We are delighted that you are interested in applying or have already applied for a position at our company. We wish to provide you with the following information concerning the processing of your personal data in relation to the application.

Name and contact details of the Controller and the Data Protection Officer

The Controller according to Art. 4(7) GDPR (EU General Data Protection Regulation) is:

Carpus+Partner AG
represented by the CEO M.Re. Dipl.-Ing. Architect Tobias Ell
Forckenbeckstr. 61
52074 Aachen | Germany
Tel +49 (241) 88 75-0
Mail info@carpus.de

The Data Protection Officer for Carpus+Partner AG can be contacted at the above address, for the attention of the Data Protection Officer or at datenschutzbeauftragter@carpus.de.

Processing of personal data and purpose of the processing

We process the data you sent us in relation to your application in order to review your suitability for the position (or, if applicable, other vacant positions at our company) and to complete the application process.

The data are exclusively processed at data centres in the Federal Republic of Germany.

Legal basis

The legal basis for the processing of your personal data in this application process is primarily Section 26 BDSG-neu (new German Federal Data Protection Act). According to this, processing of the data required in relation to the decision on the establishment of an employment relationship is permitted.

Should the data be further required for the assertion of legal rights after the application procedure has been concluded, data processing can be carried out on the basis of the prerequisites under Art. 6 GDPR, in particular on the safeguarding of legitimate interests according to Art. 6(1) lit. f) GDPR. Thus, our interest is in the assertion of or defence against claims.

Insofar as you consent to the application documents being stored beyond the current application procedure for consideration in later application procedures, according to Art. 6(1) lit. a) GDPR the consent forms the legal basis for the further processing of these data.

Retention period

Data from applicants shall be deleted after 6 months in the case of rejection.

In the case that you have consented to the further storage of your data, we shall include your data in our applicant pool. For these data, after two years have expired, whether there is a need for further storage shall be reviewed. Otherwise, the data are deleted.

If, in the context of the application procedure, you are offered a position, the data are transferred from the application system to our personnel information system.

Data sources

We process personal data received from you within the context of the application process. Under certain circumstances, we also receive personal data from service providers for the placement of applicants.

Recipients / disclosure of data

Internal positions
Your application data are reviewed by the personnel department after receipt of your application. Suitable applications are then forwarded internally to those responsible for the respective open position. The further process is then agreed. Within the company, only the persons who require your data for the proper execution of our application procedure and in the onboarding process have access to it.

External service providers
We use an IT service provider for general maintenance and support activities and an external service provider for legally compliant file and data destruction. It may happen that a service provider becomes aware of personal data. We select our service providers carefully – especially in regard to data protection and data security – and implement all necessary measures for reliable data processing.

Rights of data subjects

You have the right to information about the personal data concerning your person processed by us. In the case of a request for information that is not made in writing, please understand that we may then request information from you that proves that you are the person you claim to be. Furthermore, you have a right of correction or deletion or to restriction of the processing, insofar as you are legally entitled to this. Moreover, you have a right of objection to the processing within the context of the statutory provisions. The same applies for a right to data portability.

Right to object

Insofar as the data processing is based on a consent pursuant to Art. 6(1) lit. a) GDPR, you have the right to revoke your consent at any time with effect for the future. Notice of revocation does not affect the legality of the processing carried out before the revocation notice.

If you wish to assert your right of revocation or objection, it is sufficient to send an e-mail to datenschutzbeauftragter@carpus.de.

Right of complaint

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.

Last updated

April 2019