Skip to main content

Processing of (personal) data by the entity in charge of the online application process

1. This data protection information applies to data processing by:

snapAddy GmbH
Haugerkirchgasse 7, 97070 Würzburg, Germany
datenschutz@snapaddy.com
+49 931 46621200


2. Contact details of the data protection officer 

SiDIT GmbH, www.sidit.de, e-mail: info@sidit.de


3. Collection and storage of personal data in applications and on the basis of applicant profiles on applicant portals as well as the type and purpose and their use 

3.1 Collection and storage

When
  • you are contacting us for the first time, 
  • you submit an application to us,
  • we contact you for the first time based on your applicant profile on applicant portals such as Experteer and/or Indeed or
  • we contact you for the first time based on your profile on professional social media platforms such as LinkedIn and/or XING,

then we usually process the following information:
  • title, first name, last name,
  • address,
  • a valid e-mail address,
  • telephone number (landline and/or mobile),
  • all other data that you provide in your application documents (in particular CV, certificates)
  • all other data that you have released in the applicant profile on applicant portals
  • all other data that you provide in the application process (in applicant questionnaires, interviews, etc.)
  • voluntarily provided special categories of personal data


3.2 What do we process your data for (purpose of processing) and on what legal basis? 

In the following, we will inform you what we process your data for and on what legal basis. 


3.2.1 For the fulfillment of contractual obligations and pre-contractual measures (Art. 6 para. 1 letter b GDPR, § 26 BDSG) 

We process your data to fulfill contractual obligations and pre-contractual measures with you, i.e. in particular 
  • for internal processing of your application
  • on the implementation of the application procedure
  • for correspondence with you
  • for the performance or termination of an employment relationship
  • to exercise or fulfill rights and obligations arising from the law or from a collective agreement, a works or service agreement
  • for the settlement of any liability claims and the assertion of any claims against you.


3.2.2 Based on your consent (Art. 6 (1) (a) GDPR)
 
In principle, we will delete your data no later than 6 months after the end of the application process, provided there are no further reasons for retention, see point 5. If you have given us your consent to process your personal data as part of an "applicant pool", we will delete this no later than three years after it has been granted. The purpose of the "applicant pool" is to be able to consider you for a future vacancy.

You can withdraw your consent at any time with effect for the future. We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.


3.2.3 On the basis of legitimate interests (Art. 6 para. 1 letter f GDPR) 

Furthermore, we may process your personal data insofar as this is necessary for the defense of legal claims against us arising from the application procedure for legitimate interests (e.g. claims arising from the AGG), Art. 6 para. 1 letter f GDPR.


3.2.4 Due to legal requirements (Art. 6 para. 1 letter c GDPR) 

We are subject to various legal obligations, such as statutory retention and documentation obligations under commercial law (from HGB, StGB or AO). 


3.2.5 Processing of special categories of personal data (Art. 9 (2) GDPR)

We process the special categories of personal data provided by you if you have given us your consent in accordance with Art. 9 para. 2 lit. a) GDPR or if the processing is necessary for us to exercise your rights under labor law and social security and social protection law and to fulfill our obligations in this regard, Art. 9 para. 2 lit. b) GDPR.

You can withdraw your consent at any time with effect for the future. We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its Wethautal.


4. Transfer of data to third parties and processors

The disclosure of personal data also constitutes processing within the meaning of the previous section 3.2. However, we would like to take this opportunity to inform you separately about the issue of disclosure to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties. 

Your personal data is generally transferred to third parties for the following purposes: 

  • Processors with whom we have concluded an agreement in accordance with Art. 28 GDPR
  • Accounting (e.g. tax consultant)
  • Legal disputes (e.g. lawyer)
  • Communication platform (e.g. e-mail, WhatsApp, other messenger services)

Data processing takes place exclusively in a member state of the European Union or in another state party to the Agreement on the European Economic Area. Any transfer to a third country will only take place if the special requirements of Art. 44 et seq. GDPR are fulfilled.


5. Deletion

Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.


6. Rights of data subjects

You have the right:

  • in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we will no longer be able to continue the data processing based on this consent. Based on the previous strategy for the future;
  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
  • in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, insofar as these are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, and 
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.


7. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. If you would like to exercise your right to object, simply send an email to datenschutz@snapaddy.com



Note: If only the masculine form has been chosen for certain terms referring to groups of people, this is not meant to be gender-specific, but was done solely for reasons of easier readability.


Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.