Legal
Privacy Policy
Protecting your personal data is important to us. Below we inform you about how your data is processed.
Last updated: July 2026
Controller
The controller responsible for data processing on this website is:
MaSiTec GmbH
Weimarische Straße 36
99428 Grammetal OT Niederzimmern
Germany
If you have any questions about data protection, you can reach us at info@masitec-gmbh.de.
Categories of personal data
In the course of our activities as a recruitment agency, we process in particular the following categories of personal data:
Identification data, contact data, information contained in CVs, information contained in cover letters, education information, professional qualifications, employment history, certificates, professional licences and qualifications, information provided during email communication, and information provided during telephone communication.
Purposes of processing
We process personal data for the following purposes: communication with applicants, recruitment, employment mediation, recruitment procedures, performance of contracts, compliance with legal obligations, and protection of the company's legitimate interests.
Legal basis
Personal data are processed on the basis of Regulation (EU) 2016/679 (GDPR), in particular Article 6(1)(a) GDPR (consent) where consent has been given, Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Article 6(1)(c) GDPR (legal obligation), and Article 6(1)(f) GDPR (legitimate interest) where applicable.
Recipients of personal data
Personal data may be disclosed to the following categories of recipients to the extent necessary: authorised employees, contractual business partners involved in providing our services, IT service providers, hosting providers, tax or accounting advisors where necessary, and public authorities where required by law.
Transfers outside the EU
Personal data are transferred to countries outside the European Union or the European Economic Area only where permitted under the GDPR and where appropriate safeguards within the meaning of the GDPR are in place.
Retention period
Personal data are retained only for as long as necessary for the stated purposes or as required by applicable legislation.
Recruitment data
CVs, cover letters, certificates, educational documents, information on professional qualifications, and communication in the context of recruitment procedures are processed solely for recruitment and related communication.
Storage of personal data
Personal data are stored predominantly in electronic form.
Paper documents are retained only where required by applicable legislation, contractual obligations, or legitimate operational needs of the company.
Security of personal data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, unauthorised alteration, or misuse.
Access to personal data is limited to authorised persons who require such access for the performance of their duties.
Rights of data subjects
Under the GDPR, data subjects have in particular the following rights:
Right of access (Article 15 GDPR) to information about the processing of their personal data.
Right to rectification (Article 16 GDPR) of inaccurate or incomplete data.
Right to erasure (Article 17 GDPR) where the statutory requirements are met.
Right to restriction of processing (Article 18 GDPR) where the statutory requirements are met.
Right to data portability (Article 20 GDPR) where the statutory requirements are met.
Right to object (Article 21 GDPR) to processing where the statutory requirements are met.
Right to withdraw consent (Article 7(3) GDPR) with effect for the future.
Exercising your rights
To exercise your rights as a data subject, you may contact us using the contact details stated above. We will handle your request in accordance with applicable legal requirements.
Complaints
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
Automated decision-making and profiling
We do not carry out automated individual decision-making within the meaning of Article 22 GDPR or profiling unless expressly stated otherwise.
