Data Protection in the Application Process

Data Protection Notice within the Application Process



We are pleased that you are interested in our company and that you are applying or have applied for a position with us. Below, we would like to provide you with information regarding the processing of your personal data in connection with your application.


I. Scope of Data Processing and Purpose

We process the data you have submitted to us in connection with your application in order to assess your suitability for the position (or, if applicable, other open positions within our company) and to carry out the application process. The primary legal basis for processing your personal data in this application procedure is Section 26 of the German Federal Data Protection Act (BDSG) in the version applicable since May 25, 2018. According to this provision, the processing of data is permitted if it is necessary in connection with the decision to establish an employment relationship.

If, after completion of the application process, the data is required for legal enforcement purposes, data processing may be carried out on the basis of the requirements of Article 6 GDPR, in particular for the protection of legitimate interests pursuant to Article 6 (1) (f) GDPR. Our legitimate interest in this case is the assertion or defense of legal claims.

Applicant data will be deleted after 6 months in the event of a rejection. If you have consented to the further storage of your personal data, we will transfer your data to our applicant pool. In this case, the data will be deleted after a period of two years.

If you are offered a position as part of the application process, your data will be transferred from the applicant data system to our HR information system.

After receiving your application, your data will be reviewed by the HR department. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The further process will then be coordinated. Within our company, only those persons who require access to your data for the proper conduct of the application process will have access to it.

II. Your Rights as a “Data Subject”

Every data subject has the following rights:
* Right of access (Art. 15 GDPR)
* Right to rectification of inaccurate data (Art. 16 GDPR)
* Right to erasure (Art. 17 GDPR)
* Right to restriction of processing of personal data (Art. 18 GDPR)
* Right to data portability (Art. 20 GDPR)
* Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Every data subject has a general right to object (see Art. 21 (1) GDPR). In this case, the objection to data processing must be justified. If data processing is based on your consent, you may withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal. To exercise your data subject rights, please contact the Human Resources department.

III. General Information

The controller within the meaning of data protection law is InterNestor GmbH, address: Vitalisstraße 184, 50827 Cologne. For questions regarding the processing of your personal data by us or about data protection in general, please contact our Data Protection Officer by email at datenschutz@deinetorte.de