Imprint
Alight Consulting GmbH
Alte Landstraße 27
85521 Ottobrunn
+49-89-416147699
info@alight.eu
Sitz der Gesellschaft: Icking
Registergericht München – HRB 200884
Geschäftsführer: Dr. Ralf Kuhn, Dr. Habib Lejmi
Terms of use
Validity range
These Terms of Use apply to the Alight websites on which these Terms are displayed. The current scope of validity includes:
Limitation of liability
Alight Consulting GmbH (“Alight”) has compiled all contents of this website with care and to the best of its knowledge. Nevertheless, we cannot guarantee the topicality, completeness and correctness of all pages. According to § 7 Abs. 1 of the German Telemedia Act (TMG), as a service provider we are responsible for our own content on these pages in accordance with general legislation, but are not obliged to monitor the transmitted or stored third-party information in accordance with §§ 8 to 10 TMG. Immediate removal of this content will take place from the time we become aware of a concrete infringement and we are not liable before the time we become aware of it. Our website contains hyperlinks to external offers (links to third-party websites), over whose content we have no influence. Therefore, we cannot assume any liability for the content of these sites. The respective information provider of the linked website is responsible for the content and accuracy of the information. At the time the link was created, we were not aware of any legal violations. If we become aware of any infringement, we will remove the offending hyperlink immediately.
Copyright
The content and works published on this website are subject to German copyright law. Any kind of duplication, processing, distribution, or any form of commercialization of such material beyond the scope of the copyright law shall require the prior written consent of its respective author or creator.
We do not adopt as our own the offers of third parties that can be reached from our information offer via a hyperlink.
Privacy policy
This privacy statement applies to the Alight websites through which data is collected and on which this statement is displayed. The current scope of validity includes:
The protection of your personal rights when processing personal data is an important concern for Alight Consulting GmbH. We process personal data that is collected when you visit our website. Alight collects, uses and stores your personal data in accordance with the provisions of the European Union Data Protection Regulation (EU-DSGVO) and the Federal Data Protection Act of the Federal Republic of Germany (BDSG).
Personal data (hereinafter referred to as “data”) are processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
Pursuant to Art. 4 no. 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of the processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the responsible party
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the responsible party
Responsible provider of this website in the sense of data protection law is:
Alight Consulting GmbH
Alte Landstrasse 27
85521 Ottobrunn
Germany
Telephone: +49 89 416 147 699
Telefax: +49 89 416 147 60
E-Mail: info@alight.eu
Data protection officer at the provider is:
Ziad Lejmi
Alte Landstrasse 27
85521 Ottobrunn
Germany
E-Mail: dataprivacy@alight.eu
The controller decides alone or jointly with others on the purposes and means of the processing of personal data (e.g. names, contact details or similar).
Every access to our homepage and every retrieval of a file stored on the homepage is logged. The storage serves internal system-related and statistical purposes. The following are logged: Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser and requesting domain. Further personal data is only collected if you provide this information voluntarily, for example in the context of an enquiry or registration. If you have provided us with personal data, we will only use it to answer your enquiries, to process contracts concluded with you and for technical administration. Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of contract processing – in particular the transfer of order data to suppliers -, if this is necessary for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future. The deletion of the stored personal data takes place if you revoke your consent to the storage, if their knowledge is no longer necessary for the fulfilment of the purpose pursued with the storage or if their storage is inadmissible for other legal reasons.
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right to
- confirmation as to whether data concerning them are being processed, to information about the data being processed, to further information about the data processing and to copies of the data (cf. also Art. 15 DSGVO);
- correction or completion of incorrect or incomplete data (cf. also Art. 16 DSGVO);
- the immediate erasure of the data relating to them (cf. also Art. 17 of the GDPR), or, alternatively, insofar as further processing is required pursuant to Art. 17(3) of the GDPR, to restriction of processing in accordance with Art. 18 of the GDPR;
- receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR);
- lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions (cf. also Art. 77 of the GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that takes place on the basis of Articles 16, 17 (1), 18 DSGVO. Blocking is not possible or would involve a disproportionate effort. Notwithstanding the above, the user has the right to information about these recipients.
Users and data subjects also have the right to object to the future processing of data relating to them in accordance with Article 21 of the GDPR, provided that the data is processed by the provider in accordance with Article 6 (1) (f) of the GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is provided below on individual processing procedures.
Cookies
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
a) Session cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed to an individual extent.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit b.) DSGVO, insofar as these cookies data are processed for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO.
When you close your internet browser, these session cookies are deleted.
b) Third-party cookies
Where applicable, cookies from partner companies with which we cooperate for the purpose of advertising, analysis or the functionalities of our website are also used with our website.
Please refer to the following information for details on this, in particular the purposes and legal bases of the processing of such third-party cookies.
c) Elimination possibility
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the specific internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you use. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.
Contact form
Data transmitted via the contact form, including your contact details, are stored in order to be able to process your enquiry or to be available for follow-up questions. This data will not be passed on without your consent. The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You may revoke your consent at any time. An informal communication by e-mail is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to store it or there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.
Server log files
In server log files, the provider of the website automatically collects and stores information that your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Online job applications / publication of job advertisements
We offer you the opportunity to apply to us via our website. For these digital applications, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process.
The legal basis for this processing is Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) DSGVO. Art. 88 para. 1 DSGVO.
If an employment contract is concluded after the application process, we will store the data you submitted during the application in your personnel file for the purpose of the usual organisational and administrative process – of course in compliance with the more extensive legal obligations.
The legal basis for this processing is also Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) DSGVO. Art. 88 para. 1 DSGVO.
If an application is rejected, we automatically delete the data submitted to us six months after notification of the rejection. However, the deletion does not take place if the data requires longer storage until the conclusion of legal proceedings due to legal provisions, e.g. due to the obligation to provide evidence according to the AGG.
The legal basis in this case is Art. 6 para. 1 lit. f) DSGVO and Section 24 para. 1 no. 2 BDSG. Our legitimate interest lies in the legal defence or enforcement.
If you expressly consent to your data being stored for a longer period of time, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) DSGVO. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 DSGVO by making a declaration to us with effect for the future.
We maintain an online presence on Twitter to present our company and our services and to communicate with customers/interested parties. Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Insofern weisen wir darauf hin, dass die Möglichkeit besteht, dass Daten der Nutzer außerhalb der Europäischen Union, insbesondere in den USA, verarbeitet werden. Hierdurch können gesteigerte Risiken für die Nutzer insofern bestehen, als dass z.B. der spätere Zugriff auf die Nutzerdaten erschwert werden kann. Auch haben wir keinen Zugriff auf diese Nutzerdaten. Die Zugriffsmöglichkeit liegt ausschließlich bei Twitter.
You can find Twitter’s privacy policy at
https://twitter.com/de/privacy
YouTube
We maintain an online presence on YouTube to present our company and our services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Insofern weisen wir darauf hin, dass die Möglichkeit besteht, dass Daten der Nutzer außerhalb der Europäischen Union, insbesondere in den USA, verarbeitet werden. Hierdurch können gesteigerte Risiken für die Nutzer insofern bestehen, als dass z.B. der spätere Zugriff auf die Nutzerdaten erschwert werden kann. Auch haben wir keinen Zugriff auf diese Nutzerdaten. Die Zugriffsmöglichkeit liegt ausschließlich bei YouTube.
You can find YouTube’s privacy policy at
https://policies.google.com/privacy
We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Maude Avenue, Sunnyvale, CA 94085, USA.
In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users in that, for example, it may be more difficult to access the user data at a later date. We also do not have access to this user data. The access option lies exclusively with LinkedIn.
You can find LinkedIn’s privacy policy at
https://www.linkedin.com/legal/privacy-policy
We operate a company presence on the Facebook platform to advertise our products and services and to communicate with interested parties or customers.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Facebook’s data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations result, is available under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data that takes place as a result and is reproduced below is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the analysis, communication, sales and advertising of our products and services.
The legal basis may also be the user’s consent pursuant to Art. 6 para. 1 lit. a DSGVO vis-à-vis the platform operator. The user can revoke this consent for the future at any time by notifying the platform operator in accordance with Art. 7 (3) DSGVO.
When our online presence is accessed on the Facebook platform, the user’s data (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.
This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create profiles of the users. On the basis of these profiles, Facebook Ireland Ltd. is able, for example, to advertise users within and outside of Facebook according to their interests. If the user is logged into his or her Facebook account at the time of the call, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Facebook, the personal data entered by the user on this occasion will be used to process the enquiry. The user’s data will be deleted by us, provided that the user’s enquiry has been conclusively answered and there are no statutory retention obligations, e.g. in the case of subsequent contract processing.
Facebook Ireland Ltd. may also set cookies to process the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be fully used.
For more details on processing activities, how to stop them and how to erase the data processed by Facebook, please refer to Facebook’s Data Policy:
https://www.facebook.com/privacy/explanation
It is not excluded that processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
XING Plugin
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. When a page with integrated Xing functions is called up, a connection to the Xing servers is established. As far as we are aware, no personal data is stored. IP addresses are not stored, nor is usage behaviour evaluated.
We would like to inform you here about the processing of personal data via the XING Share button function.
The “XING Share Button” is used on this website. When you access this website, a connection is briefly established via your browser to servers of XING AG (“XING”), with which the “XING Share Button” functions (in particular the calculation/display of the counter value) are provided. XING does not store any personal data about you when you access this website. In particular, XING does not store IP addresses. There is also no evaluation of your usage behaviour via the use of cookies in connection with the “XING Share Button”. The current data protection information on the “XING Share Button” and supplementary information can be found on this website: https://dev.xing.com/plugins/share_button/privacy_policy Details on data protection and the XING Share Button can be found in the XING data protection statement at: https://www.xing.com/app/share?op=data_protection.
Social media link via graphic or text link
We also promote presences on the social networks listed below on our website. The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents a connection from being automatically established to the respective server of the social network when a website with a social media advertisement is called up in order to display a graphic of the respective network itself. Only by clicking on the corresponding graphic is the user redirected to the service of the respective social network.
After the user has been forwarded, information about the user is collected by the respective network. It cannot be ruled out that the data collected in this way will be processed in the USA.
This is initially data such as IP address, date, time and page visited. If the user is logged into his or her user account of the respective network during this time, the network operator may be able to assign the collected information of the user’s specific visit to the user’s personal account. If the user interacts via a “Share” button of the respective network, this information can be stored in the user’s personal user account and possibly published. If the user wants to prevent the collected information from being directly assigned to his/her user account, he/she must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.
The following social networks are integrated into our site by linking:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.
Privacy policy: https://www.facebook.com/policy.php
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
Privacy policy: https://twitter.com/privacy
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy policy: https://policies.google.com/privacy
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 98585 USA. Maude Avenue, Sunnyvale, CA 94085 USA.
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function allows Google to truncate the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and of the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the internet.
Google states that it does not link your IP address with other data. In addition, Google provides further data protection information for you at https://www.google.com/intl/de/policies/privacy/partners, for example. also on the options for preventing data use.
In addition, Google offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de along with further information on this. This add-on can be installed with the most common internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on tells the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Of course, you can also find out whether and which other web analytics services we use in this privacy policy.
Google-Maps
We use Google Maps on our website to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
If you call up the Google Maps component integrated into our website, Google will save a cookie on your end device via your internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.
Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse liegt in der Optimierung der Funktionalität unseres Internetauftritts.
The connection to Google established in this way enables Google to determine which website your request was sent from and to which IP address the directions should be sent.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your internet browser. Details on this can be found above under the item “Cookies”.
In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Google also offers further information at https://adssettings.google.com/authenticated & https://policies.google.com/privacy.
FontAwesome
In order to be able to display fonts and visual elements of our website, we use the external fonts of FontAwesome. FontAwesome is a service provided by the
Fonticons Inc, 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, hereinafter referred to only as “FontAwesome”.
When you access our website, a connection is established to the FontAwesome server in the USA in order to enable and update the display of fonts and visual elements.
The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimisation and economic operation of our website.
Through the connection to the FontAwesome server established when you call up our website, FontAwesome can determine from which website your request was sent and to which IP address the display of the font is to be transmitted.
FontAwesome offers more information at https://fontawesome.com/privacy, specifically on how to stop data usage.
Sample privacy policy of the law firm Weiß & Partner
Applicant Privacy
Data protection information on our processing of applicant data in accordance with Art. 13, 14 and 21 of the General Data Protection Regulation (DSGVO)
Alight Consulting GmbH
Dear Applicant,
Thank you for your interest in our company. In accordance with the requirements of Articles 13, 14 and 21 of the General Data Protection Regulation (DSGVO), we hereby inform you about the processing of personal data provided by you as part of the application process and, if applicable, collected by us, and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.
1. responsible body in the sense of data protection law
Alight Consulting GmbH
Alte Landstrasse 27
D-85521 Ottobrunn
Tel: +49 89 416147699
Fax: +49 89 41614760
E-Mail: info@alight.eu
URL: www.alight.eu
2. contact details of our data protection officer
Ziad Lejmi
E-Mail: dataprivacy@alight.eu
3. purposes and legal basis of the processing
We process your personal data in accordance with the provisions of the European Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 DSGVO in conjunction with § 26 BDSG-neu and, if applicable, Art. 6 para. 1 lit. b DSGVO for the initiation or implementation of contractual relationships.
Weiterhin können wir personenbezogene Daten von Ihnen verarbeiten, sofern dies zur Erfüllung rechtlicher Verpflichtungen (Art. 6 Abs. 1 lit. c DSGVO) oder zur Abwehr von geltend gemachten Rechtsansprüchen gegen uns erforderlich ist. Rechtsgrundlage ist dabei Art. 6 Abs. 1 lit. f DSGVO. Das berechtigte Interesse ist beispielsweise eine Beweispflicht in einem Verfahren nach dem Allgemeinen Gleichbehandlungsgesetz (AGG). Erteilen Sie uns eine ausdrückliche Einwilligung zur Verarbeitung von personenbezogenen Daten für bestimmte Zwecke, ist die Rechtmäßigkeit dieser Verarbeitung auf Basis Ihrer Einwilligung nach Art. 6 Abs. 1 lit. a DSGVO is given. Consent given can be revoked at any time, with effect for the future (see section 9 of this data protection information).
If an employment relationship arises between you and us, we may, in accordance with Art. 88 DSGVO in conjunction with § 26 BDSG-neu, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).
4. categories of personal data
We only process data that is related to your application. This may be general personal data (name, address, contact details, etc.), information on your professional qualifications and school education, information on further professional training and, if applicable, other data that you provide to us in connection with your application.
5. sources of the data
We process personal data that we receive from you by mail or e-mail in the course of contacting you or your application, or that you send to us via headhunters, application platforms or universities.
6. recipient of the data
We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interests.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if we have your consent.
7. transfer to a third country
A transfer to a third country is not intended.
8. duration of data storage
We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is legally required or permitted. We store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.
In the event that you have consented to a longer storage of your personal data, we will store it in accordance with your declaration of consent.
If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will initially continue to be stored insofar as this is necessary and permissible and will then be transferred to the personnel file.
If applicable, you will receive an invitation to join our talent pool following the application process. This will allow us to continue to consider you in our selection of applicants for suitable vacancies in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent or any future consent.
9. your rights
Every data subject has the right of access under Article 15 of the GDPR, the right of rectification under Article 16 of the GDPR, the right of erasure under Article 17 of the GDPR, the right to restrict processing under Article 18 of the GDPR, the right of notification under Article 19 of the GDPR and the right to data portability under Article 20 of the GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DSGVO if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 DSGVO. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may need to retain certain data for a certain period of time in order to comply with legal requirements (see section 8 of this data protection information).
You are welcome to contact us to protect your rights.
10. necessity of the provision of personal data
The provision of personal data within the scope of application processes is neither legally nor contractually required. You are therefore not obliged to provide information about your personal data. However, please note that these are required for the decision on an application or the conclusion of a contract in relation to an employment relationship with us. If you do not provide us with any personal data, we will not be able to make a decision regarding the establishment of an employment relationship. We recommend that you only provide personal data in your application that is required to complete the application.
11. automated decision making
Since the decision on your application is not based exclusively on automated processing, no automated decision in individual cases within the meaning of Art. 22 DSGVO takes place.
