As part of the application process or in the case of your unsolicited application to valantic Group or an individual valantic company, your associated personal data (hereinafter “data”) will also be processed. With this Privacy Policy, we inform you about the scope of the processing of your data (hereinafter “Data”).
This information is based on the requirements of the EU General Data Protection Regulation (“GDPR”), the Swiss Data Protection Act (“DSG”) and the revised Swiss Data Protection Act (“revDSG”). In the case of applications addressed to a Group company outside Switzerland or the EU, the country-specific information obligations in accordance with section 4 of the data protection information apply.
1.1 Application to a Group company
If you apply for a job offer from a company in the valantic Group (Group company), this company is the controller for data processing in the context of the application process. You can view the individual enterprises affiliated with our group of undertakings here:
German: https://www.valantic.com/de/kontakt/
English: https://www.valantic.com/en/contact/
1.2 Application to the valantic Group
If you send an unsolicited application to the Group, for example without naming a Group company, the data processing will be initiated by valantic GmbH (“valantic GmbH”), Ainmillerstraße 22, D-80801 Munich, phone: +49 89 2000 85 91 0, fax: +49 89 2000 85 93 1, e-mail: recruiting@muc.valantic.com.
Depending on whether a suitable position matches your application documents, your data will be forwarded to the valantic Group company in question, which will then continue the application process under its own responsibility.
1.3 Contact details of the data protection officer of valantic GmbH
Matthias Rosa
RMPrivacy GmbH
Große Langgasse 1A, D-55116 Mainz
www.rmprivacy.de
E-mail: datenschutz@muc.valantic.com
2.1 In the following cases (Section 2.1.1 and Section 2.1.2), your data will be processed jointly by the valantic Group. You can view the enterprises affiliated with our group of undertakings as indicated in Section 1.1.
The legal basis for joint data processing is our overriding legitimate interest in effective administration and IT infrastructure in accordance with Art. 6 para. 1 f) GDPR.
We are jointly responsible with our affiliated enterprises for the processes that are subject to joint data processing in accordance with Art. 26 GDPR. Accordingly, we have bindingly defined the internal responsibilities and controllers in a contract.
As part of the application process, your data may also be transferred to non-EU countries and outside Switzerland. If there is no adequacy decision, this data transfer is based on standard contractual clauses.
The respective enterprise with which you are first in contact will fulfil the information obligations under data protection law.
We have assigned the fulfilment of data subject rights internally to valantic GmbH. You can also contact us at any time with enquiries or to assert your data subject rights using the contact details provided in section 1. We will then forward your enquiry internally for processing.
2.1.1 Talent pool of the valantic Group
If it is not currently possible to fill a vacancy, we can enter your application details in our talent pool and contact you if a suitable position arises.
However, we require your prior express consent for this. The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 a), 49 Para. 1 a) GDPR, which you can withdraw at any time by sending an email to recruiting@muc.valantic.com.
2.1.2 Analysis of the application process
In order to improve our application management and optimise the recruitment process, we process various data that we do not use to establish a personal reference to your application. This is the following data: Applicant ID, the recruiting channel you have chosen, desired salary, duration of the application process, your region/community and your interest in selected jobs. We also pseudonymise the data as part of the analysis.
Data processing in the application process of Group companies based in the European Union and Switzerland
If you are applying to a Group company based in the European Union (EU) and Switzerland, the following information applies.
3.1 Data processing
The individual data concerned, processing purposes, legal bases, recipients and any transfers to third countries that are relevant to the application process are listed below; otherwise, the Privacy Policy at https://www.valantic.com/de/datenschutzerklaerung is authorative:
3.1.1 Contact for applications
If you contact us to send us your application as an employee, e.g. by e-mail or via a contact form, the data you provide (title, name, e-mail address, desired place of work, desired salary, other voluntary data: e.g. CV, photos, etc.), your message and the application documents sent will be processed exclusively for the purposes of processing and handling your application enquiry.
The legal basis for data processing is Art. 6 para. 1 b) GDPR (in Germany primarily Section 26 German Federal Data Protection Act). Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely for the assertion and/or defence of claims.
3.1.2 Conducting job interviews online
If a job interview is conducted via web meeting, we process further data that is necessary to conduct the online meeting:
Additional data may also be required. However, this depends on the web meeting tool used to conduct the interview (e.g. MS Teams, Zoom, etc.). In this case, we will provide additional information as part of the registration process. We will also provide information about possible recipients and any transfers to third parties.
Your data will be used exclusively for the purpose of conducting the interview.
The legal basis for data processing results from Art. 6 para. 1 b) GDPR (in Germany primarily § 26 German Federal Data Protection Act) and, if applicable, from Art. 6 para. 1 f) GDPR (legitimate interest). Our legitimate interest lies in the smooth organisation of the online meeting.
3.1.3 Forwarding to third parties
If you apply for a job vacancy at a Group company, you have the option of making your applicant profile and application documents available to all recruiters at valantic companies within a country or worldwide in order to be able to submit suitable job offers to you.
The legal basis is your prior consent within the meaning of Art 6 I a) GDPR.
Your data will only be forwarded to third parties if this is necessary for the application process. The data will only be passed on to enterprises that provide services for us, e.g. our tax advisor or lawyer. These service providers will only use your data on our behalf and never for their own purposes.
3.2 Duration of data storage
We only store personal data for as long as is necessary for the purposes of the processing. After completion of the application process, the data will be erased after 6 months at the latest. Data in the talent pool will be erased by us in the event of your withdrawal or after 12 months at the latest, provided no further confirmation has been received.
3.3 Your rights as a data subject
3.3.1 Information
You can request information about all personal data that we have stored about you free of charge at any time.
3.3.2 Rectification, erasure, restriction of processing (blocking), objection
If you no longer consent to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law) if you instruct us to do so. The same applies if you ask us to restrict the processing of your data. You have a right to object in particular in cases where your data is required for the performance of a task carried out in the public interest or the data processing is based on our legitimate interest, as well as in the case of profiling based on this.
You also have such a right to object in the case of data processing for the purpose of direct marketing.
3.3.3 Right to withdraw consent with effect for the future
You can withdraw your consent at any time with effect for the future. Your withdrawal will not affect the lawfulness of the processing up to the time of withdrawal.
3.3.4 Data portability
If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or using automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another controller if you wish.
3.3.5 restriction of processing
Data for which we are not able to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another enterprise may be possible with regard to this data if you provide us with additional information that allows us to identify you.
3.3.6 Exercising your rights as a data subject and right to lodge a complaint
If you have any questions regarding the processing of your personal data, information, rectification, blocking, objection or deletion of data or if you wish to transfer the data to another enterprise, please contact datenschutz@muc.valantic.com.
You also have the option of complaining to a supervisory authority about your rights as a data subject. If you are applying to a Group company based in Switzerland, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).