Information about the processing of your data according to articles 12, 13 and 14 GDPR

Data collection in the context of application procedures

Dear Applicant, we are happy to receive your application. Compliance with data protection regulations is a high priority for our company. We would therefore like to inform you about the collection of your personal data as part of the application process:

1. Contact details of the data controller

bpExperts GmbH

Frankfurter Str. 39 / Stadthof 16 A

63065 Offenbach am Main

Telefon: 0172/72 10 876

info@bpexperts.de

You can reach our Data Protection Officer at the above address or at data-privacy@bpexperts.de.

The contact details are also available on the Internet at: www.bpexperts.de.

2. Categories of processed data and its source

The processed categories of personal data that we collect and store as part of the application process include in particular

Master data: Name, Surname, Birthday
Contact data: address, phone number, E-Mail-address
Qualification data: Resume, certificates, further training certificates
Bank details: If applicable, your bank details for reimbursement of travel expenses
Other data, resulting from the application process (e.g. previous employment, religious affiliation, desired salary, hobbies, life status, disability status, as well as data you have provided yourself during the application process).

It may also involve special categories of personal data (sensitive data).

Your personal data is collected directly from you as part of the application process. In addition, we may have received data from third parties (e.g. job placement agencies, employment agencies, job centers).

3. Purpose and legal basis of the processing of personal data

a) Purpose and legal Basis

Purpose for the collection and processing of data are the possible establishment of an employment relationship and the protection of our legitimate interests. The primary legal basis for this is art. 6 (1) (b) GDPR in connection with § 26 (1) BDSG (German Data Protection Act) and art. 6 (1) (f) GDPR.

Our legitimate interests in this context are, for example:

optimizing the assignment of projects,
ensuring compliance with safety regulations, obligations, industry standards and contractual obligations,
the establishment, exercise or defense of legal claims,
preventing damage and/or liability of the company through appropriate measures.

b) Consent for storage of your data in our project related candidate pool

If you have provided your consent to process your personal data for storage in the candidate pool for the purpose of considering your application for a future application process, the legal basis is art. 6 (1) (a) GDPR in connection with § 26 (2) BDSG.

4. Transfer of personal related data

Within our company, only those persons and positions receive your personal data who are directly involved in the application process (e.g. executive management, HR department, specific departments). If necessary, data will be passed on to the employment agency or the job center (in the case of placement or reimbursement of travel costs). We may use service providers who support us on our behalf, for example, in the areas of IT, personnel recruiting or the archiving and destruction of documents and with whom separate contracts for order data processing have been concluded.

5. Transfer of personal data to a third country

Your personal data will not be transferred to a third country (countries outside the European Economic Area - EEA). If, due to personnel responsibilities that exist across national borders, we need to transfer your personal data to a third country outside the EEA, the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding corporate data protection rules or EU standard contractual clauses) are in place.

6. Information rights of the data subject

You can request information about the personal data stored about you at the above address. In addition, under certain conditions, you can request the correction or deletion of your data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, commonly used and machine-readable format.

7. Right of complaint

You have the right to submit a complaint to a data protection supervisory authority. The data protection supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und

Informationsfreiheit

Postfach 3163

65021 Wiesbaden

8. Right to withdraw consent

You have the right to withdraw your consent to the processing of data at any time. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9. Data retention time

We store your personal data until storage is no longer necessary or our legitimate interest in storage has expired. If you are not hired, this is usually the case 7 months after completion of the application process. If you have consented to the storage of your data in our candidate pool, we will store your personal data for 2 years after completion of the application process. In individual cases, however, certain data may be stored for longer (e.g. for travel expense accounting). In such cases, the period of storage depends on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years).

10. Profiling / Scoring

We do not perform any automated processing in context with the application processes and the related decision process.