Skip to main content

Processing of (personal) data by the entity in charge of the online application process

Privacy Policy

Processing of (personal) data by the entity in charge of the online application process

Privacy policy for applicants

We provide you with this privacy policy to inform you about how pub.tech – Public Value Technologies GmbH (hereinafter referred to as ‘pub.tech’) processes your personal data collected during the application process.

1. Responsible party and data protection officer

The responsible party for conducting the application process is, iaw Art. 4 Abs. 7 of the European General Data Protection Regulation (GDPR), the

pub.tech - Public Value Technologies GmbH
Rundfunkplatz 1
80335 München
karriere@pub.tech

You can contact our data protection officer at datenschutz@pub.tech or at our postal address with the addition ‘z. Hd. Datenschutzbeauftragter’.

2. Purposes and legal basis for the processing of personal data by pub.tech

a. Data processing for applications and in the application process

If you apply to us electronically, i.e. by e-mail or via our web form, we collect and process your personal data for the purpose of handling the application process and implementing pre-contractual measures.

By submitting an application on our recruitment page, you are expressing your interest in working for us. In this context, you provide us with personal data, which we use and store, i.e. process, exclusively for the purpose of your job search/application.

In particular, the following data is collected:

  • Name (first and last name)
  • Email address
  • Telephone number (optional)
  • Desired start date
  • Channel through which you became aware of us (optional)
  • Salary expectations
You also have the option of uploading relevant documents such as a cover letter, your CV and references. These may contain additional personal data such as your date of birth, address, etc.

pub.tech conducts several rounds of interviews during the application process. pub.tech summarises the content of these interviews, which is necessary for evaluating your application, and makes it available to the personnel responsible for the recruitment process. In addition, the contact details of your reference contact provided by you will be used to schedule and conduct a reference interview.

Only authorised employees from the human resources department or employees involved in the application process have access to your data.

Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied. The legal basis for the processing of your personal data is primarily § 26 BDSG (German Federal Data Protection Act), insofar as it concerns the mandatory information listed above. According to this, the processing of data that is necessary in connection with the decision to establish an employment relationship is permissible.

However, we process any information you provide on an optional basis on the basis of your consent in accordance with Art. 6 Abs. 1 S. 1 lit. a DS-GVO (General Data Protection Regulation), which you give by ticking the relevant checkbox in the application form. You can revoke your consent to the processing of the latter information at any time (see also section 4 ‘Rights of data subjects’).

As a rule, we do not require any special categories of personal data within the meaning of Art. 9 DS-GVO, such as health data, for the application process. If, in exceptional cases, such information is relevant to the application process (e.g. in the case of severe disability, so that we can fulfil our legal obligations under labour and social law in the event of employment), we will process it together with the other data you have provided. In this case, the legal basis for data processing is Art. 9 Abs. 2 lit. b DS-GVO in conjunction with § 26 Abs. 3 BDSG.

Your data will be stored for a period of three months after the end of the application process. This is usually done to fulfil legal obligations or to defend against any claims arising from legal regulations. The storage of data for six months for the purpose of defending against legal claims is based on the pursuit of legitimate interests iaw Art. 6 Abs. 1 Satz. 1 lit. f DS-GVO.

After expiry of the storage periods or in the context of exercising your right to erasure and/or objection, we are obliged to erase or anonymise your data. In this case, the data will only be available to us as data without direct personal reference for statistical evaluations (e.g. number of applications per period, etc.).

If you receive an offer of employment from us during the application process and accept it, we will store the personal data collected during the application process for at least the duration of the employment relationship.

b. Data processing in the ‘Talent Pool’

In addition, we reserve the right to ask for your consent to include your data in our ‘Talent Pool’ for twelve months after the end of the application process in order to identify any other positions that may be of interest to you and to contact you for this purpose. The legal basis for inclusion in the ‘Talent Pool’ is your consent in accordance with Art. 6 Abs. 1 Satz. 1 lit. a DS-GVO. You can revoke your consent to be included in our ‘Talent Pool’ at any time (see also section 4 ‘Rights of data subjects’).

c. Contact

When you contact us, e.g. by e-mail, post or telephone, we process the data you provide (e.g. your e-mail address and the content of your enquiry) that is necessary to respond to your question. If your enquiry contains optional personal data, e.g. your name, we process this data in order to provide you with more targeted support.

The legal basis for the collection of data in the context of contact and support enquiries is § 26 Abs. 1 BDSG if an employment relationship exists or is sought. The legal basis is Art. 6 Abs. 1 Satz 1 lit. b DSGVO (processing is necessary for the performance of a contract with the data subject) if the contact is intended to establish or already establishes another contractual relationship. The legal basis is Art. 6 Abs. 1 Satz 1 lit. f DSGVO (processing is necessary to safeguard the legitimate interests of the controller of the respective data collection) if no contractual relationship exists or is intended, e.g. if the contact is of a general nature. In the latter case, our legitimate interest is to respond to your enquiry in an appropriate manner.
We delete the data collected in this context once storage is no longer necessary (depending on the respective purpose of the contact) or restrict processing if there are legal retention obligations.

3. Transfer of data to third parties

The data transmitted as part of your application is transferred using TLS encryption and stored in a database that is managed by our company and operated by our processor Personio GmbH, Rundfunkplatz 4, 80335 Munich. We have concluded a corresponding data processing agreement in accordance with Art. 28 Abs. 3 DS-GVO with Personio GmbH, which offers personnel administration and applicant management software and stores data exclusively on ISO-certified servers in Germany.

We subject our processors to regular audits with regard to the level of protection guaranteed by the standard contractual clauses and, if necessary, take appropriate additional measures to ensure the level of protection.

4. Rights of data subjects

Provided that the respective conditions are met, you have the right to information (Art. 15 DS-GVO), the right to rectification (Art. 16 DS-GVO), the right to erasure (Art. 17 DS-GVO; ‘right to be forgotten’), right to restriction of processing (Art. 18 DS-GVO), right to object to processing (Art. 21 DS-GVO), right to data portability (Art. 20 DS-GVO), right to lodge a complaint with a supervisory authority (Art. 77 DS-GVO). If you wish to exercise any of the above rights, please let us know in what context the data was transmitted to us or collected by us. To exercise your rights as a data subject in relation to the data processed in this online application process, please contact our data protection officer (see section 1) or the Human Resources department at karriere@pub.tech.

For pub.tech - Public Value Technologies GmbH, an affiliated company of Bayerischer Rundfunk and Südwestrundfunk, the Broadcasting Data Protection Officer for Bayerischer Rundfunk and Südwestrundfunk is responsible as the data protection supervisory authority.

If you have any questions for the data protection supervisory authority, please contact:

The Broadcasting Commissioner for MDR, SWR, BR, WDR, SR, Deutschlandradio and ZDF

Stephan Schwarze
Kantstraße 71-73
04275 Leipzig
Email: kontakt@rundfunkdatenschutz.de

If the processing of personal data is based on your consent, you have the right to withdraw your consent under Art. 7 Abs. 3 DSGVO. Withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal.

5. Additional information on your right to object

We would also like to point out that if your personal data is processed on the basis of legitimate interest within the framework of the balancing of interests pursuant to Abs.1 Satz 1 f) DS-GVO, you have the right to object to the processing of your personal data at any time. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.