In the following please find information about the processing of your personal data and about your data protection rights in the context of the application procedure.
1. Controller
The controller that is responsible for the data processing is:
- Scheja & Partners GmbH & Co. KG (hereinafter referred to as "we“)
- Adenauerallee 136
- D-53113 Bonn
- Germany
- tel.: +49 (0) 228-227 226-0
- e-mail:
Encrypted contact form: /contact/contact.html
2. Data protection officer
You can reach our data protection officer here:
- Scheja & Partners GmbH & Co. KG
- Data protection officer
- Adenauerallee 136
- D-53113 Bonn
- Germany
Encrypted contact form: /contact/data-protection-officer.html
3. Categories of data
In the context of the application procedure, we only process those personal data of yours which are pertaining to your application and which are necessary for the purpose of determining your professional and personal skills in relation to the position that is to be filled. Such data may include general data relating to your person (as, e.g., name, address, and contact data), information about your professional qualification and education, and information about professional advanced trainings or other information about your employment history that you provide to us in connection with your application.
4. Purposes, legal bases, and legitimate interests
We process the data described in Section 3 above for the purpose of deciding whether an employment relationship will be established and – if an employment relationship between you and us is actually established – for the performance or the termination of the employment relationship and for the exercising or fulfilment of statutory rights and obligations on the basis of Section 26 of the BDSG [Bundesdatenschutzgesetz, German Federal Data Protection Act]. Moreover, we may process personal data relating to you if this is necessary for the assertion of or defence against legal claims arising under the application procedure. The legal basis for this is Article 6(1)(f) of the GDPR. The legitimate interest is the safeguarding of our legal positions.
5. Sources
If you have not submitted your application directly to us, but to an external online portal or an external recruiter, we will initially collect your data from such third party.
6. Recipients
In our firm, only those persons have access to your personal data who need access for the purposes described in Section 4 above. We only pass your personal data on to external recipients if a statutory permission applies or if we have your consent for this. External recipients may include:
Processors: Service providers that we use for the provision of services, for example in the fields of technical infrastructure and maintenance of our IT systems.
Public bodies: public authorities and official institutions to which we have to transfer personal data for mandatory reasons prescribed by statutory law.
Private bodies: tax consultants, insurers, or similar auxiliary persons, to whom the data are transferred on the basis of consent or a legal basis.
7. Transfer to third countries
In the context of IT-Services and IT-Infrastructure we engage service providers, which are not located within the European Union or the European Economic Area. In doing so, we ensure prior to the transfer that, outside of exceptional cases permitted by statutory law, the recipient either possesses an appropriate level of data protection or appropriate safeguards exist. You can obtain an overview on the recipients in third countries and a copy of the appropriate or suitable safeguards. Please use the data provided in Section 1.
8. Time limits for the deletion
We delete your personal data after the completion of the application procedure, unless a statutory permission or your consent allow for a longer storage. In these two cases, we will delete your personal data after the expiration of the statutory permission or after the consent has been withdrawn.
9. Obligation to provide data
You are not obliged to provide personal data to us. However, depending on the individual case, the provision of certain personal data is necessary for deciding whether an employment relationship with us will be established and performed. If you do not provide such personal data in the context of an application, it may be the case that we are not able to decide whether we can establish an employment relationship with you.
10. Your data subject rights
As a data subject, you have the following rights under the GDPR, provided that the respective statutory requirements are met:
Access: You have the right to receive information about the personal data pertaining to you that we process.
Rectification: You may demand that inaccurate personal data will be rectified. Furthermore, you may demand that incomplete data will be completed.
Erasure: In certain cases, you are entitled to demand the erasure of your personal data.
Restriction of processing: In certain cases, you are entitled to demand that we restrict the processing of your data
Data portability: If you have made the data available to us based on a contract or consent, you are entitled to demand to receive the data which you provided to us in a structured, commonly used and machine-readable format or to have them transmitted by us to another controller.
Right to object
You have the right to object at any time to the processing of your personal data on the basis of Article 6(1)(f) of the GDPR for reasons arising from your particular situation. We will then no longer process such personal data for those purposes, unless we can provide compelling protected reasons for such processing that outweigh your interests, rights and freedoms, or the processing is necessary for the assertion of, exercise of, or defence against any legal claims.
Withdrawal of consent: If you have given us your consent as to the processing of your data, you may withdraw the consent at any time with effect for the future. This does not affect the legitimacy of the processing of your personal data before the withdrawal of the consent.
Asserting your rights: To assert any of your abovementioned rights, please contact us by means of the contact details indicated in Section 1 above. When doing so, please make sure that we can clearly identify you.
Right to lodge a complaint with the supervisory authority: If you believe that the processing of the personal data concerning you is illegal, you may lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your workplace, or at the location of the alleged breach.
11. Automated individual decision-making, including profiling
Automated individual decision-making, including profiling, within the meaning of Article 22 of the GDPR will not take place in connection with an application for employment at our firm.
Last update: October 2019