onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet. On or respectively via onlyfy one, companies can, for example, publish job ads, identify interesting talented individuals (where applicable including from the XING professional network), receive and manage applications, and enter into dialogue with talented individuals and applicants. New Work SE supports this coming together of talented individuals and companies on and via onlyfy one. This takes place through, for example, talented individuals being recommended and displayed in the business customer’s company account, as well as through the generation and provision of recruitment-relevant information and analysis based on data that New Work SE processes in onlyfy one and, where applicable, in other XING applications or outside them.
With regard to interaction within the company account of Hexagon | Leica Geosystems, Hexagon | Leica Geosystems and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Hexagon | Leica Geosystems in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Hexagon | Leica Geosystems only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using the WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. The USA is currently considered an insecure third country, which means that it may not be able to guarantee EU data protection standards. Sending the application may involve certain data protection risks (e.g. unauthorised access to your data by US security agencies). However, the sent and received messages are encrypted end-to-end.
WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
If you want to withdraw consent, please contact firstname.lastname@example.org
Leica Geosystems AG, (“Leica Geosystems” or “we” or “us”) respects your privacy. Leica Geosystems is committed to the safe and secure processing of personal data and compliance with applicable data protection law. We have implemented appropriate technical and organizational measures to protect your personal data against loss or unlawful access. The number of persons with access to your personal data is limited. Only individuals associated with Leica Geosystems that need to process your personal data in accordance with the purposes below will have access to your personal data.
The following describes how we process your personal data.
HOW WE PROCESS YOUR PERSONAL DATA
Fulfilling our obligations towards you, for receiving your application documents, sharing them with involved persons, responding to your questions, etc.
How do we obtain your personal data
We obtain personal data from you when you register on our Web Sites, when you add or change personal data in your profile of our E-recruiting tools. We may also obtain personal data from third-party sources such as recruiting agencies. You may have provided us also with personal data by mail or telephone.
Categories of personal data we process
For the automated processing of your application, the following data are collected and processed:
- first name, surname, email address and, as necessary, address/location, date of birth, title, telephone number, nationality
- Additional questions depending on the respective job vacancy (e.g. driving licence)
- CV, in particular information about professional experience and training
- Skills (e.g. Photoshop, MS Office)
- Application photo
- Qualifications, awards and linguistic skills
- Covering letter
- Any files and documents that you upload
- We store the written electronic communication that takes place between you and us. In addition, we process comments and assessments that are written about you in the course of your application process.
- To allow us to adapt our services to your needs in future and facilitate easy use of the application, we record statistical information about your surfing behaviour on the website (e.g. the areas of the website you click on or the times when you log in). This data may be recorded for the purposes of support or service optimization.
The purposes of the processing
We process your personal data when you apply for a job at Leica Geosystems to evaluate and assess your qualifications in relation to the job for which you are applying, to manage the recruitment process, to administer the online career portal and to conduct pre-employment checks. If your application is successful, we also process the applicant data to make you an offer and for onboarding purposes.
We process your personal data for these purposes as necessary for the conclusion of an employment contract or for our legitimate interest in the management and administration of our business and recruitment.
In addition, we process your personal data to the extent necessary to comply with legal and other requirements, such as recording and reporting requirements, in response to legal process such as subpoenas and court orders, to pursue legal claims, to defend litigation and to administer internal complaints or claims, to conduct investigations, and to comply with internal policies and procedures. For these purposes, we process personal data to the extent required by law or necessary to establish, exercise or defend a legal claim.
You are under no obligation to provide us with personal information, but if you do not provide us with information that is reasonably necessary for an application, we may not be able to continue with your application.
Legal basis for the processing
It is within the legitimate interest of Leica Geosystems to process your personal data for the above noted purposes. We use your personal data for fulfilling our contractual obligations towards your application process.
To store and process your personal data for the purpose of further consideration and communication in case of suitable job offers in the future we will ask for your consent.
Recipients (or categories of recipients) of the personal data
Where necessary to proceed your application we will share your data with the authorized persons and/or departments within the Hexagon Group.
Where necessary to proceed your application we will also share your personal data with business partners and legal agents which carry out services on our behalf, e. g.
- Companies with which contact is to be made in the context of your application process.
- Sub-contracted processors acting as service providers.
- We may be legally obliged to disclose your data if the data are required to assert, exercise or defend legal claims of Leica Geosystems in respect of the authorities.
- As long as the application process is running, data is stored for up to 12 months.
- Personal data of rejected applicants are stored for a maximum of two months, starting from the date of rejection of the application. If you prefer a longer storage period for your application process (to continue your application at a later date, for example), we request that you adjust the settings accordingly when you register.
- Longer storage periods may also result from the fact that the data are required to assert, exercise or defend legal claims in respect of the authorities or if statutory storage periods apply. The data will be stored as long as necessary to fulfil these purposes.
TRANSFER OF YOUR PERSONAL DATA TO THIRD COUNTRIES
Your personal data may be transferred to a country outside of EU/EEA such as Canada (commercial organizations), New Zealand and Switzerland, which offer similar level of protection as within the EU/EEA. The transfer is based on the legal basis outlined in HOW WE PROCESS YOUR PERSONAL DATA and is for the purpose outlined in HOW WE PROCESS YOUR PERSONAL DATA. The transfer to these countries is based on the adequacy decision of the European Commission.
Your personal data may be transferred to a country outside of EU/EEA such as Australia, Brazil, Chile, China, Colombia, Hong Kong, India, Indonesia, Japan, Malaysia, Mexico, Peru, Philippines, Russia, Singapore, South Africa, South Korea, Taiwan, Thailand, UAE, United States, Venezuela, which may have a lower level of protection than within the EU/EEA. The transfer is based on the legal basis outlined in HOW WE PROCESS YOUR PERSONAL DATA and is for the purpose outlined in HOW WE PROCESS YOUR PERSONAL DATA. When transferring personal data to these countries, Leica Geosystems uses standard contractual clauses approved by the European Commission to ensure a sufficient level of protection of your personal data. The standard contractual clauses can be found via the following link: http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm.
WHAT ARE YOUR RIGHTS?
You are entitled to know what personal data we are processing about you. You have the right to request access to your personal data and you can request that we provide a copy of such data to you. You are entitled to have incorrect personal data regarding you corrected, and in some cases you may request that we delete your personal data. You also have the right to object to certain processing of your personal data, and request that the processing of your personal data be limited. Limitation or deletion of your personal data may result in Leica Geosystems not being able to fulfil its commitments to you. You also have the right to request data portability, where your personal data would be extracted in a machine-readable format and transferred to another controller. Leica Geosystems may not always be obliged to comply with a request from you for deletion, restriction, objection or data portability. Additional circumstances such as exercising the right of freedom of expression and information, compliance with a legal obligation which requires processing by EU or Member State law or processing for establishment, exercise or defence of legal claims can justify further processing by Leica Geosystems. Leica Geosystems will assess the eligibility of your request and inform you about Leica Geosystems decision and reasoning. Where you have given us your consent to process your personal data, you can withdraw your consent at any time and without justification. Where you withdraw your consent, certain personal data (only to the extent that it is absolutely required) will be retained on our “do not contact” list.
If you have questions regarding how we process Personal Data concerning you, you are most welcome to contact us at Email: email@example.com.
OBJECTIONS AND COMPLAINTS
If you have any objections or complaints with the way in which we process your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority, where the applicable laws provide for such remedy.
IDENTITY OF THE PRIVACY OFFICER
The Leica Geosystems Privacy Officer can be contacted at: firstname.lastname@example.org.
IDENTITY OF THE CONTROLLER
Hexagon AB, Swedish Company Registration Number 556190-4771, Lilla Bantorget 15, P.O. Box 3692, SE-103 59 Stockholm, Sweden (hexagon.com), its subsidiaries and controlled joint ventures are the controller(s) of your personal data.
Leica Geosystems operates within a matrix/division structure and utilises data processing tools shared between multiple Hexagon Group entities. It follows that your location and your business relationship with Leica Geosystems are essential in determining the relevant controller(s) in terms of the processing of your personal data within the Hexagon Group.
Upon your request to the Privacy Officer, you will be provided with full details of the relevant controller(s) within the Hexagon Group which is/are responsible for the processing of your personal data. We will provide the name and the contact details of any data protection officer where appointed by the applicable controller.
INFORMATION REGARDING COOKIES