We are pleased that you are interested in our company and have applied for a position.
We process the data you shared with us in connection with your application in order to verify your suitability for the job and to carry out the application process.
Below, we inform you how we handle your information, what data protection measures we have taken to safeguard your data and which rights you are entitled to when it comes to the processing of your data in our organization.
Who is responsible for the processing of your data?
The controller in accordance with Art. 4 no. 7 of the EU General Data Protection Regulation (GDPR) is:
Schwetzinger Str. 19
Who is our Data Protection Officer (DPO)?
You can contact our data protection officer at any time by sending an email to firstname.lastname@example.org or by mail to the above mentioned address of the organization (Attn. DPO).
What types of data are we processing and on what legal basis?
We process the data we need in the context of your application. This can be your contact details, all data related to the application (such as your curriculum vitae, certificated, qualification).
Legal basis for the processing of your data for the purposes of the application process is Art. 6 (1) lit. b GDPR. According to the latter provision, the processing of data is permitted, when required in connection with the decision on whether or not to establish an employment relationship.
In certain cases, the processing of data may be required also after the completion of the application process, for example for legal prosecution or on a basis of other legitimate interest of the company, Art. 6 (1) lit. f GDPR.
How long do we keep your data?
In case your application has been rejected, your data will be deleted after 6 months.
In case your application hasn´t been successful, but we are interested in your application and would like to keep it in our applicant pool, we are going to ask for your permission to do so. If you agree, your data will be deleted after another 2 years.
In latter case, we process your information based on your consent and you have the right to withdraw your consent at any time. Your data will then no longer be processed for the purposes covered by the consent (applicant pool). Please note, that the lawfulness of the processing, which took place prior the revocation of your consent, remains unaffected. You can revoke your consent by giving a notice to us, e.g. via email at email@example.com. We then would delete your data without undue delay, unless we are entitled to further processing on other legal basis (for example, because the data are needed for the assertion, exercise or defence of legal claims).
If a contract of employment is concluded, the data collected during the application process will be included in your personnel file.
Where do we store your data?
Your data will be stored on our servers and processed on our internal IT systems, exclusively within the EU. Our technical and organizational measures protect the data against unauthorized access or data loss and are constantly revised and improved in accordance with the technical development.
Do we disclose your data to third parties?
The selection process is being conducted internally, at one or more of our location in the EU. Your data will only be accessed by employees who are obliged to maintain confidentiality.
Right to information and access: You have the right to access the data we have stored about you as a person and to request a copy.
Right to rectification: You can require us to correct or complete inaccurate or incomplete data.
Right to erasure: You can require us – provided that the legal grounds are in place – to erase your data.
Restriction of processing: Provided that the legal requirements are in place, you can require us to restrict the processing of your data.
Data portability: If you have provided us with data on the basis of a contract or your consent, and as long as there are legal grounds, you can require us to send you the data you gave us in a structured, commonly used and machine-readable format, or you can require us to send your data to a different controller.
Objection to data processing on the legal basis of “legitimate interest” under Article 6 (1) lit. f GDPR: If there are reasons arising from your specific situation, you are entitled to object to our processing of your data at any time, provided that such an objection has its legal basis in a “legitimate interest”. If you make use of your right to object, we shall discontinue the processing of your data, unless we can – within the parameters of the law – demonstrate compelling legitimate grounds for further processing, outweighing your own rights.
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
If you have questions about privacy, rights or claims to your personal data, please contact our Data Protection Officer (contact details see above).
Last updated: 02.01.2020
get in touch
Schwetzinger Str. 19
Tel: +49 6204 7050 0
Fax: +49 6204 7050 515