Processing of (personal) data by the entity in charge of the online application process

Processing of (personal) data by the entity in charge of the online job application procedure

General information
This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.

The controller
The controller under data protection law is:
[Company name & legal form]
[Company address]
Phone: [phone number]
Commercial register entry number: [entry number]
Registration Court:  [name of registration court]
Data Protection Officer: [ name and contact details of the Data Protection Officer, if applicable]

Personal data collected as part of the application process
Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in) directly associated with your real-life identity is not personal data.

Fundamentals and purposes of processing personal data collected from application documents and during the application process
If you apply to us electronically, ie via e-mail or using our online form, we will collect and process your personal data for the purpose of executing the application process and preparing contracts.
By submitting an application via our recruitment website, you express your interest in taking up work with us. In this context, you transmit personal data, which we will use and store exclusively for the purpose of your job search / application process.
In particular, the following data is collected during this process:
name (first and last names)
e-mail address
phone number
LinkedIn profile (optional)
channel through which you found us
Furthermore, you can choose to upload expressive documents such as a cover letter , your CV and reference letters. These may contain additional personal data such as date of birth, address etc.
Only authorized HR staff and / or staff involved in the application process have access to your data.
The personal data is stored, as a rule, exclusively for the purpose of filling the vacancy for which you have applied.
Your data will be stored for a period of  [number] days after the application process has been concluded. This is usually done to fulfill legal requirements and / or defending ourselves against any claims arising from legal provisions. After this period, we are obligated to delete or anonymize your data. In case of anonymization, the data will only be available to us in the form of so-called metadata, without any direct personal reference, for statistical analysis (for example, share of male and / or female applicants, number of applications per specified period of time etc.).
Furthermore, we reserve the right to store your data for  [number] days after the application process has been concluded for the purpose of adding it to our Talent Pool in order to identify any other vacancies that may be of interest to you. This includes, for example, applications for apprenticeships or internships. By accepting the data privacy statement, you consent to any further storage of your data as well as its inclusion in our Talent Pool.
Should you be offered and accept a position with us during the application process, we will store the personal data collected as part of the application process for at least the duration of your employment.

Disclosure of data to third parties
Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a human resource and applicant management software solution ( https://www.personio.com/legal-notice/ ). In this context, Personio is our processor under article 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio.

Rights of data subjects
If we as the controller process personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access ( article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR.
To assert your rights as a data subject in relation to the data processed during this online application process, please refer to our Data Protection Officer (see item 2).

Concluding provisions
We reserve the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.
In addition to this data privacy statement, please view our general data privacy statement at  [link to own data privacy statement] .

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio GmbH, which offers a software solution for the management of human resources and candidates ( https://www.personio.com/legal-notice/). The data that is transmitted as part of the job application will be transferred via TLS encryption and will be stored in a database. The sole controller of this data under article 24 of the GDPR is the company that carries out the selection process and the online job application. Personio's work is limited to the operation of the software and this personnel selection website and, in this area, he acts as a processor in accordance with article 28 of the RGPD. In this case, Personio's processing is based on an order processing agreement between the controller and Personio. In addition, Personio GmbH processes additional data, some of which may be considered personal, to provide its services, in particular for the operation of this recruitment website.

The data controller

The controller under data protection law is:
Personio GmbH
Rundfunkplatz 4
80335 Munich
Telephone: +49 89 1250 1005
Registration number in the Commercial Register: HRB 213189
Registration court: Amtsgericht München (Munich local court)
Information on contact of the data protection officer : datenschutz@personio.de

Access logs ("server logs")

All accesses to this recruitment website lead to the automatic collection of general protocol data, which are called server logs. As a rule, these data are pseudonyms and, therefore, do not allow deductions that could lead to the identification of a natural person. Without this data, it would be technically impossible in some cases to offer or display the content of the software. In addition, the processing of these data is strictly necessary from the point of view of security, in particular, for the access, the introduction, the transfer and the control of the preservation of the information. Also, this anonymous information can be used for statistical purposes and for the optimization of services and technology. The log files can also be checked and analyzed retrospectively when illicit use of the software is suspected. The legal basis for this section is set out in section 15, subsection 1 of the German telecommunications law (TMG) and also in article 6 (1, f) of the GDPR. In general, data is collected, such as the domain name of the website, the web browser and its version, the operating system, the IP address and also the time stamp of access to the software. The scope of this registration procedure does not exceed any scope of registration of any other site on the Internet. Access logs are stored for a maximum period of seven days. The right of opposition is not contemplated in this case. The legal basis for this section is set out in section 15, subsection 1 of the German telecommunications law (TMG) and also in article 6 (1, f) of the GDPR. In general, data is collected, such as the domain name of the website, the web browser and its version, the operating system, the IP address and also the time stamp of access to the software. The scope of this registration procedure does not exceed any scope of registration of any other site on the Internet. Access logs are stored for a maximum period of seven days. The right of opposition is not contemplated in this case. The legal basis for this section is set out in section 15, subsection 1 of the German telecommunications law (TMG) and also in article 6 (1, f) of the GDPR. In general, data is collected, such as the domain name of the website, the web browser and its version, the operating system, the IP address and also the time stamp of access to the software. The scope of this registration procedure does not exceed any scope of registration of any other site on the Internet. Access logs are stored for a maximum period of seven days. The right of opposition is not contemplated in this case. such as the domain name of the website, the web browser and its version, the operating system, the IP address and also the timestamp of access to the software. The scope of this registration procedure does not exceed any scope of registration of any other site on the Internet. Access logs are stored for a maximum period of seven days. The right of opposition is not contemplated in this case. such as the domain name of the website, the web browser and its version, the operating system, the IP address and also the timestamp of access to the software. The scope of this registration procedure does not exceed any scope of registration of any other site on the Internet. Access logs are stored for a maximum period of seven days. The right of opposition is not contemplated in this case.

Error logs

So-called error logs are generated in order to identify and repair errors. They are absolutely necessary to ensure that we can react as quickly as possible to problems that occur in the display and implementation of the content (legitimate interest). As a rule, these data are pseudonyms and, therefore, do not allow deductions that could lead to the identification of a natural person. The legal basis for this section is set out in section 15, subsection 1 of the German telecommunications law (TMG) and also in article 6 (1, f) of the GDPR. When an error message occurs, general data is collected, such as the domain name of the website, the web browser and its version, the operating system, the IP address and also the timestamp at the time the respective error or specification message occurs. These log errors are stored for a maximum period of seven days. The right of opposition is not contemplated in this case.

Use of cookies

So-called cookies are used in various sections of this recruitment website. They are small text files that are stored on the device with which the website is accessed. As a general rule, cookies are used to promote secure access to a website ("absolutely necessary"), implement certain functionalities, such as standard language settings ("functionality"), improve user satisfaction or website performance. ("Performance") or set targeted advertisements ("advertising"). On this recruitment website, we generally use only cookies that are strictly necessary and related to functionality or performance, especially for the implementation of certain default settings, such as language, to identify the channel that advertises the job offer or to analyze the performance of a job offer advertisement through which a user has accessed the recruitment website. The use of cookies is absolutely necessary to provide our services and, therefore, to comply with the contract (article 6 [1, b] of the RGPD). Retention period: maximum one month or until the end of the browser session Right of opposition: it can be determined through the browser settings if the use of cookies is allowed or rejected. It must be taken into account that the deactivation of cookies may cause the functionalities of this personal selection site to be limited or blocked. The use of cookies is absolutely necessary to provide our services and, therefore, to comply with the contract (article 6 [1, b] of the RGPD). Retention period: maximum one month or until the end of the browser session Right of opposition: it can be determined through the browser settings if the use of cookies is allowed or rejected. It must be taken into account that the deactivation of cookies may cause the functionalities of this personal selection site to be limited or blocked. The use of cookies is absolutely necessary to provide our services and, therefore, to comply with the contract (article 6 [1, b] of the RGPD). Retention period: maximum one month or until the end of the browser session Right of opposition: it can be determined through the browser settings if the use of cookies is allowed or rejected. It must be taken into account that the deactivation of cookies may cause the functionalities of this personal selection site to be limited or blocked. It can be determined through the browser settings whether the use of cookies is allowed or rejected. It must be taken into account that the deactivation of cookies may cause the functionalities of this personal selection site to be limited or blocked. It can be determined through the browser settings whether the use of cookies is allowed or rejected. It must be taken into account that the deactivation of cookies may cause the functionalities of this personal selection site to be limited or blocked.

Rights of data holders

Personio GmbH, as the controller of the processing of personal data, and the owners of the data have certain rights under Chapter III of the General Data Protection Regulation (GDPR) of the EU, depending on the legal grounds and of the purpose of the processing. Specifically, the right of access (article 15 of the GDPR), the right of rectification (article 16 of the GDPR), the right of erasure (article 17 of the GDPR), the right to restriction of processing (article 18 of the GDPR), the right to the transferability of information (article 20 of the RGPD) and also the right of opposition (article 21 of the RGPD). If personal data is processed under the consent of the data subject, you also have the right to withdraw such consent under article 7 III of the GDPR.

Final provisions

Personio reserves the right to amend this declaration on the protection of personal data at any time in order to ensure that it is in line with current legal requirements or in order to adapt to changes in the services offered, for example , when new services are introduced. In this case, the new data protection statement will take effect on all uses of this recruitment page or on all subsequent job applications.