Processing of (personal) data by the entity in charge of the online application process
The protection of your personal data is very important to us. According to the requirements of the European General Data Protection Regulation (GDPR), we are obliged to inform you about the purposes for which data is collected and further processed as part of the application process. The information below also explains your rights regarding data protection.
1. Responsible party for data processing
Envoria GmbH
Managing Directors Sven Schubert, Stefan Siemers, Thimo Brinkmann, Julian Göbel
Rosa-Bavarese-Straße 3
80639 Munich
Phone: +49 89 1590 1907 0
Email: info@envoria.com
You can reach our data protection officer at the following email address: dataprivacy@envoria.com. General contact details are also available online at https://envoria.com/privacy-policy.
2. Purpose and legal basis for processing personal data
The collection and processing of data serves the purpose of establishing, implementing, and terminating an employment relationship, as well as safeguarding our legitimate interests. The primary legal basis for this is Art. 6 (1) (a), (b), (c), and (f) GDPR in conjunction with Section 26 (1) BDSG (German Federal Data Protection Act).
Our legitimate interests include, for example, the following:
optimizing personnel planning and project awarding
preventing damage and/or liability for the company through appropriate measures
ensuring compliance with security regulations, requirements, industry standards, and contractual obligations
compliance with data protection and information security within the company
asserting, exercising, or defending legal claims
If you have given your consent to the processing of your personal data for storage in the applicant pool for the purpose of considering your application for a future application process, the legal basis is Art. 6 (1) (a) GDPR in conjunction with Section 26 (2) BDSG and Art. 88 GDPR.
3. Categories of processed data and their origin
The categories of personal data processed include, in particular,
Master data (last name, first name, date of birth, if applicable, maiden name)
Contact details (address, telephone number, email address)
Qualification data (CV, certificates, proof of further training)
Special data (e.g., physical disabilities, religious affiliation)
Other data resulting from the application process (e.g., previous employment, salary expectations, desired start date, hobbies, life status, as well as data that you yourself have provided during the application process or entered or stored in our systems and media)
This may also be special categories of personal data (sensitive data).
Your personal data is collected directly from you as part of the application process. We may also have received data from third parties (e.g., agencies, job placement agencies, job boards).
4. Potential recipients or categories of recipients
Our company will only disclose your personal data to those individuals and departments (e.g., departments) who are directly involved in the application process or who require it to fulfill our contractual and legal obligations in connection with your potential employment relationship. We sometimes use external service providers to comply with our contractual and legal obligations, to optimize our processes and systems, and to assert, exercise, or defend legal claims.
As part of your application process, your personal data may be shared with:
Service providers with whom we have entered into a data processing agreement, a confidentiality agreement, or other valid legal instrument
Professional associations
Other bodies to whom declarations must be made due to legal obligations
5. Transfer of personal data to a third country
If we transfer your personal data to a third country outside the European Economic Area (EEA) due to personnel responsibilities that extend across national borders, this transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection or if other appropriate data protection guarantees (e.g., binding corporate data protection regulations or EU standard contractual clauses) are in place.
6. Duration of data storage
We will store your personal data until storage is no longer necessary or the legitimate interest in storage has expired. If you are not hired, this will generally be the case no later than six months after the end of the application process. If you have consented to the storage of your data in the applicant pool, we will store your personal data for two years after the application process has been completed. However, in individual cases, certain data may be stored for a longer period (for example, in the case of reimbursement of travel expenses). The storage period is then determined by the statutory retention periods, for example, pursuant to Section 147 (1) No. 3, (3) of the German Fiscal Code (AO) or Section 257 (1) No. 4, (4) of the German Commercial Code (HGB) (10 years).
7. Your rights (so-called "data subject rights")
You can request information about the data stored about you at the above address. Furthermore, under certain conditions, you can request the correction or deletion of your data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, common, and machine-readable format.
You have the right to revoke your consent to the processing of data at any time. In the event of revocation, we will delete the data in question immediately unless further processing cannot be based on a legal basis for processing. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
If your data is processed in the context of the performance of a task in the public interest (Art. 6 (1) (e) GDPR) or based on legitimate interests (Art. 6 (1) (f)), you can object to this processing at any time. We will no longer process the personal data unless we can base the processing on another legal basis or demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. We would be very grateful if you would contact us or our data protection officer beforehand using the contact details above.
The data protection supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
9. Automated decision-making (so-called "profiling" or "scoring")
We do not use automated processing procedures to make a decision – including profiling – regarding the establishment, implementation, or termination of an employment relationship.
Thank you for your application!