Privacy Notice for Applicants
With this notice, we would like to inform you about how we, GSK STOCKMANN Rechtsanwälte Steuerberater Partnerschaftsgesellschaft mbB, registered office Munich, AG Munich PR 533 (hereinafter also “GSK STOCKMANN”, “we”, “us”), process your personal data during the application process.
In the following, we provide you with an overview of which personal data is processed in detail and how it is used, to whom we may transfer it, and about the data protection claims and rights to which you are entitled.
1. Who is responsible for data processing?
This privacy notice applies to data processing by us, GSK STOCKMANN, as the data protection controller within the meaning of the General Data Protection Regulation (Datenschutz-Grundverordnung – “DSGVO”).
If you have any questions, suggestions or complaints regarding data protection at GSK STOCKMANN, you can reach us in particular via the following contact details: GSK STOCKMANN Rechtsanwälte Steuerberater Partnerschaftsgesellschaft mbB, Karl-Scharnagl-Ring 8, 80539 Munich, e-mail: email@example.com.
You can also contact our data protection officer directly at any time. You can reach him at the above-mentioned data of GSK STOCKMANN as well as at firstname.lastname@example.org.
2. Which personal data do we process?
In the context of the application process, GSK STOCKMANN processes personal data (“applicant data”). In particular, this concerns information provided by you. Other information may be generated automatically by you using GSK STOCKMANN’s systems and communicating through them; for example, through system logins or sending e-mails. Applicant data may also be generated or made available by third parties.
In particular, the following applicant data is processed:
3. For which purposes and on which legal basis is the data processed?
As a rule, GSK STOCKMANN requires the data of applicants to carry out the application process. In this case, applicants are required to provide the data.
If the data is not required to carry out the application process, you will be informed in advance that the provision of information is on a voluntary basis and only with your consent and can therefore also be refused.
The legal basis for the specified processing of personal data within the context of the application process and the establishment of an employment relationship is Section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – “BDSG”) in conjunction with Section 88 of the DSGVO. In addition, applicant data may be processed to protect the legitimate interests of GSK STOCKMANN or a third party (Section 6 para. 1 lit. f of the DSGVO), whereby the legitimate interest lies within the scope of necessity for the purpose of the application. Furthermore, data processing may be necessary in individual cases for the assertion, exercise or defense of legal claims in judicial, administrative or extrajudicial proceedings (Section 6 para. 1 sentence 1 lit. f of the DSGVO).
Insofar as you have given us your consent to process personal data for certain further purposes, the data processing is lawful according to Section 6 para. 1 sentence 1 lit. a of the DSGVO. Consent given can be revoked at any time with effect for the future.
4. Do we pass on your personal data to third parties?
At GSK STOCKMANN, those departments and persons are authorized to access your personal data who require this data in the context of the application process. Within the scope of necessity, these are in particular the employees of the HR and IT departments as well as the corresponding lawyer of GSK STOCKMANN who is involved in the application process.
As a matter of principle, we do not pass on your personal data to third parties, unless otherwise stated in this privacy notice.
Your personal data will only be passed on to third parties as required in the context of the application process.
As part of the application process, we use technical service providers who process personal data on our behalf, e.g. IT service providers. These processors exclusively process the data on our behalf and according to our instructions. Above all, the processors are not permitted to use your personal data for their own purposes. The legal bases for such data processing are Section 26 (1) sentence 1 of the BDSG and Section 28 of the DSGVO.
We will also disclose your personal data to third parties if and to the extent that we are legally obliged to do so (Section 6 para. 1 sentence. 1 lit. c of the DSGVO), e.g. due to social law and tax law reporting obligations.
5. How long will your personal data be stored?
The criteria for determining the duration of storage are determined by the purpose of the data processing and possible subsequent statutory retention periods.
Unless a different retention period results from the other provisions of this privacy notice, we generally store your personal data for the duration of the application process. If an employment relationship is established, the applicant data will continue to be processed to the extent necessary for the establishment and implementation of the employment relationship. If no employment relationship is established, the applicant data will be deleted after 6 months at the latest, unless there are other legitimate interests or if you have consented to the further storage of the data.
Data will only be stored beyond this period if we are obliged to store the data for a longer period of time due to social insurance law, tax and commercial law or other legal obligations to retain and document data, or if you have consented to the data being stored beyond this period.
If we no longer need your data for the purposes described above, it will only be stored during the respective legal retention period and not processed for other purposes.
6. Which rights do you have?
You have the right to request information from us about your personal data processed by us. If the legal requirements are met, you have the right to demand that we correct, delete or restrict the processing of your personal data and the right to object to the processing of your personal data by us. If the legal requirements are met, you also have the right to demand that we send you the personal data that you have provided to us in a structured, common and machine-readable format or that we transfer it to another controller. If you have given your consent to the use of your personal data, you may revoke this consent at any time for the future. You can exercise your aforementioned rights by, among other things, contacting us or our data protection officer using the contact details listed in under 1. above.
You have the right to file a complaint about the processing of your personal data with the (competent) data protection supervisory authority.