Processing of (personal) data by the entity in charge of the online application process
1 General Information
This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.
2 Information regarding controller and data protection officer
2.1 Contabo GmbH, Welfenstr. 22, 81541 München is the ‘controller’ and as such responsible for the processing of your personal data. You can reach us for general questions either by phone at +49 (89) 3564717-71 or by e-mail at info@contabo.de. Further information may be found on our website at www.contabo.com .
2.2 For questions on data protection or exercising your rights under data protection law (see Section 4), you may contact our data protection officer either by post at Herrn Rechtsanwalt Dr. Karsten Kinast, LL.M. KINAST Rechtsanwaltsgesellschaft mbH, Nordstraße 17a, 50733 Köln or by email at datenschutzbeauftragter@contabo.de
3 Personal data collected as part of the application process
3.1 Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
3.2. Fundamentals and purposes of processing personal data collected from application documents and during the application process
3.2.1 By submitting an application on our recruiting page or to us via email, the applicant declares that he wishes to take up an employment with us. We process and store all personal data provided by the applicant exclusively for the purpose of the job search/application.
In particular, the following data is collected: name (first and last), email address, phone number, LinkedIn profile (optional), source (how the applicant became aware of us), as well as any additional personal information provided as part of the application process.
3.2.2 You also have the option to upload documents such as cover letter, CV and references. These may include further personal data such as date of birth, address, etc.
3.2.3 If provided by the applicant, we also process special categories of personal data, for example information on handicaps, ethnic origin or biometric data (handwritten signature).
3.2.4 The processing of the aforementioned personal data is necessary as a pre-contractual measure. We use the provided personal data for the application process (assessment and qualification for the position). The processing is based on Art. 6 (1) lit. b, Art. 88 GDPR in connection with sect. 26 BDSG.
3.2.5 Where special categories of data are provided voluntarily by the applicant, processing is based on Art. 9 (2) lit. a GDPR. By providing the special categories of personal data concerned, the applicant consents to the processing.
3.2.6 The data contained in the application letter is made available to our HR-department and the decision makers for the respective job vacancy.
3.2.7 The personal data is stored, as a rule, exclusively for the purpose of filling the vacancy for which you have applied.
3.2.8 We retain the data until six months after a decision on filling the job vacancy is communicated to the applicant. After this period we will delete or anonymize your data. In case of anonymization, the data will only be available to us in the form of so-called metadata, without any direct personal reference, for statistical analysis (for example, share of male and/or female applicants, number of applications per specified period of time etc.).
3.2.9 The applicant has the right to withdraw consent to processing of voluntarily provided special categories of data.
3.2.10 Should you be offered and accept a position with us during the application process, we will store the personal data collected as part of the application process for at least the duration of your employment.
4 Talent Pool
For possible consideration for future job vacancies, we process all personal data provided by applicants either for a job application (see above sect. 3.2) or as an unsolicited application (concerning the categories of data described above in sect. 3.2) to decide on whether to consider an applicant for any available job vacancies.
The processing is based on the applicant's express consent (Art. 6 (1) lit. a, Art. 9 (2) lit. a GDPR).
We retain the data for 6 month or until consent is withdrawn, whichever is earlier. The application letter and the data contained therein is then erased, returned to the applicant or destroyed, unless the applicant has renewed consent (e.g. upon our request) or data is further processed for employment purposes.
5 Disclosure of data to third parties
Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH (Rundfunkplatz 4, 80335 München), which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor under article 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio.
6 Rights of data subjects
6.1 You may at any time exercise your rights as a data subject by contacting us by mail or e-mail to our address mentioned in section 2.2. Please keep in mind that we do not answer any inquiries about personal data by telephone, because generally the identity of the caller cannot be determined with sufficient certainty.
6.2.1 You may exercise your right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction of processing, i. e. blocking for certain purposes, (Art. 18 GDPR) at any time, if the respective statutory prerequisites are met.
6.2.2 Your right to data portability (Art. 20 GDPR) also stipulates that, if the statutory prerequisites are met, you may demand that your personal data stored by us will be transferred to you – or insofar as technically feasible, to another controller designated by you – in a structured, commonly used and machine-readable format.
6.2.3 You have the right to object to processing (Art. 21 GDPR) for some processing purposes, in particular advertising purposes. Insofar as we process your data based on a balancing of interests (pursuant to Art. 6 (1) lit. f GDPR), you have the right to object to this processing at any time based on grounds related to your particular situation. Such grounds may be compelling in particular, if they give special weight to your interests, which thereby outweigh our interests, for example if these reasons are not known to us and therefore could not be taken into account in the balancing of interests. You may object to processing by sending us an email to the address stated in sect. 2.2, and we may advise you of additional ways to object to processing for each specific processing activity in sect. 3.
6.2.4 You have the right to withdraw consent you have given us to process your personal data (Art. 7 (3) GDPR). You may withdraw your consent at any time and without need to give any reason, either for all processing or limited to specific processing of your data that is based on your consent. Withdrawal of consent will be effective immediately and for any future processing. The lawfulness of processing before withdrawal of consent remains unaffected. You may withdraw consent by sending us an email to the address stated in sect. 2.2.
7 Concluding provisions
We reserve the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.
In addition to this data privacy statement, please view our general data privacy statement at https://contabo.com/en/legal/privacy/ .
This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.
2 Information regarding controller and data protection officer
2.1 Contabo GmbH, Welfenstr. 22, 81541 München is the ‘controller’ and as such responsible for the processing of your personal data. You can reach us for general questions either by phone at +49 (89) 3564717-71 or by e-mail at info@contabo.de. Further information may be found on our website at www.contabo.com .
2.2 For questions on data protection or exercising your rights under data protection law (see Section 4), you may contact our data protection officer either by post at Herrn Rechtsanwalt Dr. Karsten Kinast, LL.M. KINAST Rechtsanwaltsgesellschaft mbH, Nordstraße 17a, 50733 Köln or by email at datenschutzbeauftragter@contabo.de
3 Personal data collected as part of the application process
3.1 Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.
3.2. Fundamentals and purposes of processing personal data collected from application documents and during the application process
3.2.1 By submitting an application on our recruiting page or to us via email, the applicant declares that he wishes to take up an employment with us. We process and store all personal data provided by the applicant exclusively for the purpose of the job search/application.
In particular, the following data is collected: name (first and last), email address, phone number, LinkedIn profile (optional), source (how the applicant became aware of us), as well as any additional personal information provided as part of the application process.
3.2.2 You also have the option to upload documents such as cover letter, CV and references. These may include further personal data such as date of birth, address, etc.
3.2.3 If provided by the applicant, we also process special categories of personal data, for example information on handicaps, ethnic origin or biometric data (handwritten signature).
3.2.4 The processing of the aforementioned personal data is necessary as a pre-contractual measure. We use the provided personal data for the application process (assessment and qualification for the position). The processing is based on Art. 6 (1) lit. b, Art. 88 GDPR in connection with sect. 26 BDSG.
3.2.5 Where special categories of data are provided voluntarily by the applicant, processing is based on Art. 9 (2) lit. a GDPR. By providing the special categories of personal data concerned, the applicant consents to the processing.
3.2.6 The data contained in the application letter is made available to our HR-department and the decision makers for the respective job vacancy.
3.2.7 The personal data is stored, as a rule, exclusively for the purpose of filling the vacancy for which you have applied.
3.2.8 We retain the data until six months after a decision on filling the job vacancy is communicated to the applicant. After this period we will delete or anonymize your data. In case of anonymization, the data will only be available to us in the form of so-called metadata, without any direct personal reference, for statistical analysis (for example, share of male and/or female applicants, number of applications per specified period of time etc.).
3.2.9 The applicant has the right to withdraw consent to processing of voluntarily provided special categories of data.
3.2.10 Should you be offered and accept a position with us during the application process, we will store the personal data collected as part of the application process for at least the duration of your employment.
4 Talent Pool
For possible consideration for future job vacancies, we process all personal data provided by applicants either for a job application (see above sect. 3.2) or as an unsolicited application (concerning the categories of data described above in sect. 3.2) to decide on whether to consider an applicant for any available job vacancies.
The processing is based on the applicant's express consent (Art. 6 (1) lit. a, Art. 9 (2) lit. a GDPR).
We retain the data for 6 month or until consent is withdrawn, whichever is earlier. The application letter and the data contained therein is then erased, returned to the applicant or destroyed, unless the applicant has renewed consent (e.g. upon our request) or data is further processed for employment purposes.
5 Disclosure of data to third parties
Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH (Rundfunkplatz 4, 80335 München), which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor under article 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio.
6 Rights of data subjects
6.1 You may at any time exercise your rights as a data subject by contacting us by mail or e-mail to our address mentioned in section 2.2. Please keep in mind that we do not answer any inquiries about personal data by telephone, because generally the identity of the caller cannot be determined with sufficient certainty.
6.2.1 You may exercise your right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction of processing, i. e. blocking for certain purposes, (Art. 18 GDPR) at any time, if the respective statutory prerequisites are met.
6.2.2 Your right to data portability (Art. 20 GDPR) also stipulates that, if the statutory prerequisites are met, you may demand that your personal data stored by us will be transferred to you – or insofar as technically feasible, to another controller designated by you – in a structured, commonly used and machine-readable format.
6.2.3 You have the right to object to processing (Art. 21 GDPR) for some processing purposes, in particular advertising purposes. Insofar as we process your data based on a balancing of interests (pursuant to Art. 6 (1) lit. f GDPR), you have the right to object to this processing at any time based on grounds related to your particular situation. Such grounds may be compelling in particular, if they give special weight to your interests, which thereby outweigh our interests, for example if these reasons are not known to us and therefore could not be taken into account in the balancing of interests. You may object to processing by sending us an email to the address stated in sect. 2.2, and we may advise you of additional ways to object to processing for each specific processing activity in sect. 3.
6.2.4 You have the right to withdraw consent you have given us to process your personal data (Art. 7 (3) GDPR). You may withdraw your consent at any time and without need to give any reason, either for all processing or limited to specific processing of your data that is based on your consent. Withdrawal of consent will be effective immediately and for any future processing. The lawfulness of processing before withdrawal of consent remains unaffected. You may withdraw consent by sending us an email to the address stated in sect. 2.2.
7 Concluding provisions
We reserve the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.
In addition to this data privacy statement, please view our general data privacy statement at https://contabo.com/en/legal/privacy/ .