The controller responsible for data processing is:

Scheja & Partners GmbH & Co. KG (hereinafter: “we”)
Adenauerallee 136
D-53113 Bonn
Tel.: 0228-227 226-0
Email: Encrypted contact form

You can contact our Data Protection Officer as follows:

Scheja & Partners GmbH & Co. KG
Data Protection Officer
Adenauerallee 136
D-53113 Bonn
Email: Encrypted contact form

As part of the application process, we process only those personal data relating to you that are connected with your application and are necessary to assess your professional and personal suitability for the position to be filled. This may include general data about you (such as name, address and contact details), information about your professional qualifications and education, information about professional development, or other details of your career that you provide to us in connection with your application. In audio and video conferences, we process data in connection with web meetings, such as user data, audio and video data, contributions, and content you share during the web meeting.

We process the data referred to in section 3 for the purpose of deciding on the establishment of an employment relationship and—if an employment relationship is established between you and us—for the implementation or termination of the employment relationship and for the exercise or fulfilment of statutory rights and obligations on the basis of Article 6(1)(b) GDPR (performance of a contract / steps prior to entering into a contract). Where applicable, we also process special categories of personal data on the basis of Section 26(3) sentence 1 BDSG and Article 9(2)(b) GDPR. In addition, we may process personal data about you insofar as this is necessary for the assertion or defence of legal claims arising from the application process. The legal basis in this case is Article 6(1)(f) GDPR. The legitimate interest is the safeguarding of our legal positions. Where applicable, we also process special categories of personal data in this context on the basis of Article 9(2)(f) GDPR.

In the context of conducting video and audio conferences, we process data only to enable the smooth conduct of the web meeting. We conduct web meetings as part of a contractual relationship or steps prior to entering into a contract in the application process with you (Article 6(1)(b) GDPR). Where we use Microsoft services for participation in web meetings, Microsoft is responsible for data processing. With regard to Microsoft’s processing of personal data, we refer to its privacy notice: https://privacy.microsoft.com/de-de/privacystatement.

If you submit your application not directly to us but via an external online portal or an external recruiter, we initially collect your data via these third parties.

Within our organisation, only those persons have access to your personal data who require it for the purposes set out in section 4. We disclose your personal data to external recipients only if permitted by law or if we have your consent. External recipients may include:
Processors: service providers we use to deliver services, for example in the areas of technical infrastructure and maintenance of our IT systems.

Public bodies: authorities and state institutions, such as social security institutions, courts or authorities, to which we must transmit personal data for mandatory legal reasons.

Private entities: tax advisors, insurers or similar assistants to whom data are transmitted on the basis of consent or a legal basis. In the case of web meetings, the providers of such services as well as participants in the meetings may also be recipients.

In the context of IT services and IT infrastructure, we use service providers whose registered office is not located in the European Union or the European Economic Area. In doing so, except in legally permitted exceptional cases, we ensure prior to the transfer that either an adequate level of data protection exists at the recipient or that appropriate safeguards are in place. You may request an overview of the recipients in third countries and a copy of the appropriate or adequate safeguards. Please use the details under Section 1.

We delete your personal data after completion of the application process, unless a legal permission or your consent allows for longer retention. In these two cases, we delete your personal data once the legal permission no longer applies or after withdrawal of consent.

You are not obliged to provide us with personal data. However, depending on the individual case, the provision of certain personal data is necessary for a decision on the establishment and implementation of an employment relationship with us. If you do not provide us with these personal data when applying, it may be that we will not be able to make a decision on establishing an employment relationship with you.

As a data subject, you have the following rights under the GDPR, provided the respective legal requirements are met:

Right of access: You have the right to obtain information about the data we process about you.

Right to rectification: You may request the rectification of inaccurate data about you. In addition, you may request the completion of incomplete data.

Right to erasure: In certain cases, you may request the erasure of your personal data. Right to restriction of processing: In certain cases, you may request that we restrict the processing of your data.

Right to data portability: If you have provided us with data on the basis of a contract or consent, you may request that you receive the data you have provided in a structured, commonly used and machine-readable format, or that we transmit it to another controller.

Withdrawal of consent: If you have given us consent to process your data, you may withdraw it at any time with effect for the future. The lawfulness of the processing of your data up to the withdrawal remains unaffected.

Exercising your rights: To exercise any of the rights listed above, please contact us using the contact details provided in section 1. Please ensure that we are able to clearly identify you.

Right to Lodge a Complaint with a Supervisory Authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.

Automated decisions in individual cases, including profiling within the meaning of Article 22 GDPR, do not take place in connection with applications to us.