In the following, we inform you about the processing of your personal data in the context of your application with us. In addition, we refer you to our data protection information for website visitors.
Personal data is all data that can be related to you personally, e.g. name, address, e-mail address and user behavior.
Responsible person according to Art. 4 para. 7 DS-GVO is
You can contact our data protection officer via email@example.com.
You have the following rights vis-à-vis us regarding the personal data concerning you:
You also have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority.
To send us an application for a job vacancy, we accept applications by email to firstname.lastname@example.org or via the job portal Indeed (Indeed Ireland Operations Ltd.). Alternatively, we offer our applicants to send us their application by post to dermanostic GmbH, Human Resources, Merowingerplatz 1, 40225 Düsseldorf, Germany.
We process your personal data in the context of a potential new hire.
The legal basis of the processing is the implementation of pre-contractual measures in the form of the application procedure or the review of your unsolicited application pursuant to Art. 6 para. 1 UAbs. 1 lit. b DS-GVO as well as the decision on the establishment of an employment relationship pursuant to Art. 88 para. 1 DSGVO in conjunction with § 26 para. 1 BDSG. The processing is necessary for the implementation of pre-contractual measures with regard to a potential employment relationship, which takes place in response to your request as an applicant, i.e. your application for the advertised position or unsolicited application. Failure by an applicant to provide the data required for an application means that the person applying cannot be considered in the application process.
Your application data will be stored in our application management system for a period of six months after the end of the associated application process. The legal basis for this is our legitimate interest in asserting, exercising or defending legal claims pursuant to Art. 6 (1) UAbs. 1 lit. f DS-GVO. The storage period is based on the requirements pursuant to Section 61 b (1) ArbGG in conjunction with Section 15 AGG.
If you consent to a longer storage of your data, e.g. so that we can consider you for another position, we will retain your data for two years. After the two years have expired, your data will be deleted or your consent will be requested again.
If your application was placed through an agency, we will retain the data until the contract with the agency expires.
Applications and the associated personal data can be viewed by authorized employees of our company. This includes employees of the personnel department and those persons who are responsible for the job advertisement and its filling.
For the storage of our applicant data as well as personnel files, we use a cloud system from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. We have specified Germany as the location for this service. Microsoft is our processor for this processing and we have concluded an order processing agreement pursuant to Art. 28 DS GVO with Microsoft Corporation for this purpose. The legal basis for the third country transfer are standard protection clauses according to Art. 46 DS GVO.
Microsoft provides appropriate safeguards for data protection, which you can view in the Online Services Data Protection Addendum.
Indeed.com acts as an independent data controller. Applying via the Indeed.com job portal is linked to the transfer of your data to the USA.
If the processing of your application data is carried out on the legal basis of our legitimate interests pursuant to Art. 6 (1) UAbs. 1 lit. f DS-GVO, you can object to this processing. To do so, please feel free to contact our data protection officer via the email address email@example.com.
If the processing is carried out on the legal basis of your consent pursuant to Art. 6 (1) UAbs. 1 lit. a DS-GVO, in this case to include you in our applicant pool, you have the option to revoke your consent at any time. For this purpose, please contact our data protection officer via the e-mail address firstname.lastname@example.org or our HR department via the e-mail address email@example.com.
As a data subject, you can contact our data protection officer at any time with an informal message using the contact details mentioned in point 2 to exercise your rights in accordance with the GDPR. These rights are as follows: