Who is responsible for data processing?
Phone: +352 74 92 921
Fax: +352 74 00 44
You can reach our data protection officer at:
DURY Compliance & Consulting GmbH
Obertorstraße 1, 66111 Saarbrücken (Germany)
Phone: +49 681/9580440
What data is processed and for what purposes?
We process your personal data to check your application and your suitability for the advertised position and to carry out applicant management.
This involves the following data:
- Personal data (name, address, date of birth, place of birth, nationality, religious denomination, marital status, number of children, application photo, etc.).
- Contact details (telephone number, e-mail address)
- Application documents (cover letter, CV, certificates, supporting documents, etc.)
- Information on training/studies, previous professional activities, qualifications, knowledge, skills, sideline activities, voluntary work, hobbies, etc.
- Further information and documents from the application process
- Residence permit/work permit
- Information on health status or severe disability
- Account details for reimbursement of travel expenses
We will only ask you for data that is necessary to check your application/your suitability for the advertised position or to carry out applicant management. If you do not wish to provide us with this data, we may not be able to give you sufficient consideration as an applicant. The provision of further data is voluntary.
In some cases, we receive applicant data via external service providers such as recruiting platforms or personnel service providers. We may also process personal data that we have legitimately obtained from publicly accessible sources (e.g. professional networks).
What is the legal basis for the processing of data?
The processing of your data by us takes place within the framework of the following legal bases
- to carry out your application procedure and to decide on the establishment of an employment relationship with you, as a pre-contractual measure (Artikel 6 Absatz 1 Buchstabe b) DSGVO) or to safeguard legitimate interests (Artikel 6 Absatz 1 Buchstabe f) DSGVO)
- to safeguard legitimate interests in the event of legal claims arising from the application procedure (Artikel 6 Absatz 1 Buchstabe f) DSGVO), whereby the legitimate interest arises from the respective procedural steps
How long will the data be stored?
We store your personal data upon receipt of your application. If we accept your application and an employment relationship is established, we will store your applicant data for as long as it is required for the employment relationship and insofar as statutory regulations require us to retain it. If we reject your application, we will store your applicant data for a maximum of six months after rejecting your application, unless you give us your consent to store your data for longer or we need your data for the defence of legal claims.
In general, we will always check at the end of each year which data can be deleted because it is no longer required.
Who will your data be passed on to?
Within the company, your data will only be passed on to those persons who need your data to fulfil the above-mentioned processing purposes.
If it is a job advertisement in a company affiliated with us, data may be passed on to the departments or persons of the affiliated companies entrusted with the decision.
The following other recipients may receive personal data to the extent necessary in each case:
- Service providers who process personal data on our behalf, i.e. in accordance with our instructions and on the basis of an order processing contract (in accordance with Article 28 GDPR) (e.g. in the areas of recruiting/applicant management, IT, software, hosting, maintenance, communication, printing/dispatch, disposal);
- Authorised representatives and service providers who process the data themselves as controllers (e.g. lawyers, payment service providers, banks).
Your data will only be passed on beyond this if we are obliged to do so in order to fulfil legal requirements or if you have given us your consent.
Data is not regularly transferred to certain countries outside the EU or the EEA. If there is a specific reason, it is possible that data may be transferred to countries outside the EU or EEA to the extent necessary. The transfer takes place on the basis of an adequacy decision by the EU Commission or subject to suitable guarantees, which we will make available to you on request.
Your rights as a data subject
You have the following rights under the GDPR, which you can assert against us. Please note that some of these rights are subject to conditions.
- Information about the personal data concerning you
- Correction of your personal data
- Erasure of your personal data
- Restriction of the processing of your personal data
- Objection to the processing of your personal data
- Revocation of consent given to us, with effect for the future
- Data portability
If you wish to exercise your rights, please contact our data protection officer using the contact details provided above.
You also have the right to lodge a complaint with any data protection supervisory authority. The supervisory authority responsible for us is
Nationale Kommission für den Datenschutz
15, Boulevard du Jazz
Phone: +352 26 10 60 -1
Further contact information is available on the website: https://cnpd.public.lu/de/support/contact.html