Data protection information for applicants
Purposes of data processing
Westernacher Consulting GmbH and its subsidiaries - hereinafter referred to as
Westernacher - processes and stores personal data in order to fill vacancies or process
unsolicited applications within the framework of applicant management. The personal data
you provide will only be used to carry out the current application process.
Legal basis for data processing
The processing of data by Westernacher is carried out for the purposes of the employment
relationship (here: decision to establish an employment relationship) as well as on the basis
of your consent in accordance with Art. 88 of the General Data Protection Regulation
(GDPR) in conjunction with. § Section 26 para. 1 sentence 1, para. 3 BDSG (new) and Art. 6
para. 1 sentence 1 lit. a), Art. 7 and Art. 9 para. 2 lit. a) GDPR. Westernacher only makes the
personal data available to other companies of the Westernacher Group if the applicant has
given his or her separate consent to do so.
Categories of personal data
Westernacher processes and stores the personal master data, communication data and data
and information from the application documents provided by you.
Special categories of personal data
We would like to point out that application documents, in particular CVs, certificates and
other data you provide to Westernacher, may contain special categories of personal data
within the meaning of Article 9 of the Data Protection Regulation (e.g. information about your
religious affiliation, severe disability or marital status). If you provide us with such information,
this is done on a voluntary basis and with your express consent.
Origin of personal data
All personal data is provided directly by the applicant as part of the application process.
Categories of recipients of personal data
You consent to the processing and transfer of your data by Westernacher (and our external
service provider, see below) for the purposes of the application process by submitting your
application.
Your data will only be passed on to other companies within the Westernacher Group for the
purpose of processing your application if you have given your consent to this. This consent is
voluntary and can be freely revoked at any time with effect for the future. Without your
consent, your data will not be transferred to other recipients, which may mean that you
cannot participate in the application process in other companies.
To process your application, certain tools are used (in this case: Jazz HR). Some of those
tools may be managed and supported by companies based in the United States or other
non-EU countries; therefore those tools may be insecure in terms of data protection law.
When these tools are active, your personal data will be transferred to and processed in these
non-EU countries. We would like to point out that a level of data protection comparable to the
EU cannot be guaranteed in these countries. For example, US companies are obliged to
disclose personal data to the security authorities and you as a data subject have no
possibility to legally defend yourself. Therefore, it cannot be ruled out that US authorities will
process, evaluate and permanently archive your personal data for monitoring purposes.
Westernacher has no influence on these processing operations. A transfer takes place on
the basis of your consent according to Art. 7 GDPR in combination with our legitimate
interest in processing your application according to Art. 49 GDPR.
Duration of data storage
Westernacher stores personal data for as long as their storage is necessary within the
meaning of Art. 17 (1) a) GDPR.
Your application documents and other information that you provide to us as part of the
application process are generally stored by us for a maximum of 6 months after completion
of the application process and then deleted. This does not apply if legal provisions prevent
deletion, if further storage is necessary for the purpose of providing evidence or if you have
expressly consented to longer storage.
If we are unable to offer you a current vacancy, but on the basis of your profile believe that
your application may be of interest for future vacancies, we will ask you for your consent to
store your applicant data for a longer period for this purpose. In this case, the storage period
is 24 months.
Obligation to provide personal data
For the administrative preparation and implementation of an employment relationship as well
as due to other legal requirements in that connection, you must provide us with certain
personal data. If you do not provide us with this data, it will not be possible for us to carry out
the employment relationship. We will inform you about the purposes for which your data will
be used after you have been hired in accordance with Art. 13 GDPR.
