Data protection information for applicants

Data protection information for applicants at PM GmbH Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft

According to Art. 13, 14, 21 of the General Data Protection Regulation (GDPR)

We are pleased that you are interested in a position and are applying or have applied for a position in our company. We would like to inform you about the processing of your personal data in connection with your application.

1. Who is responsible for data processing?

PM GmbH Wirtschaftsprüfungsgesellschaft
Steuerberatungsgesellschaft
represented by the Managing Directors

Innere Wiener Strasse 11a
81667 Munich
E-Mail: info@pm-wpg.de
Tel .: +49 (89) 520 348-0

You can reach our data protection contact at
e-mail: datenschutz@pm-wpg.de

2- Processing purposes and legal basis

We process your personal data, if necessary, to check the establishment of an employment relationship. The legal basis for this is basically Art. 6 Para. 1 lit. b GDPR and Section 26 of the Federal Data Protection Act (BDSG).

We only collect the personal data (especially first name, last name, address, email, advertised position, information from the application) from you, which are required for the application process. In order to check your application in its entirety, it is necessary that you also provide us with information about your previous professional employment.

In the case of an online application, you may enter this data yourself in the online form; for any other application form, we record the information relevant to the application and, if necessary, scan your application documents.

As part of your application, we generally only use data that comes directly from you or a person authorized by you. In the course of the application process, further personal data can be collected from you personally, from generally accessible sources or from former employers and trainers. This may also include data that you make available online for the purpose of your professional presentation (e.g. in business networks. For further research on yourself, e.g., we do not use online search engines.

When filling certain positions, in certain management positions, we may involve personnel consultants for the implementation of assessment centers or potential analyzes - provided you have given your express consent.

If we ask you about your gender in regards to the desired salutation during the application process, it is only due to the fact that we want to address  you in the proper manner.

2.1   Consent (Art. 6 Para. 1 a GDPR)

If and insofar as you have given us your consent to data processing for certain purposes, for example to actively contact you on our part in order to offer you further vacancies with us, the processing time results from the purpose of the consent given. Please note the information given in connection with the declaration of consent.

2.2   Implementation of pre-contractual measures and fulfillment of contractual obligations (Art. 6 Para. 1 b GDPR)

We process your personal data to carry out measures and activities in the context of pre-contractual relationships, in particular for contract negotiations.

2.3 Fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR)

We process your personal data insofar as this is legally necessary to fulfill commercial and tax law retention requirements or otherwise due to legal norms (e.g. according to the Money Laundering Act).

2.4 Protection of the legitimate interests of us or a third party (Art. 6 Para. 1 lit.f GDPR)

We process your personal data insofar as this is necessary to defend against legal claims from the application process against us. The legitimate interest is, for example, an obligation to provide evidence in a procedure under the General Equal Treatment Act (AGG).

3. Categories of personal data that we process and where they come from

We process the personal data that we receive from you as part of your application. This is the data that you provide us with as part of your application, in particular by submitting the application documents and your details in interviews. We also visit profiles of applicants on XING and LinkedIn or other professional social networks, if there are any. We do not visit profiles in private social networks.

It is also possible that we receive data from recruiters to whom you have submitted your application documents and who you were suggested to us as a candidate for a position.

4. Who receives your data?

Of course, your data will be treated confidentially and only made accessible to those in the company who are involved in the decision-making process about the hiring (e.g., the HR department).

Furthermore, affiliates such as Software providers, IT service providers, document shredders etc. may be recipients of the data. We have entered a so-called order processing contract with these providers, which ensures that data processing is carried out in a permissible manner.

5. Transmission of your data to a recipient in a third country or to an international organization

If we transfer personal data to service providers outside the European Economic Area (EEA), the transfer will only take place if the third country has confirmed an appropriate level of data protection or other appropriate data protection guarantees (e.g. binding company-internal data protection regulations or EU standard Contractual clauses) exist, unless there is a legal exception to compliance with the data protection level (Art. 49 GDPR), in particular your express consent under data protection law.

6. How long do we store your data?

We store your personal data for as long as it is necessary to achieve the processing purposes and / or to fulfill statutory retention requirements.

If you have not been selected for the position to which you applied, we will delete your data if you withdraw your application, six months after the withdrawal of your application or, if we reject you, six months from the time of the rejection. In the event that an employment contract is concluded between you and us, your application documents will be taken to the personnel file and saved at least for the duration of the employment relationship.

7. To what extent is there automated decision-making in individual cases (including profiling)?

We do not use solely automated decision-making procedures in accordance with Article 22 GDPR. If we use these procedures in individual cases, we will inform you of this separately.

8. Scope of your obligations to provide us with your data

Applying to us is voluntary. The provision of your personal data with regard to your previous professional and / or academic career, your qualifications, your skills and information about yourself and how you can be reached is necessary so that we can find out whether you as the applicant and the position to be filled match and we can make a personnel selection. Without the provision of personal data by you as an applicant, no personnel selection and application process can of course be carried out.

Consequently, failure to provide personal data simply means that you cannot be considered as a candidate when we are filling the position.

9. Data subject rights

You can under the address stated above and under certain conditions

• Request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or opposition, the existence of a Right to lodge a complaint, the origin of your data, unless it was collected by us, and the existence of automated decision-making, including profiling and, if necessary, meaningful information about its details;
• Immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
• According to Art. 17 GDPR, the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;
• In accordance with Art. 18 GDPR, the processing of your personal data may be restricted insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or need to defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;
• In accordance with Article 20 GDPR, your personal data that you have provided us with is received in a structured, common and machine-readable format or to request transmission to another person responsible;
• In accordance with Article 7 (3) GDPR, you can revoke your once-given consent at any time. As a result, we are no longer allowed to continue processing the data based on this consent in the future.

If you want to assert one of these rights, please contact us or our data protection officer, if applicable

10. Your right to file a complaint with the competent supervisory authority

You have the right to file a complaint with the data protection supervisory authority if you believe that the processing of your data violates the GDPR (Art. 77 GDPR). The supervisory authority in charge is:

Bayerisches Landesamt für Datenschutzaufsicht
PO Box 606
91511 Ansbach

Telefon: +49 (0) 981 53 1300
E-Mail: poststelle@lda.bayern.de