Overview

Dear Applicant,

we are pleased that you are interested in applying to work with us.

Below, we provide information on the processing of personal data and your rights under the General Data Protection Regulation (GDPR).

Who is responsible for data processing?

The data controller is:

Digital2gether GmbH
Parkallee 20
21521 Wohltorf
Germany

Phone: +49 33763 2362 17
Email: hello@digital2gether.com

If you have any questions regarding data protection, you can contact us at:

Email: hello@digital2gether.com

Which sources and data do we use?

We collect data that you provide to us as part of the application process, as well as data from third parties such as LinkedIn, Stepstone, Indeed and Instagram, where applicants have created a publicly accessible application profile or apply to us via these platforms.

We process data related to the application. This may include general personal data (such as name, address and contact details), information on professional qualifications and education, details of professional training, or other information (e.g. health data) that we receive in connection with the application.

In addition, we may process information that has been made publicly available, such as profiles on professional social media networks.

For what purposes and on what legal basis do we process personal data?

Personal data are processed for the purpose of handling applications for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this processing is Article 6(1)(f) GDPR.

Personal data may also be processed where this is necessary to defend against legal claims arising from the application process. The legal basis in this case is also Article 6(1)(f) GDPR, with the legitimate interest including, in particular, compliance with the burden of proof in proceedings under the German General Equal Treatment Act (AGG).

If an employment relationship is established, the personal data already received may be further processed pursuant to Article 6(1)(b) and (f) GDPR for purposes of the employment relationship. This applies in particular where processing is necessary for the execution or termination of the employment relationship or for the exercise or fulfilment of rights and obligations arising from laws, collective agreements, works agreements or service agreements.

Who receives the data?

We may transfer personal data to companies affiliated with us, insofar as this is permitted within the scope of the purposes and legal bases described above.

In addition, personal data may be processed on our behalf on the basis of contracts pursuant to Article 28 GDPR, in particular by hosting providers or providers of applicant management systems.

If applications are submitted to us via platforms such as Stepstone, LinkedIn, Instagram or Indeed, or if we obtain applicant data from these platforms, the data are collected and transmitted to us in accordance with the applicable privacy policies and terms of use of those platforms.

Are data transferred to a third country or to an international organisation?

Personal data are transferred to countries outside the European Economic Area (EEA) only where this is necessary for the performance of a contract, required by law, or where consent has been given. Transfers to third countries take place only where an adequate level of data protection exists or where appropriate safeguards, such as standard contractual clauses, are in place.

Is there an obligation to provide personal data?

As part of the application process, you are required to provide only those personal data that are necessary for the initiation, conduct and completion of the application process or which we are legally required to collect. Without these data, we will generally be unable to include you in the application process.

Is automated decision-making used in individual cases?

As a rule, we do not use fully automated decision-making pursuant to Article 22 GDPR in the application process. Should such procedures be used in individual cases, we will inform you separately where required by law.

To what extent is profiling (scoring) used?

We do not process personal data in an automated manner for the purpose of evaluating certain personal aspects (profiling).

How long are the data stored?

We store personal data for as long as this is necessary to make a decision regarding your application. If no employment relationship is established, we may continue to store data where this is necessary to defend against potential legal claims. In this case, application documents are deleted six months after notification of the rejection decision, unless longer storage is required due to legal disputes.

Where consent has been given for longer storage, we may include your data in our applicant pool. In such cases, the data will be deleted after the retention period specified in the consent has expired.

What rights do data subjects have?

Under the GDPR, you have the following rights:
Right of access to stored data and information on their processing (Article 15 GDPR)
Right to rectification of inaccurate personal data (Article 16 GDPR)
Right to erasure of stored data (Article 17 GDPR)
The right to erasure is restricted where processing is necessary:

for compliance with a legal obligation under Union or Member State law;
for the establishment, exercise or defence of legal claims.
Right to restriction of processing where data cannot yet be erased due to statutory obligations (Article 18 GDPR)
Right to object to processing (Article 21 GDPR)
Right to data portability where processing is based on consent or a contract (Article 20 GDPR)
Any consent given may be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR in conjunction with Section 19 BDSG.

Supervisory authority

The competent supervisory authority in Schleswig-Holstein is:

Unabhängiges Landeszentrum für Datenschutz (ULD)
Holstenstraße 98
24103 Kiel
Germany
Phone: 0431 988 1200
Fax: 0431 988 1223
mail@datenschutzzentrum.de
www.datenschutzzentrum.de 

Information on your right to object

pursuant to Article 21 GDPR

You have the right to object at any time to the processing of your personal data where such processing is based on Article 6(1)(e) GDPR (processing in the public interest) or Article 6(1)(f) GDPR (processing based on legitimate interests).

In the event of an objection, personal data will no longer be processed unless there are compelling legitimate grounds for the processing.

The objection may be submitted in text form by email or post to the address stated above.