Privacy Notice for Applicants at Mauer Unternehmensberatung GmbH Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft

According to Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR)

1. Who is responsible for data processing?

Mauer Unternehmensberatung GmbH Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
Borsigstraße 6
72760 Reutlingen
Tel.: +49 7121 90 90 20
Email: kontakt@mauer-gruppe.com

Our Data Protection Officer can be reached at:
Email: datenschutz@mauer-gruppe.com

2. Purposes of Processing and Legal Basis

We process your personal data to the extent necessary to evaluate the establishment of an employment relationship. The legal basis for this is generally Article 6(1)(b) GDPR in conjunction with Section 26 of the Federal Data Protection Act (BDSG).

We only collect personal data (such as first name, last name, address, email, the position applied for, and details from your application) that is necessary for the application process. To fully assess your application, it is necessary for you to provide information about your previous professional experience.

In the course of your application, we generally use only data that is directly provided by you or by someone authorized by you. During the application process, additional personal data may be collected from you personally or from publicly accessible sources. This may include data you provide for professional purposes (e.g., on business networks). We do not conduct further research about you, such as using online search engines.

If we ask for your gender in the form of a preferred salutation during the application process, it is solely to address you correctly. Providing your age or date of birth is required because some of our roles have legal minimum age requirements.

2.1 Consent (Article 6(1)(a) GDPR)

If you have given us consent to process data for specific purposes, such as actively contacting you to offer additional open positions, the processing duration is determined by the purpose of the given consent. Please refer to the information provided with the consent form.

2.2 Performance of Pre-contractual Measures and Fulfillment of Contractual Obligations (Article 6(1)(b) GDPR)

We process your personal data for pre-contractual measures and activities, particularly for contract negotiations.

2.3 Compliance with Legal Obligations (Article 6(1)(c) GDPR)

We process your personal data to fulfill commercial and tax retention obligations or other legal requirements (e.g., under anti-money laundering laws).

2.4 Protection of Legitimate Interests (Article 6(1)(f) GDPR)

We process your personal data as necessary to defend against claims made in the application process against us. The legitimate interest includes, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

3. Categories of Personal Data We Process and Sources

We process the personal data you provide during your application. This includes data you provide directly through your application materials and during interviews. We also review profiles of applicants on XING, LinkedIn, or other professional social networks, if available. We do not review profiles on private social networks.

Additionally, we may receive data from recruitment agencies to whom you have provided your application materials and who recommend you as a candidate for a position.

4. Who Receives Your Data?

Your data will be treated confidentially and only accessible to those within the company involved in the hiring decision (e.g., relevant departments).

Processors such as software providers, IT service providers, and document shredding companies may also receive your data. We have concluded data processing agreements with these providers to ensure that data processing is conducted in compliance with legal requirements.

5. Transfer of Your Data to a Third Country or International Organization

If we transfer personal data to service providers outside the European Economic Area (EEA), the transfer will only occur if the third country has been recognized by the EU Commission as providing an adequate level of data protection or other appropriate safeguards (e.g., binding corporate rules or EU standard contractual clauses) are in place, unless there is a legal exception (Article 49 GDPR), including your explicit consent.

6. How Long Do We Store Your Data?

We retain your personal data as long as necessary to achieve the processing purposes and/or to fulfill legal retention obligations.

If you are not selected for the position you applied for, we will delete your data, provided you withdraw your application, six months after the withdrawal of your application or, if we reject you, six months after the rejection. If an employment contract is concluded, your application documents will be added to your personnel file and stored for at least the duration of the employment relationship.

7. Is There Automated Decision-Making (Including Profiling)?

We do not use purely automated decision-making procedures according to Article 22 GDPR. Should we use such procedures in individual cases, we will inform you separately.

8. Your Obligation to Provide Data

Applying to us is voluntary. Providing your personal data regarding your previous professional and/or educational background, qualifications, skills, and contact details is necessary for us to determine if you fit the position and to conduct the recruitment process. Without providing personal data, we cannot conduct the recruitment process.

Therefore, failure to provide personal data will result in your application not being considered for the position.

9. Data Subject Rights

You can request information about your personal data processed by us under the address provided and under certain conditions:

Article 15 GDPR: You can request information about the processing purposes, categories of personal data, recipients of your data, planned storage duration, rights to rectification, deletion, restriction of processing or objection, right to complain, source of data, and the existence of automated decision-making including profiling and detailed information.
Article 16 GDPR: You can request immediate correction of inaccurate or incomplete personal data stored by us.
Article 17 GDPR: You can request deletion of your personal data stored by us, unless the processing is required for exercising freedom of expression and information, fulfilling legal obligations, public interest, or for establishing, exercising, or defending legal claims.
Article 18 GDPR: You can request restriction of processing if you dispute the accuracy of the data, the processing is unlawful, you oppose deletion and we no longer need the data, or you need it for establishing, exercising, or defending legal claims or have objected to processing under Article 21 GDPR.
Article 20 GDPR: You can request your personal data provided to us in a structured, commonly used, and machine-readable format or request its transfer to another controller.
Article 7(3) GDPR: You can withdraw your consent at any time. This will result in us no longer processing data based on that consent in the future.

If you wish to exercise any of these rights, please contact us or our Data Protection Officer.

Information on Your Right to Object Under Article 21 GDPR
You have the right to object to the processing of your personal data based on Article 6(1)(f) GDPR (processing for the protection of legitimate interests) or Article 6(1)(e) GDPR (processing for tasks carried out in the public interest).

If you object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for establishing, exercising, or defending legal claims.

Information on Your Right to Withdraw Consent Under Article 7(3) GDPR
If we process your personal data for specific purposes based on your consent, you have the right to withdraw your consent at any time under Article 7(3) GDPR. After receiving your withdrawal, we will cease processing the data for the purposes for which you provided consent. The lawfulness of processing prior to your withdrawal remains unaffected.

Please note that the withdrawal will only affect future processing. Processing carried out before the withdrawal remains unaffected.

Objections can be made informally and should be directed to:
Mauer Unternehmensberatung GmbH Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
Borsigstraße 6
72760 Reutlingen
E-Mail: kontakt@mauer-gruppe.com

11. Your Right to Complain to the Relevant Supervisory Authority

You have the right to lodge a complaint with the data protection supervisory authority if you believe that the processing of your data violates the GDPR (Article 77 GDPR). Our competent supervisory authority is:

The State Commissioner for Data Protection and Freedom of Information P.O. Box 10 29 32 in 70025 Stuttgart, Tel: 0711/615541-0, E-Mail: poststelle@lfdi.bwl.de

‍