Submitted application documents and other data collected during the application procedure that can be personally assigned to you as an applicant are protected personal data within the meaning of Art. 4 No. 1 of the EU-General Data Protection Regulation (GDPR). We hereby inform you about the details of processing your applicant data in accordance with Art. 13 GDPR.
Your personal data is processed by our company exclusively within the scope of data protection regulations, in particular, the GDPR and the German Federal Data Protection Act ('Bundesdatenschutzgesetz' - BDSG). Your personal data may only be collected, stored, disseminated or used (data processing, Art. 4 No. 2 GDPR) if this is expressly permitted or ordered by law or if you have given your effective consent (Art. 6 (1) subpart. 1 point (a), Art. 7 GDPR). Processing of your personal data is particularly permitted if this is necessary for the recruitment or after the establishment of an employment relationship for its performance or termination (Sec. 26 (1) BDSG, Art. 6 (1) subpara.1 point (b) GDPR). The same applies if data processing is necessary for the purposes of our legitimate interests other than the employment relationship and there is no reason to assume that your legitimate interests as a data subject override our legitimate interests (Art. 6 (1) subpart. 1 point (f) GDPR).
Controller (Art. 4 No. 7 GDPR) for the processing of your personal data in an employment relationship is GenYus Recruiting Services, Waldstraße 19, 53859 Niederkassel.
Should an application procedure apply to positions at a.elmas@genyus.de, genyus is jointly responsible for your applicant data (Art. 26 DSGVO) with this. In this case, the information that we are looking from one of our subsidiaries can be found in the job advertisement.
If you have any questions regarding data protection, please do not hesitate to contact us:
our Group Human Resources Management: a.elmas@genyus.de
Personal Data and Purposes of Processing
1. Application for an advertised Position
In order to be able to involve you in the application process for a specific position, we require application documents that are customary and meaningful, which inform us of your personality profile and qualifications. In principle, we only use your application documents to decide on filling the position for which you have expressly applied. For this purpose, we will evaluate your application documents in the HR department and forward them to your possible future supervisor. If you apply for a managerial position, the management will also receive your application documents. We process your application documents electronically in our email system, via Recruitee (recruiting platform) and, if necessary, additionally by using printouts or copies (paper form). During the application process, further personal data may be collected from you personally, from publicly available sources or from former employers and trainers for this purpose. The legal basis for data processing is Art. 6 (1) subpart.1 point (b) GDPR, Sec. 26 (1) BDSG. If the application procedure does not lead to your employment, we will delete and destroy your application data six months after you or our company has finally rejected your application.
Should an application procedure lead to employment, we will include your application documents in your personnel file on the basis of Art. 6 (1) subpart.1 point (b) GDPR, Sec. 26 (1) BDSG in order to inform about your personality profile and qualifications for the purpose of the performance of the employment relationship. In this case, your application documents will not be deleted and destroyed until your employment has been terminated and until the legal retention period has expired since the end of the year of termination.
2. Unsolicited Applications
If you submit an unsolicited application that does not relate to a specific position, we can consult your application documents in the context of recruitment decisions for all possible positions. To this end, we will first evaluate your application documents in the HR department and then involve colleagues from the responsible department(s) within the GenYus Group in which a later job is/are/might be considered, and forward your documents to them. We process your application documents electronically in our email system, via Recruitee and, if necessary, additionally by using printouts or copies (paper form). Once your application documents have been included in a recruitment process, we may collect additional personal data from you personally, from publicly available sources or from former employers and trainers to provide us with more detailed information about your personality profile and qualifications. We will regularly delete and destroy your application data after a period of one year from receipt of your application, but not earlier than six months following your or our company's final rejection of all application procedures to which your application documents have been consulted.
Should an application procedure lead to employment, we will include your application documents in your personnel file on the basis of Art. 6 (1) subpart.1 point (b) GDPR, Sec. 26 (1) BDSG in order to inform about your personality profile and qualifications for the purpose of the performance of the employment relationship. In this case, your application documents will not be deleted and destroyed until your employment has been terminated and until the legal retention period has expired since the end of the year of termination.
3. Information about your career platform usage data
We place our job advertisements on career platforms, especially Indeed, Xing and LinkedIn. If you find a job advertisement from us there and click on it, you will be forwarded to our job advertisement. The following data will be collected from you and forwarded to us:
• Your device and browser
• Your IP-address
• Requests and responses sent from and to your device
• Source website (we use a cookie to track this)
We use your personal data for:
• learning more about the behaviour of the visitors of our careers website to improve our recruitment process and this website;
• improving and monitoring the performance of this website;
All processing of personal data of careers website visitors is based on our legitimate interest to facilitate recruitment (Art. 6 (1) subpara.1 point (f) GDPR).
You are furthermore free to decide in a next step, whether you would like to use your Indeed, Xing or LinkedIn profile for your application with us. If you decide to do so, your profile information stored there will be linked to our offer via an interface and your profile data will be transferred to us. This is a voluntary offer to you, based on your consent and our legitimate interest (Art. 6 (1) subpara.1 point (a), (f) GDPR).
If you decide to use your profile from another career platform, this career platform might process your personal data as well. We are not informed about this and cannot influence such processing. For further information, please contact those third parties:
Indeed Ireland Operations Limited, https://de.indeed.com/legal
Xing SE Hamburg, https://privacy.xing.com/de/da...
LinkedIn Ireland Unlimited Company, https://www.linkedin.com/legal...
(if personal data is transferred to the USA in these cases, an appropriate level of data protection is ensured, as Indeed and LinkedIn have submitted to the EU-US Privacy Shield, Indeed for HR and Non-HR, LinkedIn only for Non-HR; list available at https://www.privacyshield.gov/list)
4. If we contact you
It might be the case that we contact you via a career platform (Indeed, Xing or LinkedIn). In this event we use your information offered within your profile on the career platform which we will store within our software offered by Recruitee (see no. 3.) and ask you whether you are interested in a specific position. If this is the case, we will proceed as described above. If this is not the case, we will delete your contact data from our database immediately, unless you ask us to save your contact details for other interesting job offers (consent). This processing of personal data is based on our legitimate interest to facilitate recruitment (Art. 6 (1) subpara.1 point (f) GDPR). If you ask us to save your contact details, the processing is based on your consent, which you can revoke at any time (Art. 6 (1) subpara.1 point (a) GDPR).
Our Cooperation with Third Parties
We also benefit from the advantages of a society based on the division of labour and the corporate world. In the area of data processing, this means that we do not carry out all data processing processes in-house, but in some cases work together with external service providers:
• Career software: In order to offer and use the technical possibilities described above (connection to the career platforms), we work together with Recruitee (www.recruitee.com), a software and cloud provider that we have carefully selected and integrated in compliance with data protection law.
• Career platforms: In order to find you, we will also place our job advertisements on external career platforms (e.g. Xing, LinkedIn; Indeed) via Recruitee. If you apply through them, they may forward/store your documents and usage data to us as described above (Personal Data and Purposes of Processing; 3. Information about your career platform usage data).
• External (IT) service providers that we have contractually obligated as so-called processors to process data strictly according to our specifications and instructions and to protect this data comprehensively both technically and organizationally. For the cloud-based handling of the recruiting process we have concluded an data processing agreement with Recruitee B.V., Johan Huizingalaan 763A, 1066VH, Amsterdam, Netherlands
• External (IT) service providers who work for us on their own responsibility and are contractually obliged to provide comprehensive technical and organisational protection for data.
• to request information about the data stored about your person and its origin, the purpose of processing as well as the recipients or categories of recipients of the data (Art. 15 GDPR, Sec. 34 BDSG),
• under certain conditions, to request rectification, restriction of processing or erasure of your personal data (Art. 16 - 18 GDPR, Sec. 35 BDSG),
• to request the transfer of your data to another controller (Art. 20 GDPR) and
• to complain to us or to the competent supervisory authority about data processing (Art. 77 GDPR).
Your Data Protection Claims and Rights
If we process your personal data, you are entitled to various data protection claims against us. You have the right,
You can also object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 (1) subpara. 1 point (f) GDPR). Since we do not process your data for advertising purposes, this requires a reason that arises from your particular situation. In the event of an objection, we will no longer process your personal data to which the objection relates from receipt during the subsequent verification and – in the event of a justified objection – delete it after completion of the verification (Sec. 36 BDSG, Art. 21 GDPR).
If you transmit your consent to data processing (Art. 6 (1) subpara. 1 point (a) GDPR) to us, you can withdraw it at any time for no reason; we will then not process your personal data further unless we have legal permission to do so.
A justified objection and a withdrawal of your consent have no influence on data processing processes that have already taken place.
We fulfil all rights to which you are entitled free of charge and without delay. If you have any further questions, please contact us directly using the contact details provided at the beginning.