Processing of (personal) data by the Data Controller of the online application process
General
We provide you with this data privacy statement, which relates exclusively to the data collected in the course of the online application process, in order to inform you how we handle your personal data collected in the course of the application process.
Data Controller
The Data Controller in accordance with data protection law is:
Midas Pharma GmbH
Rheinstraße 49
55218 Ingelheim
Germany
Tel.: +49 6132 990-0
Entry in the commercial register
Register number: HRB 22154
Register court: Mainz
Personal data in the course of the application process
Personal data are details of the personal or factual circumstances of a specific or identifiable individual. These include information such as, for example, your name, address, telephone number and date of birth, as well as data about your specific career etc., which can with reasonable effort be matched to a specific person. By contrast, information that cannot be (in)directly linked to your actual identity does not constitute personal data.
Grounds and purposes of processing personal data in the case of applications and in the application process
If you apply to us by electronic means, i.e. by e-mail or via our web form, then we collect and process your personal data for the purpose of handling the application process and for the performance of pre-contractual measures.
By sending an application on our recruitment site you express your interest in wishing to take up employment with us. In this context you send us personal data that we use and store exclusively for the purpose of your job search/application.
The following data in particular are collected here:
- Name (forename and surname)
- E-mail address
- Telephone number
- Date of birth
- Gender
- Availability
- Salary expectations
- LinkedIn profile / XING profile (optional)
- Channel, how you found out about us
Moreover you have the option to upload supporting documents, such as a covering letter, your curriculum vitae and references. These may include further personal data, for example data about your qualifications (references, language skills etc.), data about your so-called soft skills (e.g. which are revealed in the interview) and elements from the curriculum vitae sent (e.g. interests of the applicant, hobbies, leisure activities). If you also sent us a photograph of you, this likewise constitutes a part of the personal data.
Only authorised employees from the personnel department or who are involved in the application process have access to your data.
Storage of the personal data essentially takes place exclusively for the purpose of filling the vacant position for which you have applied.
Your data will be stored for a period of 150 days after completion of the application process. This is generally in order to fulfil legal obligations and/or to defend against any claims that arise from statutory provisions. After this, we are obliged to erase or anonymise your data. In this case, the data remain available to us for statistical analyses only as so-called metadata with no direct personal identification (for example proportion of women/men in applications, number of applications per period etc.).
Documents from rejected applications may be of interest to us, perhaps because the rejection happens only owing to lack of a suitable vacancy but when one could possibly arise in the future and your application would be an exact match for it. It is therefore of interest to us to keep the data of some rejected applicants, in order to be able to contact them again at a later date. Consequently we may store some of your application documents, i.e. personal data, subject to your explicit written consent. In the case of a rejected application we will request consent, via the communication channel specified by you, to include your data in our talent pool and we will send you a consent form for this purpose. We will keep your data only if you give us your explicit consent to its storage and we may then approach you at a later date. Your data that are included in our talent pool will be erased after no more than 2 years. Notwithstanding this, you have the option to revoke your consent for the future in writing or electronically at any time.
To this end please contact:
Midas Pharma GmbH
– Data Protection Officer –
Rheinstraße 49
55218 Ingelheim am Rhein
Germany
E-mail: dataprotection@midas-pharma.com
If you receive and accept an offer of employment with us in the course of the application process, we will store the personal data collected in the course of the application process at least for the duration of the employment relationship.
Disclosure of the data to third parties
The data transmitted in the course of your application will be sent using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). In this context Personio is our Processor in accordance with art. 28 GDPR. The basis of the processing here is a contract for processing between us as the Controller and Personio.
Rights of Data Subjects
If we as the Controller process personal data, then you as the Data Subject have certain rights from chapter III of the EU general data protection regulation (GDPR), depending on the legal basis and purpose of the processing. In particular these may include: right of access (art.15 GDPR), right to rectification (art.16 GDPR), right to erasure (art. 17 GDPR), right to restriction of processing (art. 18 GDPR), right to data portability (art. 20 GDPR), right to object (art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to withdraw this data protection consent under art. 7 III GDPR.
To assert your rights as a Data Subject with respect to the data processed in this online application process please contact our Data Protection Officer (see above).
Concluding provisions
We reserve the right to amend this data privacy statement at any time, so that it always complies with the current legal requirements, or in order to represent changes to the application process or similar. The new data privacy statement then applies for a new visit to our recruitment site or a renewed application.
In addition to this data privacy statement you can view our general data privacy statement at https://www.midas-pharma.com/de/datenschutz/.
Processing of (personal) data by the operator of the recruitment site
General
This recruitment site is operated by Personio GmbH & Co. KG, a company based in Germany, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). The data transmitted in the course of your application will be sent using TLS encryption and stored in a database. The company that conducts this online application process is solely responsible for these data under art. 24 GDPR. Personio is only the operator of the software and this recruitment site, and in this context it is the Processor in accordance with art. 28 GDPR. The basis of the processing by Personio in this case is a contract for processing between the Controller and Personio. Moreover, in order to provide its services and in particular for the operation of this recruitment site, Personio GmbH & Co. KG processes further data, some of which may also constitute personal data. This is covered in greater detail below.
Data Controller
The Data Controller in accordance with data protection law is:
Personio GmbH & Co. KG
Rundfunkplatz 4
80335 Munich
Germany
Tel.: +49 (0)89 1250-1005
Entry in the commercial register
Register number: HRB 213189
Register court: Munich district court
Data Protection Officer: datenschutz@personio.de
Server logs
Every time this recruitment site is accessed, general log data, so-called server logs, are collected automatically. These data are generally pseudonyms and therefore allow no inference of an individual. Without these data it would be technically partially impossible to deliver and present the content of the software. Furthermore, processing of these data is essential for security reasons and especially for control of access, input, transmission and storage. In addition, the anonymous information can be used for statistical purposes as well as for optimisation of the provision and the technology. Moreover, the log files can be checked and analysed subsequently in the case of suspected unlawful use of the software. The legal basis for this can be found in § 15 par. 1 of the German Telemedia Act (TMG) as well as art. 6. (1) f GDPR. The data recorded are general data, such as the website domain name, web browser and web browser version, operating system, IP address and time stamp of the access to the software. The scope of this logging does not exceed the common scope of any other website on the internet. The storage duration of these server logs is up to 7 days. There is no right to object.
Error logs
So-called error logs are produced for the purpose of error detection and correction. This is essential, in order to be able to respond as swiftly as possible to potential problems with the display and implementation of content (legitimate interest). These data are generally pseudonyms and therefore allow no inference of an individual. The legal basis for this can be found in § 15 par. 1 of the German Telemedia Act (TMG) as well as art. 6. (1) f GDPR. If an error message occurs, then general data are recorded, such as the website domain name, web browser and web browser version, operating system, IP address and time stamp when the corresponding error message/specification occurs. The storage duration of these error logs is up to 7 days. There is no right to object.
Use of cookies
So-called cookies are sometimes used on this recruitment site. These are small text files stored on the device that you use to access this recruitment site. Cookies essentially serve to guarantee security when you visit a website (“essential”), to implement certain functions such as standard language settings (“functional”), to improve the user experience or performance on the website (“performance”), or to implement targeted advertising (“marketing”). This recruitment site fundamentally uses only essential, functional and performance cookies in particular to implement certain default settings, e.g. such as language, to identify the advertising channel, or to analyse the performance of a job advertisement via which a user has arrived on this recruitment site. The use of cookies is essential for the provision of our services and thus for performance of the contract (art. 6 (1) b) GDPR). Storage duration: up to 1 month or until termination of the browser session. Right to object: in your browser settings, you can determine for yourself whether you wish to allow cookies or to object to the use of cookies. Please note that deactivation of cookies may result in limited or complete impairment of functionality of this recruitment site.
Rights of Data Subjects
If Personio GmbH & Co. KG as the Controller process personal data, then you as the Data Subject have certain rights from chapter III of the EU general data protection regulation (GDPR), depending on the legal basis and purpose of the processing. In particular these may include: right of access (art.15 GDPR), right to rectification (art.16 GDPR), right to erasure (art. 17 GDPR), right to restriction of processing (art. 18 GDPR), right to data portability (art. 20 GDPR), right to object (art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to withdraw this data protection consent under art. 7 III GDPR. To assert your rights as a Data Subject with respect to the data processed for operation of this recruitment site please contact the Data Protection Officer of Personio GmbH & Co. KG (see figure B).
Concluding provisions
Personio reserves the right to amend this data privacy statement at any time, so that it always complies with the current legal requirements or in order to implement changes to the services in the data privacy statement, e.g. when introducing new services. The new data privacy statement then applies for a new visit to this recruitment site or a renewed application.