If you have ap­plied for em­ploy­ment with Eb­ner Stolz, the fol­lo­wing in­for­ma­tion go­verns the pro­tec­tion of your per­so­nal data ("Data") in ad­di­tion to our ge­ne­ral Pri­vacy Po­licy.

I. Who is responsible for data processing and whom can I contact?

• We are jointly re­spon­si­ble for the pro­ces­sing of your data on this web­site:
• Eb­ner Stolz Mönning Ba­chem Wirt­schaftsprüfer Steu­er­be­ra­ter Rechts­anwälte
• Part­ner­schaft mbB (nach­fol­gend: Eb­ner Stolz PG)
• Eb­ner Stolz GmbH & Co. KG
• Wirt­schaftsprüfungs­ge­sell­schaft Steu­er­be­ra­tungs­ge­sell­schaft
• Eb­ner Stolz Ma­nage­ment Con­sul­tants GmbH
• Eb­ner, Dr. Stolz Ma­nage­ment Sup­port GmbH

The con­tact de­tails of these com­pa­nies ("Eb­ner Stolz") can be found on the le­gal noti­ces page of our web­site. To re­gu­late our data pro­tec­tion re­spon­si­bi­li­ties, these com­pa­nies have en­te­red into an agree­ment, the es­sen­tial con­tent of which we will send to you by email upon re­quest.

If you have any ques­ti­ons about data pro­tec­tion, please con­tact our data pro­tec­tion of­fi­cer using the con­tact de­tails be­low:

Eb­ner Stolz, Da­ten­schutz­be­auf­trag­ter, Kro­nen­straße 30, 70174 Stutt­gart, Email: da­ten­schutz@eb­ner­stolz.de

II. Why is my data processed?

1. De­ci­si­ons about your ap­pli­ca­tion

Data you sub­mit with your ap­pli­ca­tion do­cu­ments or en­ter in our on­line form will be pro­ces­sed by us for the pur­pose of de­ci­ding whe­ther to of­fer you em­ploy­ment with one of the com­pa­nies men­tio­ned above.

In par­ti­cu­lar, if ne­cessary, your data will be pro­ces­sed for the fol­lo­wing pur­po­ses:

• To ex­amine whe­ther your ap­pli­ca­tion, qua­li­fi­ca­ti­ons and pro­fes­sio­nal back­ground meet the re­qui­re­ments of the job ad­ver­ti­se­ment in ques­tion
• To con­tact you to in­form you of our de­ci­sion
• To or­ga­nize and con­duct job in­ter­views and/or as­sess­ment cen­ters
• To re­turn your ap­pli­ca­tion do­cu­ments to you (if ap­plica­ble)
• To reim­burse you for trans­fer your pro­ven in­ter­view costs and trans­fer the funds (if ap­plica­ble)
• To en­force and de­fend against pos­si­ble le­gal claims, in­clu­ding de­fense against pos­si­ble claims un­der the Ge­ne­ral Equal Tre­at­ment Act (AGG)
• If an em­ploy­ment re­la­ti­ons­hip is es­ta­blis­hed: to send you a draft em­ploy­ment agree­ment and re­gis­ter you as an em­ployee

The le­gal ba­sis is Art. 88 of the Ge­ne­ral Data Pro­tec­tion Re­gu­la­tion (GDPR) in con­junc­tion with § 26 (1) sen­tence 1 of the Fe­deral Data Pro­tec­tion Act (BDSG). If you have cons­en­ted to the pro­ces­sing, the le­gal ba­sis is also Art. 6 (1 a) of the GDPR.

In ad­di­tion, if ne­cessary, your data will be ex­chan­ged bet­ween Eb­ner Stolz com­pa­nies for the pur­pose of group ma­nage­ment, in­ter­nal com­mu­ni­ca­tion and other ad­mi­nis­tra­tive pur­po­ses. In par­ti­cu­lar, Eb­ner Stolz PG will pass on in­com­ing ap­pli­ca­ti­ons to other Eb­ner Stolz com­pa­nies if you have ap­plied for a po­si­tion with one of these com­pa­nies. The le­gal ba­sis is Art. 6(1)(f) of the GDPR. Ac­cor­ding to that Ar­ti­cle, pro­ces­sing is la­wful if it is ne­cessary to pro­tect the le­gi­ti­mate in­te­rests of the data con­trol­ler or a third party, ex­cept where such in­te­rests are over­ridden by your in­te­rests or fun­da­men­tal rights and free­doms that re­quire pro­tec­tion of data. We have a le­gi­ti­mate in­te­rest in main­tai­ning a cen­tral re­cruiting sys­tem at Eb­ner Stolz.

In ad­di­tion, we pro­cess your data for the pur­pose of in­ter­nal con­trol­ling in or­der to eva­luate the re­sponse rate to job ex­chan­ges com­mis­sio­ned by us and our uni­ver­sity ap­pearan­ces. The le­gal ba­sis is Art. 6(1)(f) of the GDPR. We have a ju­sti­fied eco­no­mic in­te­rest in iden­ti­fy­ing and im­ple­men­ting par­ti­cu­larly suc­cess­ful re­cruiting mea­su­res in a tar­ge­ted man­ner.

2. Pro­ces­sing on the ba­sis of your cons­ent

If you en­ter data in volun­tary fields in the on­line form or your ap­pli­ca­tion do­cu­ments con­tain ad­di­tio­nal data that goes beyond your ba­sic data or proof of qua­li­fi­ca­tion, we will also pro­cess this data only for the pur­po­ses men­tio­ned above. The le­gal ba­sis is your cons­ent (Art. 6 (1)(a) of the GDPR in con­junc­tion with § 26 (2) of the Fe­deral Data Pro­tec­tion Act). If you have agreed to the re­ten­tion of your ap­pli­ca­tion do­cu­ments beyond the spe­ci­fic ap­pli­ca­tion pro­ce­dure, we may in­form you in the fu­ture of new job of­fers; in this re­spect, your cons­ent is also the le­gal ba­sis. You can re­voke your cons­ent to the pro­ces­sing of this data at any time and need not state any re­asons for doing so (see Sec­tion VIII).

We ask that you not pro­vide us with any spe­cial ca­te­go­ries of data (Art. 9 (1) of the GDPR) that con­tain in­for­ma­tion about mat­ters such as your ra­cial or eth­nic ori­gin, po­li­ti­cal, re­li­gious or ideo­lo­gi­cal be­liefs, la­bor union mem­bership, state of health, se­xual iden­tity or main­ten­ance ob­li­ga­ti­ons (e.g., ma­rital sta­tus, spouse, child­ren). Howe­ver, if you do pro­vide us with such data, you cons­ent to its pro­ces­sing. The pro­ces­sing will be li­mited to sto­rage and ca­sual in­spec­tion by HR em­ployees, if and so far as this can­not be avo­ided with re­ason­able ef­fort. The le­gal ba­sis is Art. 9 (2a) of the GDPR in con­junc­tion with § 26 (2, 3) sen­tence 2 of the Fe­deral Data Pro­tec­tion Act, and if ap­plica­ble, Art. 9 (2 f) of the GDPR.

3. Com­pli­ance with sta­tutory ob­li­ga­ti­ons

We also pro­cess your data to ful­fil our le­gal ob­li­ga­ti­ons un­der Art. 6 (1)(c) of the GDPR, in par­ti­cu­lar in con­nec­tion with the fol­lo­wing laws and for the fol­lo­wing pur­po­ses:

• Pro­vi­sion of in­for­ma­tion in ac­cor­dance with § 57 Se­cond Book of the So­cial Code (SGB II)
• Com­pa­ri­son with "anti-ter­ror lists" in ac­cor­dance with Re­gu­la­ti­ons (EC) No. 2580/2001 and No. 881/2002 in con­junc­tion with Art. 22 (2)(b) of the GDPR
• Au­dit in ac­cor­dance with the Mo­ney Laun­de­ring Act (GwG), in­so­far as we are le­gally ob­li­ged to do so
• Sto­rage ob­li­ga­ti­ons (see Sec­tion III)

III. How long is this data stored?

If the ap­pli­ca­tion pro­cess is com­plete and you do not en­ter into an em­ploy­ment agree­ment with us, your data will in­iti­ally be blo­cked. We will store your blo­cked data for a ma­xi­mum of six months af­ter com­ple­tion of the ap­pli­ca­tion pro­cess. The data will then be de­le­ted or de­stroyed, un­less we are le­gally re­qui­red or en­tit­led to store or re­tain such data beyond that point.

If you en­ter into an em­ploy­ment agree­ment with us, your data may be pro­ces­sed for the pur­pose of es­ta­blis­hing, im­ple­men­ting and ter­mi­na­ting the em­ploy­ment re­la­ti­ons­hip. In this case, we will pro­vide you with fur­ther in­for­ma­tion on data pro­tec­tion du­ring your em­ploy­ment when you en­ter into your em­ploy­ment agree­ment.

If we are le­gally re­qui­red to store cer­tain data pur­su­ant to Art. 6 (1)(c) of the GDPR, this en­tit­les us to store such data un­til the ex­pi­ra­tion of the re­ten­tion pe­riods spe­ci­fied in § 257(1) (2) and (3) of the Ger­man Com­mer­cial Code and § 147 of the Ger­man Tax Code. The sto­rage pe­riods are up to 10 years.

IV. Do I have to provide my data?

You are not re­qui­red to pro­vide your data by law or by con­tract. Howe­ver, if you would like to es­ta­blish an em­ploy­ment re­la­ti­ons­hip with us, you must pro­vide your ba­sic data as well as your di­ploma and proof of qua­li­fi­ca­tion in ac­cor­dance with the job ad­ver­ti­se­ment. Other­wise we will not be able to re­view your ap­pli­ca­tion and con­tact you. The pro­vi­sion of fur­ther data is not a pre­re­qui­site for a pos­si­ble con­tract with us and is the­re­fore volun­tary.

V. Which sources does my data come from?

As a rule, you have made your data avail­able to us your­self. We may re­ceive data from pri­vate em­ploy­ment agen­cies that have for­war­ded your ap­pli­ca­tion to us with your cons­ent.

VI. Will my data be passed on to third parties?

We trans­mit your data to the fol­lo­wing con­trac­tors for the fol­lo­wing pur­po­ses:

• to Per­sis GmbH, Theo­dor-Heuss-Straße 5, 89518 Hei­den­heim an der Brenz (main­ten­ance of the HR ma­nage­ment soft­ware)
• po­ten­ti­ally to other con­trac­tors, in ac­cor­dance with our Pri­vacy Po­licy

Un­der cer­tain cir­cum­stan­ces, your data will be pas­sed on to the fol­lo­wing re­ci­pi­ents if we are le­gally re­qui­red to do so (Art. 6 (1)(c) of the GDPR), if this is ne­cessary to en­force or de­fend against le­gal claims or to safe­guard other le­gi­ti­mate in­te­rests (Art. 6 (1)(f) of the GDPR):

• other Eb­ner Stolz com­pa­nies as de­scri­bed in Sec­tion II.1
• job cen­ters (em­ploy­ment agen­cies)
• postal and te­lecom­mu­ni­ca­ti­ons ser­vice pro­vi­ders for con­tact pur­po­ses

VII. Will there be "automated decision making" as defined in Art. 22 of the GDPR?

In ac­cor­dance with Re­gu­la­ti­ons (EC) No. 2580/2001 and No. 881/2002 and the Mo­ney Laun­de­ring Act, we are re­qui­red to com­bat the fi­nan­cing of ter­ro­rism and, if ne­cessary, to con­duct a mo­ney laun­de­ring au­dit. Du­ring the re­lia­bi­lity ve­ri­fi­ca­tion pro­cess, some of your ba­sic data can be com­pa­red with pu­blic lists con­tai­ning per­sons and or­ga­niza­ti­ons sub­ject to sanc­tions. If you are af­fec­ted by these sanc­tions, we will not es­ta­blish an em­ploy­ment re­la­ti­ons­hip with you.

VIII. What rights do I have with regard to my data?

Un­der the con­di­ti­ons of Art. 15 of the GDPR, you can re­quest in­for­ma­tion from us as to whe­ther we pro­cess data from you, and if so, which data. You may re­quest to have your data cor­rec­ted and if ne­cessary com­ple­ted in ac­cor­dance with Art. 16 of the GDPR. You have the right to re­quest that we de­lete your data un­der the con­di­ti­ons of Art. 17 of the GDPR or block it un­der the con­di­ti­ons of Art. 18 of the GDPR. Ac­cor­ding to Art. 21 of the GDPR, you have the right to re­ceive your data trans­mit­ted to us on the ba­sis of a cons­ent or a con­tract, pro­vi­ded that the pro­ces­sing is au­to­ma­ted. If you so per­mit and it is tech­ni­cally pos­si­ble, we trans­mit this data to a third party. Your rights may be li­mited or ex­clu­ded by law un­der cer­tain cir­cum­stan­ces.

If we pro­cess data for the pro­tec­tion of our in­te­rests ex­clu­si­vely on the ba­sis of Art. 6 (1)(f) of the GDPR, you have the right to ob­ject to the pro­ces­sing of your data for re­asons ari­sing from your par­ti­cu­lar si­tua­tion. If you file an ob­jec­tion, we will no lon­ger pro­cess the data con­cer­ned, un­less we can prove com­pel­ling re­asons wor­thy of pro­tec­tion for the pro­ces­sing that out­weigh your in­te­rests, rights and free­doms, or the pro­ces­sing ser­ves to en­force le­gal claims.

If you have cons­en­ted to the data pro­ces­sing, you have the right to re­voke your cons­ent at any time. The le­ga­lity of the pro­ces­sing un­til re­vo­ca­tion is not af­fec­ted un­til it oc­curs. You can re­voke your cons­ent by sen­ding an email to info@eb­ner­stolz.de Af­ter re­vo­ca­tion, we will no lon­ger pro­cess the data un­less we are le­gally en­tit­led or re­qui­red to do so.

You have the right to file com­plaints un­der data pro­tec­tion law with a data pro­tec­tion aut­ho­rity, e.g., the State Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of In­for­ma­tion, König­straße 10a, 70173 Stutt­gart.

^{Last up­dated: May 23, 2018}