The person responsible in the sense of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is the:
Julius Berger International GmbH
D-65189 Wiesbaden (Germany)
Phone: +49 (0) 611 708 08
The data protection officer of Julius Berger International GmbH is:
Mr. Klemens Heckmann
1. General information regarding data processing
1.1. Processing of personal data and the purpose of same
Julius Berger International GmbH (hereinafter referred to as ‘Julius Berger’ or ‘we’) processes the personal data of users only to the extent that this is necessary for the provision of a functional website and our content and services. When visiting our websites, the following data is processed:
- IP address of the user
- used browser (type, version, language)
- used operating system
- Internet service provider of the user
- Date and time of access to our website
- Files retrieved on our website
- Website from which the user was linked to our website
- Website that the user accesses through our website
The processing and temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must be stored for the duration of the session. The log files contain IP addresses or other data that allow the user to be assigned. Storage in log files is done to ensure the functionality of the web pages. In addition, the data is used to optimize our websites and to ensure the security of our information technology systems. Any processing of the personal data will take place solely for the stated purposes and to the extent necessary to achieve these purposes. This data is not used for purposes of advertising, customer service or market research.
1.2. Legal basis for the processing of personal data
The processing of the personal data of our users takes place regularly with the user’s consent. An exception applies in cases in which prior consent is not possible for reasons of fact and we are permitted to process the data by law. The storage of the data and log files is based on Article 6 para. 1 lit. f GDPR.
1.3. Data deletion and duration of storage
The personal data of the persons concerned will be deleted or blocked by us as soon as the purpose of storage ceases to apply. In the case of data processing for the provision of the web pages, deletion takes place when the respective session has ended. In the case of storage of personal data in log files, deletion takes place after no later than seven days. Further storage is possible, provided that the IP addresses of the users are deleted or alienated beforehand, so that an assignment of the calling client is no longer possible.
• Language settings
• log-in information
The purpose of using cookies lies in the user-friendly design of our websites. The processing of personal data using cookies is based on Article 6 para. 1 lit. f GDPR. Cookies are stored on the user's computer and transmitted from there to our websites. Users may disable or restrict the transmission of cookies by changing the settings of their Internet browser. Already saved cookies can be deleted at any time. If cookies are disabled for our websites, it may not be possible to use all functions of our websites to the full.
3. Web analysis
4. Email contact
Users can contact us via the email address provided. In this case, the personal data of the user transmitted by email will be stored by us. The legal basis for data processing is Article 6 para. 1 lit. f GDPR. If the establishment of contact is aimed at concluding a contract, the legal basis for the processing of the data is Article 6 para. 1 lit. b GDPR. The data will be used exclusively to process the contact and the subsequent communication. In this context, the data is not forwarded to third parties. The personal data sent to us via email will be deleted once the communication with the user has ended i.e., as soon as it can be deduced from the circumstances that the facts are finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
5. Career Portal - Talent Pool
On our web pages, we offer applicants the opportunity to apply for vacancies by providing personal data. To simplify the application process, we offer applicants the opportunity to register on our career portal. The data is entered into an input mask and transmitted to us and stored. The following data is collected:
• Salutation (optional)
• First name, Last Name
• User name
• Email address
• IP address of the user
• Date and time of dispatch.
The applicant will then receive a registration email at the specified email address containing a link enabling the applicant to confirm his registration and complete the registration process. After successful registration, the applicant can open his user account by entering his email address and password and create his application profile. Until the application is sent, the applicant may change his details at any time.
The personal data provided in the context of an application will be processed by us solely for the purpose of selecting applicants. For the processing of applications, we limit ourselves to the information provided directly by the applicants. This may include information that applicants have deposited in online professional networks or job boards. If, in the context of the application process, we ask for the gender of the applicant in the form of the requested salutation, then this is solely due to the fact that we want to write to the candidates in the correct manner. The processing of personal data in the context of the career portal is based on Article 6 para. 1 lit. a GDPR, or Article 88 para. 1 GDPR in conjunction with Section 26 BDSG. The data will be deleted by us six months after the rejection of an application, unless the applicant has consented to the inclusion of his personal data in our talent pool.
Applicants who have applied for a specific position advertised by Julius Berger, but whose application documents render them unsuitable for the position in question are invited to become members of our talent pool and thus prospective suitable candidates for other areas within Julius Berger. First of all, we get in contact with the candidates so that they can decide whether they are interested in the procedure described. The processing of personal data within the talent pool is based on Article 6 para. 1 lit. a GDPR or Article 88 para. 1 GDPR in conjunction with Section 26 BDSG. The data will initially be included in the talent pool for six months. As soon as the applicant logs on to the system again with his access data, the period of six months begins again. If the applicant does not adapt or use his profile over a period of five months, we will request that the applicant email an update of his data. If there is no update by the applicant, his data will be removed from the talent pool after four weeks and locked for further use. The personal data will be deleted after another six months.
6. Social Media
Users who are members of the social networks Facebook or Twitter and do not want the user's data to be collected by the respective social network via our websites must log out of their respective social media account before visiting our websites.
7. Security Measures
Julius Berger uses technical and organizational security measures to protect the personal data of users against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
8. Rights of the data subject
If Julius Berger processes your personal data, you are the person affected pursuant to Article 4 No. 1 GDPR with the following rights vis-à-vis Julius Berger.
8.1. Right to information
You may request confirmation from us pursuant to Article 15 GDPR as to whether personal data concerning you is processed by us. If we process your personal data, you may ask us for information concerning the following:
• the processing purposes;
• the categories of the personal information we process;
• the recipients or categories of recipients to whom we have disclosed or will disclose your personal information;
• (if possible) the planned duration for which we store your personal information or, if this is not possible, the criteria for determining the duration of storage;
• the right of rectification or deletion of your personal data, a right to the restriction of processing by us or a right to object to such processing;
• the existence of a right to appeal before a supervisory authority;
• all available information about the origin of the data, if the personal data was not collected from you;
• the existence of automated decision-making including profiling (Article 22 para. 1 and para. 4 GDPR) and - at least in these cases - meaningful information about the logic involved,
and the scope and intended impact of such processing on you.
You have the right to request information about whether your personal information is transferred to a third country or an international organization. In this context you can request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission of information.
8.2. Right to rectification
According to Article 16 GDPR you have the right to demand the correction and/or completion of any incorrect personal data concerning you.
8.3. Right to delete
According to Article 17 GDPR you can demand that your personal data be deleted immediately. We are obliged to delete your data immediately if one of the following is true:
• Your personal information is no longer necessary for the purposes for which it was collected or otherwise processed.
• You revoke your consent to the processing in accordance with Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR and there is no other legal basis for processing.
• In accordance with Article 21 para. 1 GDPR, you object to the processing and there are no legitimate reasons for the processing, or you object to the processing in accordance with Article 21 para. 2 GDPR.
• Your personal data has been processed unlawfully.
• The deletion of your personal data is required to fulfill a legal obligation under European Union law or a national law to which we are subject.
• Your personal data was collected in connection with the services offered by the information society pursuant to Article 8 para. 1 GDPR.
If we have made your personal data public and are obliged to delete it pursuant to Article 17 para. 1 GDPR, we shall, taking into account available technology and implementation costs, take appropriate measures, including technical ones, to inform the data controllers who process the personal data that you, as the data subject, have requested the deletion of all links to your personal data or of any copies or replications of your personal data.
The right to deletion does not exist if the processing is necessary
• to exercise the right to freedom of expression and information;
• to fulfill a legal obligation to which we are subject or to perform a task that is in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the field of public health (Article 9 para. 2 lit. h and lit. i and Article 9 para. 3 GDPR);
• for archival purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 para. 1 GDPR, in so far as that law is likely to render impossible or
seriously affect the achievement of the objectives of that processing, or
• to assert, exercise or defend legal claims.
8.4. Right to restrict the processing of data
According to Article 18 GDPR, you can request the restriction of the processing of your personal data under the following conditions:
• if you contest the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
• if the processing is unlawful and you refuse deletion of the personal data and instead request restriction of the use of the personal data;
• if we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
• if you have objected to the processing pursuant to Article 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons.
If the processing of your personal data has been restricted, this data – apart from the storage of same - may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of substantial public interest of the European Union or a Member State. If the restriction on the processing of your data as provided above is limited, you will be informed by us before the restriction is lifted./If the processing of your data has been restricted as provided above, you will be informed by us before the restriction is lifted.
8.5. Right to information
If you have exercised your right vis-à-vis our company to have your data rectified, deleted or restricted, we are obliged, in accordance with Article 19 GDPR, to communicate this fact to all recipients to whom your personal data has been disclosed by us, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
8.6. Right to data portability
According to Article 20 GDPR, you have the right to receive the personal data provided to us by you in a structured, standard and machine-readable format. In addition, you have the right to transfer this data to another responsible party without any constraints imposed by us, provided that
• the processing is based on consent (Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR) or on a contract in accordance with Article 6 para. 1 lit. b GDPR and
• the processing is done using automated procedures.
In exercising this right, you are also entitled to have your personal data transmitted directly by us to another responsible party, as far as this is technically feasible. This may not in any way affect the freedoms and rights of others. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
8.7. Right of objection
In accordance with Article 21 GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data, which is based on Article 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will not subsequently process your personal data unless we can provide compelling legitimate reasons to do so that outweigh your interests, rights and freedoms, or such processing serves to assert, exercise or defend legal claims.
8.8. Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing, which took place on the basis of the consent up to the point of revocation.
8.9. Automated decision in individual cases including profiling
According to Article 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing - including profiling - which has a legal effect on you or, in a similar manner, significantly affects you. This does not apply if the decision
• is required for the conclusion or performance of a contract between you and us,
• is permitted under European Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
• is made with your express consent.
8.10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data carried out by us violates the GDPR.
9. Responsibility for content and information
Our websites contain links to Internet offers of external providers. The contents of the Internet offers of external providers were checked by us when setting the link to see whether they violate any applicable civil or criminal law. However, it cannot be ruled out that these contents will subsequently be modified by the respective providers. If you believe that linked external sites infringe applicable law or contain any other inappropriate content, please let us know. We will examine the case and remove the external link if necessary. Julius Berger is not responsible for the content and availability of the linked external websites.
As of May 2018