Privacy Notice for Applicants
Dear Applicant,
Thank you for your interest in applying for a position with us.
This Privacy Notice serves to inform you about how we process your personal data when you apply for a position with us, as well as your rights under applicable data protection laws, and how you can exercise such rights.
Who we are
All references to ‘we’, ‘us’ or ‘the company’ in this Privacy Notice refer to the following organisation:
Gesellschaft zur Forschung, Entwicklung und Distribution von Diagnostika im Blutspendewesen mbH
Altenhöferallee 3
60438 Frankfurt am Main
+49 69 400 5513-0
jobs@gfeblut.de
www.gfeblut.de
Our role in processing your personal data
When you submit a job application to us, we act as the data controller of the personal data processed in relation to your application. This means that we are responsible for deciding how we collect, use and store information about you regarding your application.
Personal data processed as part of your application
Personal data we collect to assess your suitability for the position
As part of the application process, we will only process data that is related to your application. This includes the following (‘Application File Data’):
- Personal Identification Information: Includes your fist name, last name, title.
- Contact Information: Your address, email address, and phone numbers.
- Professional Information: Employment history, qualifications, CV, cover letter, interview notes, and results from any assessments or tests.
- Any additional personal data which you share with us during the course of email communications.
Purposes and legal basis for processing
We only process your personal data when we have a lawful basis and a legitimate purpose for doing so. In particular, we process your personal data for the following purposes and under the following legal bases:
Purpose | Categories of data | Legal Basis |
Assessing suitability for the position being applied for | Application File Data | Contract (Art. 6(1)(b) GDPR) |
Implementation of pre-contractual measures | Application File Data | Contract (Art. 6(1)(b) GDPR) |
Inclusion in the applicant pool with your consent | Application File Data | Consent (Art. 6(1)(a) GDPR) |
Verifying your right to work | Right to Work Data | Legal obligation (Art. 6(1)(c) GDPR and Article 9(2)(b) GDPR in conjunction with the Residence Act (Aufenthaltsgesetz) and the Employment Ordinance (Beschäftigungsverordnung) |
Assertion, exercise of defence of legal claims | Application File Data | Legitimate interests – Art. 6(1)(f) GDPR, Art. 9(2)(f) GDPR |
Please note:
- Where your data is processed under the performance of a contract or for a legal obligation, if you do not provide the data requested, we will be unable to advance your application.
- Where we process your personal data under the legitimate interests legal basis, you have the right to object to the processing of your personal data. Whether your objection is successful will depend on a balancing of interests assessment, weighing the legitimate interests in question against your individual rights and interests.
Sources of your personal data
Most of the information we collect about you during the application process is provided directly by you.
In addition to personal we collect directly from you, we also collect personal data from the following sources:
- Professional social networks
Who we share your personal data with
We only transfer your personal data to external recipients if you have consented or if this is permitted by law.
Service providers
As with most organisations, we use service providers which help us to manage your application. When we use these service providers, it is necessary for us to share your personal data with them.
We use the following service providers, with whom your personal data is shared:
Service | Provider | Reason why your data is shared | Location of data processing |
Microsoft Outlook | Microsoft Ireland Operations Limited, Privacy Notice | We use Microsoft Outlook for communicating with you via email. | Ireland |
We have agreements in place with all our service providers that we share your data with that oblige them to protect your data.
International Data Transfers
Where your data is transferred outside of the EU, we make sure that your data is the given the same level of protection, either because that country have a comparable data protection standard (Adequacy), or by using another safeguard such as an enhanced contractual agreement (i.e. Standard Contractual Clauses).
Duration of the storage of personal data
We will delete your personal data as soon as the purposes for storing it mentioned under the ‘Purposes and legal bases for processing’ section above no longer apply or you object to the use of your personal data (in the case of processing on the basis of legitimate interests) or you revoke your previously given consent. However, your personal data may also be stored beyond this, in particular in the following cases:
- if deletion conflicts with contractual, legal (in particular from HGB, StGB and AO) or statutory retention periods.
- for the assertion, exercise or defence of legal claims
- if this is required under European or national law for the fulfilment of a legal obligation to which we are subject.
Unsuccessful applications
Insofar as an employment relationship between you and us is not established, your personal data will be deleted from the system no later than six months after the termination of the process.
Successful applicants
In the event of employment in our company, your personal data will be deleted following the termination of your employment. In the event that your personal data may be relevant and necessary to retain for the purpose of the assertion, exercise or defence of legal claims, relevant data will be retain for a further period corresponding to the relevant statutory limitation periods.
Your rights
You have the following rights under the General Data Protection Regulation:
- right to be informed about how your data is used;
- right of access to your personal data;
- right to correction or rectification of your data;
- right to request deletion of your data;
- the right to object to the processing of your data;
- the right to data portability;
In addition, if you have consented to the processing of your personal data, you may revoke your consent at any time. Please note, however, that the lawfulness of the data processing that took place until the revocation is not affected in this case.
Should you wish to exercise the above rights, please send an email to the following email address: jobs@gfeblut.de
In most cases, we will respond to any requests to exercise your rights free of charge and within one month, if not before.
Further information on your right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out in the public interest or based on our legitimate interests.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
The objection can be made without any formalities.
Further information on your right to withdraw consent
In addition, if you have consented to the processing of your personal data, you may revoke your consent at any time. Please note, however, that the lawfulness of the data processing that took place until the revocation is not affected in this case.
How to contact our data protection officer
The contact details of our designated data protection officer are as follows:
DataCo GmbH
Nymphenburger Str. 86
80636 München
Germany
Tel.: +49 89 452459-900
E-mail: datenschutz@dataguard.de
Website: www.dataguard.de
Complaints
If you are unhappy with any aspect of this privacy notice, or how your personal data is being processed, please contact our data protection officer.
You also have the right of appeal to a supervisory authority. The supervisory authority responsible for us is the Hessische Beauftragte für Datenschutz und Informationsfreiheit.
You can reach this authority at:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Tel.: +49 611 14080
https://datenschutz.hessen.de
This notice was created with the support of DataGuard.