Privacy Information for Applicants

1. Controller Responsible for the Data Processing

The controller responsible for the processing of your personal data is stetter Rechtsanwälte (hereinafter “we”), owner Dr. Sabine Stetter, Amiraplatz 3, 80333 Munich, Germany, email: info@stetterlegal.com. The term “controller” means that stetter Rechtsanwälte decides on the purposes and means of the processing of applicants' personal data and is responsible for compliance with the applicable data protection laws.

2. Personal Data

We process the following categories of personal data of our applicants:

• Private contact and identification data, including name, private address, telephone number, email address, date of birth, place of birth, country of birth, marital status;
• Application data, including photo, previous professional career, educational qualifications, languages, professional memberships, qualifications/certificates, driving license (if applicable), references;
• Bank account details, if applicable, for the settlement and reimbursement of travel expenses.

3. Origin of the Personal Data

As a rule, we process the personal data that we receive directly from you. However, we may also receive the information from third parties. This is the case if your application reaches us via a recruitment agency or, at your instigation, from another third party. In these cases, we generally receive: your private contact and identification data and your application data.

4. Purposes and Legal Bases of the Processing

We process your personal data only to the extent permitted by law or if you have given your consent. The processing is carried out for the following purposes:

4.1 Conducting the Application Procedure

We process your personal data primarily for conducting the application procedure, in particular for the purposes of reviewing applications, contacting the applicant, conducting job interviews, evaluating and selecting suitable applicants and, where applicable, for the settlement and reimbursement of travel expenses. If your application is successful, we also process your data in order to set up the employment relationship. In this case, your data is transferred to the personnel file.

The legal basis for the data processing is the decision on the establishment of an employment relationship pursuant to Art. 88(1) GDPR, Section 26(1) sentence 1 BDSG.

4.2 Compliance with a Legal Obligation

In some cases, we process your personal data in order to comply with a legal obligation to which we are subject as the controller. In the case of the reimbursement of travel expenses for travel to and from job interviews, for example, we are obliged to process personal data in the context of complying with documentation and retention obligations under tax and/or commercial law.

In these cases, the processing is carried out on the basis of Art. 6(1)(c) GDPR in conjunction with the legal requirements under commercial and tax law.

4.3 Legitimate Interest

We process and store your personal data for evidence purposes for a limited period after the conclusion of the application procedure.

In these cases, the processing is carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. Our legitimate interest is the potential establishment, exercise, or defense of legal claims.

4.4 Consent

In some cases, we may process your personal data on the basis of consent given by you in order to store your application beyond the current application procedure and to be able to consider it for future vacancies.

In these cases, the processing is carried out on the basis of Art. 6(1)(a) GDPR.

5. Disclosure and Recipients of Personal Data

As a rule, we do not disclose your personal data to third parties. Disclosure to recipients within and outside stetter Rechtsanwälte only takes place to the extent that we are contractually or legally obliged or entitled to do so, or where we work with external service providers who support us in fulfilling our obligations.

Where we use service providers, they only receive the personal data required for the provision of their services. These external service providers generally process the personal data exclusively on our behalf and in accordance with our instructions. They are bound to us by contractual arrangements and are in particular obliged to maintain data secrecy (so-called “processors”) and to comply with technical and organizational measures to ensure the security of the data processing. Processing on our behalf exists, for example, with our IT service provider for the hosting and maintenance of our IT infrastructure.

Your personal data is not transferred to countries outside the European Union or the European Economic Area.

6. Storage and Retention of Data

We retain your personal data for the duration of the application procedure. After the conclusion of the application procedure, your data is stored for evidence purposes for the potential establishment, exercise, or defense of legal claims for a period of six months and subsequently deleted or destroyed.

If you have consented to the further storage of your application for consideration in future vacancies, your personal data is stored for the period specified in the declaration of consent and subsequently deleted or destroyed.

In the event of an employment, your data is transferred to the personnel file. In this case, you will receive further information on the storage period in the employee information on data processing.

7. Your Rights

Depending on the circumstances of the specific case, you have the following rights under the GDPR:

• The right to information about, rectification, or erasure of your personal data and, where applicable, the right to restriction of the processing of your personal data.
• In certain cases, you also have a right to data portability.
• Right to object: Where the processing of your personal data is based on a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing on grounds relating to your particular situation. We will then no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
• Where the processing of your personal data is based on consent, you have the right to revoke your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.

You also have the right to lodge a complaint with a competent supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement of the GDPR. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27
91522 Ansbach, Germany
Tel.: +49 981 53 1300
Fax: +49 981 53 98 1300
Email: poststelle@lda.bayern.de

If you have any questions regarding the processing of your personal data or wish to exercise your rights, please contact the Data Protection Officer, stetter Rechtsanwälte, Amiraplatz 3, Im Luitpoldblock, 80333 Munich. You can also exercise your rights by sending an email to datenschutz@stetterlegal.com.