Data protection information
The protection of your personal data during processing throughout the entire application process is an important concern for us.
This privacy policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") in the context of the provision of our services. With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Person responsible
Processors in the application process
Your personal data is processed on our behalf by the company
PERBILITY GmbH,Starkenfeldstraße 21,
96050 Bamberg
Phone: +49 951 408 331-00
https://www.perbility.de
processed in accordance with the relevant legal requirements, in particular the GDPR. The client is responsible for data protection.
Personal data and purposes of processing
The subject of data protection is personal data (Art. 4 No. 1 GDPR). This is all information relating to an identified or identifiable natural person ("data subject"). This includes, for example, information about personal or factual circumstances, such as name, address, email address or telephone number, etc.
When you visit the website, the following technically required data is processed:
- IP address of the end device you are using
- Name of the retrieved file
- Date and time of retrieval
- Amount of data transferred
- Status of the call (successful / unsuccessful)
- Browser type and version and the operating system you are using
- URL of the previously accessed page (so-called "referrer URL")
The legal basis for the processing of the above-mentioned personal data on this website is Art. 6 para. 1 lit. f) GDPR.
In the event of unlawful use of this website, this data may be used to clarify possible infringements.
We analyse information for statistical purposes and to improve digital services without creating personal user profiles.
We process personal data that you provide to us yourself as part of the application process:
- Personal master data (e.g. applicant name, address, date of birth)
- Communication data (e.g. telephone, e-mail, IP addresses)
- Data from the applicant's CV (e.g. professional career, sideline activities, leisure activities)
- Special categories of personal data pursuant to Art. 9 GDPR such as severe disability, photo with reference to health status, ethnic origin
- Results of selection procedures (e.g. tests, interviews)
- Process data (e.g. status, deadlines)
Your personal data will be processed electronically solely for the purpose of processing your application.
The legal basis for the processing of your application is Art. 6 para. 1 lit. b) GDPR. By providing your data and participating in the application process, you authorise us to process your data for these purposes.
If necessary, you also give us your consent in accordance with Art. 6 para. 1 lit. a) GDPR for longer-term processing if your personal data is to be stored in the talent pool. In this case, consent is given by ticking a checkbox.
Processing of your applicant data
During the application process, employees from the HR department, the relevant specialist department and the responsible body (works council, representative body for severely disabled employees if applicable) will have access to your personal data. Your personal data will only be disclosed to a restricted group of users. If your application is successful, it may be necessary to transfer your data to third parties due to legal regulations (e.g. to pension providers).
Use of AI applications
Systems that use artificial intelligence can also be used, from the publication of a job advertisement and the automated pre-selection of applicants to the analysis of job interviews and the use of chatbots.
These AI systems offer automation options in the application process.
CV parsing/resume parsing refers to the automated reading of applications (especially cover letters and CVs). The extracted data is automatically transferred to an application management system. This technology can be used. The success of an application is not finally decided solely on the basis of automated processing. According to Art. 22 para. 1 GDPR and the ECJ judgement, decisions with legal effect may only be made by humans.
Storage period or criteria for determining the storage period
The general statutory retention and deletion periods apply. We will delete your data in accordance with the relevant statutory provisions after completion of the respective recruitment process.
It will then no longer be possible for our company to access and use your personal data.
Your data will regularly be deleted six months after the end of the application process if no employment contract is concluded, unless you have given your consent for further storage. See also Talent Pool below.
Data transfer to third countries
Data transfer of applicant data to other EU countries does not take place. An exception is the transmission of your telephone number for sending a notification by SMS via a processor.
Rights of the data subject
Right to information:
You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with the legal requirements.
Right to rectification:
In accordance with the legal requirements, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
Right to erasure and restriction of processing:
In accordance with the legal requirements, you have the right to demand that data concerning you be deleted immediately. Alternatively, you can also request that the processing of the data be restricted in accordance with the legal requirements.
Right to data portability:
You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with the legal requirements or to request its transmission to another controller.
Complaint to the supervisory authority:
You also have the right to lodge a complaint with the competent supervisory authority in accordance with the statutory provisions.
Right of cancellation:
You have the right to withdraw your consent with effect for the future.
Right of objection:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR, including profiling based on those provisions.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Obligation to provide data
Fields marked with an * are mandatory fields that we require for the application process. Fields not marked with an * can be filled in voluntarily. You are responsible for all content of your online application, such as photos, and must ensure compliance with legal requirements, such as trademark, copyright, personality or other third-party rights.
If you do not provide us with the mandatory information described in the previous section, it is unfortunately not possible for you to apply to us electronically via this careers page. You have the option of applying to us by post.
Talent pool
A talent pool is a database that contains profiles of applicants, employees, freelancers or other external contacts who may be considered for a position.
If you cannot be offered a suitable position at the time of your application, the data you provide/transmit during the entire application process may also be processed in the talent pool after completion. This is done to establish contact for professional purposes and for possible consideration for a subsequent job offer. Your data will be deleted after three years.
Embedded content & third-party cookies
We integrate content and functions from third-party providers on our job exchange - where necessary or where you have called them up. When you access a page with embedded content, data may be transferred to the respective provider and cookies or similar technologies (e.g. pixels, local storage) may be used. This may include, in particular, your IP address, device and browser information, referrer URL, date/time of access and, if applicable, usage data (e.g. interactions with the embedded content). Depending on the provider, processing may also take place in third countries (e.g. outside the EU/EEA).
We use or can integrate the following services:
- YouTube (Google Ireland Limited or Google LLC): Embedding of videos. When the player is loaded, cookies may be set and data may be transferred to YouTube/Google.
- Vimeo (Vimeo.com, Inc.): Embedding of videos. When the player is loaded, cookies may be set and data may be transferred to Vimeo.
- Mapbox (Mapbox Inc.): Display of interactive maps. When loading the map, data can be transmitted to Mapbox and technical identifiers can be used.
- StoryBox (StoryBox GmbH): Embedding of videos/story elements. When loading the content, cookies or similar technologies may be used and data may be transferred to Storybox.
If this content is not absolutely necessary for the provision of the website, it will only be used with your consent (Art. 6 para. 1 lit. a GDPR).
If the integration is necessary to provide a function you have expressly requested (e.g. playing a video you have clicked on), the processing may also be carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract/contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in a user-friendly presentation and secure provision of our content). Further information, in particular on storage duration, recipients and your rights, can be found in the data protection notices of the respective providers and in the settings of our consent management.