Data protection applicants
Data
The categories of data that we process in connection with your application are those specified by you. The categories of personal data processed include, in particular, your name, your contact details, your qualification data, your certificates and supporting documents. In addition, we may process personal data in the application process that we have legitimately obtained from publicly accessible sources (e.g. professional networks).
We process your personal data exclusively in connection with the application in compliance with the statutory provisions. The data processing serves the purpose of personnel selection. The primary legal basis for this is Art. 6 para. 1 b) GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 BDSG. As a rule, your data may also be processed for statistical purposes. This is always done in anonymized form.
As special categories of personal data pursuant to Art. 9 para. 1 GDPR, the indication of severe disability may be processed in the context of personnel selection. This is done on the basis of Art. 9 Para. 2 b) GDPR in conjunction with § 26 para. 3 BDSG.
We also collect and process personal data that you provide to us voluntarily. These fields marked as voluntary or optional do not have to be filled in. This data is processed on the basis of your revocable consent in accordance with Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR in conjunction with § 26 para. 2 BDSG.
Talent pool
If you are not hired but your application is still of interest to us, we may ask you whether we may retain your application for future vacancies. This longer retention period is based on your revocable consent in accordance with Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR in conjunction with § 26 para. 2 BDSG. Inclusion in our talent pool is voluntary and failure to grant the corresponding consent has no effect on other ongoing application procedures.
We store applications that we have included in the talent pool for 1 year. The documents will then be deleted. We will retain your declaration of consent for inclusion in our talent pool for 3 years in order to comply with our accountability obligations within the meaning of Art. 5 para. 2 GDPR.
Receiver
The recipients of your personal data within our company are the managers of the department responsible for filling the position and the responsible HR employees, the representative body for severely disabled employees (if a severe disability is specified) and the responsible works council.
We may use service providers who are strictly bound by our instructions and who support us in areas such as IT or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded. You can request a list of the contractors and service providers we use from the HR department.
Automated decision making
Since the decision on your employment relationship is not based exclusively on automated processing, there is no automated decision in individual cases within the meaning of Art. 22 GDPR.
Data deletion
If there is no statutory retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired.
We therefore regularly delete your personal data as follows:
- The application profile you have created will remain active as long as you are in an application process. Once all application procedures have been completed, your profile will be saved for a further 6 months. It will then be completely deleted.
- If you decide to withdraw an application, you can do so at any time until the company has made a negative decision. Your application will then be deleted immediately.
- In the event of a negative decision by the company, your application will be stored for a further 6 months. Your application will then be completely deleted.
We also delete data if you withdraw your consent to the processing of your data.
In individual cases, individual data may be stored for longer (e.g. travel expense reports). The duration of storage then depends on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years). Further storage of your data is also permitted if further processing is necessary for the assertion, exercise or defense of legal claims after we have weighed up your interests.
Your rights
- As an applicant, you have the right:
- to request information about the personal data stored about you and to the information listed in detail in Art. 15 GDPR.
- to request the correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data (Art. 16 GDPR)
- To request that personal data concerning you be deleted if it is no longer required for the application process and legal obligations. The specific reasons are listed in detail in Art. 17 GDPR (right to deletion).
- To request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has objected to processing, for the duration of the examination by the controller.
- to request the release of data in a readable electronic format that you have provided electronically (Art. 20 GDPR)
- If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements despite your revocation (see “Data deletion” for more information).
- Right of objection
In cases in which we process your personal data on the legal basis of Art. 6 para. 1 sentence 1 lit. e or f GDPR, you have the right to object at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (Art. 21 GDPR).
If you have any questions regarding data protection and to assert your rights as a data subject, please contact us first: dataprotection@cellcentric.net
Furthermore, as a data subject, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you infringes data protection regulations (Art. 77 GDPR). The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of the data subject’s habitual residence, place of work or place of the alleged infringement.
Our data protection officer:
We are supported by our data protection officer in the fulfillment of our data protection obligations. In the event of an inquiry, please name the company in question. The contact details of our data protection officer are
FIRST PRIVACY GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Tel.: +49 421 69 66 32-0
Fax: +49 4217 69 66 32 81
E-Mail: office@first-privacy.com
Web: https://www.dsn-group.de/