Dear Applicant,
Thank you for your interest in applying for a position with us.
This Privacy Notice serves to inform you about how we process your personal data when you apply for a position with us, as well as your rights under applicable data protection laws, and how you can exercise such rights.

Who we are

All references to ‘we’, ‘us’ or ‘the company’ in this Privacy Notice refer to the following organisation:
Gesellschaft zur Forschung, Entwicklung und Distribution von Diagnostika im Blutspendewesen mbH
Altenhöferallee 3
60438 Frankfurt am Main
+49 69 400 5513-0
jobs@gfeblut.de
www.gfeblut.de

Our role in processing your personal data

When you submit a job application to us, we act as the data controller of the personal data processed in relation to your application. This means that we are responsible for deciding how we collect, use and store information about you regarding your application.

Personal data processed as part of your application

Personal data we collect to assess your suitability for the position

As part of the application process, we will only process data that is related to your application. This includes the following (‘Application File Data’):

• Personal Identification Information: Includes your fist name, last name, title.
• Contact Information: Your address, email address, and phone numbers.
• Professional Information: Employment history, qualifications, CV, cover letter, interview notes, and results from any assessments or tests.
• Any additional personal data which you share with us during the course of email communications.

Purposes and legal basis for processing

We only process your personal data when we have a lawful basis and a legitimate purpose for doing so. In particular, we process your personal data for the following purposes and under the following legal bases:

Please note:

• Where your data is processed under the performance of a contract or for a legal obligation, if you do not provide the data requested, we will be unable to advance your application.
• Where we process your personal data under the legitimate interests legal basis, you have the right to object to the processing of your personal data. Whether your objection is successful will depend on a balancing of interests assessment, weighing the legitimate interests in question against your individual rights and interests.

Sources of your personal data

Most of the information we collect about you during the application process is provided directly by you.
In addition to personal we collect directly from you, we also collect personal data from the following sources:

• Professional social networks

Who we share your personal data with

We only transfer your personal data to external recipients if you have consented or if this is permitted by law.

Service providers

As with most organisations, we use service providers which help us to manage your application. When we use these service providers, it is necessary for us to share your personal data with them.
We use the following service providers, with whom your personal data is shared:

We have agreements in place with all our service providers that we share your data with that oblige them to protect your data.

International Data Transfers

Where your data is transferred outside of the EU, we make sure that your data is the given the same level of protection, either because that country have a comparable data protection standard (Adequacy), or by using another safeguard such as an enhanced contractual agreement (i.e. Standard Contractual Clauses).

Duration of the storage of personal data

We will delete your personal data as soon as the purposes for storing it mentioned under the ‘Purposes and legal bases for processing’ section above no longer apply or you object to the use of your personal data (in the case of processing on the basis of legitimate interests) or you revoke your previously given consent. However, your personal data may also be stored beyond this, in particular in the following cases:

• if deletion conflicts with contractual, legal (in particular from HGB, StGB and AO) or statutory retention periods.
• for the assertion, exercise or defence of legal claims
• if this is required under European or national law for the fulfilment of a legal obligation to which we are subject.

Unsuccessful applications

Insofar as an employment relationship between you and us is not established, your personal data will be deleted from the system no later than six months after the termination of the process.

Successful applicants

In the event of employment in our company, your personal data will be deleted following the termination of your employment. In the event that your personal data may be relevant and necessary to retain for the purpose of the assertion, exercise or defence of legal claims, relevant data will be retain for a further period corresponding to the relevant statutory limitation periods.

Your rights

You have the following rights under the General Data Protection Regulation:

• right to be informed about how your data is used;
• right of access to your personal data;
• right to correction or rectification of your data;
• right to request deletion of your data;
• the right to object to the processing of your data;
• the right to data portability;

In addition, if you have consented to the processing of your personal data, you may revoke your consent at any time. Please note, however, that the lawfulness of the data processing that took place until the revocation is not affected in this case.
Should you wish to exercise the above rights, please send an email to the following email address: jobs@gfeblut.de
In most cases, we will respond to any requests to exercise your rights free of charge and within one month, if not before.

Further information on your right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out in the public interest or based on our legitimate interests.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
The objection can be made without any formalities.

Further information on your right to withdraw consent

In addition, if you have consented to the processing of your personal data, you may revoke your consent at any time. Please note, however, that the lawfulness of the data processing that took place until the revocation is not affected in this case.

How to contact our data protection officer

The contact details of our designated data protection officer are as follows:

DataCo GmbH
Nymphenburger Str. 86
80636 München
Germany

Tel.: +49 89 452459-900
E-mail: datenschutz@dataguard.de
Website: www.dataguard.de

Complaints

If you are unhappy with any aspect of this privacy notice, or how your personal data is being processed, please contact our data protection officer.

You also have the right of appeal to a supervisory authority. The supervisory authority responsible for us is the Hessische Beauftragte für Datenschutz und Informationsfreiheit.

You can reach this authority at:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Tel.: +49 611 14080
https://datenschutz.hessen.de

This notice was created with the support of DataGuard.