We are pleased that you would like to apply for a job with us. In the following, we explain how we process your personal data in the context of an application and provide further relevant Information
1. Who is responsible for processing your personal data?
BioSpring GmbH, Alt Fechenheim 34, 60386 Frankfurt, Germany (hereinafter referred to as "we") is the controller within the meaning of the EU General Data Protection Regulation ("GDPR"). The legal representatives of the controller are Dr. Sylvia Wojczewski and Dr. Hüseyin Aygün.
2. Data protection officer
For all questions related to the processing of your personal data and the exercise of your rights under the GDPR, you can consult our data protection officer, who can be reached at the following email address:
3. For what purposes and on what legal basis do we process personal data?
We process your personal data for the purpose of your application for employment, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is BDSG § 26 (1) in conjunction with (8) sentence 2. Furthermore, we may process your personal data insofar as this is necessary for the defence of asserted legal claims against us arising from the application process. The legal basis for this is GDPR Art. 6 (1) (f); the legitimate interest is, for example, a duty to provide evidence in proceedings under the AGG. If an employment is established between you and us, we may process the personal data already received from you for the purposes of the employment in accordance with BDSG § 26 (1) if this is necessary for the performance or termination of the employment or for the exercise or fulfilment of the rights and obligations of the works council resulting from a law, a collective agreement or a company agreement.
4. What categories of personal data do we process?
We process data related to your application. This may be general personal data (such as name, address and contact details), information on your professional qualifications and school education or information on further professional training or other information that you provide to us in connection with your application. We may also process job-related information that you have made publicly available, such as a profile on professional social media networks.
5. Who are further recipients of your personal data?
We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal bases set out in section 3. Furthermore, personal data is processed on our behalf on the basis of contracts in accordance with GDPR Art. 28, in particular by host providers or providers of applicant management systems.
6. Is the transfer to a third country intended?
A transfer to a third country is not intended.
7. How long will your data be stored?
We store your personal data for as long as is necessary for the decision on your application. If your application does not result in employment, we may continue to store data beyond this, insofar as this is necessary for the defence against possible legal claims. In this case, the application documents will be deleted three months after the rejection of your application, unless longer storage is necessary due to legal disputes.
8. What rights do you have?
As an applicant, you are generally entitled to the following data protection rights. To exercise these rights, you can contact us or our data protection officer at any time using the data specified in section 1 and 2:
a. Right of access:
You have the right to obtain information about your personal data processed by us and to request access to and/or copies of your personal data. This includes information about the purpose of the use, the category of data used, its recipients and persons authorised to access it as well as, if possible, the planned duration of the data storage or, if this is not possible, the criteria for determining this duration;
b. Right to rectification:
You have the right to request that we rectify any inaccurate personal data related to you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
c. Right to object of processing:
Insofar as the processing of personal data relating to you is carried out on the basis of GDPR Art. 6 (1) (f), you have the right to object to the processing of such data at any time on reasons relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
d. Right of withdraw a consent:
If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal. To do this, you can contact us or our data protection officer at any time using the details given above.
e. Right to erasure:
You have the right to request that we erase personal data relating to you without undue delay and we are obliged to erase personal data without undue delay if one of the following reasons applies:
The personal data is no longer necessary for the purposes for which it was collected or otherwise processed
You object to the processing in accordance with section 8 (c) and there are no overriding legitimate grounds for the processing.
The personal data have been processed unlawfully.
The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
This does not apply if the processing is necessary:
For compliance with a legal obligation which requires processing under Union or Member State law to which we are subject.
For the assertion, exercise or defence of legal claims.
f. Right to restriction of processing:
You have the right to request us to restrict processing if one of the following conditions is met:
The accuracy of the personal data is disputed by you, for a period of time that enables us to verify the accuracy of the personal data,
the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims, or
we have lodged an objection to the processing pursuant to section 8 (c), as long as it has not yet been determined whether our legitimate grounds outweigh yours.
Where processing has been restricted in accordance with section 8 (e), such personal data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State. If you have obtained a restriction on processing, we will inform you before the restriction is lifted.
g. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
9. Necessity of providing personal data
The provision of personal data is not required by law or contract, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract of employment with us. This means that if you do not provide us with personal data when applying for a job, we will not enter into an employment relationship with you.
10. No automated decision-making
There is no automated decision-making in individual cases within the meaning of GDPR Art. 22, i.e. the decision about your application is not based exclusively on automated processing.
Date: 07.12.2021