Privacy Policy for Applicants
Online Recruiting System
We are pleased that you are interested in us and are applying or have applied for a position in our company. We would like to provide you below with information on the processing of your personal data in connection with the application.
This privacy policy applies to the Online Recruiting System operated by Corden Pharma International GmbH and made available to other companies of the CordenPharma Group.
This privacy policy provides you with information on how the CordenPharma Group handles information provided through your application. In accordance with Art. 13 (1) and (2) of the EU General Data Protection Regulation (GDPR), as well as Art. 14 (1) and (2) GDPR, we hereby inform you that we will only process the data collected from you as part of the application process for the position you have applied for. A provision of your data is necessary for a possible conclusion of a contract. Furthermore, your data will be processed if a contract is concluded.
1. Controller
The controller responsible for data processing is:
Corden Pharma GmbH
Otto-Hahn-Str., 68723 Plankstadt, Germany
Phone: +49 6202 99 00
Mail: dataprivacy.germany@cordenpharma.com
2. Data Protection Officer
If you have any questions in connection with the processing of your personal data and the exercise of your rights under GDPR, please do not hesitate to contact our data protection officer. You can reach him at:
Mr. Wolfgang Matzke
KLW Ltd., Lise-Meitner-Str.12, 74074 Heilbronn, Germany
Phone: +49 7131 385 340
Mail: datenschutz@klw.de
3. Scope and purpose of data processing
We process data that you provide to us when you apply for an advertised position or send us an unsolicited application (personal data, contact data, data on education, data on your professional career to date, cover letter, resume, portrait photo, references, etc.) in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.
We need this data to be able to carry out your application process.
4. Legal basis of the processing
4.1 Data processing for purposes of the employment relationship - § 26 BDSG
Your personal data will be processed for the purpose of personnel selection to fill open positions, i.e. to initiate an employment contract. The necessity and the scope of the data collection are assessed, among other things, according to the position to be filled. If your intended position involves the performance of particularly confidential tasks, increased personnel and / or financial responsibility, or is linked to certain physical and health requirements, more extensive data collection may be necessary. The legal basis is Section 26 (1) of the German Federal Data Protection Act (BDSG).
4.2 Consent - 6 para.1 lit. a GDPR, § 26 para. 2 BDSG
If you have given us your voluntary consent to the processing of certain personal data, then this consent forms the legal basis for the processing of this data.
In the following cases, we process your personal data on the basis of consent given by you:
- Inclusion in the applicant pool, i.e. we store the application documents and other data created about you in the course of the application process beyond the current application process for consideration in subsequent application processes.
- If we base data processing on your consent, you have the right to revoke your consent at any time with effect for the future. If possible, please send the revocation by e-mail to dataprivacy.germany@cordenpharma.com. The lawfulness of the processing of your data up to the time of the revocation remains unaffected.
4.3 Data processing based on the legitimate interest - 6 para.1 lit. f GDPR
In certain cases, we process your data to protect a legitimate interest of us or of third parties, provided that your interests or fundamental rights and freedoms do not prevail. A legitimate interest exists, for example, if your data is required for the assertion, exercise or defense of legal claims in the context of the application process (e.g. claims under the General Equal Treatment Act). In the event of a legal dispute, we have a legitimate interest in processing the data for evidence purposes.
5. Recipients of the personal data
Your data will only be passed on to the employees in the Human Resources department who are responsible for the application process, as well as to the employees of the respective specialist departments, insofar as this is necessary for the decision on the establishment of the employment relationship.
We may transfer your personal data to affiliated companies within the CordenPharma Group to the extent permitted in accordance with the purposes and legal bases set out in Section 4. Only employees of the CordenPharma Group have access to the personal data you provide within the Online Recruiting System that is required in the execution of the application process or handling of the Online Recruiting System. Access to the relevant information in each application is protected by defined authorizations. The authorization concept in the Online Recruiting System ensures role-dependent and location-based viewing rights.
A transfer to service providers who support us in the fulfillment of our tasks may also take place in this regard. These are service providers of the following categories:
d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany (d.vinci), assists us as a technical service provider in the provision of support and applicant management.
Your personal data is stored in encrypted form in a German data center and hosted by the company d.vinci HR-Systems GmbH. For this purpose, we have concluded a data processing agreement with d.vinci HR-Systems GmbH in accordance with Art. 28 GDPR, which ensures that the data is processed in a permissible manner.
In addition, when the Online Recruiting System is accessed, log data is stored for technical operation and maintenance purposes. The following data is stored at d.vinci:
- Date and time of access
- Browser type and version
- Operating system used
- Amount of data sent
- IP address of the access
- Domain name of the Internet service provider
This data is stored at d.vinci exclusively for technical reasons and is not assigned to a specific person at any time. The legal basis for the storage is Article 6 (1) sentence 1 lit. f of the General Data Protection Regulation (GDPR).
Your data will not be transferred to countries outside Switzerland / the European Union (EU).
6. Duration of storage
We only store your personal data for as long as we need it for the application process. Unless you have given your consent for further processing of your data (e.g. for the applicant pool), your application data will be stored for six months after completion of the application process for an advertised position and then deleted.
If no employment relationship is established, but you have given us your consent for the further storage of your data (e.g. for the applicant pool), we will store your data until you revoke your consent, but for no longer than 24 months.
7. Automated decision making; Profiling
Your personal data will not be used for automated decision making or profiling.
8. What rights do you have?
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.
Insofar as the processing of your personal data is carried out for the protection of legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
To exercise your rights, you can contact us by email at dataprivacy.germany@cordenpharma.com. We will process your requests promptly and in accordance with the legal requirements and inform you of the measures we have taken or will take.
Version 2.0 / Nov 2023
