Privacy Notice for Applicants
This privacy notice informs you about how INVERTO processes your personal data when applying for a job posted by us. Among other things, we would like to inform you about your data protection rights, including the right to object to part of the processing carried out by INVERTO.
This privacy notice is supplementary to our general privacy notice.
Contact Details
Controller for the processing of personal data is:
INVERTO GmbH
Lichtstraße 43i
50825 Cologne
Telephone: +49 221 485 687 0
Fax: + 49 221 485 687 140
E-mail: contact@inverto.com
https://www.inverto.com/
If you have any questions about data protection at INVERTO, you can put them to our data protection officer (inverto@activemind.de).
Data Categories and Source
During the application process, we collect and process the following categories of personal data:
- Contact details from the application form (e.g. first and last name, address, country, e-mail address, telephone number).
- Further information from the application form (e.g. mandatory information on salary expectations, academic background and motivation).
- Application documents (this may include your application photo, CV, cover letter, career development data, qualifications and language skills).
- Other data you provide within the application process (e.g. results of personality or performance tests, references).
We may also permissibly obtain the above data about you from other sources, including external business partners, e.g. recruitment agencies or our talent relationship management.
Nature and Purposes of the Processing
Your personal data will be processed exclusively for the following purposes:
- To initiate and establish the employment relationship.
- To contact you for relevant further information.
- To contact you in case you are eligible for an alternative position (only if you have expressly consented to this).
- Where necessary, to defend any legal claims made against us arising from the application process.
- After a successful application for administrative matters (onboarding).
The provision of your personal data as part of the application process is voluntary. However, the provision of certain personal data is necessary for the processing of your application or the conclusion of an employment contract with us.
Inclusion in our Talent Pool
Should your application be not successful, we may, with your explicit consent, store your applicant data in our talent pool in order to contact you again and, where applicable, process it further. In this case, we may contact you in the future about suitable vacancies and invite you to other recruiting events that may serve to initiate an employment relationship. In case you do not agree to be included in our talent pool, you will not suffer any disadvantages in future application procedures.
Legal Basis
We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Art. 26 BDSG and, if applicable, Art. 6 para. 1 p. 1 lit. b GDPR for the initiation or implementation of contractual relationships.
Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 para. 1 p. 1 lit. c GDPR) or for the defence against legal claims asserted against us. The legal basis for this is Art. 6 para. 1 p.1 lit. f GDPR. The legitimate interest is, e.g., a duty of proof in proceedings under the German General Equal Treatment Act (AGG). Where you grant us explicit consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 p.1 lit. a GDPR. Such consent may be revoked at any time with effect for the future.
If an employment relationship arises between you and us, we may further process the personal data already received from you for the purposes of the employment relationship in accordance with Art. 88 para. 1 GDPR in conjunction with Art. 26 para. 1, para. 8 p. 2 BDSG, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee lobby resulting from a law or a collective agreement.
Recipients of the Data
The career website is technically operated by an external service provider (d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, hereinafter "Service Provider"). In the context of talent relationship management, we also use the services of Talentry (Talentry GmbH, Nymphenburger Str. 86, 80636 Munich, hereinafter "Service Provider"). We have concluded data processing agreements in accordance with Art. 28 GDPR with the Service Providers we use, which ensure compliance with data protection requirements in the handling of your personal data.
During the application process, your data is generally only accessed by persons who make the specific hiring decision or are significantly involved in it. As a rule, these persons include employees of the HR department and supervisors, and in some cases also specialist managers. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If, in addition, other persons (e.g. service providers or official bodies) have access to your data, this will always be on the basis of a contractual declaration of confidentiality and/or a data processing agreement or on the basis of legal or official obligations.
Your Rights
Every data subject has the following rights:
- Art. 15 GDPR: You have the right of access to the personal data stored about you in our company. To do so, please contact the controller named above.
- Art. 16, 17 GDPR: You can rectify your personal data by sending an email to contact@inverto.com. You can also request the deletion of your data in this way.
- Art. 18 GDPR: Under certain circumstances, you can request the restriction of the processing of your data, e.g. if the accuracy of your data is disputed and should be verified by us.
- Art. 20 GDPR: Under certain conditions, the data will be provided to you in a structured, commonly used, and machine-readable format.
Duration of Data Storage
Your application documents will be deleted no later than six (6) months after the end of the application process (e.g. by notification or rejection decision), unless longer storage is legally required or permitted. We only store your personal data for a longer period if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of the legal dispute.
If you have consented to the extended use of your application documents for other positions (inclusion in our talent pool), we will initially store them for twelve (12) months. After this period, you will be asked to consent again to the extended use of your application documents. If you do not renew your consent, we will delete your data from our talent pool.
Right to Object
Insofar as the processing of your personal data is carried out for the protection of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing.
Right to Lodge a Complaint with a Supervisory Authority
You have the possibility to complain to the contact persons mentioned above or to a supervisory authority pursuant to Art. 77 GDPR.
The competent supervisory authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de