Data protection

Our handling of your data and your rights. Information on the collection of personal data according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

Responsible: AP-Concept UK Ltd., 1 Abbey Wood Road, Kings Hill, West Malling, Kent ME19 4YT, United Kingdom, E-Mail.: info@ap-concept.co.uk

We process personal data which we have received from you within the scope of employment and over the course of the existing employment relationship. The following personal data are essentially processed:

• Basic employee data (e.g. name, address, email address, phone number)
• Payment data (e.g. salary, tax information such as tax bracket, information about social security and medical insurance)
• Information about your career path to date, your development during your employment and qualifications
• Planning data
• Access and time code data
• IT use and access data
• Company department
• Company contact data
• Company incident reports if necessary
• Information about physical limitations if necessary
• Health data in part within the scope of company integration management
• Application documents
• Information about qualifications and further trainings as well as performance assessments within the scope of human resource management
• CV
• Footage from the use of video surveillance systems

For the most part, your personal data are processed at AP Concept Gmbh & Co. KG in our company for human resources administration in connection with your employment contract (Article 6, Paragraph 1, b) of the GDPR) and for the purposes of personnel administration, employment and management on the basis of Article 88 of the GDPR. This includes the processing of personal data to perform the application process.

To fulfil legal regulations such as the legally mandatory provision of data to the social security and pension insurance representatives, to guarantee occupational safety, to guarantee legal working hours, etc., your personal data is processed according to Article 6, Paragraph 1, c) of the GDPR.

Some personal data is processed, depending on the purpose of use within the required scope, for the handling of secure and proper business operations as part of our company and for the communication and processing of business relationships with our suppliers and customers in the legitimate interest of our company and in consideration of personal rights according to Article 6, Paragraph 1, f) of the GDPR.

To make our production processes demonstrably safe, to prevent property damage and theft and to allow these to be documented in the event of damage, we operate a labelled video surveillance system. This data collection is based on Article 6, Paragraph 1, f) of the GDPR.

Should your consent for the processing of your personal data according to Article 6, Paragraph 1, a) of the GDPR be necessary, your consent will be collected separately.

Our work agreements contain additional provisions on the secure handling of your personal data.

We do not share your data with unauthorized third parties without your knowledge. However, within the scope personnel management, proper business operations and for the communication and processing of business relationships with our suppliers and customers to the required extent, we or you share data with the following entities:

• Works council
• Public offices
• Social security representatives
• Occupational insurance associations
• Credit institutes (e.g. banks)
• Contractual partners as suppliers or for customer orders
• External contractors according to Article 28 of the GDPR
• Joint controllers according to Article 26 of the GDPR

The transfer of your data to a third country or international organisations is not planned.

The personal data provided by you will be stored for the intended purposes listed under Clause 3 for as long as is needed for their fulfilment. These data will therefore be deleted after the legal retention periods expire. Insofar as data are not affected by these, they will be deleted when their intended purpose ceases to exist.

Video surveillance data are deleted.

• Right of access by the data subject to their stored personal data (Article 15 of the GDPR)
• Right to rectification if the data contains an error, is outdated or not correct in any other way (Article 16 of the GDPR)
• Right to erasure (right to be forgotten) if the storage is unlawful, the purpose of the processing has terminated and the storage is no longer required, or you have withdrawn your consent to process certain personal data (Article 17 of the GDPR)
• Right to restriction of processing if one of the circumstances listed under Article 18, Paragraph 1, a) to b) of the GDPR is provided
• Right to portability of the personal data made available and pertaining to you (Article 20 of the GDPR)
• The right to withdraw your consent at any time, whereby the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal (Article 7, Paragraph 3 of the GDPR)

The right to lodge a complaint with the competent data protection supervisory authority exists at all times.

Other consent to processing which is based on a legitimate interest in the meaning of Article 6, Paragraph 1, f) of the GDPR can be withdrawn, stating the reasons for your withdrawal, according to Article 21 of the GDPR at any time for reasons arising out of a special situation for you.

If you provide legitimate grounds for objection, your personal data will basically no longer be processed for the respective purposes and deleted, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

For such issues, please contact AP-Concept UK Ltd at the address provided above.

Your data is absolutely necessary for the performance of the labour contract, for the fulfilment of legal requirements and for the performance of the employment relationship. Without your data, the employment relationship cannot be properly processed, which can lead to a cancellation of the work contract or non-performance of payment.

 

As of April 2021