Data protection information for applicants (m/f/d) at s.boehme & co. KGaA

We are pleased that you are interested in our company and are applying or have applied for a position with us. In the following, we would like to provide you with information on the processing of your personal data in connection with your application.

Why does this document exist?

It is important for s.boehme & co. KGaA to observe the applicable regulations in data protection. The General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG) require us to fulfill comprehensive information obligations; we believe this is the right thing to do and take this responsibility very seriously. In this document, we therefore explain to you what information, so-called "personal data," we process about you as an applicant and inform you of the rights you have against s.boehme & co. KGaA with regard to your personal data.

This information is intended to be written in such a way that even legal laypersons can understand it - we hope we have succeeded. If you find any points unclear, please contact us - we will be happy to explain our extensive data protection measures to you personally.

Who is this data protection information primarily aimed at?

This information is aimed at applicants responding to one of our job advertisements or applicants who have applied to us with a so-called "speculative application" The information relates to the processing of personal data as part of the application process. Please note that there is a separate privacy policy for our website, in which job advertisements may be embedded, which explains the processing of personal data on our website, e.g. the use of cookies or other applications that may process personal data.

Our overriding principle for the processing of your personal data is: we will only process personal data if a legal requirement allows us to do so or if the data subject, for example you, has given us express consent to do so.

Who is responsible for data processing?

The data controller for the processing of your personal data is our company, s.boehme & co. KGaA, Metzlerstraße 21, D-60594 Frankfurt am Main, telephone +49 69 8600 7227 0, fax +49 69 8600 7227 7, realestate@sboehme.com. When we write "we", "us" or "the company" in this data protection information, we always mean our company, s.boehme & co. KGaA.

We are available at all times to answer any questions you may have about the processing of your personal data. You can reach us either via our contact details above or simply and directly via e-mail address dsb@sboehme.com.

What data do we process?

If you send us an application, we will process the personal data submitted with your application.

In particular, we store all information that you provide to us as part of your application. This includes, in particular, contact data, application documents (e.g. cover letter, resume, education and work experience, references), desired salary, desired employment and availability date. We may also store any other data you provide to us, such as correspondence you have with us during the application process. This may also include special categories of personal data such as health data if you provide it to us.

We may also receive personal data about you from other sources, such as recruitment agencies, websites, references you provide and other publicly available sources on the internet. This may also include, for example, data that you have obviously made public yourself in an online profile. If you transmit data to us via third-party websites, e.g. from job boards such as Stepstone or Monster, we also process your personal data in the process.

For what purposes and on what legal basis do we process personal data?

We process the data in order to check your suitability for the job (or other open positions in our companies, if applicable) and to carry out the application process.

The primary legal basis for processing your personal data in an application procedure is Section 26 of the BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.

If you have agreed that we may include your data in our applicant pool in order to consider you for further job offers, if applicable, we will process your data on the basis of your consent pursuant to Art. 6 (1) a) GDPR.

Should the data be required for legal prosecution after completion of the application process, data processing may take place on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. Our interest then consists in the assertion or defense of claims.

Is there an obligation to provide personal data?

The processing of your personal data is necessary for the execution of your application. However, you are under no legal or contractual obligation to provide personal data for application purposes. Please note, however, that if you do not provide us with required information, we will not be able to process your application.

For how long is personal data stored?

Applicants' data is deleted after 6 months in the event of rejection.

In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years.

If you are awarded a position during the application process, your data will be transferred from the applicant data system to our HR information system. In this case, your application data will be processed for the purpose of implementing the employment relationship or stored for longer periods in accordance with statutory regulations and, if permitted by a statutory provision, processed and used.

Who receives personal data from us?

After receipt of your application, your applicant data will be viewed by the respective person responsible for the application. Suitable applications are then forwarded internally to the person responsible for the respective open position. Within the company, only those persons who need to access your data for the proper conduct of our application process have access to it.

Is data transferred to countries outside the EU or to international organizations?

Personal data is processed exclusively within the EU or the European Economic Area; we do not plan to transfer data to third countries.

Do we use automated decision-making?

As a matter of principle, we do not use automated decision-making in the sense of Article 22 GDPR, which includes profiling in particular. If we do use such procedures in individual cases, we will inform the data subjects about this to the extent required by law.

Your right to withdraw consent

The General Data Protection Regulation (GDPR) grants you an extensive right to withdraw your consent in Art. 7. It is particularly important that

the granting of consent to us is always voluntary;
if you do not wish to give us consent or wish to withdraw consent you have given, this may be associated with certain consequences, about which we will inform you before or when you give your consent,
consent given to us can be revoked at any time with effect for the future. You can do this, for example, by sending us a message by mail, fax or e-mail via one of the contact options listed above under "Who is responsible for data processing?".

What rights do you also have as a data subject?

Every data subject has the right

To be informed about the personal data stored about them in accordance with Article 15 GDPR;
to correction of incorrect or incomplete data in accordance with Article 16 GDPR;
to erasure of personal data, pursuant to Art. 17 GDPR;
to restriction of processing, pursuant to Art. 18 GDPR;
to data portability, pursuant to Art. 20 GDPR, and
to object to the processing of personal data concerning you, pursuant to Art. 21 GDPR.

To exercise your rights, you or the data subject may contact us at any time, e.g. via one of the contact channels mentioned in the section "Who is responsible for data processing?".

If you have any questions regarding the processing of personal data, you or the data subject may contact our data protection officer at any time.

A data subject is also entitled to lodge a complaint with a competent data protection supervisory authority pursuant to Art. 77 GDPR. The contact details of all German supervisory authorities can be found under this link at the Federal Commissioner for Data Protection and Freedom of Information (BFDI): https://www.bfdi.bund.de

Thank you for your interest in our data protection information.

Yours s.boehme & co. KGaA