Are applications required by law

Dear applicant,

We are pleased about your interest in our company. In accordance with the requirements of Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR), we explain below the processing of the personal data transmitted by you as part of the application process and any personal data collected by us and your rights in this regard. To ensure that you are fully informed about the processing of personal data as part of the application process, please take note of the following information.

1. Responsible body in terms of data protection law
actori GmbH
Gundelindenstrasse 2
80805 Munich
Frank Schellenberg / Prof. Maurice Lausberg
[email protected] / [email protected]

2. Contact details of our data protection officer

Leopoldstrasse 21
80802 Munich
[email protected]

3. Purposes and legal basis of the processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR i. V. m. § 26 BDSG (new) and, if applicable, Art. 6 Paragraph 1 lit. b GDPR for the initiation or implementation of contractual relationships.

Furthermore, we can process personal data about you insofar as this is necessary to fulfill legal obligations (Art. 6 Para. 1 lit. c GDPR) or to defend against legal claims made against us. The legal basis for this is Article 6 (1) (f) GDPR, the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If you give us your express consent to the processing of personal data for certain purposes, the legality of this processing is given on the basis of your consent in accordance with Article 6 (1) (a) GDPR. Consent given can be revoked at any time (see section 9 of this data protection information). Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.

If there is an employment relationship between you and us, we can according to Art. 88 GDPR i. V. m. § 26 BDSG (new) process the personal data already received from you for the purpose of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of a law or a collective agreement, a company or Service agreement (collective agreement) resulting in rights and obligations of the interests of the employees is required.

4. Categories of personal data
We process data related to your application. This can be general data about you (such as your name, address and contact details), information about your professional qualifications and school education or information about professional training or other information that you provide to us in connection with your application.

5. Sources of the data
We process personal data that we receive from you by post or email when you contact us or your application, or that you transmit to us via other sources (e.g. by telephone).

6. Recipients of the data
We only pass on your personal data within our company to those areas that need this data to fulfill contractual and legal obligations or to implement our legitimate interests.

We can transmit your personal data to companies affiliated with us, as far as this is permissible within the scope of the purposes and legal bases set out in section 3 of the data protection information.

Your personal data will be processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that personal data is processed in accordance with the General Data Protection Regulation. The categories of recipients in this case are host providers and providers of applicant management systems and software.

Otherwise, data will only be passed on to recipients outside the company insofar as legal provisions allow or require this, the passing on is necessary to fulfill legal obligations or you have consented.

7. Transfer to a third country
As part of order processing, personal data is transmitted to the companies Salesforce and Dropbox on the basis of the provisions of the GDPR. A corresponding order processing contract has been concluded. Any further transfer to a third country is not intended.

8. Duration of data storage
We save your personal data as long as this is necessary for the decision about your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is legally required or permitted. In addition, we only save your personal data to the extent that this is required by law or in a specific case to assert, exercise or defend legal claims for the duration of a legal dispute.

In the event that you have consented to your personal data being stored for a longer period, we will store your personal data in accordance with your declaration of consent.

If there is an employment relationship following the application process, the data will initially continue to be stored as far as necessary and permissible and then transferred to the personnel file.

If necessary, following the application process, you will receive an invitation to join a talent pool. This enables us to include you in our selection of applicants for future suitable vacancies. If you give your consent, we will save your application data in our talent pool in accordance with your consent or, if applicable, future consent.

9. Your rights
Every person concerned has the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art according to Art. 19 GDPR and the right to data portability from Art. 20 GDPR.

In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you are of the opinion that your personal data is not being processed lawfully. The right of appeal exists without prejudice to any other administrative or judicial remedy.

If the processing of data is based on your consent, you are entitled according to Art. 7 GDPR to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may have to store certain data for a certain period of time in order to meet legal requirements (Section 8 of this data protection information).

Right to object

Insofar as the processing of your personal data takes place on the basis of Art. 6 Para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object at any time for reasons arising from your particular situation in accordance with Art. 21 GDPR to request the processing of this data. We will then no longer process this personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

To protect your rights, you can contact us at any time using the above data.

10. The need to provide personal data
The provision of personal data in the context of application processes is neither legally nor contractually required. So you are not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or the conclusion of a contract for an employment relationship with us. In the context of your application, however, you should only provide personal data that is necessary for the acceptance and implementation of the application. If you do not provide us with any personal data in an application, we cannot make a decision on the establishment of an employment relationship.

11. Automated decision making
The decision about your application is not based solely on automated processing. There is therefore no automated decision in individual cases within the meaning of Art. 22 GDPR.

Status: June 2018