Important Information about the Processing of Personal Data

We are pleased that you are interested in applying with us. Below we explain how we process your personal data related to your application, and we provide additional relevant information.

1 Who is responsible for the processing?

 BERNT LORENTZ GmbH (hereinafter referred to as “we”) is responsible as defined in the EU General Data Protection Regulation (GDPR).

2 Data Protection Officer

For all questions related to the processing of your personal data and the exercise of your rights under the GDPR, please contact our data protection officer, who can be reached at the following e-mail address: Datenschutz@lorentz.de.

3 For what purposes and on what legal basis do we process personal data?

We process personal data about you for the purpose of your application for employment, when this is necessary on deciding to establish an employment relationship with us. Legal basis is § 26 paragraph 1 relating to paragraph 8 section 2 of the Federal Data Protection Act (BDSG).

Furthermore, we may process personal data about you to the extent required to defend legal claims against us from the application process. The legal basis is article 6 paragraph 1 item f of the GDPR. An example of legitimate interest is a requirement for evidence in proceedings under the General Equal Treatment Act (AGG).

Insofar as an employment relationship arises between you and us, pursuant to § 26 (1) BDSG we may further process the personal data already received from you for employment purposes if this is necessary for the performance or termination of the employment relationship, or for performance or fulfillment of rights and duties of employee representation required by a law, a collective-bargaining agreement, or an operating or service agreement (collective agreement).

4 Which categories of personal data do we process?

We process data related to your application. This may be general personal data (such as your name, address, and contact details), information on your qualifications and education,

information on your continuing education, or other information that you submit to us in connection with your application. In addition, we may process professional information that you have made publicly available, such as a profile on a professional social media platform (for example XING, LinkedIn).

5 Is any transfer to a third country intended?

Transfer to a third country is not intended.

6 How long will your data be stored?

We store your personal data as long as is necessary to decide on your application. If an employment relationship does not come into being between you and us, we may also continue to store data to the extent necessary to defend against potential legal claims. The application documents are destroyed two months after notification of a rejection decision, unless longer storage is necessary due to litigation.

7 What rights do you have?

Depending on the situation in a specific case, as an applicant with us you have the following data protection rights, and you can contact us or our data protection officer at any time about exercising these rights using the contact information provided in Items 1 and 2:

a. Information

You have the right to receive information about your personal data that we process, and to demand access to your personal data and/or copies of it. This includes information on the purpose of the use, the category of data used, its recipients and authorized parties and, if possible, the planned duration of the data storage, or if that is not possible, the criteria for determining its duration.

b. Correction, Erasure, or Restriction of Processing

You have the right to demand immediate correction of incorrect personal data about you. While taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data, which is also possible through a supplementary statement.

c. Right to Object

Insofar as the processing of your personal data takes place on the basis of Article 6 (1) (f) of the GDPR, you have the right to object at any time to the processing of such data for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate reasons for processing it that outweigh your interests, rights, and freedoms, or its processing is for the purposes of asserting, exercising, or defending legal claims.

d. Right to Revoke Consent

If the processing is based on consent that you have given, you have the right to revoke your consent at any time, with no effect on the lawfulness of the processing carried out so far on the basis of this consent. For this, you can contact us or our data protection officer at any time using the above-mentioned contact information.

e. Right to Deletion

You have the right to demand the deletion your personal data immediately, and we are required to delete your personal data immediately if one of the following is true:

• The personal data is no longer needed for the purposes for which it was collected or otherwise processed.
• You object to the processing in accordance with point 8.c above, and there are no overriding legitimate reasons for the processing.
• The personal data was processed unlawfully.
• Deletion of the personal data is required to fulfill a legal obligation under EU or member-state law to which we are subject.

This does not apply if the processing is required:

• to fulfill a legal obligation that requires processing under EU or member-state law to which we are subject.
• to assert, exercise, or defend legal claims.

f. Right to Restriction of Processing

You have the right to demand that we restrict processing if any of the following conditions apply:

• You dispute the accuracy of your personal data for a period of time that enables us to check the accuracy of your personal data.
• The processing is unlawful and you oppose deletion of the personal data, and you instead demand restrictions on its use.
• We no longer need your personal data for the purposes of processing, but you need it to assert, exercise, or defend your legal rights.
• You have objected to the processing according to item 8.c above, as long as it is not yet determined whether our legitimate reasons prevail over yours.

If the processing has been restricted in accordance with item (e), then this personal data may only be processed with your consent or for the purpose of asserting, exercising, or defending legal claims, or protecting the rights of another natural or legal person, or for reasons of significant public interest of the EU or of a member state (except for storing the data). If you have put a restriction on processing, we will inform you before the restriction is removed.

g. Right to Complain

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a regulatory authority, in particular in the member state where you reside, where you work, or the site of the alleged infringement, if you believe that the processing of your personal data is contrary to the GDPR.

8 Necessity of Providing Personal Data

Providing your personal data is not required by law nor by contract, nor are you obligated to provide your personal data. However, personal data is needed from you in order to enter into an employment relationship with us. This means that unless you provide us with personal data when applying, we will not enter into any employment relationship with you.