Data privacy in the application process

Thank you for your interest in our website and a career at WTS. Protecting your personal data is very important to the WTS Group. With this privacy policy, we would like to inform you in accordance with the provisions of the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 - hereinafter referred to as "GDPR") about the processing of your personal data when using our Applicant Portal, which is available at: https://wts.wd3.myworkdayjobs.com/wts (hereinafter referred to as "Applicant Portal").

If you wish to contact us for any reason other than an application, please refer to the WTS privacy policy, which is available at the following link: https://wts.com/de-en/data-protection

1. Data Controller

The Applicant Portal is provided by the following controller:

WTS Group AG
Friedenstraße 22
81671 Munich
Tel.: +49 (0) 89 286 46-0
Fax: +49 (0) 89 286 46-111
Email: info@wts.de

WTS Group AG is represented by its Management Board: Tax Consultant Fritz Esterer, Dipl.-Oec. (Chairman), Auditor/Tax Consultant Franz Prinz zu Hohenlohe, StB Ulrike Schellert, Tax Consultant Jürgen Scholz.

If you apply for a specific advertised position, the company advertising the position shall also be responsible with regard to data protection, provided that this is a different company from WTS Group AG. Details of the applicable responsible company are available via the link given below in this section 1.

If you submit an unsolicited application, WTS Group AG will be controller regarding the processing of your respective personal data. If you specify specific companies in your unsolicited application, these companies will also be responsible for processing your personal data. Without a specification, your personal data as described in this privacy policy may also be passed on to other companies in the WTS Group, which would then also be controller(s) under data protection law. The latter also applies to being added to the Talent Pool.

Further details on the possible companies are available via the following link:  https://wts.com/de-en/company-information

The responsible company(ies) (hereinafter also referred to as "WTS", "we" or "us") would like to inform you in the following about the processing of your personal data in the Applicant Portal and about the application process in general.

2. Data Protection Officer

Group Data Protection Officer of WTS is

Dr. Thorsten B. Behling - Attorney at Law (Germany)
WTS GmbH
Sachsenring 83
50677 Cologne, Germany
email: thorsten.behling@wts.de

except for the following companies: WTS PRETAX GmbH, WTS RET GmbH, FINVIA WTS Vermögenscontrolling GmbH, First Council GmbH, Gesellschaft für internationale Zusammenarbeit im Bereich des Steuerrechts mbH, WTS Brühmüller GmbH and WTS Legal Rechtsanwaltsgesellschaft mbH. For the latter company, in deviation from the data protection officer named above, Timo Meisener (Attorney at Law Germany) WTS Legal Rechtsanwaltsgesellschaft mbH, Klaus-Bungert-Str. 7, 40468 Dusseldorf, e-mail: timo.meisener@wts-legal.de Germany is appointed as data protection officer.

3. Categories of personal data that we process

When using our Applicant Portal, as well as when contacting or corresponding with us in this respect, we will process the personal data or data categories listed in the following:

a. Access and use of the Applicant Portal (page access, own cookies and web analysis, IP address)

• IP address (sometimes in truncated form only)
• Information about the browser type and its version
• The operating system of your end device
• Your internet service provider
• Date and time of access
• Websites from which you accessed our website
• Websites that you access via our website
• Cookie data (e.g. pseudonymous cookie ID, length of time on our Applicant Portal, page views, movement via links), unless and insofar as you should prevent this, as explained in section 7.b.aa
• Content shared by you (if applicable)

For details on the processing, please see section 7.b.aa and the subsections thereof.

b. Applications via the WTS Applicant Portal or sending documents by post or email (also by personnel service providers)

• Key personal details (e.g., title, first name, last name, date of birth)
• Address details (e.g., street, house number, post code, city, country)
• Contact details (e.g., mobile phone number, email address)
• Skills (e.g., foreign languages, additional knowledge)
• Application or profile data (e.g., cover letter, curriculum vitae, certificates, earliest starting date, desired activity, desired locations, salary expectations, how you found out about us)
• Details of contact persons for a reference
• Information about current remuneration, pension and benefit arrangements
• Information on areas of interest
• Link to professional networks, such as to a XING or LinkedIn profile
• Bank details for travel expenses, if applicable
• Portrait photo
• Your consent to be added to the Talent Pool
• Your consent for us to contact references named by you and, if applicable, information from correspondence with these references.
• Your consent to the forwarding of your profile to us by a personnel service provider or of a contract between you and the personnel service provider

The information you provide may include special categories of personal data pursuant to Art. 9 GDPR, which is subject to special protection. If an employment contract is concluded, the personal data that you have provided to us during the application process will generally be transferred to the personnel file, provided this is permissible.

If you send us personal applicant data by email, for example in attachments, please ensure appropriate encryption, as data transmission by email is not secure and can possibly be read by third parties.

4. Sources of processed personal data

In principle, we only collect personal data about you from yourself. Should this be different in exceptional cases, we will inform you separately. As part of the processing of personal data on our Applicant Portal, we receive the data from the person who enters it into the respective form. If you transmit personal data regarding third parties to us (e.g. as a personnel service provider), you are obliged to comply with all data protection requirements, especially those defined in Articles 5 to 9 and 12 et seq. GDPR. Otherwise, we have no intention of collecting this data and reserve the right to take legal action against you.

5. Storage duration

The personal data received or collected will only be stored for as long as necessary to fulfil the purpose associated with its storage (e.g., making a decision on whether to conclude an employment contract and, if applicable, for implementing and terminating an employment relationship). If this purpose no longer applies, we usually delete or anonymize the data, provided that and insofar as the deletion does not contravene any legitimate retention purposes and obligation (e.g. stipulations from tax or professional law)or social security law). In the latter case, the data will only be processed to a limited extent, i.e., only to fulfil the retention purpose or the retention obligation and otherwise only with your consent, to assert, exercise or defend legal claims, to protect the rights of another natural or legal person or for reasons of important public interest of the European Union (EU) or an EU member state. If a retention obligation applies, we will delete or anonymize the data after the storage obligation has safely ceased to exist.

Especially, we routinely delete personal data collected during the application process six months after a rejection. However, it will not be deleted after this period if you have given us your consent to be added to our Applicant Pool, as described in this privacy policy. In this case, your data will be deleted twelve months after being added to the Applicant Pool, unless you have communicated to us that we may store the data for a longer period of time, expressly consented to continued storage or you are already taking part in an application process at this point in time. In the latter case, your data will be deleted six months after completion of the application process, provided that and insofar as the data is not required for the implementation (and subsequent termination) of the employment relationship. In addition, your data may be stored for 36 months if you have given us consent to include you in our Talent Pool. In the context of our Applicant Management Lists, we store the data for 12 months after we have received the data or had contact accordingly.

6. Purposes for processing personal data

We adhere to the principle of purpose limitation and only process your personal applicant data for the purposes described in this privacy policy. When you visit our Applicant Portal, it is not legally or contractually required that you actively provide personal details. However, we do process certain data in individual cases by using our own cookies. You can find further information on this in section 7.b.aa.

We use the personal data you provide for the following purposes:

• Processing your inquiry(ies) / application(s) (e.g., via our Applicant Portal)
• Deciding on whether to conclude an employment contract and, if applicable, also on the conclusion, implementation and termination thereof;
• Corporate and/or group management (e.g., budget planning and reporting);
• Compliance with legal requirements (e.g., for the fulfilment of social (insurance) and tax (retention) obligations as well as the implementation of compliance management including compliance audits);
• Privacy and security management and audits.

7. Legal basis for the processing incl. details on the processing purposes

The basis for the processing of personal data is the GDPR, the German Federal Data Protection Act (hereinafter referred to as BDSG) and other European and German regulations and laws.

a. Overview of the legal bases

The following list gives you an overview of the existing or applicable legal bases according to the GDPR and BDSG, which we may refer to when processing your data:

Legal basis	Description / Grounds
Consent Art. 6 (1) s. 1 a) GDPR, in case of special categories of personal data Art. 9 (2) a) GDPR, in case of employees and applicants Art. 88 GDPR in conjunction with section 26 (2) BDSG, in case of special categories of personal data in conjunction with section 26 (3) and section 22 (2) BDSG	This legal basis applies if you have consented to us processing your data for one or several purposes (e.g., being added to our Applicant and/or Talent Pool, contacting references). If you have given us your consent, you have the right to withdraw this consent at any time with effect for the future (see section 10.i). Lawfulness of processing of your data up to the time of the withdrawal is not affected by the withdrawal.
Fulfilment of a legal obligation Art. 6 (1) s. 1 c) GDPR	This legal basis permits us to process your data if this is necessary to fulfil a legal obligation (e.g., social (insurance) or tax law obligations) to which we are subject.
Legitimate own interests or legitimate interests of third parties Art. 6 (1) s. 1 f) GDPR	In some cases, we also base the processing of personal data on our legitimate interests or the legitimate interests of third parties. All legal, economic and non-material interests that are not condemned by the legal system are considered as legitimate interests. Examples of our legitimate interests are the forwarding of application documents to various WTS companies in the case of unsolicited applications, in order to be able to fill vacancies quickly and in the best possible way, as well as the processing of the required data when accessing our Applicant Portal.
Decision on the conclusion of an employment contract, as well as its conclusion, implementation and termination, if applicable. Art. 6 (1) s. 1 b) GDPR or resp. Art. 88 GDPR in conjunction with section 26 (1) s. 1 BDSG. In the case of special categories of personal data, Art. 9 (2) b) and, if applicable, c), f) and h) GDPR, in the case of employees and applicants, Art. 88 GDPR in conjunction with section 26 (2) BDSG, in the case of special categories of personal data in conjunction with section 26 (3) and section 22 (1) and (2) BDSG	If you apply to us, e.g., via our Applicant Portal, we will process your data for making a decision on whether to conclude an employment contract with you and, if applicable, for the conclusion, implementation and termination thereof.   We may process special categories of your personal data if and to the extent that this is necessary, in particular to comply with existing obligations under employment and social security law or to exercise corresponding rights, to assert, exercise or defend legal claims, for the purposes of occupational medicine or to assess fitness for work.

 

b. Detailed information about processing purposes

aa. Access and use of the Applicant Portal (page access, own cookies and web analysis, IP address)

(i) Communication with the Applicant Portal through page views

For technical reasons, our Applicant Portal automatically records the IP address of the end device you are using when you access it. We base this processing on Art. 6 (1) s. 1 f) GDPR. The processing of this data is mandatory for accessing our Applicant Portal, as the data on our Applicant Portal can only be sent to your browser using the IP address. Our legitimate interest is to provide you with a fully functioning Applicant Portal. In addition, further data (such as information about the browser type and its version, the operating system of your end device, your Internet service provider, the date and time of access, websites from which you have accessed our website, websites that are accessed by you via our website) are collected by us and stored in log files. This is also done to protect our legitimate interests in accordance with Art. 6 (1) s. 1 f) GDPR. Our legitimate interest is to ensure the security of our Applicant Portal.

(ii) Use of cookies

We use cookies on our Applicant Portal. Cookies are small data packets that are generated by our web server and stored on your computer's hard drive when your computer communicates with the web server.

A distinction must be made between session cookies, which are used for the mere functionality of our Applicant Portal and are deleted immediately after the browser is closed, and cross-session cookies (persistent cookies), which are stored and used beyond the session. We use the following cookies on our Applicant Portal:

Type of cookie	Name of the cookie	Purpose of the cookie	Validity
Session Management Cookie	PLAY_LANG	The cookie stores information about the user, the end device and a session ID together with a timestamp to end the session in case of inactivity.	Current session
Language selection cookie	timezoneOffset	The cookie is used to save the selected language for the page.	Current session
Routing cookie	PLAY_SESSION	The cookie is used to forward continuous requests to the same server, thereby ensuring consistency of use.	Current session
Routing cookie	wday_vps_cookie	The cookie is used to balance the server load, thereby ensuring consistency of use.	Current session
Application security cookie	TS014c1515	The cookie is used to ensure the security of our Applicant Portal, for example, use of the firewall.	Current session

 

(iii) Blocking cookies

You can exercise your right to reject cookies at any time. For this purpose, you can, among other things, set your browser so that it does not accept any cookies or so that you have to accept the setting of a cookie individually. Please refer to the help function of your browser for more details. You can also delete existing cookies via your browser. If you do not accept the cookies, or delete existing cookies, you may not be able to use all the functions of the Applicant Portal.
 

bb. Applications via the WTS Applicant Portal or sending documents by post or email (also by personnel service providers)

If you apply to WTS via our Applicant Portal, we will process the types of data mentioned in section 3.b. The information you provide must be truthful. We will only process other types of data than those mentioned in section 3.b if and to the extent that they contribute to proving your suitability for a specific position. This especially applies to information entered in free text fields. If this is not the case, we have no intention of collecting this data.

(1) Applications for specific positions

If you apply for a specific advertised position, the tendering WTS entity will process your personal data. You can also find further details in section 1 above. In this respect, the applicable company will process your data for the purpose of deciding on whether to conclude an employment contract with you and, in the event of a positive decision, also for the conclusion, implementation and termination thereof. Unless explained otherwise below, this is based on Art. 6 (1) s. 1 b) GDPR resp. Art. 88 GDPR in conjunction with section 26 (1) s. 1 BDSG.

(2) Unsolicited applications

If you submit an unsolicited application, WTS Group AG will be controller regarding the processing of your respective personal data. If and to the extent that they process your personal applicant data in order to decide on whether to conclude an employment contract with you, and in the event of a positive decision also for the conclusion, implementation and termination of the employment, this will be done on the basis of Art. 6 (1) s. 1 b) GDPR resp. Art. 88 GDPR in conjunction with section 26 (1) s. 1 BDSG, unless explained otherwise below.

If the WTS Group AG does not have a suitable vacancy, it is also possible that your personal data will be transmitted to other companies in the WTS Group (see section 1) and to WTS Legal Rechtsanwaltsgesellschaft mbH, which may have suitable vacancies. This is done on the basis of a legitimate interest of the aforementioned companies, within the meaning of Art. 6 (1) s. 1 f) GDPR, in order to be able to fill vacancies with suitable candidates as quickly as possible. You can object to a transfer of this data, as explained in section 10.g. The applicable company will then process your personal applicant data to decide on whether to conclude an employment contract with you and, in the event of a positive decision, also for the conclusion, implementation and termination thereof. Unless explained otherwise below, this is based on Art. 6 (1) s. 1 b) GDPR resp. Art. 88 GDPR in conjunction with section 26 (1) s. 1 BDSG.

(3) Applicant Pool

You can also have your application for a specific position added to our Applicant Pool. This gives you the opportunity to have your application viewed by other WTS companies and WTS Legal Rechtsanwaltsgesellschaft mbH as controllers regarding data protection or forwarded to them if they have a vacancy that matches your details. If such a position is available, you may be contacted by the applicable WTS company or by WTS Legal Rechtsanwaltsgesellschaft mbH, informed about the position and invited in for an interview. Your application will only be added to the Applicant Pool with your express consent in accordance with Art. 6 (1) s. 1 a) GDPR in conjunction with section 26 (2) BDSG, which we may ask you for separately and which you can send to us by email. This consent reads as follows:

"I consent to my application data being stored in the WTS Applicant Pool regularly for 12 months and therefore being viewed by other companies of the WTS Group as well as WTS Legal Rechtsanwaltsgesellschaft mbH and used for their own job placements. I may therefore be contacted by these companies in the event of suitable vacancies. Longer storage will only take place if I communicate this to the WTS accordingly. I can withdraw this consent at any time with effect for the  future, as explained in the privacy policy for the application process. The lawfulness of processing of my data up to the time of the withdrawal is not affected by the withdrawal. I have taken notice of the precise details of the processing of my data, as well as my rights concerning the data processing, as explained in the privacy policy for the application process, as referenced."

You have the right to withdraw your consent at any time with effect for the future., as explained in section 10.i. Irrespective of this, you have the option of having us delete your profile in the Applicant Pool at any time. To do so, please contact: recruiting@wts.de

(4) Talent Pool:

You have the option of being included in the WTS Talent Pool. This gives you the opportunity to receive interesting information and developments at WTS, for example if you are still studying or in training. This may include information about current positions at WTS that may be relevant to you. For inclusion in the talent pool, we require your first and last name, your e-mail address and your postal address. We do not require any other data, in particular as mentioned in section 3.b, for inclusion in the talent pool. Nevertheless, you have the option of providing us with relevant information so that we can take this into account in our communications with you (e.g. regarding suitable positions). Inclusion in the talent pool will only take place with your express consent pursuant to Art. 6 para. 1 s. 1 a) GDPR in conjunction with section 26 (2) BDSG. We may ask you separately for this consent, which you can provide to us by e-mail. This reads as follows:

"I consent that my first and last name, as well as my contact and address data, as well as any other data I may provide to WTS will be stored in the Talent Pool of WTS for 36 months. I may therefore be contacted by the companies of WTS Group and by WTS Legal Rechtsanwaltsgesellschaft mbH in the event of suitable vacancies. I may revoke this consent at any time with effect for the future, as explained in the data protection information for the application process. This does not affect the lawfulness of the processing until my revocation. I have taken note of the details of the processing in the data protection information for the application process, as linked."

(5) References:

If you are applying for a position at "Senior Manager", "Director" or "Partner" level, we may ask you to provide references and your express consent that we may contact these persons in the further course of the application process to finalise our decision. In this respect, the processing is based on Art. 6 (1) s. 1 a) GDPR in conjunction with section 26 (2) BDSG, in the case of special categories of personal data in conjunction with section 26 (3) and section 22 (2) BDSG. You will receive the consent text at the applicable time. Giving your consent is voluntary. If you do not give us your consent, this will not result in any disadvantages for you.

(6) Applicant Management Lists

In addition to the processing described above, we may store your first and last name and, if applicable, address and contact data (including, if applicable, contact data via professional networks) in applicant management lists. The reason for this storage is to be able to track which applicants we have already contacted in which context and from where we have received your data (e.g. recruiters). The purpose of the storage is to be able to check when and by which means we last contacted you and to be able to check whether we have already received information about you elsewhere. In this way, we want to avoid contacting you more than once, e.g. for the same positions, even though you do not want us to do so. The legal basis for this is our legitimate interest within the meaning of Art. 6 (1) s. 1 f) GDPR. Our legitimate interest in this regard is to ensure efficient and professional communication with applicants as well as in having an overview of the sources of third-party data collection in order to avoid multiple data collection and contacting.

(7) Apply with LinkedIn

If you are registered with LinkediIn, you can also use the “Apply with LinkedIn” function and have our applicant questionnaire filled out with the information you have stored on LinkedIn. If you want to use the “Apply with LinkedIn” function, you can click the “Apply with LinkedIn” button which will automatically fill in the requested application fields with your LinkedIn profile data and make your LinkedIn profile available to WTS. Your applicant data will then be transmitted to us. This includes in particular your name, current position and other information from your LinkedIn profile. You can edit all pre-filled information and/or answer additional questions before submitting the final application.

8. Recipients or categories of recipients of personal data

We may pass on personal data - if and to the extent permitted - to the following recipients:

• Public entities to which the data must be transmitted by law (e.g. financial authorities, supervisory authorities, social insurance carriers, professional associations, possibly prosecution authorities),
• Banks, insurance companies,
• Affiliated companies of WTS Group AG and WTS Legal Rechtsanwaltsgesellschaft mbH,
• Other group companies and departments of the WTS Group involved in completing the respective tasks (e.g., human resources, IT, information security, data protection),
• WTS Global Vereniging, Rotterdam, the Netherlands and its member firms,
• External contractors (service companies, such as IT service providers, recruitment companies, etc.),
• Possibly third-party companies in the event that a company of the WTS Group should merge with another business or company or be acquired by another such company in the future.

9. Transfer of personal data to third countries

Basically, we do not transfer personal data which we collect via our Applicant Portal to countries outside the European Union or the European Economic Area (third countries). If data is transferred to third countries as necessary for contract performance, for internal communication or administration or because a service provider is based in a third country, this is always subject to prior detailed checking and assessment by our Data Protection Officer. It is also only implemented if, at the site in the third country, an adequate level of data protection is ensured or appropriate safeguards grant an adequate level of data protection (Art. 45 et seq. GDPR) or, exceptionally, when neither an adequacy decision nor appropriate safeguards apply (Art. 49 (1), subparagraph 1 GDPR). If and insofar as you would like to receive further information on the guarantees in individual cases, you are welcome to contact our Data Protection Officer named in section 2.

10. Your rights with respect to data processing

You have the following rights with respect to us, as explained below, granted by Art. 15 to 21 GDPR, as well as the right to withdraw a consent declared with respect to us at any time and the right to lodge a complaint to the supervisory authorities. You can exercise your rights form-free vis-à-vis the company/ies named in section 1, either directly using the contact details specified in section 1 or via our Data Protection Officer, whose contact details can be found in section 2. If you inadvertently address your request to a company named or referenced in section 1 which is not responsible for the processing of your personal data, this will in principle have no influence on the timely and appropriate handling of your request. With the exception of any transmission or connection charges, this will be done free of charge for you.

a. Right to access (Art. 15 GDPR)

You have the right to obtain confirmation from us whether or not and which personal data relating to you is being processed by us: With regard to this data in particular, you can obtain information about the purposes related to the processing (sections 6 and 7), the categories of data that we process (section 3), the categories of recipients (section 8) and our intention to transfer the data to recipients in a third country (section 9). The information also includes information about the origin of the data, unless it was collected from you. You furthermore have the right to obtain a copy of the personal data which is subject of the processing, insofar as the rights and freedoms of other persons with respect to their personal data are adversely affected.

b. Right to rectification (Art. 16 GDPR)

You have the right to obtain from us the rectification without undue delay of inaccurate personal data concerning you. You have furthermore the right to obtain completion of incomplete personal data, considering the purposes of the processing - also by means of a supplementary statement.

c. Right to erasure (Art. 17 GDPR)

You have the right to obtain from us erasure of your personal data without delay if one of the following grounds applies and none of the exceptions listed below the grounds applies:

• The data processed by you is no longer necessary for the purposes explained in this data protection information.
• You have withdrawn your consent (see also Section 10. i) and we do not have any other legal basis for processing your data.
• The data was processed unlawfully.
• Deletion is required for compliance with a legal obligation in union or member state law which we are subject to.
• You have objected to the processing of your data by us (see also Section 10. g) and we do not have any overriding legitimate reasons for the processing of your data.

However, we do not have to or may not comply with your deletion request if one of the following reasons exists:

• The processing is necessary for exercising the right to freedom of expression and information.
• The processing is necessary to comply with a legal obligation imposed on us under European Union or member state law (e.g. statutory storage obligations).
• The processing is necessary to assert, exercise, or defend legal claims.
• The processing is necessary for reasons of public interest in the field of public health.

d. Right to restriction of the processing (Art. 18 GDPR)

You have the right to obtain from us the restriction of the processing of your personal data. In particular, you are entitled to this right if one of the following reasons applies:

• You contest the accuracy of your data.
• The processing of the data is unlawful and you oppose the erasure of the data.
• We do not need your data any longer, however you still require it for the establishment, exercise or  defence of legal claims.
• You have objected to the processing (see section 10.g) and we are still assessing whether our legitimate grounds for processing outweigh your legitimate grounds for objecting.

e. Right to notification (Art. 19 GDPR)

If you have claim from us to rectify or erase your data or to restrict their processing, we are obliged to inform all recipients to whom your personal data was disclosed to carry out the rectification, or deletion of the data or the restriction of the processing, unless this proves impossible or involves disproportionate effort. You have likewise the right with respect to us to be informed of these recipients.

f. Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit it to another controller, as far as you have provided this data to us based on consent or a contract, and the data is processed by automated means. You have the right to have the data transmitted directly from us to the other controller, as far as this is technically feasible and the rights and freedoms of other persons are not adversely affected.

g. Right to object (Art. 21 GDPR)

You have the right to object to the processing of personal data concerning you at any time, for reasons related to your particular situation, as far as the processing of this data is based the necessity for the purposes of the legitimate interests pursued by us or those by a third party, or for the performance of a task that is in the public interest.

You can object to the processing of your data for direct marketing purposes at any time with effect for the future. We will always follow your objection. However, please note that we cannot exclude the possibility that we may no longer be able to recall advertising material in individual cases if we receive your objection at a time when the release of this advertising material has already been unstoppably initiated by us. In such a case, however, we will of course exclude you from the release of any future advertising material.

 h. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You are entitled to lodge a complaint with a competent data protection supervisory authority at any time, for example at your place of residence or at the place of the alleged infringement. Among others, the following data protection supervisory authority is responsible for the WTS Group AG:

Bayerisches Landesamt für Datenschutzaufsicht
(Bavarian State Office for Data Protection Supervision)
Promenade 27
91522 Ansbach
Germany
https://www.lda.bayern.de

However, this does not mean that you have to address your complaint to this authority.

i. Right to withdraw consent

If and to the extent that you have given us your consent to process your data, you have the right to withdraw this consent at any time with effect for the future. The withdrawal does not affect the lawfulness of the processing carried out on a consensual basis up until the time of withdrawal; rather, the withdrawal only affects the lawfulness of future processing.

11. No obligation to provide data by yourself

There is no legal or contractual obligation to provide us with your personal data. However, if you for example technically prevent us from receiving data that is required to use our Applicant Portal, it is possible that you will not be able to use our services or that you will only be able to use them to a limited extent.

The provision of your personal applicant data as part of an application is necessary for the decision on whether to conclude an employment contract with you (and in the case of a positive decision also for the conclusion, implementation and termination thereof). Failure to provide this data may result in our not being able to make a (positive) decision.

Provision of your personal data during subsequent communication with us is also voluntary. However, without the required information, especially contact details, it will not be possible for us to process your request and/or contact you.

12. Automated decision making, including profiling, as defined by Art. 22 GDPR

Your personal applicant data will not be used for automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR. However, if these data are used, we provide meaningful information about the logic, extent and intended effects of such processing for the data subject.

13. Data security

We have technical and organisational security measures in place to protect your personal data from unintentional or unlawful deletion, alteration, loss or unauthorised disclosure or access.

14. Status and amendments to this privacy policy

This privacy policy corresponds to the status indicated below. We reserve the right to amend this privacy policy. We would therefore like to ask you to consult the privacy policy on a regular basis so that you can find out about any changes.

 

Status: December 2024