Applicants
What sources and data do we use?
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.
This personal data includes in particular:
- Personal details (e.g. name, address and contact details)
- Information on qualifications (e.g. education, work experience, language skills and further training)
What do we process your data for (purpose of processing) and on what legal basis?
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. According to this, the processing of data that is required in connection with the decision on the establishment of an employment relationship is permissible.
Insofar as an employment relationship is established between you and us, we may further process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee interest representation resulting from a law.
It may happen that we are unable to consider you for a position immediately, but would still like to keep your application so that we can contact you quickly if necessary.Should this occur, we will ask for your consent in accordance with Section 26 (2) BDSG to include your application in our application pool for a certain period of time. If you give us this consent, it can be revoked informally at any time.
Should your data be required for legal prosecution after completion of the application process, processing may take place on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f DSGVO.Our interest then consists of asserting or defending claims, for example within the scope of the duty of proof in proceedings under the General Equal Treatment Act (AGG).
Who gets my data?
Your application data will be reviewed by the HR department after receipt of your application. Suitable applications will then be forwarded internally to the person responsible for the respective open position. Subsequently, the further procedure is coordinated. In principle, only those persons in the company have access to your data who need it for the proper conduct of our application procedure.
Is data transferred to a third country or to an international organisation?
As a rule, no data is transferred to countries outside the European Economic Area (so-called third countries). Nevertheless, data transfer to third countries may take place in individual cases, insofar as:
- it is required by law,
- you have given us your consent or
- this is legitimised by the legitimate interest under data protection law and no higher interests of the data subject worthy of protection conflict with this.
Furthermore, we do not transfer any personal data to bodies in third countries or international organisations.
However, we use service providers for certain tasks, most of which also use service providers that may have their registered office, parent company or data centres in a third country. A transfer is permitted if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR). If the Commission has not made such a decision, we or our service providers may only transfer personal data to a third country if appropriate safeguards are in place (e.g. standard data protection clauses adopted by the EU Commission or the supervisory authority in a specific procedure) and enforceable rights and effective remedies are available.
An example of this is our use of Microsoft Office 365 as a company-wide communication system. While Microsoft also operates servers within the EU, it cannot be ruled out that your data may be transferred to a third country (e.g. the USA) in this context and processed there.
We have concluded an order processing agreement with Microsoft in accordance with Art. 28 DSGVO with EU standard contractual clauses to maintain an appropriate level of data protection. Please feel free to contact us at the above contact details for further information on this if required.
We have concluded corresponding order processing contracts with our service providers and have also contractually agreed that
How long will my data be stored?
We store your personal data for as long as is necessary for the decision on your application. If you are accepted for a position during the application process, your applicant data will be transferred to our personnel information system.
If we are unable to consider you for a position immediately and you consent to the further storage of your personal data, we will transfer your data to our applicant pool. Your data will be deleted there after the agreed period of time (usually 12 months) or after you revoke your consent.
If an employment relationship between you and us does not materialise, we may also continue to store data insofar as this is necessary to defend against possible legal claims. This usually includes six months after notification of the rejection or until the final decision in a pending legal dispute.
Is there an obligation to provide data?
The provision of your personal data is neither legally nor contractually required, nor are you obliged to provide this data. However, the provision of this data is necessary for the examination of a possible employment relationship with us. Without this data, we are not in a position to carry out this examination in order to conclude or execute an employment relationship with you, if applicable.
To what extent is there automated decision-making?
We do not use automatic decision-making pursuant to Article 22 of the GDPR for the establishment, implementation and termination of the working relationship. Should we use these procedures in individual cases, we will inform you separately about this and about your rights in this regard, insofar as this is required by law.
Does profiling take place?
We do not process your data with the aim of automatically assessing certain personal aspects.
