Skip to main content

Processing of (personal) data by the entity in charge of the online application process


Privacy Policy for applicants (f/m/x)

   
This privacy policy informs you about how we process your personal data when you apply for a job we have advertised. It also describes your data protection rights.

This data protection statement applies in addition to our existing general data protection statement at www.allane.com/datenschutz, which provides you with specific information on how we process your personal data when you visit our website or when you do not apply for a job.
   

Responsible entity

The  responsible party within the meaning of data protection law is:
Allane SE
Dr.-Carl-von-Linde-Strasse 2
82049 Pullach
Tel.:089 74444 0

Our data protection officer can be reached at datenschutz@allane.com

Purposes

Your personal data will be processed exclusively for the following purposes:

  • Initiation or establishment of the  employment relationship.    
  • If necessary, for the defense of legal claims

Data

In particular, the following data will be collected:

  • Master data and contact details (e.g.,  first and last name, country, e-mail, telephone number).    
  • Application details (e.g., desired  salary, motivation, information on disability (only if stated or relevant))    
  • Application materials (e.g., resume,  cover letter, qualifications, etc.).    
  • Results of the recruiting process  (e.g., video interviews, code challenge, case challenge, trial workday, etc.).    
  • References, if applicable.

We may also  obtain the above data about you from other sources, such as staffing companies.  We may also receive data that you have made public on career-oriented social  networks, such as LinkedIn, or that you submit to us via other websites, such  as Stepstone, Monster, Jobbörse, or from other publicly available sources (only  if the data has relevance to your professional life). 
    

Legal basis

We collect and process your personal data to offer advertised positions and to carry out the selection process. The legal basis for the processing is Art. 6 para. 1 p.1 lit. b Alt. 1 DSGVO and § 26 para. 1 p. 1 BDSG.

If we obtain information from your public profile on professional social networks, we base the processing on our legitimate interest in forming a decision-making basis for establishing an employment relationship with you. The legal basis is Art. 6 (1) f) DSGVO in conjunction with Art. 9 (2) e) DSGVO.

Furthermore, we may process personal data about you to the extent necessary to defend asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 (1) b) and f) DSGVO. The legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Transfer of data to Personio

The data transmitted in the context of your application will be transferred via TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers a personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is our order processor in this context according to Art. 28 DSGVO. The basis for the processing here is an order processing contract between us as the controller and Personio.

Further recipients

We may transfer your personal data to companies affiliated with us, as far as this is permissible within the framework of the purposes and legal bases set out above.

Furthermore, personal data may be processed on our behalf based on contracts pursuant to Art. 28 DSGVO, this in particular by providers of systems for applicant management and applicant selection procedures.

The transfers may involve the transfer of personal data to recipients outside the European Union / European Economic Area. To ensure appropriate safeguards to protect the transfer and processing of personal data outside the EU, the transfer of data and data processing outside the EU is carried out on the basis of appropriate safeguards pursuant to Art. 46 et seq. DSGVO, in particular by concluding so-called standard data protection clauses pursuant to Art. 46 para. 2 lit. c DSGVO.

Talent pool

As part of our talent pool, we offer you the option of storing your data for a longer period so that it can be considered in future job assignments. If your application is considered for another vacant position with us, we will forward your application documents to the relevant department and, if necessary, subsequently contact you by telephone or e-mail.

If you do not give your consent to the inclusion of your data in our talent pool, this will not result in any disadvantages for you in the current application process.

The processing of your data is based on Art. 6 para. 1 a), 7 DSGVO in conjunction with. § 26 para. 2 BDSG. We reserve the right to also process your data to protect legitimate interests of us or third parties. The legal basis is Art. 6 para. 1 f DSGVO in conjunction with. § 26 para. 1 p. 2 BDSG.

Your declaration of consent covers the processing of all data that you provide to us as part of the application process.

Unless you expressly give us renewed consent to process your data, we will completely anonymize your data after 24 months at the latest. We will not notify you of the anonymization of your data.

Rights

If personal data is processed by us as the controller, you as the data subject have, depending on the legal basis and purpose of the processing, certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), including, where applicable, in particular
- Right to information (Art.15 DSGVO),
- Right to rectification (Art.16 DSGVO),
- Right to erasure (Art.17 DSGVO),
- Right to restriction of processing (Art.18 GDPR),
- Right to data portability (Art. 20 DSGVO),
- Right to object (Art. 21 DSGVO).
- Right to lodge a complaint with the supervisory authority (Art. 77 GDPR).

If the processing of personal data is based on your consent, you have the right to revoke this data protection consent in accordance with Art. 7 III DSGVO.

Please contact our data protection officer to assert your data subject rights about the data processed in this online application procedure (see section 2.).

Retention period

We generally store your personal data for a period of 6 months after your last login to your application profile. This is necessary for the burden of proof in proceedings under the General Equal Treatment Act (German AGG). Longer storage would be necessary, for example, in the possible event of defending your own legal claims.

In addition, you can request the deletion of your application profile or the withdrawal of your application by contacting us at datenschutz@allane.com.

If your application is successful, we will store your personal data for the entire duration of your employment in accordance with the Privacy Policy for Employees, which we will provide to you upon acceptance of employment.

If you receive an offer of employment with us as part of the application process and accept it, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

Final provisions

We reserve the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to reflect changes in the application process or similar. The new data protection statement will then apply to a renewed visit to this recruiting site or a renewed application.

In addition to this privacy policy, you can view our general privacy policy at www.allane.com/datenschutz.

Status March 2023
      
The following part refers to the privacy policy of the website operator Personio

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.