Obligation to provide information pursuant to Art. 13 GDPR when collecting personal data from applicants
The following information provides you with an overview of how we process your personal data and your rights under data protection law. Personal data is collected directly from you by registering in our applicant data pool.
Who is responsible for data processing and how can you get in touch with them?
Die Botschaft Communication GmbH
Kastanienallee 97
10435 Berlin
Phone: +49 30.779 07 89 0
Fax: +49 30.77907 89-11
Contact details of the data protection officer:
MKM Datenschutz GmbH
Äußere Sulzbacher Straße 124a
90491 Nürnberg
Phone: + 49 (0) 911 / 66 95 77- 55
E-mail: info@mkm-datenschutz.de
Purposes and legal basis of the processing
We process your personal data for the purpose of carrying out the application procedure and application management.
Your personal data is required for the decision on the establishment of an employment and is processed in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR in conjunction with Art. 88 GDPR in conjunction with § 26 Federal Data Protection Act (BDSG).
If we consider your personal data based on consent, which we have received as part of your application, for a later processing time (Art. 6 para. 1 sentence 1 lit. a GDPR), we will store the collected personal data for the specified period described in the consent.
Recipients of personal data
Our company’s departments receive your data that is needed to fulfil our contractual and legal obligations. Processors ap-pointed by us (Art. 28 GDPR) may also receive data for afore-said purposes. Other forwarding to third parties will only take place if this is necessary for the processing of the contract, if there is a legitimate interest, if a legal or official obligation exists or if your consent has been given.
With regard to the transfer of data to recipients outside the controller, it should first be noted that we are obliged to maintain confidentiality about all facts and evaluations of which we become aware in accordance with the General Terms and Conditions agreed between our service providers and us. We may only pass on information about you if this is required by law or if you have given your consent.
The following categories of recipients may receive your data:
- Public authorities and institutions if there is a legal or official obligation
- IT service providers which makes our systems and the applicant platform available
Duration of the storage of personal data
If your data is no longer required for the aforesaid purposes, it will be deleted no later than six months after the end of the application process, unless you have consented to longer storage until a later date.
In addition, we are subject to various storage and documentation obligations that also result from the German Commercial Code (HGB) and the Fiscal Code of Germany (AO). These specified periods for storage and documentation are up to ten years.
Are data transferred to a third country or to an international organisation?
No data is transferred to third countries (countries outside the European Economic Area - EEA).
Data processing in accordance with the balancing of interests (Art. 6 para. 1 lit. f GDPR)
Where necessary, we process your data beyond the fulfilment of the contract or beyond the scope in order to protect our legitimate interests or those from third parties.
Specifically, this means:
- Storage in our CRM until the expiry of the deletion period
- Archiving e-mails
- Disposal and destruction of data/files
- Archiving documents
Automated decision-making
Automated decision-making including profiling does not take place.
Obligation to provide data
In order to participate in our application process, only the data that are necessary for its implementation are required. It is not possible to apply to us without these data.
Your rights
You have the right to request information (Art. 15 of the GDPR), correction (Art. 16 of the GDPR), deletion (Art. 17 of the GDPR) or restriction (Art. 18 of the GDPR) of your personal data in accordance with the applicable legal regulations. In addition, we will provide your data on request in a structured, common and machine-readable format (Art. 20 GDPR).
If we process your personal data on the basis of a legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR), you have an additional right of objection pursuant to Art. 21 GDPR.
Independently of this, you can contact the competent supervisory authorities if you have a query or wish to lodge a complaint.
Right of withdrawal in case of consent
If you have consented to the processing by making a corre-sponding declaration, you can withdraw your consent at any time in the future. We will no longer process your personal data which was collected for this purpose.