Privacy information for employees and applicants (as of 10/2026)

This is an English translation of our German privacy information, provided for your convenience. In the event of any discrepancy, the German version prevails: German version

The following information shows how we handle your data:

Controller responsible for data processing

Süsse Labortechnik GmbH & Co. KG
Kasseler Straße 76
34281 Gudensberg

Telephone: 05603 5020
E-mail: info@suesse.de

If you have any questions about data protection, please feel free to contact us at any time using the contact details above.

Purpose and legal basis of data processing

We process your data on the basis of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other laws relevant to us in terms of data protection.

Employment relationship

For our applicants and employees, we store the information necessary for personnel administration and carry out payroll accounting:

master data and contact details
health data
payroll data
social security data
family circumstances
application data
contract data
time recording data
training data
travel data

The data is processed on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG. Without the provision of the necessary data, it is not possible to carry out and administer the employment relationship. In addition, we may also be legally obliged to process personal data. In that case, the data processing takes place on the basis of Art. 6(1)(c) GDPR. Where special categories of personal data within the meaning of Art. 9 GDPR are processed (e.g. health data), the legal basis is Section 26(3) BDSG or Art. 9(2)(b) GDPR in conjunction with Art. 6(1)(b) GDPR.

As a rule, we collect the data from the data subject. In addition, data may be collected via internet research, social networks, etc.

Furthermore, data processing may be necessary to ensure occupational safety, to defend against breaches of duties under the employment contract, or to carry out occupational integration management (betriebliches Eingliederungsmanagement). If you use a company pension scheme offered by us, data is also processed in this area.

As a rule, personal data of employees is stored for the duration of the employment relationship. There may be special rules in individual areas. Where statutory retention obligations exist, we must take them into account.

In the case of applicants, the data is deleted six months after the end of the application process. In exceptional cases, we also store the data for longer if the applicant has consented to this or if statutory retention periods make this necessary.

In the application process, we generally receive your data directly from you by e-mail or by post, or through your details or the documents you have uploaded on the job board used, indeed.

Where the job board transmits further data to us, such as data from your applicant profile or technical information, the job board's data protection information must be observed.

Where there are no statutory retention obligations, personal data may be deleted if its further processing is no longer necessary for carrying out or terminating the employment relationship.

Microsoft 365

We use Microsoft 365 for internal data processing and management, and for communication with customers and business partners. In this context, the names and business contact details of employees are stored in this system. The basis for this is our legitimate interest under Art. 6(1)(f) GDPR in organising data storage and collaboration within the company.

On a voluntary basis, you have the option of adding a profile picture, further contact details and private information to your Microsoft profile yourself. If you do so, we regard this as your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time. To do so, delete the data you added yourself. If you need support with this, please feel free to contact us.

Please note that this data can be viewed not only by colleagues but also by customers and business partners.

IT security

As part of our security measures, we keep various logs in IT systems. These serve, on the one hand, for troubleshooting where required and, on the other hand, as evidence of data collection, modification and deletion. The following data is logged for this purpose:

device data
access data
user data

The legal basis is, on the one hand, our legitimate interest under Art. 6(1)(f) GDPR in the secure operation of IT systems and, on the other hand, legal requirements under Art. 6(1)(c) GDPR to ensure the integrity, confidentiality and availability of data (accountability).

As a rule, log data for IT security is deleted after four weeks at the latest. Log data in connection with accountability is deleted in accordance with the applicable statutory requirements. In justified cases of suspicion, data may also be retained until the matter has been clarified.

Access control

To secure the building and to manage access, we use a transponder system with which the entrance doors can be opened. On the basis of our legitimate interest in administering and checking access pursuant to Art. 6(1)(f) GDPR, data on the transponder and on its uses/accesses, including times, is logged.

As a rule, log data is deleted after 180 days at the latest. Log data in connection with accountability is deleted in accordance with the applicable statutory requirements. In justified cases of suspicion, data may also be retained until the matter has been clarified.

Birthday list

We keep a birthday list of all employees with names and dates of birth, with the aim of promoting the working atmosphere through congratulations and gifts. This list can be viewed by all employees. The legal basis is the employees' consent under Art. 6(1)(a) GDPR.

Recipients of personal data

We only pass on your data to third parties if this should become necessary to fulfil the purpose. Furthermore, data may be passed on to authorities and social insurance institutions on the basis of statutory provisions in accordance with Art. 6(1)(c) and (e) GDPR. Data may likewise be passed on to customers and other business partners to the extent necessary for business purposes.

For the handling of our accounting, payroll accounting, the preparation of balance sheets and other tax matters, data is passed on to our external tax adviser to the extent necessary for business purposes. In various cases, processors pursuant to Art. 28 GDPR may be used who receive data from us or may have access to your data in connection with their service. In this context, data may also be transferred outside the EU. In doing so, we ensure that either an EU adequacy decision pursuant to Art. 45 GDPR exists for the country of destination concerned, or we have concluded a contract with the service providers concerned on the basis of the standard data protection clauses pursuant to Art. 46(2)(c) GDPR. You can find these here: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de.

Your rights

You have the following rights vis-à-vis us with regard to the personal data concerning you:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

Data protection officer

We have appointed an external data protection officer:

Stefan Pietsch

Can be reached via:

Pietsch IT GmbH
Wilhelmshöher Straße 1
34590 Wabern

Telephone: 05683-923440
E-mail: datenschutz@pietsch-it.de
Website: www.pietsch-it.de

Currency and amendment of this privacy information

This privacy information is currently valid (see the date in the heading). As a result of the further development of our offerings or due to changes in statutory or official requirements, it may become necessary to amend this privacy information.

Further privacy information

Further privacy information for other target groups or topics can be found at: https://www.suesse.de/en/datenschutz.