Privacy policy

1. General

MiRO appreciates your interest in our company and your visit to our website. We take the protection of your personal data very seriously. We work in accordance with the current data protection regulations, have obliged our employees to comply with them accordingly and have concluded suitable contractual agreements with our service providers.

2. Data collection and processing

Personal data

In order to use our website www.miro-ka.de, it is generally not necessary for you to disclose personal data. According to Art. 4 EU GDPR, "personal data" is all information relating to an identified or identifiable natural person.

In some places on our website, we offer you the opportunity to get in touch with us. The personal data that you provide to us on a voluntary basis in these cases (e.g. name, company, full name, function, address, telephone number) will only be used by us for the purpose for which you provided it to us, e.g. to contact you to answer your questions, and deleted if it is no longer necessary and the deletion does not conflict with any statutory retention obligations. It will not be passed on to third parties.

Personal data for applications

You also have the option of applying online via our website www.miro-ka.de. For this purpose, we use an applicant management system from Concludis GmbH (www.concludis.de). At the end of the application process, you will be asked to confirm that you have read a separate privacy policy, which you can read in advance at the end of this privacy policy (Appendix 1). In any case, your information will be used exclusively to process your application. In the applicant portal of Concludis GmbH, precautions have been taken to ensure the protection of your data and to prevent misuse from outside. Measures such as encryption (SSL encryption), firewalls, hacker defense programs and manual security precautions are used. Please note that applications that you send to MiRO electronically by e-mail outside the applicant portal will be transmitted unencrypted and there is a risk that unauthorized persons may intercept and use this data.

Collection of general information (server log files)

As soon as you visit our website, we automatically store certain usage data about you (browser type; IP address; date and time of the visit and which pages you visited). This data is used to compile statistical information that can be used to further optimize our website. We cannot establish a personal reference from this.

Cookies

We only use technically necessary cookies on our website, which are essential for the smooth functioning of the site. These cookies enable basic functions such as navigating the website, accessing restricted areas and storing log-in data. They serve no economic purpose and do not collect any personal data. According to the General Data Protection Regulation (GDPR), technically necessary cookies do not require the user's consent. We inform you transparently about the use of these cookies to protect your privacy.

3. Purpose and legal basis of data processing

MiRO collects, processes and uses personal data exclusively for the following purposes:

  • to process your request and related correspondence

  • Contact us

  • to enable and optimize the MiRO website and offer

Your data is processed on the basis of Art. 6 para. 1f (legitimate interest) of the GDPR (General Data Protection Regulation).

4. Rights of users and deletion of data

Users have the following rights in accordance with Art. 7, 13-14 and 15-22 EU GDPR:

  • Information about the collection of your personal data
  • Right of access to the personal data stored and processed about them
  • Withdrawal of consent
  • Right to rectification and deletion
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing without consent to safeguard legitimate interests
  • Right not to be affected by legally binding decisions based on automated data processes
  • the right to lodge a complaint with the competent supervisory authority in the event of an allegation of unlawful data processing;

If you have given us consent, all data processing carried out before your revocation remains lawful. The data stored by us will be deleted as soon as it is no longer required for its intended purpose or the processing (access rights) is restricted, provided that statutory retention obligations exist.

5. References and links

If you use external links offered on our website, this privacy policy does not extend to these links and the processing of personal data on these pages. It is therefore recommended that you inform yourself about the processing of your personal data via the data protection declarations provided there.

6. Further information

We make every effort to store your personal data by means of appropriate technical and organisational measures in such a way that it is not accessible to third parties. We would like to point out that complete data security cannot be guaranteed when communicating by e-mail, and therefore recommend that you send confidential information by post.

7. Responsible body within the meaning of data protection law

Mineraloelraffinerie Oberrhein GmbH & Co KG
Nördliche Raffineriestraße 1
76187 Karlsruhe
Phone 0721-958-01

8. MiRO's company data protection officer

You can reach the data protection officer by e-mail at datenschutz@miro-ka.de.  

 

ANNEX 1

(in addition to 2b "Personal data for applications, see above")

MiRO data protection information for external applications (IMS 6009-A16)The following data protection information based on Articles 13 + 14 GDPR gives you an overview of the collection and processing of your personal data in the context of job applications.

1. Who is responsible for data processing and who can I contact?

The responsible body is:

Mineraloelraffinerie Oberrhein GmbH & Co KG
Nördliche Raffineriestraße 1
76187 Karlsruhe

The applicant portal is operated by concludis GmbH, Frankfurter Str. 561, 51145 Cologne, Germany. The applicant portal is hosted on servers of Hetzner Online GmbH, Industriestrasse 25 in 91710 Gunzenhausen.

You can reach our data protection officer by e-mail: : datenschutz@miro-ka.de

2. What data and sources do we use?

When you decide to apply for this position, you are submitting information about your educational and professional career in addition to your personal data.

You have been asked to upload your CV in an application form. Your CV will then be processed automatically and the data will be stored in the applicant database. Your attachments are processed with text recognition software and the recognized content is stored for your data record. Your original documents will be converted to PDF documents and will also be saved to your data set. Your original files will be deleted.

If you still send us your application documents in person or by post, we will first digitize them and then also record them in our applicant management system. We will send the original documents back to you immediately.

Inadmissible contentYou are solely responsible for the content of the texts posted. Please make sure that you do not send us any file attachments containing viruses or worms. Personal data that you submit to us should generally not include:

  • Information about diseases,
  • information about a possible pregnancy,
  • information on ethnic origin,
  • political, religious or philosophical beliefs,
  • trade union membership and sexual orientation,
  • defamatory or degrading information,
  • Information that is not specifically related to your application..

The information you provide to us must be truthful, must not violate the rights of third parties, public law regulations or morality ("Prohibited Content"). Please also note that you will indemnify us against any claims we may incur as a result of information with inadmissible content that you have submitted to us.

3. What do we process your data for (purpose of processing) and on what legal basis?

The information you provide will be used as a basis for decision-making for the selection process for your application. In the case of an online application, your consent is required for the processing of your data (Art. 6 para. 1a GDPR), in the case of applications in another form, the processing is carried out on the basis of Art. 88 GDPR in conjunction with § 26 BDSG.

4. Who gets my data?

Your data will be sent to the MiRO employees of the HR department responsible for processing and coordinating the application as well as to the responsible supervisor involved in the selection process. In addition, the works council has access to the applicant data. Your data will not be passed on to third parties.

5. Is there automated decision-making?

The decision does not take place in an automated process.

6. How long will my data be stored?

In the event of rejection, your application will be deleted after 90 days, otherwise it will be transferred to the personnel file.

7.  Welche Datenschutzrechte habe ich?

If you want to use your data or If you would like to change or delete your CV, simply log in to the applicant portal with your username and password and use the corresponding functions under the menu item EXTRAS. Your application data will then be physically deleted and can no longer be recovered.

According to Articles 15 to 22 GDPR, you have the following rights: a right to access the personal data stored about you, to data portability and to rectification of incorrect data. If the legal requirements are met, you also have the right to erasure, restriction of processing and objection.

If you have any questions or concerns about the processing of your data, you can contact MiRO's data protection officer using the contact details above. If, after consultation, you believe that the processing of your data is not lawful, you have the right to complain to the supervisory authority in accordance with Article 77 GDPR.

 

Status as of 03.04.2025