When you apply for a job in our company, we process and store your personal data.
We take your privacy very seriously and would therefore like to inform you at this point about how we handle your applicant data.
1. Purpose of data collection
Before you join our company or during the application process, we process your personal data exclusively for the purpose of establishing a contractual relationship to the extent necessary.
Types of data processed by us
The following types of personal data are regularly processed:
- Applicant data; name date of birth, CV, nationality/work permit, etc. for selection, recruitment, entry and exit management,
- private contact data; address, telephone number, e-mail (for contact purposes),
- Data within the scope of personnel screening (e.g. police clearance certificate, background check (ZUP));
- If applicable, data subject to professional secrecy; e.g. data on health suitability and any restrictions
- Other data in personnel administration: severe disability (if relevant), driver’s licence ownership.
We do not require any information from you that is not usable under the General Equal Treatment Act (AGG) (race, ethnic origin, gender, pregnancy, details of physical or mental illness, membership of a trade union, religion or belief, disability, age, sexual identity or sex life) unless relevant to the advertised vacancy.
We ask that you do not submit such data to us. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, ancillary copyrights or other intellectual property rights, personal rights, press law or general rights of third parties).
2. Legal basis for processing
- For the establishment, implementation and termination of a contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR in conjunction with. § Section 26 BDSG (version as of 25.5.2018),
- for the fulfilment of a legal obligation pursuant to Art. 6 (1) lit. c GDPR,
- in the case of processing to protect a legitimate interest pursuant to Art. 6 (1) lit. f GDPR,
- as well as on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, insofar as your consent is given to an extended retention of your applicant data by means of our “talent pool” (see also section “Deletion periods”).
- If data that is not absolutely necessary for the purpose, such as hobbies in your CV, is transmitted to us by you voluntarily, this is also done on the basis of your consent. The legal basis is Art. 6 para. 1 lit. a GDPR. We would like to point out that the transmission of this data is generally not required for the conclusion of a contract or the continuation of an existing contract.
3. Our legitimate interests in this are, for example, the following:
- the optimisation of the application processes
- achieving efficiency gains by bundling services in individual Group companies (in particular personnel, IT),
- ensuring compliance with safety regulations, requirements, industry standards and contractual obligations,
- asserting, exercising or defending legal claims,
- to prevent damage and/or liability to the company by taking appropriate measures.
- If data that is not absolutely necessary for the purpose, such as hobbies in your CV, is transmitted to us by you voluntarily, this is also done on the basis of your consent. The legal basis is Art. 6 para. 1 lit. a GDPR. We would like to point out that the transmission of this data is generally not required for the conclusion of a contract or the continuation of an existing contract.
4. Categories of recipients
- Internal recipients according to the “need to know” principle,
- Companies affiliated under company law (group companies) as joint controllers: The essential contents of the regulation of the tasks in relation to the rights of data subjects can be requested at the contact address given, However, according to Art. 26 (3) GDPR, these rights can be claimed by data subjects from all companies involved.
- We also use external service providers to handle our application process. These service providers have been carefully selected by us, commissioned in writing and are bound by our instructions. Corresponding agreements on commissioned processing in accordance with Art. 28 GDPR have been concluded.
Otherwise, no data is passed on to third parties, unless we are obliged to do so by law (disclosure to external bodies such as supervisory authorities or law enforcement agencies).
5. Transfers to third countries
Your personal data will not be transferred to a third country or to an international organisation.
6. Automated decision making / profiling
There is no automated decision-making or profiling pursuant to Art. 22 (1) and (4) GDPR.
7. Deletion periods
After the respective purpose has been achieved, your data will be deleted. However, data will be retained for as long as is necessary for the defence of legal claims. The storage period is usually 6 months.
If you have given your consent to the storage of your personal data for other job advertisements within our group, your data will be transferred to our “talent pool” in order to be able to send you information on suitable vacant positions. Your data will be stored in our “talent pool” for 12 months and then automatically deleted.
If your profile was transmitted to us by a personnel service provider and this service provider has commission claims, the storage period may last until these claims are fulfilled or become statute-barred. If accounting-relevant processing has been carried out, such as the reimbursement of travel expenses, the data required for this will be deleted in compliance with the statutory retention periods, usually 6 or 10 years.
If the application is successful and we conclude a contract with you, we transfer the data collected during the application process to our personnel file.
8. Information on your rights
If your personal data is processed, you are a data subject within the meaning of the GDPR. As a data subject, you have various rights, such as the right to information, correction and deletion. You can find comprehensive information on your rights as a data subject in our comprehensive data protection declaration under the section “Information on your rights”.