Privacy notice for applicants
We are pleased that you are interested in us and are applying, or have applied, for a position at our company. Below we would like to give you information about the processing of your personal data in connection with your application.
Who is responsible for data processing?
The controller within the meaning of data protection law is:
IITR Datenschutz GmbH, Dr. Sebastian Kraska, Marienplatz 2, 80331 Munich, email: email@iitr.de, phone: 089-18917360.
Which of your data do we process? And for what purposes?
We process the data you have sent us in connection with your application
in order to assess your suitability for the position (or, where applicable, other open positions at
our company) and to carry out the application process.
What is the legal basis for this?
The legal basis for processing your personal data in this
application procedure is primarily Section 26 BDSG in the version in force since 25 May 2018.
Under that provision, the processing of data is permitted where it is necessary in connection with the
decision on entering into an employment relationship.
Should the data be required after the application procedure has ended for the purpose of pursuing legal claims,
processing may take place on the basis of the conditions set out in Art. 6
GDPR, in particular to safeguard legitimate interests under Art. 6(1)
(f) GDPR. Our interest then lies in asserting or defending against
claims.
How long is the data stored?
In the event of a rejection, applicants' data is deleted after 6 months.
If you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There, the data is deleted after two years.
If you are offered a position as part of the application procedure,
the data will be transferred from the applicant data system to our human resources information system.
To which recipients is the data disclosed?
We use a specialised software provider for the application process. This provider
acts as a processor on our behalf and may, in connection with the maintenance and
servicing of the systems, also gain knowledge of your personal data. We
have concluded what is known as a data processing agreement with this provider, which
ensures that the data processing takes place lawfully.
Once your application is received, your applicant data is reviewed by the HR department.
Suitable applications are then forwarded internally to the managers responsible
for the respective open position. The next steps are then agreed. Within the
company, in principle only those people have access to your data who need it for
the proper conduct of our application procedure.
Where is the data processed?
The data is processed exclusively in data centres in the Federal Republic of
Germany.
Your rights as a "data subject"
You have the right to information about the personal
data we process about you.
In the case of a request for information that is not made in writing, we ask for your understanding
that we may then require evidence demonstrating that you are the person you
claim to be. You also have a right to rectification or erasure, or to restriction of processing, insofar as you are legally entitled to it. You further have a right to object to processing within the scope of the statutory provisions. The same applies to a right to data portability.
Right to lodge a complaint
You have the right to lodge a complaint about our processing of personal data with
a data protection supervisory authority.
Our data protection officer
We have appointed a data protection officer within our company. You can reach
her using the following contact details: