Thank you for your interest in our company. In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you have provided as part of the application process and, if applicable, about the personal data we have collected and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the information below.
1. Subject of this data protection declaration
The protection of your personal data is a major and very important concern for us. In the following, we would therefore like to inform you in detail about which data is collected during our application process. Furthermore, we would like to inform you about the rights you are entitled to and the technical and organisational protective measures we have taken with regard to the processing of your data.
2. Name and address of the data controller and service provider
Responsible data controller according to Art. 4 (7) General Data Protection Regulation (“GDPR”) in terms of the basic data protection regulation (GDPR) and at the same time service provider in terms of Section 5 the of the German Telemedia Act (“Telemediengesetz” -TMG) is
Moosacher Strasse 84
D-80809 Munich, Germany
See our imprint for further details.
2.2. Recruitment process
Responsible department regarding the recruitment process:
Moosacher Strasse 84
D-80809 Munich, Germany
2.3. Data Protection
If you have any questions or comments about this protection policy or about data protection in general you can contact our data protection officer as follows:
Data Protection Officer
Moosacher Strasse 84
D-80809 Munich, Germany
3. Collection and use of data
We only process personal data where this is necessary and in accordance with the principles of data minimisation and purpose limitation.
For our application process we only process data that is related to your application. This may be general personal data (name, address, contact details, etc.), information on your professional qualifications and school education, information on further professional training and, if applicable, other data that you provide to us in connection with your application.
4. Purpose and legal basis of the data processing
4.1. Processing for hiring purposes
We process your personal data in accordance with the provisions of the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with § 26 BDSG and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or implementation of contractual relationships.
4.2. Defence against and assertion
Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).
4.3. Consenting to the talent pool (optional)
In our application form you have the option to consent to the storage of your personal data for further 12 months after the end of your application process. This allows us to offer you similar positions within IONITY in other application processes. The lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future by sending an email to mailto:firstname.lastname@example.org.
5. Sources of personal data
We process personal data that we receive from you by post or email in the course of contacting you or your application, or that you send us via business portals (e.g. LinkedIn) or our website.
6. Service providers and data transfer to third parties
In order to fulfil the aforementioned purposes, your personal data may be passed on to service providers supporting us, which we have carefully selected and commissioned in writing according to the requirements of the GDPR. These service providers are bound by our instructions and are regularly monitored by us.
Categories of recipients:
- If sent digitally, your application will only be accessed and viewed by our HR department and selected persons of the department where the position is to be filled. The latter will only have read-only permissions from a secure central data storage location.
- If sent by letter and not expressly addressed to our HR department, the documents may be read by other employees than the aforementioned. All our employees are bound on record to confidentiality.
- If you send us your personal data digitally, we will use the recruiting platform and management tool "Personio" (www.personio.de). Further information regarding data protection implemented by Persion can be found on https://www.personio.de/datenschutz.
Your data will otherwise only be passed on to other third parties if this data protection declaration expressly refers to this or if we are legally obliged to transfer personal data.
7. Data transfers to third countries
A transfer to a third country (outside the EU) is not intended.
8. Automated decision-making
No automated decision-making takes place.
9. Deletion of personal data
9.1. Personal data from the application process
We store your personal data as long as this is necessary for the decision on your application. If you have not been selection for the position you applied to, your personal data or application documents will be deleted a maximum of six months from the date of the rejection., unless longer storage is legally required or permitted. We store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.
If we conclude an employment contract your application documents will be included in your personal file and stored for the duration of your employment at a minimum.
9.2. Retention in our talent pool
In the event that you have consented to a longer storage of your personal data to be notified for similar vacancies within IONITY, we will store your application for 12 months after the end of the application process. Consent given can be revoked at any time with effect for the future by sending an email to email@example.com. If there is no retention period, we will delete your personal data without due delay.
10. Your rights
10.1. Your rights
You have the right to ask us to confirm whether personal data concerning you is being processed; if this is the case, you have the right to obtain information about this personal data and the information specified in Art. 15 of the GDPR.
You have the right to demand that we correct incorrect personal data relating to you without delay and, if necessary, complete incomplete personal data (Art. 16 GDPR).
You have the right to demand from us that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies in detail, e.g. if the data is no longer required for the purposes pursued (right to deletion).
You have the right to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to processing, for the duration of the examination by us.
You have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing. You also have the right to object at any time to processing operations carried out pursuant to Article 6 (1) (e) or (f) GDPR for reasons arising from your particular situation (Article 21 GDPR). We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to withdraw any consent you have given us at any time with effect for the future (right to withdraw).
You have the right to receive from us the data concerning you which you have provided us with in a structured, common and machine-readable format. You may also transmit this data to other bodies or have it transmitted by us (right to data transferability).
To exercise your rights, please contact: firstname.lastname@example.org.
10.2. Complaint with the data protection authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you is in breach of the GDPR (Art. 77 DPA).
In Bavaria the competent supervisory authority is Bavarian State Office for Data Protection Supervision, Postfach 606, 91511 Ansbach, www.lda.bayern.de.
11. Version and updates of this data protection statement