Privacy notices for online applicants

The responsible entity is:

NORRES Schlauchtechnik GmbH
Am Stadthafen 12-16
45881 Gelsenkirchen
Germany
Phone: +49 209 8 00 00 0
Email: info@norres-baggerman.de

You can contact our Data Protection Officer at:

GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Mr. Dipl.-Inform. Olaf Tenti
Alter Schloßweg 30
58119 Hagen
Germany
Phone: +49 (0) 2331/356832-0
E-Mail: datenschutz@gdi-mbh.eu

We process data that you provide to us as part of your application or that we have received from third parties with your consent (e.g. the Federal Employment Agency). This processing is carried out for the purpose of initiating an employment relationship and is therefore necessary prior to the conclusion of an employment contract.

In particular, the following personal data and categories of data are processed for the purposes specified under section 3:

• Personal data (e.g. first name, last name, address, contact details, marital status)
• Qualification data (e.g. educational and professional qualifications, certificates, language skills, additional qualifications)
• Curriculum vitae data (e.g. type, start, end, place and duration of school education, training, studies, further education and professional activities)
• Other documents submitted and information derived therefrom
• If applicable, bank details in the context of reimbursement of expenses

In addition, we may process personal data obtained from publicly accessible sources (e.g. information in social networks such as Xing or LinkedIn).

Below we inform you about the purposes and legal bases for processing your data.

3.1 Purposes related to the employment relationship

We process your data to decide on the establishment of an employment relationship with you. The legal basis for this processing is Article 88 GDPR in conjunction with Section 26 (1) of the German Federal Data Protection Act (BDSG).

We aim to evaluate all applicants solely on the basis of their qualifications and therefore ask you, where possible, to refrain from providing information on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the unique identification of a natural person, health data, or data concerning sexual life or sexual orientation in your application.

3.2 Based on your consent

If you have given us consent to process personal data, in particular special categories of personal data, we process the data in accordance with Article 6 (1) (a) GDPR or, in the case of special categories of personal data, Article 9 (2) (a) GDPR.

This applies in particular to any consent you may have given for the continued storage of your data in an applicant pool, even if your current application is rejected, in the event that a future need arises.

Consent may be withdrawn at any time with effect for the future. Processing carried out before the withdrawal remains unaffected. The withdrawal may be addressed to the contact details specified in section 1.

3.3 Based on a balancing of interests

We may also process your data on the basis of a balancing of interests to safeguard our legitimate interests or those of third parties (cf. Article 6 (1) (f) GDPR). This may include, in particular, the following purposes:

• General business management
• Assertion of legal claims and defense in legal disputes
• Prevention and investigation of criminal offenses
• Ensuring IT security and IT operations

For your personal safety, to safeguard domiciliary rights and to prevent criminal offenses against the company, certain areas are subject to video surveillance. Video data is stored for a period of 72 hours. If data is evaluated and stored for use in civil or criminal proceedings, it will be deleted after completion of the proceedings.

Our interest in the respective processing arises from the respective purposes and is otherwise of an economic nature (efficient task fulfillment, sales, avoidance of legal risks).

3.4 In the context of expense reimbursement

If we have promised to reimburse expenses (e.g. travel expenses for a job interview), we process your bank details for the purpose of reimbursement. The legal basis is the fulfillment of our reimbursement commitment pursuant to Article 6 (1) (b) GDPR.

Your data is only disclosed where a legal basis permits this. The data specified under section 2 is transmitted to public authorities and institutions where a legal obligation exists or where you have given your consent. Such authorities may include tax authorities, customs authorities, and trade supervisory authorities.

Within our company, only those departments receive your data that require it to fulfill contractual and legal obligations or to perform their respective tasks.

In addition, personal data may be transferred for the purposes of and within the scope of data processing on our behalf (Article 28 GDPR), in particular to IT service providers.

We process your personal data for the purpose of selecting a suitable candidate for the position to be filled. The data will then be deleted, at the latest when no civil law claims can be asserted against us, in particular claims arising under the German General Equal Treatment Act (AGG). If the data is not deleted immediately, it will be marked as restricted.

If you have given us your consent to store your application in our applicant pool, we will store your application for a maximum of 12 months. Your right of withdrawal remains unaffected.

Your data will only be transferred to countries outside the European Economic Area (EEA) if and insofar as this is necessary for the execution of the contractual relationship, required by law (e.g. accounting, administration), or if you have given your consent.

If we use software from providers based in third countries or software from providers with subcontractors/service providers in third countries during the application process, your data or parts thereof may be transferred to third countries (e.g. the USA), depending on the purpose of processing.

For the USA, there is an adequacy decision pursuant to Article 45 (3) GDPR. Personal data from the EU may therefore be transferred to companies and organizations in the USA that are certified under the EU–U.S. Data Privacy Framework without additional safeguards. This adequacy decision thus serves as the basis for data transfers to the service providers we use in the USA.

If no adequacy decision pursuant to Article 45 (3) GDPR exists or if the company or organization in the USA is not certified under the EU–U.S. Data Privacy Framework, we conclude standard contractual clauses issued by the European Commission pursuant to Article 46 (2) (c) GDPR with the respective service providers to protect your data. In addition, some of our service providers have implemented binding corporate rules (BCRs) pursuant to Article 47 GDPR for their group of companies, which have been approved by the competent supervisory authority.

Subject to the respective legal requirements, you have the right of access (Article 15 GDPR, Section 34 BDSG), rectification (Article 16 GDPR), erasure (Article 17 GDPR, Section 35 BDSG), restriction of processing (Article 18 GDPR), objection (Article 21 GDPR), and data portability (Article 20 GDPR).

You also have the right to lodge a complaint with the competent data protection supervisory authority (Article 77 GDPR, Section 19 BDSG).

We do not use automated decision-making pursuant to Article 22 GDPR to decide on the establishment of an employment relationship with you. If such procedures are used in individual cases, we will inform you separately where legally required.

We do not process your data for the purpose of evaluating specific personal aspects (so-called “profiling”).

You are neither legally nor contractually obliged to provide personal data as part of the application process. However, we point out that our ability to assess your skills and qualifications depends on the data provided. If you do not provide data, our assessment may not reflect your actual suitability for the position to be filled, which may result in you not being considered for employment.

In the event of employment, we collect certain data that is required for contract performance (e.g. salary payment) or that we are legally obliged to collect (e.g. social security data).

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6 (1) (f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.

The objection may be made informally and should preferably be addressed to the contact details specified in section 1.

Status: 13 January 2026