Data protection notice for applicants to Schultze & Braun

Data protection notice for applicants to Schultze & Braun
(As at: June 2023)

Who is responsible for processing your data?

Schultze & Braun GmbH & Co. KG is jointly responsible for the processing of your personal data with the following appointing companies:

Schultze & Braun Rechtsanwaltsgesellschaft für Insolvenzverwaltung mbH

Schultze & Braun GmbH Rechtsanwaltsgesellschaft Wirtschaftsprüfungsgesellschaft

Schultze & Braun GmbH Rechtsanwaltsgesellschaft

Schultze & Braun GmbH Steuerberatungsgesellschaft Wirtschaftsprüfungsgesellschaft

Schultze & Braun GmbH Forensic Services Rechtsanwaltsgesellschaft

The jointly responsible companies can be reached at the business address Eisenbahnstraße 19-23, 77855 Achern, Germany (phone: +49 7841 7080, e-mail: mail@schultze-braun.de). All companies together are hereinafter referred to as "Schultze & Braun".

How can you reach the data protection officer?

You can reach the Schultze & Braun data protection officer at the above address or by E-mail directly at: dsb@schultze-braun.de.

What do we need your data for?

(A1) The personal data provided by you in connection with your application will be processed by Schultze & Braun in order to assess your suitability for employment in one of the above-mentioned employment companies and to conduct an application procedure. The following data will be collected and processed by Schultze & Braun in this context:

Mandatory data:

Title

First and last name,

Street, house number, postcode/city

E-mail address

Desired location (for speculative application)

Type of work in which you are interested (in the case of speculative application)

Type of training in which there is interest (in the case of an application for training)

Resume

Testimonials

Other information to be collected during the selection process

For more details, please refer to A3.

Voluntary information:

Title

Telephone number

Photo

 

In addition, with the applicant's consent, Schultze & Braun will transfer the data to the applicant pool set up for this purpose.

On the basis of the information provided by you, we will check whether an invitation to an interview can be considered as part of the selection process. If there is a basic suitability, further personal data may be collected which is required for a selection decision.

For more details, please refer to A2.

(B1) Your personal data may also be processed for the purpose of defending against asserted legal claims arising from the application process.

For more details, please refer to B2.

(C1) If an employment relationship is established, Schultze & Braun will process personal data already collected for the purposes of the employment relationship.

For more details, please refer to C2.

(D1) Schultze & Braun processes personal data for the purpose of conducting and billing online application interviews (video conferences).

In addition to this data protection notice for applicants at Schultze & Braun, the data protection notices for participation, which can be accessed at www.schultze-braun.de/dswebex, also apply for participation in a Cisco Webex online meeting of Schultze & Braun, which are attached to each video conference invitation in the form of a deep link. Alternatively, you may request the privacy notice for participation in a Cisco Webex online meeting from Schultze & Braun.

For more details, please refer to D2.

What legal grounds exist for the processing?

(A2, C2)

Data processing based on the decision to establish an employment relationship (Section 26 BDSG). Data processing based on consent (Art. 6 para. 1 letter a DSGVO), if you agree to the inclusion of your data in the applicant pool.

For more details, see A3, C3, D3.

(B2) The exercise of legitimate interests as stated above under (B1) (Art. 6 para. 1 letter f DSGVO). More details on this under B3.

(D2) In situations where job interviews should not or cannot be conducted as a face-to-face event, online job interviews are offered. Conducting online application interviews is in the legitimate interest of both parties so that the application process can be completed (Art. 6 (1) (f) DSGVO).

More details on this under D3.

Are your data passed on to other recipients?

(A3, B3, C3)

Schultze & Braun uses an applicant portal to publish job advertisements with the aim of enabling applicants to apply directly online, by e-mail or by post. The data protection information of the operator of the applicant portal applies to the protection of personal data, e.g. stored in the applicant profile on the applicant portal.

Schultze & Braun operates its own applicant portal on the server of BITE GmbH, Magirus-Deutz-Straße 12, 89077 Ulm (hereinafter: BITE). This cooperation is based on an order processing relationship, which establishes a strict obligation of BITE to issue instructions to Schultze & Braun. BITE's data protection information can be found at www.b-ite.de/legal-notice.html.

For more details, see A4, B4, C4.

(D3) Schultze & Braun uses the Cisco Webex system, which is provided by Telekom Deutschland GmbH as an order processor.

For more details, see D4.

Schultze & Braun career page

From the Schultze & Braun applicant portal at BITE, you can return to the careers page of the Schultze & Braun homepage via "To overview". The information on the processing of your data when calling up and using the Schultze & Braun homepage can be found here: www.schultze-braun.de/rechtliches/datenschutz.

 

How long will your data be stored for?

A4) As a rule, the data will be stored for six months after completion of the application process. In the event that you have agreed to further storage of your personal data, your data will be transferred to the established applicant pool. There, the data will be deleted after 12 months.

(B4) As a rule, the data will remain stored for six years after the conclusion of any dispute proceedings.

(C4) As a rule, the data remains stored for six years after termination of the employment relationship. Employees are informed about details in a separate data protection notice for employees.

(D4) The data is generally deleted if further storage is not necessary. Storage is necessary if the focus is on the fulfillment of contractual services or the assertion of or defense against warranty claims. In the case of statutory retention obligations, deletion will only be carried out after expiry of the respective retention obligation.

Are your data forwarded to a non-EU state or to an international organisation?

(A-C) No.

(D) Yes. Data centers for video conferencing conducted by Schultze & Braun using the Cisco Webex system are located in London, United Kingdom. West Unified Communications Ltd. is a provider headquartered in the U.S. and provides services for CCA-SP access to Cisco Systems, Inc. hosted platforms for the Cisco Webex system. Locations of the services are Great Britain (London), the USA and Singapore (APAC). Processing of personal data thus also takes place in a third country. Telekom, as the processor of Schultze & Braun, has agreed product-dependent order processing contracts and data protection agreements with Cisco Systems, Inc. and West Unified Communications Ltd. based on the EU standard contractual clauses. These data protection agreements are also valid in the relationship with the client (here: Schultze & Braun).

 

What rights do you have?

You have the right to obtain information about the personal data processed by Schultze & Braun about you. In the event of a request for information - of whatever nature - further proof of identification may be required. Furthermore, you have a right to correction, deletion or restriction of the processing of your personal data, insofar as there is a legal basis for this.

Within the framework of the legal requirements, you have the right to object to the processing of your personal data. The same applies to the right to data portability.

Consent given to Schultze & Braun for the processing of personal data may be revoked at any time. The processing remains lawful until revoked.

Which regulatory authority can you complain to?

You can lodge a complaint with any data protection supervisory authority within the EU.