which are not directly attributable to the contractual relationship.
  • for internal and external investigations and/or security checks.
  • for securing and exercising our domiciliary rights through appropriate measures (e.g. video surveillance).

4. Categories of personal data processed by us

The following data is processed:
  • Personal data (surname, first name, date and place of birth, nationality, marital status)
  • Contact details (e.g. email address, address, telephone number)
  • Complete application documents (e.g. CV, certificates, references)
  • Data on the application questionnaire

5. Who receives your data?

We pass on your personal data within our company to those areas that require this data to fulfil contractual and legal obligations or to implement our legitimate interests.
In addition, the following offices may receive your data:
  • public authorities and institutions in the event of a legal or official obligation under which we are required to disclose, report or pass on data or the disclosure of data is in the public interest.
  • bodies and institutions on the basis of our legitimate interest or the legitimate interest of the third party (e.g. authorities, credit agencies, debt collection, lawyers, courts, experts, committees and supervisory bodies).

6. Transfer of your data to a third country or an international organisation

Data processing outside the EU or the EEA does not take place and is not planned.

7. How long do we store your data?

If the controller enters into an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted at the latest six months after notification of the decision of rejection, provided that there are no other legitimate interests of the controller preventing such deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

8. To what extent is there automated decision making in individual cases (including profiling)?

We do not use a purely automated decision-making procedure under Article 22 GDPR. Should we use these procedures in individual cases, we will inform you separately, insofar as this is required by law.

9. Your privacy rights

You have the right to information under Art. 15 GDPR, the right to correction under Art. 16 GDPR, the right to cancellation under Art. 17 GDPR, the right to limitation of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.

In addition, you have a right of appeal to a data protection regulator (Art. 77 GDPR).In principle, you also have the right of objection to the processing of personal data in accordance with Article 21 GDPR.However, this right of objection only applies in the event of very special circumstances of your personal situation, whereby our company's rights may conflict with your right of objection.If you wish to assert any of these rights, please contact our data protection officer (

10. Scope of your obligations to provide us with your data

You only need to provide the data required for the application process. Without this information we will usually not be able to conclude an employment contract with you. If we request further data from you, you will be separately informed of the optional nature of the information.

11. Your right of appeal to the competent regulator

They have a right of appeal to the data protection regulator (Art. 77 GDPR). The regulator responsible for us is:
The State Commissioner for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart