What sources and data do we use?

We process the data you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our companies) and to carry out the application process.

This personal data includes in particular:

  • Personal details (e..B. name, address and contact details)
  • Information on qualifications (e.B. training, professional experience, language skills and further training)

What do we process your data for (purpose of processing) and on what legal basis?

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 of the German Data Code (BDSG). It allows the processing of data necessary in connection with the decision to establish an employment relationship.

Insofar as an employment relationship between you and us arises, we may, in accordance with Section 26 (1) of the German Data Protection Act (BDSG), process the personal data already received from you for the purposes of the employment relationship, if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations arising from a law.

It may happen that we cannot take you into account directly when filling a position, but still want to keep your application so that we can contact you quickly if necessary. Should this happen, we will ask for your consent in accordance with Section 26 (2) of the German German Environmental Protection Act (BDSG) in order to be able to include your application in our application pool for a certain period of time. If you give us this consent, this can be revoked informally at any time.

Should your data be necessary for legal proceedings after the application process has been completed, processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular for the protection of legitimate interests under Art. 6 sec. 1 lit. f GDPR. Our interest then is in asserting or defending claims, for example in the context of the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Who gets my data?

Your applicant data will be screened by the HR department upon receipt of your application. Appropriate applications are then forwarded internally to the department managers for the respective open position. The further process is then reconciled. In the company, only the persons who need it for the proper conduct of our application process have access to your data.

Is data transferred to a third country or to an international organisation?

Data transfers to agencies outside the European Economic Area (so-called third countries) usually do not take place. Nevertheless, data transfer in third countries may take place in individual cases, provided that:

  • it is required by law to:
  • you have given us your consent or
  • this is legitimised by the legitimate interest in data protection law and does not prevent the higher interests worthy of protection of the data subject.

In addition, we do not transfer personal data to agencies in third countries or international organisations.

However, we use service providers for certain tasks, which usually also use service providers who may have their registered office, parent company or data centers in a third country. A transfer is permitted if the European Commission has decided that there is an adequate level of protection in a third country (Article 45 GDPR). If the Commission has not taken such a decision, we or our service providers may only transfer personal data to a third country if appropriate safeguards exist (e.B. standard data protection clauses adopted by the EU Commission or the supervisory authority in a particular procedure) and enforceable rights and effective remedies are available.

An example of this is our use of Microsoft Office 365 as an enterprise-wide communication system. Although Microsoft also operates servers within the EU, it cannot be ruled out that your data may be transferred to and processed in a third country (e.B. the UNITED States).

We have concluded a contract processing agreement with Microsoft under Article 28 GDPR with EU clauses in order to maintain an adequate level of data protection. If necessary, please contact us for further information under the contact details above.

We have concluded corresponding order processing contracts with our service providers and have also contractually agreed that there must always be guarantees on data protection with their contractual partners in compliance with the European data protection level.

How long will my data be stored?

We will retain your personal data for as long as is necessary to decide on your application. If you are awarded a job as part of the application process, your applicant data will be transferred to our personnel information system.

If we are unable to take you into account directly for filling a position and you consent to further storage of your personal data, we will transfer your data to our applicant pool. There, your data will be deleted after the agreed period (usually 12 months) or after your withdrawal of consent.

Insofar as an employment relationship between you and us does not arise, we may also store data insofar as this is necessary to defend against possible legal claims. This usually includes six months after the announcement of the cancellation or until the final decision in a pending litigation.

Is there an obligation to provide data?

The provision of your personal data is neither required by law nor contract, nor is you obligated to provide such data. However, the provision of this data is necessary for the examination of a possible employment relationship  with us. Without this data, we will not be able to perform this check in order to: to enter into or perform an employment relationship with you.

To what extent is there automated decision-making?

We do not use automatic decision-making in accordance with Article 22 GDPR to establish, implement and terminate the working relationship. Should we use these procedures in individual cases, we will inform you about this and your rights in this regard separately, if this is required by law.

Is profiling taking place?

We do not process your data with the aim of evaluating certain personal aspects automatically.