Privacy information for applicants

pursuant to Art. 13 GDPR

Introduction

Thank you for your interest in our company. In order to evaluate your application, we need application documents and usually conduct personal interviews. The protection and confidential handling of these often very sensitive personal data is of high importance to all involved in the hiring process. The information below explains how we process your personal data in the application process and which rights you have as a data subject.

We process personal data (for example name, address or information from application documents) in accordance with the GDPR and the applicable national data protection laws.

Controller

Controller in the meaning of the GDPR is:

WolkenWerk GmbH

Alt Langenhain 8 65719 Hofheim am Taunus

Phone: 06192 / 9333360 E-Mail: info@wolkenwerk.de

Legal representative: Tobias Klonk

Purpose and legal basis of processing

We process your personal data for the personnel selection process to decide on the establishment of an employment relationship. The legal basis is Art. 88 GDPR in conjunction with § 26 BDSG and, where applicable, Art. 6(1)(b) GDPR for the initiation or performance of an employment contract.

Furthermore, we may process personal data where this is necessary to comply with legal obligations (Art. 6(1)(c) GDPR) or to defend against legal claims (Art. 6(1)(f) GDPR). An example of our legitimate interest is the need to provide evidence in proceedings under the General Equal Treatment Act (AGG).

If the application process results in an employment relationship with us, we may further process the personal data already received from you for purposes of the employment relationship insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of rights and duties of employee representation arising from law, collective agreements or company agreements.

Types of personal data processed and their origin

We process personal data provided in your application documents, during interviews or in other contacts in connection with your application. This may include:

• Contact and address data (e.g. name, address, telephone number, e‑mail)
• Personal master data (e.g. nationality, date and place of birth, gender, marital status)
• Family information (marital status, spouse/partner, children)
• Education and career history including qualifications and references
• Additional information on personality (motivation, skills, reasons for changing jobs, salary expectations, hobbies etc.)
• Portrait photos

Recipients and access rights

We disclose your data within our company only to departments and persons involved in filling the position. Your personal data may also be processed on our behalf by service providers under data processing agreements (Art. 28 GDPR), such as IT service providers and the operator of our applicant management system.

Disclosure to recipients outside the company will only occur if permitted or required by law, necessary to comply with legal obligations, or with your consent.

Storage period

We retain your personal data for as long as necessary to decide on your application. If an employment or training relationship is established, your data will be transferred to the personnel file as required. If no employment relationship results, we will delete the application data no later than six months after the end of the application process (e.g. after notification of rejection), unless a longer retention period is legally required or permissible (for example to assert or defend legal claims).

Obligation to provide personal data

There is generally no legal or contractual obligation to provide the requested data; however, a meaningful assessment of your application and possible hiring is not possible without sufficient documentation and evidence of qualifications.

Automated decision-making/profiling

We do not use automated decision-making or profiling in the application process.

Your rights as a data subject

You have the rights granted by the GDPR, including the right to request confirmation whether we process personal data concerning you (Art. 15), the right to obtain a copy of the data, the right to rectification (Art. 16), the right to erasure (Art. 17), the right to restriction of processing (Art. 18), and the right to data portability (Art. 20), subject to the conditions in the GDPR.

If processing is based on consent, you may withdraw your consent at any time. A withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with a supervisory authority (in Hesse: Hessian Data Protection and Freedom of Information Officer).

Contact details of the supervisory authority:

Hessian Data Protection and Freedom of Information Officer

PO Box 31 63 65021 Wiesbaden

Gustav-Stresemann-Ring 1 65189 Wiesbaden

Phone: 0611 1408-0

E‑Mail: poststelle@datenschutz.hessen.de