Privacy policy

1. introduction/area of application

This privacy policy applies to the website of EFM - Gesellschaft für Enteisen und Flugzeugschleppen am Flughafen München mbH (EFM) and to other services described in this privacy policy. It contains Information on the processing of personal data in connection with the use of the EFM website and activities carried out by EFM within the scope of its corporate purposes.

For websites of other providers to which reference is made, e.g. via links, the data protection notices and declarations there apply. The information contained in this privacy policy is intended to help you comply with the data protection information obligations - in particular according to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This privacy policy uses terms from the GDPR.

We (EFM) process personal data exclusively for specific purposes and in accordance with the provisions of the GDPR. The purposes related to individual processing activities are specified in the information on the individual services and activities. and activities. Corresponding information can be found in the following descriptions.

2. data protection officer & contact

is responsible under data protection law:

EFM - Gesellschaft für Enteisen und Flugzeugschleppen am Flughafen München mbH
RGS 5, East Apron
P.O. Box 23 16 25
85325 Munich Airport
Phone +49 89 97598601

Further information in the imprint: https://www.efm-muc.de.de/impressum

3. contact data protection officer

Data Protection Officer of EFM
Nordallee 25
85356 Munich-Airport
E-mail: datenschutzbeauftragter@munich-airport.de

4. information on the processing of personal data in relation to online services/use of the website www.efm-muc.de

4.1 Log data/log files

Scope of processing

Every time you access content on our website, data is stored that may allow you to be identified.

The following data is collected:
- Date and time of access
- IP address
-Visited page on our website
- Notification of whether the call was successful
- Amount of data transferred
- Information about the device used (mobile device, desktop, etc.), operating system, browser type and versions used

Purpose of the processing
The temporary storage of this data is necessary for the course of a website visit in order to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website of the website and the security of the information technology systems. This stored data is used exclusively to analyze technical faults and possible attacks on our website. The data can also be analyzed anonymously for statistical purposes.

Legal basis
The processing of personal data takes place on the following legal basis:
Necessity for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject [see Art. 6 (1) p. 1 lit. f) GDPR]. The legitimate interests consist of maintaining the functionality of the website and statistically evaluating the use of our website.

Categories of recipients
Personal data is transmitted to the following recipients or categories of recipients: If necessary, to persons responsible for professional secrecy, e.g. auditors, tax consultants or lawyers, banks or insurance companies.

Transfer to third countries
A transfer to a third country outside the European Union is not intended.

Duration of storage and criteria for determining the duration
In order to be able to investigate appropriately in the event of technical faults or possible attacks on our website and, if necessary, to report to supervisory authorities and security bodies, we delete or anonymize the log data after 90 days at the latest.

Necessity of the data and consequences of non-provision
The provision of personal data is neither legally nor contractually required and is voluntary. Failure to provide it will mean that the website cannot be provided.

Possibility of removal or revocation
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. Please send your objection to info@efm-muc.de. We reserve the right to examine your request individually before implementing a restriction or cessation of processing and erasure.

4.2 Cookies/tracking tools
This website does not use any cookies/tracking tools that are subject to the provisions of the GDPR.

5. individual processing operations

5.1 Applications

Below we inform you about the processing of your personal data in the context of an application to us via the application form and the rights to which you are entitled under data protection law. You can apply online via the application form, by e-mail or by post. Your data will then be recorded in the application form and processed there by the relevant internal department.

If your application convinces us, but we do not currently have a vacant position for you, we will be happy to include you in an applicant pool - also with your consent. You therefore allow us to store your application for a to store your application for a specified period and to consider it for vacant positions if necessary.

Scope of processing
The following categories of data are processed when you apply via the application form:

1) Application data that you enter yourself in the application form. This regularly involves the following personal data:

- First name*
- Surname*
- Date of birth*
- E-mail address*
- Telephone*
- Driver's license class*
- German language skills*
- Knowledge of English*
- Previous employment at Munich Airport
- Existing background check
The fields marked with an asterisk (*) are mandatory.

In addition, depending on the specific advertisement and target group, further fields with personal data are requested and processed.

2) Application data that you enter by adding documents (application documents, application photo, etc.).

3) We reserve the right to enter applicant data (see 1) and documents manually in the system.

Purpose of the processing

We and service providers commissioned by us process your personal data for the following purposes:

1. to fill advertised and vacant positions
2. to fill future vacancies (unsolicited applications)
3. to protect and defend our rights

Changes of purpose:
4. if you are hired, some of your personal data (e.g. to create a contract) will also be processed for the purposes of the employment relationship. The legal bases for this are: Art. 6 para. 1 lit. b GDPR in conjunction with. Art. 88 GDPR in conjunction with. § Section 26 para. 1 BDSG.

5. if you agree to pool storage, we reserve the right to consider your application for other vacant positions or positions that become vacant in the future. For information on storage and deletion, please refer to the point & Duration of storage and options for deletion.

Legal basis

The processing of personal data takes place on the following legal basis:

- Purpose 5: Consent [see Art. 6 para. 1 sentence 1 lit. a) GDPR in conjunction with §26 para. 2 BDSG]
- Purposes 1 and 2: Necessity for the performance of a contract to which the data subject is party [see Art. 6 para. 1 sentence 1 lit. b) 1st variant GDPR in conjunction with Art. 88 GDPR in conjunction with. § Section 26 para. 1 BDSG]
- Necessity for the performance of pre-contractual measures taken at the request of the data subject [see Art. 6 para. 1 sentence 1 lit. b) 2nd variant GDPR in conjunction with Art. 88 GDPR in conjunction with. § Section 26 para. 1 BDSG]
- Purpose 3: Necessity for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject [see Art. 6 para. 1 sentence 1 lit. f) GDPR]. The legitimate interests consist in the assertion and defense of our rights].
- Purposes 1, 2, 4 and 5: Processing of personal data of employees for the purposes of the employment relationship [see Section 26 para. 1 sentence 1 BDSG] due to necessity for the
o Decision on the establishment of an employment relationship
o Implementation of an employment relationship
o termination of an employment relationship
o Exercising or fulfilling statutory or collectively agreed rights and obligations of employee representatives
o Detection of criminal offenses

The processing of special categories of personal data is based on the following legal bases:
- Explicit consent [see Art. 9 para. 2 lit. a) GDPR]
- Necessity for the exercise of rights or fulfillment of legal obligations under labor law, social security and social protection law and no reason to assume that the legitimate interest of the data subject in the exclusion of processing of the data subject in the exclusion of processing prevails [see Art. 9 para. 2 lit. b) GDPR in conjunction with Section 26 para. 3 BDSG]
- Processing of personal data which the data subject has manifestly made public [see Art. 9 para. 2 lit. e) GDPR]
- Necessity for the purposes of preventive health care or occupational medicine, for the assessment of the employee's ability to work, for medical diagnostics, health care or treatment in the health or social sector or for the administration of health or social services. or social care or for the management of health or social care systems and services on the basis of Union or Member State law [see Art. 9 (2) (h) GDPR]

Categories of recipients
Personal data is transmitted to the following recipients or categories of recipients:
if necessary, to persons responsible for professional secrecy, e.g. auditors, tax consultants or lawyers, banks or insurance companies.

Transfer to third countries
A transfer to a third country outside the European Union is not intended.

Duration of storage and criteria for determining the duration
Applicant data
1) Your data will generally be deleted after six months following recruitment, rejection or self-rejection.

2) If you have agreed to be included in our applicant pool, you will be notified after five months whether you will remain in the pool. If you agree, you will receive another notification after a further five months. If you do not contact us after the notification, your data will be completely deleted after three months at the latest.

3) If you wish your data to be deleted prematurely or if you wish to withdraw your consent, please send an e-mail with your name, the e-mail address you provided in your application, the job title including the company and your date of birth for clear identification to info@muc-efm.de or get in touch with the contact person for the job advertisement.

4) Please note that after deletion, all data relating to the associated application has been removed and no conclusions can be drawn about the application.

Necessity of the data and consequences of non-provision
The provision of personal data is neither legally nor contractually required and is voluntary. If you do not provide your data, this may mean that we will not be able to accept your application not accept your application and not be able to consider you for filling vacant positions.

Possibility of removal or revocation
If the legal basis is consent:
You have the right to withdraw your consent at any time. The revocation only takes effect for the future; this means that the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation. is not affected.

Please send the revocation of your consent to info@efm-muc.de

Where the legal basis is legitimate interest:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.

Please send your objection to info@efm-muc.de. We reserve the right to examine your request individually before implementing a restriction or cessation of processing and erasure.

5.2 General contact form
Below we inform you about the processing of your personal data in the context of contacting us via the general contact form and the rights to which you are entitled under data protection law. You can contact us online via the contact form, by email, by post or by telephone. Your data will then be recorded in the contact form and processed there by the relevant internal department.

Scope of processing
- Surname, first name
- E-mail address, telephone, fax number

Purpose of the processing
The purpose of processing your data is to process and respond to your request, e.g. to provide requested information about our services or tasks associated with our corporate purposes, to make an appointment or request a callback or to make other contact.

Legal basis
The legal basis for the processing of the data that you transmit to us in the course of contacting us is our legitimate interests (pursuant to Art. 6 para. 1 lit. f GDPR). These lie in the fulfillment of the described purposes described.

Categories of recipients
Personal data is transferred to the following recipients or categories of recipients: If necessary, to persons responsible for professional secrecy, e.g. auditors, tax consultants or lawyers, banks or insurance companies.

Transfer to third countries
A transfer to a third country outside the European Union is not intended.

Duration of storage and criteria for determining the duration
We will delete your data that we have received in the course of contacting you as soon as it is no longer required to achieve the purpose for which it was collected, i.e. your request has been fully processed and no further communication with you is required or requested by you.

Necessity of the data and consequences of non-provision
The provision of personal data is neither legally nor contractually required. The provision of personal data is voluntary. However, if you do not provide this data, this may result that we will not be able to fulfill your request.

Possibility of removal or revocation
If the legal basis is consent:
You have the right to withdraw your consent at any time. The revocation only takes effect for the future; this means that the revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation. is not affected.

Please send the revocation of your consent to info@efm-muc.de

Where the legal basis is legitimate interest:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.

Please send your objection to info@efm-muc.de. We reserve the right to examine your request individually before implementing a restriction or cessation of processing and erasure.

6. data protection requests/data subject rights
Data protection law grants data subjects various rights with regard to their personal data, in particular rights to information about the personal data concerned, to rectification, to erasure, to restriction of processing, to object to processing, to data portability and to withdraw consent at any time, to restriction of processing, to object to processing, to data portability and to withdraw consent at any time.

- Information: The data subject has the right to request information from the controller about their personal data processed by the controller in accordance with Art. 15 GDPR. It should be noted that the right to information may be restricted under certain circumstances in accordance with legal regulations (in particular § 34 BDSG).

- Rectification: The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her in accordance with Art. 16 GDPR. Taking into account the purposes of the processing, they have the right to request the completion of incomplete personal data.

- Erasure : The data subject has the right to obtain from the controller the erasure of their personal data under the conditions of Art. 17 GDPR. of their personal data.

- Restriction of processing: The data subject has the right to obtain from the controller restriction of processing of personal data concerning him or her within the scope of the provisions of Art. 18 GDPR.

- Data portability: Subject to the conditions of Art. 20 GDPR, the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format, to transmit those data to another controller and to have the personal data transmitted directly from one controller to another. to another controller.

- Objection: Under the conditions of Art. 21 GDPR, the data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. data concerning him or her.

- Revocation of consent: The data subject has the right to withdraw consent given at any time with effect for the future. The processing of personal data on the basis of the consent remains lawful lawful until the time of revocation.

Contact details for exercising your rights as a data subject:

EFM - Gesellschaft für Enteisen und Flugzeugschleppen am Flughafen München mbH
RGS 5, East Apron
P.O. Box 23 16 25
85325 Munich Airport
Phone +49 89 97598601

7. right of appeal to the supervisory authority
Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which they are resident, of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you is unlawful. The competent supervisory authority in Bavaria for the non-public sector is the Bavarian State Office for Data Protection Supervision, Ansbach.

8. amendment of the privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example the introduction of new services. The new privacy policy will then apply to your next visit.

Status of the information
Date: 19.01.2024