Privacy Notice for Applicants

1. General

We provide this privacy notice to inform you about how we process your personal data as part of the application process. This notice applies to applications you submit via our recruiting page or our Personio application form, or by email.

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, your contact details, information about your professional background, and the application documents you submit.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

rayon GmbH
Schulterblatt 36
20357 Hamburg
Phone: +49 40 28530963-0

Commercial register entry: HRB 188975, Register court: Amtsgericht Hamburg

3. Data Protection Officer

You can reach our Data Protection Officer at:

Nextwork GmbH, represented by Marco Peters
Email: datenschutz@nextwork.de

4. What data do we process?

As part of your application, we process in particular the following personal data, insofar as you provide it to us:

First and last name and, where applicable, further contact details,
email address and, where applicable, phone number,
information about the desired position and your possible start date,
information about your professional background, education, qualifications, and work experience,
cover letter, CV, references, and other application documents,
information from our communication with you as well as interview notes, insofar as these are necessary for the application process,
data for the administration and documentation of the application process, for example application status and timestamps.

As a matter of principle, please do not send us any special categories of personal data within the meaning of Art. 9 (1) GDPR unless these are necessary for the application process. Should such data be processed in exceptional cases, this will only take place insofar as it is legally permissible and necessary for the application process.

5. Purposes and legal bases of the processing

We process your personal data for the following purposes:

to assess your application and your professional and personal suitability for the advertised position,
to conduct and document the application process,
to communicate with you, in particular to arrange and conduct interviews,
to decide on the establishment of an employment relationship and to prepare a possible employment contract,
to fulfill legal obligations as well as to assert, exercise, or defend legal claims.

The legal basis for processing your application data is Section 26 (1) sentence 1 of the Federal Data Protection Act (BDSG). Insofar as the processing is necessary for carrying out pre-contractual measures, Art. 6 (1) (b) GDPR may additionally be relied upon. Insofar as we process data to fulfill legal obligations or to assert, exercise, or defend legal claims, this is done on the basis of Art. 6 (1) (c) or (f) GDPR.

Providing the data required for the application is voluntary. However, without this data we cannot process your application, or can only process it to a limited extent.

6. Processing by Personio

To conduct the application process, we use the recruiting software of Personio SE & Co. KG, Seidlstraße 3, 80335 Munich. Personio processes your application data on our behalf and on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The data you submit is transmitted using TLS encryption and stored in the recruiting platform. Personio provides us with the technical platform for managing applications, communicating during the application process, and enabling collaboration among the persons involved in the process.

Personio may engage additional sub-processors to provide its services. A current overview of the sub-processors used, as well as further information on data protection and security, is made available by Personio in the customer account and in the Personio Trust Center: https://trust.personio.com/. 

Insofar as personal data is processed outside the European Economic Area in the course of providing the services, this is only carried out in compliance with the requirements of Art. 44 et seq. GDPR. In particular, adequacy decisions of the European Commission or appropriate safeguards such as standard data protection clauses are used.

7. Who receives your data?

Within our company, access to your application data is granted only to those persons who are involved in the preparation, conduct, and decision-making of application processes and who require the corresponding authorization for this. This may include, in particular, persons from the HR department as well as the managers and team members responsible for the respective position.

Data is disclosed to further recipients only where this is necessary for the application process, legally permitted, or legally required. Your application data is not transmitted for advertising purposes.

8. How long do we store your data?

As a matter of principle, we store your personal data only for as long as necessary to conduct and complete the application process.

If your application is not successful, we generally store your application data for six months after completion of the application process or after notification of the rejection decision. This storage serves in particular to enable us to examine possible claims under the General Equal Treatment Act (AGG) and to assert, exercise, or defend any legal claims.

After this period expires, your application data will be deleted, unless longer storage is required due to a specific legal dispute, for the assertion, exercise, or defense of legal claims, or due to statutory retention obligations.

If you are hired by us, such application data may be transferred to our employee records where it is necessary for carrying out the employment relationship. Application documents that are not required will be deleted as soon as they are no longer needed for the application process and the employment relationship. Separate privacy notices apply to employee data.

9. No solely automated decision-making

No solely automated decision-making within the meaning of Art. 22 GDPR takes place as part of the application process. The final decision on your application is made by duly authorized persons.

10. Technical data and cookies on the recruiting page

When visiting the recruiting page, technically necessary data may be processed and cookies may be used that are required for the secure and functional operation of the page. This privacy notice primarily concerns the processing of your application data by us. For processing that Personio carries out under its own data protection responsibility when technically operating the recruiting page, the privacy notice of Personio applies additionally: https://www.personio.de/datenschutzerklaerung/. 

Insofar as optional analytics, marketing, or tracking technologies are used on the recruiting page, we will inform you about this separately and, where necessary, obtain your consent.

11. Your data protection rights

Subject to the statutory requirements, you have the following rights:

Right to information about the data stored about you (Art. 15 GDPR),
Right to rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR),
Right to erasure of your data (Art. 17 GDPR),
Right to restriction of processing (Art. 18 GDPR),
Right to data portability, insofar as the statutory requirements are met (Art. 20 GDPR),
Right to object to the processing, insofar as the statutory requirements are met (Art. 21 GDPR).

Insofar as we process your personal data on the basis of your consent, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

To exercise your rights, you can contact the controller or our Data Protection Officer. You can find the contact details in sections 2 and 3.

12. Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint about the processing of your personal data with a data protection supervisory authority. The competent authority is in particular:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22
20459 Hamburg
Phone: +49 40 428 54-4040
Email: mailbox@datenschutz.hamburg.de
Website: https://datenschutz-hamburg.de/ 

13. Currency and amendment of this privacy notice

We may adapt this privacy notice if legal requirements, our application process, or the technical systems we use change. The version of this privacy notice valid at the time applies to your renewed visit to our recruiting page or a renewed application.

Junior Art Director (all genders)

Documents