This data privacy statement, which refers exclusively to data collected as part of the online application process, is to inform you about how your personal data that is collected as part of the online application process is handled at our end.

The controller under data protection law is: Personio SE & Co. KG Seidlstraße 3 80335 München Tel.: +49 (89) 1250 1004

Entry in the commercial register Commercial register entry number: HRA 115934 Jurisdiction: Munich, Register court: District Court of Munich

Sales tax identification number: DE351718597 Data Protection Officer contact: privacy@personio.com

Personal data means any information concerning the personal or factual circumstances of an identified or identifiable individual. This includes information such as, for example, your name, address, telephone number and date of birth, but also data relating to your specific career etc. by reference to which a specific individual can be identified with reasonable effort. However, information which cannot be (in)directly associated with your real-life identity is not personal data.

If you apply to us electronically, i.e. via e-mail or using our online form, we will collect and process your personal data for the purpose of executing the application process, contacting you to invite you to an interview or informing you of your application status and preparing contracts (performance of the contract Art 6 (1)(b) GDPR).

By submitting an application via our recruitment website, you express your interest in taking up work with us. In this context, you transmit personal data, which we will use and store exclusively for the purpose of your application process. Only authorized HR staff and/or staff involved in the application process have access to your data.

In particular, the following data is collected during this process:

• Name (first and last names)

• E-mail address

• Phone number

• LinkedIn profile (optional)

• Channel through which you have found us

• You have also the option of uploading meaningful documents such as a cover letter, your CV and reference letters. These may contain additional personal data such as date of birth, address etc.

We will also record your online interview with us.This enables us to review the interview again and makes our decision‑making process easier. The processing of the recordings is based on our legitimate interest in an efficient and objective application process (Art 6 (1)(f) GDPR). 

You can object to the recording at any time. You will find the option to object in the email with which you receive the invitation link to your interview.  

Your data will be stored for a period of 180 days after the application process has been concluded (statutory retention period). After this period, we are required to delete or anonymize your data. In case of anonymization, the data will only be available to us in the form of so-called metadata, without any direct personal reference, for statistical analysis (for example, share of male and/or female applicants, number of applications per specified period of time etc.). 

If you give your explicit consent, we will, by way of exception, store your data for a longer period of up to two years in order to contact you if we have new job opportunities that may be of interest to you.

Should you be offered and accept a position with us during the application process, we will store your personal data, collected as part of the application process for the duration of your employment and an additional statutory retention period of three years following your departure.

For the purpose of our recruitment process, personal data is processed on our behalf on the basis of contracts pursuant to Art. 28 GDPR, in particular by hosting providers or providers of applicant management systems.

Where any of these service providers are located outside the EU, the transfer takes place in accordance with the principles set out in Art 44 et seq GDPR.

As part of our recruitment process, we use an automated processes, to increase efficiency. However, there is no automated individual decision-making within the meaning of Art. 22 GDPR, i.e. the decision on your application is not based solely on automated processing but is always taken by a natural person.

If we as the controller process personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under Art 7(3) of the GDPR.

To assert your rights as a data subject in relation to the data processed during this online application process, please refer to our Data Protection Officer (see General information above). Lastly, you have the right to lodge a complaint.

EU, UK or Swiss individuals can report concerns to the following organisations: 

We prefer that you file your complaint with us, as we will make every effort to reach a resolution. Alternatively, you always have the option to lodge a complaint with a data protection supervisory authority at any time: Our competent authority is the Bavarian State Office for Data Protection Supervision, Promenade 18, D-91522 Ansbach, phone: +49 (0) 981 180093-0, email: poststelle@lda.bayern.de.

EEA -  You can find a list of supervisory authorities and their contact details for the EEA at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm 

United Kingdom - The Information Commissioner’s Office (“ICO”) is the supervisory authority in the United Kingdom. Contact details for the ICO can be found at https://ico.org.uk.  

Switzerland - The Federal Data Protection and Information Commissioner (“FDPIC”) is the supervisory authority in Switzerland. Contact details for the FDPIC can be found at https://www.edoeb.admin.ch/. 

DPF Complaint Resolution Process - In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Personio commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States.   If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint.  The services of JAMS are provided at no cost to you. Please note that our organisation is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. Under certain circumstances, you also may be able to invoke binding arbitration to address complaints about our compliance with DPF Principles.

We reserve the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.

In addition to this data privacy statement, please view our general data privacy statement at https://www.personio.com/privacy-policy/