Who is responsible for the processing of data?

Your employer is responsible for the processing of your personal data. You can find the contact details of the controller and, if applicable, the data protection officer in your company’s privacy information.

For what purpose is your data processed?

The competency matrix serves the structured recording and assessment of competencies. The results are used to create result reports and to prepare and conduct feedback and personnel development discussions. The processing is based on the data protection provisions applicable to the employment relationship as well as the General Data Protection Regulation (GDPR). No decision-making based solely on automated processing or profiling within the meaning of Art. 22 GDPR takes place.

What data is processed?

As part of the competency analysis, the following personal data in particular is processed:

• Name
• Organizational unit and function
• Information provided in the questionnaire
• Self-assessment and assessment by others
• Result reports
• Technical log data (e.g., time of completion)

Who has access to the data?

Access to the personal data is granted exclusively to the respective responsible manager, where applicable authorized employees of the HR department, and authorized employees of Kalusche Consulting, insofar as this is necessary for the technical implementation, administration, evaluation, creation of result reports, and support of the personnel development process. The technical implementation of the competency analysis is carried out via LamaPoll. Kalusche Consulting processes the personal data solely on behalf of your employer in accordance with Art. 28 GDPR.

How long is the data stored?
The personal data is stored only for as long as necessary for carrying out the competency analysis, creating the result reports, and the subsequent personnel development processes. It is then deleted or anonymized in accordance with the retention periods agreed with your employer, unless legal retention obligations prevent this.

What rights do you have?
You have the statutory rights to information, rectification, erasure, and restriction of processing, as well as — provided the legal requirements are met — the right to object. You also have the right to lodge a complaint with a data protection supervisory authority.