When you apply for a job in our company, we process and store your personal data.

We take your privacy very seriously and would therefore like to inform you at this point about how we handle your applicant data.

Purpose of data collection

Before you join our company or during the application process, we process your personal data exclusively for the purpose of establishing a contractual relationship to the extent necessary.

Types of data processed by us

The following types of personal data are regularly processed:

  • Applicant data; name date of birth, CV, nationality/work permit, etc. for selection, recruitment, entry and exit management,
  • private contact data; address, telephone number, e-mail (for contact purposes),
  • Data within the scope of personnel screening (e.g. police clearance certificate, background check (ZUP));
  • If applicable, data subject to professional secrecy; e.g. data on health suitability and any restrictions
  • Other data in personnel administration: severe disability (if relevant), driver’s licence ownership.

We do not require any information from you that is not usable under the General Equal Treatment Act (AGG) (race, ethnic origin, gender, pregnancy, details of physical or mental illness, membership of a trade union, religion or belief, disability, age, sexual identity or sex life) unless relevant to the advertised vacancy.

We ask that you do not submit such data to us. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, ancillary copyrights or other intellectual property rights, personal rights, press law or general rights of third parties).

Legal basis for processing

  • For the establishment, implementation and termination of a contractual relationship pursuant to Art. 6 para. 1 lit. b GDPR in conjunction with. § Section 26 BDSG (version as of 25.5.2018),
  • for the fulfilment of a legal obligation pursuant to Art. 6 (1) lit. c GDPR,
  • in the case of processing to protect a legitimate interest pursuant to Art. 6 (1) lit. f GDPR,
  • as well as on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, insofar as your consent is given to an extended retention of your applicant data by means of our “talent pool” (see also section “Deletion periods”).
  • If data that is not absolutely necessary for the purpose, such as hobbies in your CV, is transmitted to us by you voluntarily, this is also done on the basis of your consent. The legal basis is Art. 6 para. 1 lit. a GDPR. We would like to point out that the transmission of this data is generally not required for the conclusion of a contract or the continuation of an existing contract.

Our legitimate interests in this are, for example, the following:

  • the optimisation of the application processes
  • achieving efficiency gains by bundling services in individual Group companies (in particular personnel, IT),
  • ensuring compliance with safety regulations, requirements, industry standards and contractual obligations,
  • asserting, exercising or defending legal claims,
  • to prevent damage and/or liability to the company by taking appropriate measures.

Categories of recipients

  • Internal recipients according to the “need to know” principle,
  • Companies affiliated under company law (group companies) as joint controllers: The essential contents of the regulation of the tasks in relation to the rights of data subjects can be requested at the contact address given, However, according to Art. 26 (3) GDPR, these rights can be claimed by data subjects from all companies involved.
  • We also use external service providers to handle our application process. These service providers have been carefully selected by us, commissioned in writing and are bound by our instructions. Corresponding agreements on commissioned processing in accordance with Art. 28 GDPR have been concluded.
    Otherwise, no data is passed on to third parties, unless we are obliged to do so by law (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Transfers to third countries

Your personal data will not be transferred to a third country or to an international organisation.

Automated decision making / profiling

There is no automated decision-making or profiling pursuant to Art. 22 (1) and (4) GDPR.

Deletion periods

Once the respective purpose has been fulfilled, your data will be deleted. However, applicant data will generally be retained for a period of six months after completion of the respective application process, insofar as this is necessary for the establishment, exercise or defence of legal claims, and will then be automatically deleted unless renewed consent for further retention has been provided.

If your application is successful and we enter into a contract with you, the data collected during the application process will be transferred to your personnel file.

Information on your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR. As a data subject, you have various rights, such as the right to information, correction and deletion. You can find comprehensive information on your rights as a data subject in our comprehensive data protection declaration under the section “Information on your rights”.