Information on the processing of applicant data pursuant to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

Dear Applicant,
Thank you for your interest in our company. In accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data submitted as part of the application process, as well as any data collected by us, and your related rights. To ensure that you are fully informed about the processing of your personal data in the context of the application process, please take note of the following information.



1. Controller within the meaning of data protection law

Address:
Mellowdrop GmbH
Zeugplatz 7

86150 Augsburg

Germany

Phone: +49 176 36397419
Email: [email protected]



2. Contact details of our Data Protection Officer

A Data Protection Officer has not been appointed for our company, as the legal requirements for such an appointment are not met.
If you have any questions regarding data protection, you may contact us at the contact details provided in Section 1.

3. Purposes and legal bases of processing

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on establishing an employment relationship with us. The legal basis for this is Article 88 GDPR in conjunction with Section 26 BDSG for purposes related to employment, where processing is necessary for the decision on establishing an employment relationship.

We may also process your personal data where this is necessary to comply with legal obligations (Article 6(1)(c) GDPR) or to establish, exercise, or defend legal claims. In this case, the legal basis is Article 6(1)(f) GDPR. The legitimate interest may include, for example, fulfilling evidentiary obligations under the German General Equal Treatment Act (AGG). 
If you provide us with explicit consent to process personal data for specific purposes, the lawfulness of such processing is based on your consent pursuant to Article 6(1)(a) GDPR. Any consent given may be withdrawn at any time with effect for the future (see Section 9 of this notice).
If an employment relationship is established between you and us, we may further process the personal data already received from you in accordance with Article 88 GDPR in conjunction with Section 26 BDSG for purposes related to the employment relationship, insofar as this is necessary for carrying out or terminating the employment relationship or for exercising or fulfilling rights and obligations arising from laws, collective agreements, works agreements, or service agreements.



4. Categories of personal data

We only process data that is related to your application. This may include general information about you (name, address, contact details, etc.), information about your professional qualifications and education, information about professional development, and any other data you provide to us in connection with your application.



5. Sources of data
We process personal data that we receive from you in the course of initiating contact or as part of your application, whether submitted by post or by email, or that you provide to us via other sources.



6. Recipients of data

Within our company, your personal data will only be disclosed to those departments and individuals who require the data to fulfill contractual and legal obligations or to pursue our legitimate interests.

We may transfer your personal data to affiliated companies, provided this is permissible within the scope of the purposes and legal bases set out in Section 3 of this notice.

Your personal data may be processed on our behalf based on data processing agreements pursuant to Article 28 GDPR. In such cases, we ensure that the processing of personal data is carried out in compliance with the GDPR. Categories of recipients in this context include internet service providers and providers of applicant management systems and software.
Personal data will only be disclosed to recipients outside the company if this is permitted or required by law, necessary to fulfill legal obligations, or if you have given your consent.



7. Transfer to a third country

A transfer of your personal data to a third country is not intended.

8. Duration of data storage

We store your personal data for as long as necessary to make a decision regarding your application. Your personal data and application documents will be deleted no later than six months after completion of the application process (e.g., notification of rejection), unless longer storage is legally required or permitted.

We will store your personal data beyond this period only if required by law or in a specific case for the establishment, exercise, or defense of legal claims for the duration of a legal dispute.

If you have consented to longer storage of your personal data, we will store it in accordance with your consent. If an employment, training, or internship relationship is established following the application process, your data will initially continue to be stored where necessary and permitted, and will subsequently be transferred to your personnel file.
Where applicable, you may receive an invitation to join our talent pool after completion of the application process. This allows us to consider you for suitable vacancies in the future. If we have received your corresponding consent, we will store your application data in our talent pool in accordance with your consent and any future consents.



9. Your rights
Every data subject has the right to access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to notification pursuant to Article 19 GDPR, and the right to data portability pursuant to Article 20 GDPR.
You also have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR if you believe that the processing of your personal data is not lawful. This right exists without prejudice to any other administrative or judicial remedy.

Where processing is based on your consent, you have the right pursuant to Article 7 GDPR to withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal. Please also note that we may be required to retain certain data for a specified period to comply with legal obligations (see Section 8).

Right to object

Where your personal data is processed on the basis of Article 6(1)(f) GDPR to safeguard legitimate interests, you have the right, pursuant to Article 21 GDPR, to object at any time to the processing of your data on grounds relating to your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

To exercise your rights, you may contact us using the contact details provided in Section 1.



10. Requirement to provide personal data

The provision of your personal data as part of the application process is voluntary. However, we can only make a decision regarding the establishment of an employment relationship or enter into such a relationship with you if you provide personal data that is necessary for the processing of your application.

11. Automated decision-making

The decision regarding your application is not based exclusively on automated processing. Therefore, no automated decision-making within the meaning of Article 22 GDPR takes place.
We process personal data that we receive from you in the course of initiating contact or as part of your application, whether submitted by post or by email, or that you provide to us via other sources.