The controller responsible for data processing is:

Scheja & Partners GmbH & Co. KG (hereinafter referred to as “we”)
Adenauerallee 136
D-53113 Bonn
T.: +49 228-227 226-0
Email: Encrypted contact form

You can contact our Data Protection Officer as follows: 

Scheja & Partners GmbH & Co. KG
Data Protection Officer
Adenauerallee 136
D-53113 Bonn
Email: Encrypted contact form

As part of the application process, we only process personal data about you that is related to your application and that is necessary to determine your professional and personal skills in relation to the position to be filled. This may include general information about you (such as your name, address, and contact details), information about your professional qualifications and education, information about further professional training, or other information about your professional career that you provide to us in connection with your application. In the case of audio and video conferences, we process data related to web meetings, such as user data, audio and video data, contributions, and content shared by you during the web meeting. 

We process the data mentioned in section 3 for the purpose of deciding on the establishment of an employment relationship and, if an employment relationship is established between you and us – for the performance or termination of the employment relationship and for the exercise or fulfillment of legal rights and obligations on the basis of Art. 6 para. 1 b) GDPR (contract fulfillment/contract initiation). We may also process special categories of personal data on the basis of § 26 para. 3 s. 1 BDSG, Art. 9 para. 2 b) GDPR. In addition, we may process personal data about you to the extent necessary to assert or defend legal claims arising from the application process. The legal basis for this is Art. 6 para. 1 f) GDPR. The legitimate interest is the protection of our legal positions. In this context, we may also process special categories of personal data on the basis of Art. 9 para. 2 f) GDPR. 

When conducting video and audio conferences, we only process data to enable the smooth running of the web meeting. We conduct web meetings within the framework of a contractual relationship or contract initiation in the application process with you (Article 6 para. 1 b) GDPR). If we use Microsoft services to conduct web meetings, Microsoft is responsible for data processing. With regard to the processing of personal data by Microsoft, we refer to their privacy policy: https://privacy.microsoft.com/de-de/privacystatement. 

If you do not submit your application directly to us but via an external online portal or an external recruiter, we will initially collect your data via these third parties. 

Only those persons who need your personal data for the purposes specified in section 4 have access to it. We only pass on your personal data to external recipients if we have legal permission to do so or if we have your consent. External recipients may include: 

Processors: Service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance of our IT systems. 

Public authorities: Authorities and government institutions, such as social security agencies, courts, or authorities to which we are required by law to transfer personal data. 

Private entities: Tax advisors, insurance companies, or similar service providers to whom data is transferred on the basis of consent or a legal basis. In the case of web meetings, the providers of such services and participants in the meetings may also be recipients

We use service providers headquartered outside the European Union or the European Economic Area for IT services and IT infrastructure. In this case, we ensure, except in cases permitted by law, that the recipient has an adequate level of data protection or that appropriate safeguards are in place before the transfer takes place. You can request an overview of the recipients in third countries and a copy of the appropriate or adequate safeguards. Please use the information provided in section 1 for this purpose. 

We will delete your personal data after the application process has been completed, unless a legal permission or your consent allows for longer storage. In these two cases, we will delete your personal data after the legal permission has expired or after your consent has been revoked. 

You are not obliged to provide us with personal data. However, depending on the individual case, the provision of certain personal data may be necessary for a decision on the establishment and execution of an employment relationship with us. If you do not provide us with this personal data when applying for a job, we may not be able to make a decision on the establishment of an employment relationship with you. 

As a data subject, you have the following rights under the GDPR, provided that the respective legal requirements are met: 

Right of access : You have the right to obtain information about the data we process about you. 

Right to rectification: You can request the rectification of inaccurate data concerning you. In addition, you can request the completion of incomplete data. 

Right to erasure: In certain cases, you can request the deletion of your personal data. Restriction of processing: In certain cases, you can request that we restrict the processing of your data. 

Right to data portability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, commonly used, and machine-readable format or that we transfer it to another controller. 

Right to object 
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 para. 1 f) GDPR. We will then no longer process this personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

Withdrawal of consent: If you have given us your consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data until the withdrawal remains unaffected by this. 

Exercising your rights: To exercise any of your rights mentioned above, please contact us using the contact details provided in section 1. Please ensure that we are able to clearly identify you.

Right to lodge a complaint with the supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, , if you believe that the processing of personal data concerning you is unlawful. 

Automated individual decision-making, including profiling within the meaning of Article 22 of the GDPR, does not take place in connection with your application to us.