Information for applicants

The potential employer has the following information obligations towards the applicant:

1. at the time of data collection, the data controller shall inform the data subject of the following pursuant to Art. 13(1) and 14(1) of the GDPR, unless the data subject already has this information:

(a) the name and contact details of the data controller and, if applicable, its representative.

The person responsible for compliance with the data protection requirements is the potential employer and thus the management. In our company this is:

Mr. Karsten Reese, Managing Director

b) Contact details of the external data protection officer and internal data protection coordinator

Our external data protection officer is:

Mr. Thomas Costard, Attorney at Law Costard Law Firm for IT Law and Data Protection EUROCOM Businesspark Lina-Ammon-Strasse 9 90471 Nuremberg Phone: +49 911 7903034 Fax: +49 911 7903035 E-mail: info@it-rechtsberater.de Website: www.it-rechtsberater.de

Our internal data protection coordinator and first contact person for data protection is

Mr. Karsten Reese IngSoft GmbH Irrerstr. 17 90403 Nuremberg Phone: +49 911 430879 - 0 E-mail: datenschutz@ingsoft.de

c) Purpose and legal basis of data processing

The processing (in particular collection, use, storage, transmission) of your applicant data takes place exclusively for the purpose of filling a position in the applicant selection process (establishment of an employment relationship), in order to check your suitability with regard to the position applied for and, if necessary, to be able to invite you to an interview.

In addition to Art. 88 DS-GVO and § 26 BDSG, the legal basis for the processing may be in particular Art. 6 para.1 lit. b DS-GVO (data processing for the implementation of pre-contractual measures), Art. 6 para. 1 lit. c DS-GVO (fulfillment of a legal obligation).

Another legal basis may be the consent of the applicant within the meaning of Art. 6 para. 1 lit. a DS-GVO (e.g. inclusion in a so-called applicant pool).

d) Legitimate interests of the controller or a third party.

If the processing is carried out on the basis of Art. 6 (1) (f) DS-GVO to protect the legitimate interests of the controller or a third party, the applicant must be informed of this. A legitimate interest may be, for example, a legal, economic or ideal interest, the legitimacy of which must be decided in each individual case as part of a weighing of the interests of the applicant.

In the present case, the processing is not carried out on the basis of a legitimate interest.

e) Recipients or categories of recipients

According to Art. 4 No. 9 DS-GVO, recipients of your data may be natural or legal persons, authorities or institutions.

Your applicant data will be forwarded to the internal departments responsible for the application process, to other branches of our company and to the service providers entrusted with the application process (online application tool).

Data will only be passed on to other third parties if you have given us your prior written consent in accordance with Section 26 (2) of the German Federal Data Protection Act (BDSG).

In order to conduct meetings within the application process (e.g. job interviews) via online tools (e.g. Microsoft Teams, Zoom, Skype), personal data processed in connection with participation therein may be disclosed. In principle, this data will not be disclosed to third parties unless it is intended for disclosure. Please note that content from job interviews via online tools, as with personal job interviews, is used to be able to carry out the application process and is therefore intended for internal disclosure.

In addition, when using online tools, the respective provider of the communication platform used and any subcontractors may gain knowledge of the data, insofar as this is necessary within the scope of our order processing relationship within the meaning of Art. 28 DS-GVO with the provider of the communication platform.

f) Data transfer to third countries or international organizations

Your applicant data will be processed exclusively within the EU and stored on protected servers in Germany in compliance with data protection regulations. Data is not currently transferred to third countries or international organizations.

If the processing of your data involves the transfer to countries outside the EU or EEA or service providers from countries outside the EU or EEA (so-called third countries), we will check whether an adequacy decision has been issued by the European Commission or we will conclude the necessary contracts under data protection law, in particular the agreement on commissioned processing and the EU standard contract.

g) Categories of personal data

In the course of your application process, we process the following data from you:

• Identification data (surname, first name, photo, gender, date of birth, religion, nationality).
• Contact data (home address, private telephone numbers and e-mail address)
• Job-related data (title/position, degree, status)
• Professional qualifications (certificates, driver's license)
• (Voluntary) information about your race or ethnic origin, gender, health status, data that may be required to comply with anti-discrimination laws and reporting requirements to the government, and that we need to comply with legal requirements in equal opportunities
• Reference data (previous employer, previous instructor).
• Other information included in your cover letter, resume, and references, or information you have voluntarily provided to us
• In the context of telephone conferences, details of incoming and outgoing call numbers, country name, start and end time. If applicable, further connection data such as the IP address of the device may be stored.
• In the context of meetings within the application process (e.g. job interviews) via online tools (e.g. Microsoft Teams, Zoom, Skype) user details (last name, first name, pseudonym, optional phone, email address, password, optional profile picture, optional department) as well as meeting data (topic, optional description, participant IP addresses, device/hardware information). To this extent, the text entries you make are processed in order to log the application process, if necessary. To enable the display of video and the playback of audio, data from the microphone of your terminal device and from any video camera of the terminal device will be processed accordingly during the meeting. You may turn off or mute the camera or microphone yourself at any time.
• Information about your health and/or requests and documents relating to police clearance certificates, will only be processed if they are relevant to your application. This is done in compliance with the legal regulations.