This privacy policy applies solely to individuals applying for employment with our company ("Applicants"). The provision of your personal data is necessary in order to assess your application and, if applicable, to establish an employment relationship. Without this data, we are unfortunately unable to consider you in the recruitment process.
I. Name and contact details of the controller
Your contact person as the controller within the meaning of the European General Data Protection Regulation ("EU-GDPR") and other national data protection laws of the member states as well as other data protection regulations is
Yamazaki Europe GmbH. Immermannstr. 33, 40210 Düsseldorf, Germany
(hereinafter referred to as "we", "us", or "our").
II. Contact details of the data protection officer
The protection of your personal data is a high priority for us. To reflect this importance, we have commissioned a law firm specializing in data protection and data security to take on these key issues.
We are advised by: Atsumi & Sakai Europa GmbH – Rechtsanwälte und Steuerberater, Bockenheimer Landstraße 2 - 4, 60306 Frankfurt am Main, Germany
Please contact our Data Protection Officer (DPO) directly if you have any questions about data protection and data security. E-mail: burak.kara@aplaw.de
III. Types of Personal Data We Use
In connection with your application for employment, we may collect, store, and use the following categories of personal data: - Name, title, address, telephone number, and personal email address - Date and place of birth - Gender - Recruitment information (e.g., CV, cover letter, references, right to work and VISA documentation) - Qualifications, professional memberships, and work history - Results and notes from interviews and assessments - Copies of relevant licenses or certifications - Passport or other identification documents
IV. Purpose of Processing Personal Data
We process your personal data for the following purposes: - To assess your suitability for a role with our company - To manage communication throughout the recruitment process - To comply with legal obligations and regulatory requirements - To evaluate and compare your profile with job requirements
V. Legal Basis for Processing
We rely on the following legal bases for processing your personal data:
Article 6(1)(a) GDPR: With your consent, we may also process your data to consider you for future job opportunities not specifically applied for.
Article 6(1)(b) GDPR: The processing is necessary for the performance of pre-contractual measures in connection with a potential employment relationship.
Article 6(1)(c) GDPR: The processing is necessary for compliance with a legal obligation to which we are subject.
Article 6(1)(f) GDPR: The processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests.
VI. Data Retention If your application is unsuccessful, we will delete your personal data six months after the end of the application process. If you have given consent to be considered for future job opportunities, we may retain your data longer, but no more than six months after such consideration ends.
VII. Sharing of Personal Data We will only share your personal data internally with authorized staff involved in the recruitment process. We may share it with external service providers (e.g., recruitment agencies, IT providers) under strict confidentiality and data protection agreements. We do not share your data with affiliated companies unless you submit an unsolicited application or provide explicit consent. If data is transferred outside the EEA, we ensure protection through Standard Contractual Clauses or other legally recognized safeguards.
VIII. Your rights Where personal data is transferred to countries outside the European Economic Area (EEA), we implement appropriate safeguards to ensure that your personal data is adequately protected. These safeguards include, where applicable, transfers based on an adequacy decision by the European Commission (e.g., for Japan). In the absence of such a decision, we rely on Standard Contractual Clauses approved by the European Commission or other legally recognized safeguards.
IX. Your rights
You have the following rights vis-à-vis us:
1. Right to information You have a right to information about whether and which of your personal data is processed by us. In this case, we will also inform you about
(1) the purpose of processing; (2) the data categories; (3) the recipients of your personal data; (4) the planned storage period or the criteria for the planned storage period; (5) Your further rights; (6) unless you have provided us with your personal data: All available information about its origin; (7) if available: the existence of automated decision-making and information about the logic involved, the scope and the intended effects of the processing.
2. Right to rectification You have a right to rectification and/or completion if your personal data processed by us is incorrect or incomplete.
3. Right to restriction of processing You have a right to restriction of processing if
(1) we verify the accuracy of your personal data processed by us; (2) the processing of your personal data is unlawful; (3) you need your personal data processed by us for legal prosecution after the purpose has ceased to exist; (4) you have objected to the processing of your personal data and we are examining this objection.
4. Right to cancellation You have a right to erasure if
(1) we no longer need your personal data for its original purpose; (2) you withdraw your consent and there is no other legal basis for the processing of your personal data; (3) you object to the processing of your personal data and - provided it is not direct marketing - there are no overriding grounds for further processing; (4) the processing of your personal data is unlawful; (5) the deletion of your personal data is required by law; (6) your personal data was collected as a minor for information society services.
5. Right to information If you have exercised your right to rectification, erasure or restriction of processing, we will notify all recipients of your personal data of this rectification, erasure or restriction of processing.
6. Right to data portability You have the right to receive your personal data processed by us on the basis of consent or for the performance of a contract in a structured, commonly used and machine-readable format and to transmit those data to another controller. If this is technically feasible, you have the right to have us transfer this data directly to another controller.
7. Right of objection
You have the right to object to the processing of your personal data on special grounds. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time.
8. Right of cancellation You have the right to revoke any consent given to us at any time. Withdrawal of consent does not affect the lawfulness of previous processing based on consent.
9. Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your personal data by us violates the EU GDPR.
The competent supervisory authority for us is
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Kavalleriestr. 2 40213 Düsseldorf Tel: +49 211 38424-0 e-mail: poststelle@ldi.nrw.de Homepage: https://www.ldi.nrw.de
