INFORMATION ON THE PROCESSING OF YOUR PERSONAL DATA IN THE APPLICATION PROCEDURE

We are pleased that you have applied to INFORM - Institute for Operations Research and Management GmbH. Transparency and trustworthy handling of your personal data is an important basis for a good cooperation. Therefore, we inform you about how we process your data and how you can exercise your rights, which you are entitled to under the General Data Protection Regulation. The following information provides you with an overview of the collection and processing of your personal data in connection with the implementation of the application process.
 


1. WHO IS RESPONSIBLE FOR DATA PROCESSING?
 

Person responsible is:

INFORM - Institut für Operations Research und Management GmbH
Pascalstr. 35
52076 Aachen
Germany

Managing Directors: Dr. Andreas Meyer, Dr. Jörg Herbers, Peter Frerichs


2. HOW DO YOU REACH THE DATA PROTECTION OFFICER?

You can reach our data protection officer at:

INFORM - Institut für Operations Research und Management GmbH
Data Protection Officer
Pascalstr. 35
52076 Aachen
Germany

E-mail: datenschutz@inform-software.com


3. WHICH OF YOUR PERSONAL DATA DO WE USE?

We process your personal data to the extent that is necessary to carry out the application process. This includes the following categories of data:

Standard data:

  • Applicant master data (first name, last name, address, e-mail address, telephone number, job position, desired salary, possible start date)
  • Qualification data (cover letter, curriculum vitae, previous occupations, professional qualification)
  • (Employment) references and certificates (performance data, evaluation data, etc.)

Other information:

  • Publicly accessible, job-related data, such as a profile on professional social media networks
  • Voluntary information, such as an application photo, details of severely disabled status or other information that you voluntarily provide to us in your application

In addition, we may process your data as part of our internal employee referral program. If you apply via a recommendation link of the recommendation platform, further data may therefore be processed in addition to the status of the application process, in particular the following data:

  • Referral data: Data collected by the recommending employee in the course of the recommendation process. This includes the type of recommendation and personal appraisal and recommendations (positive, neutral, negative), the connection to you (personal/professional), and the reason for the recommendation.
  • Evaluation data: Information on the status of the application process that is exchanged between INFORM employees and the HR department. This includes the evaluation by the HR department and other HR managers, the hiring as well as the rejection with corresponding reasons.


4. WHAT ARE THE SOURCES OF THE DATA?

We process personal data that we receive from you as part of the application process or that is collected by our employees as part of the internal employee referral program.


5. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS?

We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as well as all other applicable laws.

5.1 DATA PROCESSING FOR PURPOSES OF THE APPLICATION RELATIONSHIP (§ 26 PARA. 1 BDSG)

Personal data of applicants may be processed for purposes of the application process if this is necessary for the decision on the establishment of an employment relationship with us.

The necessity and scope of the data collection depends, among other things, on the position to be filled. If your desired position involves the performance of particularly confidential tasks, increased personnel and/or financial responsibility, or is linked to certain physical and health requirements, more extensive data collection may be necessary. In order to protect data privacy, such data processing will only take place after the applicant selection process has been completed and immediately before you are hired.

5.2 DATA PROCESSING BASED ON YOUR CONSENT (ART. 6 PARA. 1 LIT. A GDPR, § 26 PARA. 2 BDSG)

If you have given us your voluntary consent to the collection, processing or transfer of certain personal data, then this consent forms the legal basis for the processing of this data.

In the following cases, we process your personal data on the basis of consent given by you:

  • Admission in the applicant pool, i.e. we store the application documents beyond the current application process for consideration in subsequent application processes
  • Storage of referral, rating and recruitment data to perform the referral process.

5.3 BASED ON THE LEGITIMATE INTEREST OF THE CONTROLLER (ART. 6 PARA. 1 LIT. F GDPR)

In certain cases, we process your data to protect a legitimate interest of us or a third party.

  • For the defense of legal claims in proceedings under the General Equal Treatment Act (AGG).
  • In the event of a dispute, we have a legitimate interest in processing the data for evidentiary purposes.


6. TO WHOM WILL YOUR DATA BE DISCLOSED?

Your data is mainly processed by our HR department and the responsible line manager who fills your position. However, in some cases other internal and external bodies are also involved in the processing of your data.

Internal bodies:

  • Human resources department and human resources manager
  • Management and Business Unit Manager
  • Accounting
  • Recommending employees

External training bodies:

  • RWTH Aachen
  • FH Aachen
  • Vocational schools

External service providers:

  • IT service provider (e.g. maintenance service provider, hosting service provider, platform operator for application management tools, recommendation platform)
  • Service provider for file and data destruction

Please note that our service providers, e.g. on the recommendation platform, process additional data over which we have no control; in this respect, we refer you to the data protection information of the respective service provider.


7. IS YOUR DATA TRANSFERRED TO COUNTRIES OUTSIDE THE EUROPEAN UNION (SO-CALLED THIRD COUNTRIES)?

Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently than countries within the European Union. We also use service providers located in third countries outside the European Union to process your data. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection.

We have therefore taken special measures to ensure that, outside of exceptional cases permitted by law, your data is processed in the third countries just as securely as within the European Union. With service providers in third countries, we conclude the standard data protection clauses provided by the Commission of the European Union, unless we have your consent to the data transfer. These clauses provide appropriate safeguards for the protection of your data with service providers in the third country.


8. HOW LONG WILL YOUR DATA BE STORED?

We store your personal data for as long as is necessary for the decision on your application. If an employment relationship between you and us does not come about, we may continue to store data beyond this, insofar as this is necessary for the defense against possible legal claims. In general, your data will be ­deleted within 6 months after the end of the ­application process.

Insofar as you have applied via a referral link, we store your referral and evaluation data until the referral process is completed, but for a maximum of one year.

Insofar as an employment relationship does not come about, but you have given us your consent for the further storage of your data, we will store your data until your consent is revoked, but for a maximum of five further years. If there is a specific reason, we may also store your data for a longer period for the purpose of defending against possible legal claims.


9. IS THERE AN OBLIGATION TO PROVIDE YOUR PERSONAL ­DATA?

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the implementation of the application process. This means that if you do not provide us with personal data when applying, we will not be able to carry out the application process.


10. AMENDMENTS TO THIS INFORMATION AND FURTHER INFORMATION

If the purpose or the manner of processing your personal data changes significantly, we will update this information in a timely manner. We will also publish the amended version of the data protection information here. The version of our data protection information that is current at the time of your visit will apply in each case.

For more information about data processing at INFORM, in particular about your rights as a data subject, please refer to the general data protection information on our website.

 

Status: May 2022