Data protection notice in the context of your application by dermanostic

In the following, we inform you about the processing of your personal data in the context of your application with us. In addition, we refer you to our data protection information for website visitors.

Personal data is all data that can be related to you personally, e.g. name, address, e-mail address and user behavior.

Person responsible

Responsible person according to Art. 4 para. 7 DS-GVO is

dermanostic GmbH
Merowingerplatz 1
40225 Düsseldorf

Contact details of the data protection officer

You can contact our data protection officer via

Your rights

You have the following rights vis-à-vis us regarding the personal data concerning you:

  • Right to access as well as to receive a copy of your data,
  • Right to rectification,
  • right to erasure and to be forgotten,
  • right to restriction of processing,
  • right to object to processing,
  • right to data portability.

You also have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority.

Processing in the context of your application to dermanostic.

To send us an application for a job vacancy, we accept applications by email to or via the job portal Indeed (Indeed Ireland Operations Ltd.). Alternatively, we offer our applicants to send us their application by post to dermanostic GmbH, Human Resources, Merowingerplatz 1, 40225 Düsseldorf, Germany.


We process your personal data in the context of a potential new hire.

The legal basis of the processing is the implementation of pre-contractual measures in the form of the application procedure or the review of your unsolicited application pursuant to Art. 6 para. 1 UAbs. 1 lit. b DS-GVO as well as the decision on the establishment of an employment relationship pursuant to Art. 88 para. 1 DSGVO in conjunction with § 26 para. 1 BDSG. The processing is necessary for the implementation of pre-contractual measures with regard to a potential employment relationship, which takes place in response to your request as an applicant, i.e. your application for the advertised position or unsolicited application. Failure by an applicant to provide the data required for an application means that the person applying cannot be considered in the application process.

Storage period

Your application data will be stored in our application management system for a period of six months after the end of the associated application process. The legal basis for this is our legitimate interest in asserting, exercising or defending legal claims pursuant to Art. 6 (1) UAbs. 1 lit. f DS-GVO. The storage period is based on the requirements pursuant to Section 61 b (1) ArbGG in conjunction with Section 15 AGG.

If you consent to a longer storage of your data, e.g. so that we can consider you for another position, we will retain your data for two years. After the two years have expired, your data will be deleted or your consent will be requested again.

If your application was placed through an agency, we will retain the data until the contract with the agency expires.


Applications and the associated personal data can be viewed by authorized employees of our company. This includes employees of the personnel department and those persons who are responsible for the job advertisement and its filling.

For the storage of our applicant data as well as personnel files, we use a cloud system from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. We have specified Germany as the location for this service. Microsoft is our processor for this processing and we have concluded an order processing agreement pursuant to Art. 28 DS GVO with Microsoft Corporation for this purpose. The legal basis for the third country transfer are standard protection clauses according to Art. 46 DS GVO.

Microsoft provides appropriate safeguards for data protection, which you can view in the Online Services Data Protection Addendum. acts as an independent data controller. Applying via the job portal is linked to the transfer of your data to the USA.

Possibility to object

If the processing of your application data is carried out on the legal basis of our legitimate interests pursuant to Art. 6 (1) UAbs. 1 lit. f DS-GVO, you can object to this processing. To do so, please feel free to contact our data protection officer via the email address

Possibility of revocation

If the processing is carried out on the legal basis of your consent pursuant to Art. 6 (1) UAbs. 1 lit. a DS-GVO, in this case to include you in our applicant pool, you have the option to revoke your consent at any time. For this purpose, please contact our data protection officer via the e-mail address or our HR department via the e-mail address

Your rights

As a data subject, you can contact our data protection officer at any time with an informal message using the contact details mentioned in point 2 to exercise your rights in accordance with the GDPR. These rights are as follows:

  • The right to information about the data processing and a copy of the processed data (right to information, Art. 15 DSGVO).
  • The right to rectification of inaccurate data or completion of incomplete data (right to rectification, Art. 16 GDPR).
  • The right to erasure of personal data and, if the personal data has been made public, to communicate the request for erasure to other data controllers (right to erasure, Art. 17 GDPR).
  • The right to restriction of data processing (right to restriction of processing, Art. 18 GDPR).
  • The right to receive personal data concerning the data subject in a structured, commonly used and machine-readable format and to have this data transferred to another controller (right to data portability, Art. 20 GDPR).
  • The right to object to data processing in order to stop it (right to object, Art. 21 DSGVO).
  • The right to withdraw your consent at any time to stop data processing based on consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal (right to withdraw consent, Art. 7 GDPR).
  • ` The right to lodge a complaint with a supervisory authority if you consider that the processing of data infringes the GDPR (right to lodge a complaint with a supervisory authority, Art. 77 GDPR).

Would you like to delete all cookies?