Applicant data protection information
in accordance with Art. 13, 14 GDPR
Below you will find information about the processing of your personal data as an applicant or potential applicant for a vacancy advertised by us and the rights you have under the GDPR in respect of us. You will be sent an electronic or hard copy on request. Simply contact us using our contact details below for this purpose.
1. Data controller
The data controller for collection and processing of data is reichert & reichert, Tac Consultancy and Law Firm, Zeppelinstraße 7, 78224 Singen, Germany. You can contact us by telephone on +49 (0)7731 9587-0 or by email at firstname.lastname@example.org.
2. Contact details of the data protection officer
The contact details for our data protection officer are: address as above, FAO The Data Protection Officer. You can contact our data protection officer by telephone on +49 (0)7731 9587-0 or by email at email@example.com.
3. Processing of personal data
We collect and process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other legislation relevant to the processing of personal data and data protection.
Categories of data: Relevant personal data may include, alongside your master data (e.g. name, title, gender), contact details (e.g. email, telephone numbers) and address data (e.g. street, town/city, country), all data connected to the application (e.g. cv, references, qualifications, answers to questions, etc.), image data and any correspondence conducted with you in the context of the selection process. In the context of job interviews via a video conferencing system, we also process any audio, video and chat content, your IP address, the name of the meeting, any password, profile image, device/hardware information, start and end and duration of the video conference and any personal data you provide during the conference.
Purpose of processing: In the context of the application process and the decision justifying employment, we collect and process only those personal data which we require for the selection of a person who meets the requirements profile for the vacancy. In the context of a job interview over the telephone or by video conferencing systems, we process your data to conduct the interview and send you an invitation link via email. If you are not appointed but we are permitted to retain your application for future vacancies, we store your data in an encrypted storage location.
Legal basis: In the context of the selection process, we collect and process your personal data on the basis of Section 26 BDSG in conjunction with Art. 88 GDPR. We process your personal data in accordance with Art. 6(1) point (c) GDPR so that we can meet our legal obligations. Legal obligations relate, for example, to statutory retention periods under tax law, the Equal Opportunities Act and the Social Codes. The legal basis for processing for the purposes of a job interview via video call and retention of your application is your consent pursuant to Art. 6(1) sentence 1 point (a) GDPR.
Categories of recipients: Within our company, those persons are given access to your data who require them in the context of the applicant selection process or to fulfil our contractual or legal obligations. Your personal data may be transferred by us to third parties (e.g. postal services for delivery of letters, telecommunications service providers) if there is a legal basis for the data processing. In addition, we may pass your data on to commissioned data processors who are bound by our instructions (e.g. IT service providers for remote maintenance and support, hosting providers, computer centres, etc.).
Data sources: We process the personal data that we receive from our applicants in the application process. Insofar as is necessary to assess the suitability of the applicants for the vacancy, we also process personal data that we have acquired legitimately from publicly accessible sources (e.g. the press, media, career-based social networks, the internet) and that we are permitted to process. We may ask you to present a work permit or residence permit. This will happen only insofar as is necessary to verify and assess the lawfulness of potential employment.
Transfer to third countries: Your personal data are not transferred to countries outside the EU/EEA. It may be, however, that our service providers use servers, for example, which are based in a third country. In these cases, transfer of your personal data is permissible only if the European Commission has established an appropriate level of protection in the third country in question or insofar as suitable guarantees are provided, such as the adoption of standard data protection clauses of the Commission or the supervisory authority, and the data subject has enforceable rights and effective legal remedies at their disposal. Our service providers are contractually obliged to comply with the above requirements.
Obligation of provision: As a matter of principle, we collect only those data that we will require in the context of the application process and the decision justifying employment or the collection of which is prescribed by law or contract or is necessary. Without those data, we will not normally be in a position to process your application or consider it in the context of the application process. Insofar as we ask you to provide personal data voluntarily, there are no negative consequences associated with not providing those data. In individual cases, failure to provide such information may, however, make communication more difficult or delay it.
Period of storage: If you are not appointed, the data processed in the context of the selection process will be erased at the latest 4 months from conclusion of the selection process, otherwise when the legal obligation ceases to apply and any resulting periods for claims expire. If we have received your consent to retain your application documents, we erase your data when that consent is withdrawn or at the latest 18 months from receipt of your consent.
4. Your rights as a data subject
You have the right in respect of us to information about the personal data stored concerning you and to rectification of incorrect data and to erasure, if one of the reasons specified in Art. 17 GDPR applies, e.g. if the data are no longer required for the purposes pursued. You also have the right to restriction of processing if one of the conditions under Art. 18 GDPR applies and the right to data portability in cases covered by Art. 20 GDPR. Under Art. 22 GDPR, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or otherwise significantly disadvantages you. If you consider that the processing of personal data relating to you infringes the provisions of data protection law, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. The right to lodge a complaint may be pursued, in particular, with a supervisory authority in the Member State in which you reside or which is the place of the alleged infringement. In Baden-Württemberg, the Supervisory Authority of the Regional Officer for Data Protection and Freedom of Information, Königsstraße 10a, 70173 Stuttgart, is responsible.
5. You right to withdraw consent
You have the right to withdraw consent that you have given at any time, without affecting the lawfulness of the processing carried out up to that point. If you withdraw your consent, we cease the corresponding data processing and erase your data that are processed for this purpose, unless you have expressly consented to further use of your data or there is a legal basis for further processing.