Data protection information on the processing of personal data within the application management process

The controller of the processing of personal data collected directly by us is:

‍

culture4life GmbH
Mörikestraße 67
70199 Stuttgart
Deutschland
info@culture4life.de

You can reach our data protection officer as follows:

‍

culture4life GmbH
Data Protection Officer

Rotherstr. 20
10245 Berlin
Germany
privacy@culture4life.de

It is possible to apply by email to hello@luca-app.de or by mail to culture4life, Charlottenstraße 59, 10117 Berlin.

You also have the option of submitting your application via the job portal on our websiteHere we use the Dutch SaaS provider Recruitee.

‍

• 26 BDSG (1) covers data processing that is necessary for the establishment of the employment relationship.
• 26 BDSG (2) allows us to process your data based on your voluntarily written consent, which can be revoked in the future.
• Section 26 BDSG (3) allows us to process your sensitive data (e.g., health data, trade union membership) if it is necessary for the exercise of rights or the fulfilment of legal obligations under labour law, social security law, and social protection law, and if your interests merit protection.
• Art. 6 (1) a – GDPR allows us to process your personal data, e.g., to include your application documents in our applicant pool, until you withdraw your consent.
• Art. 6 (1) f – GDPR allows us to process your personal data if we or a third party have legitimate interests in this processing and your interests, fundamental rights or freedoms do not conflict with this, e.g.: enforcement, exercise or defence of legal claims, e.g., from the AGG (General Equal Treatment Act).

‍

In the context of your application, the following personal data may be processed: name, e-mail address, application documents (e.g., contact details, cover letter, CV, professional history, certificates, photo).

In general:

Your personal data will be deleted after the purpose of the data processing no longer applies and the legal retention periods have expired. As a rule, we are obliged to retain data for 6 or 10 years (in the case of an acceptance).

Application documents:

We store your data as long as you are actively looking for a job with us, but no longer than six months after the end of the application process. After that, we delete your data unless you have given us your consent to continue storing your data.

Should your application be considered for a position that arises later, we will send you an e-mail and ask you to give your consent to the storage of your application data for a further period of six months. Your data will then be processed for the purpose of contacting you in the event of a suitable position for you. If there is still a need to store your data after the period extended by your consent has expired, we will ask you again for your consent to extend the storage and processing. After the storage period covered by your consent has expired, your data will be deleted.

‍

In our company, only the employees who need this data to fulfil their tasks have access to your personal data to the necessary extent.

Service providers used to fulfil the purposes described may receive your data if this is necessary and if they fulfil the confidentiality requirements under data protection law (order processing agreement), e.g., technical service providers for hosting and telecommunications.

‍

We use the SaaS provider Recruitee B.V., Keizersgracht 313 1016 Amsterdam, The Netherlands for our applicant management. They process your personal data on our behalf.

Regarding the processing of your personal data, you have the following rights provided for in the GDPR, which you can exercise against us for all processing operations:

• The right to request a statement as to whether your personal data is being processed and, if so, the right to be informed of that data. This information includes, among other things, the purposes of processing, the categories of personal data processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 GDPR).
• The right to request the rectification of your personal data if it is inaccurate or incomplete (Art. 16 GDPR).
• The right, under certain conditions, to demand that your personal data be deleted immediately (so-called “right to be forgotten”) (Art. 17 GDPR). The deletion of your data can be carried out accordingly, if there is no justified interest or legal retention period to the contrary.
• The right to request the restriction of the processing of your personal data under certain conditions (Art. 18 GDPR).

• The right to revoke consent given to us regarding the processing of your personal data at any time. Such a revocation is valid for the future and does not affect the lawfulness of the processing that took place until your revocation.

You may also contact our data protection officer to exercise these rights against us. Regardless of the above rights, you have the right to lodge a complaint with a supervisory authority for data protection and freedom of information, for example with the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Postfach 10 29 32, 70025 Stuttgart. Tel.: +49 711/615541-0
Fax: +49 711/615541-15

‍poststelle@lfdi.bwl.de