de en
Nexia Ebner Stolz


Information about Data Protection in the Employment Application Context

If you have app­lied for emp­loy­ment with Ebner Stolz, the fol­lo­wing infor­ma­tion governs the pro­tec­tion of your per­so­nal data ("Data") in addi­tion to our gene­ral Pri­vacy Policy.

I. Who is res­pon­si­ble for data pro­ces­sing and whom can I con­tact?

  • We are jointly res­pon­si­ble for the pro­ces­sing of your data on this web­site:
  • Ebner Stolz Mön­ning Bachem Wirt­schafts­prü­fer Steu­er­be­ra­ter Rechts­an­wälte
  • Part­ner­schaft mbB (nach­fol­gend: Ebner Stolz PG)
  • Ebner Stolz GmbH & Co. KG
  • Wirt­schafts­prü­fungs­ge­sell­schaft Steu­er­be­ra­tungs­ge­sell­schaft
  • Ebner Stolz Mana­ge­ment Con­sul­tants GmbH
  • Ebner, Dr. Stolz Mana­ge­ment Sup­port GmbH

The con­tact details of these com­pa­nies ("Ebner Stolz") can be found on the legal noti­ces page of our web­site. To regu­late our data pro­tec­tion res­pon­si­bi­li­ties, these com­pa­nies have ente­red into an agree­ment, the essen­tial con­tent of which we will send to you by email upon requ­est.

If you have any ques­ti­ons about data pro­tec­tion, please con­tact our data pro­tec­tion offi­cer using the con­tact details below:

Ebner Stolz, Daten­schutz­be­auf­trag­ter, Kro­nen­straße 30, 70174 Stutt­gart, Email: daten­schut­z@eb­ner­

II. Why is my data pro­ces­sed?

1. Deci­si­ons about your app­li­ca­tion

Data you sub­mit with your app­li­ca­tion docu­ments or enter in our online form will be pro­ces­sed by us for the pur­pose of deci­ding whe­ther to offer you emp­loy­ment with one of the com­pa­nies men­tio­ned above.

In parti­cu­lar, if necessary, your data will be pro­ces­sed for the fol­lo­wing pur­po­ses:

  • To exa­mine whe­ther your app­li­ca­tion, qua­li­fi­ca­ti­ons and pro­fes­sio­nal back­ground meet the requi­re­ments of the job adver­ti­se­ment in ques­tion
  • To con­tact you to inform you of our deci­sion
  • To orga­nize and con­duct job inter­views and/or assess­ment cen­ters
  • To return your app­li­ca­tion docu­ments to you (if app­lica­ble)
  • To reim­burse you for trans­fer your pro­ven inter­view costs and trans­fer the funds (if app­lica­ble)
  • To enforce and defend against pos­si­ble legal claims, inclu­ding defense against pos­si­ble claims under the Gene­ral Equal Tre­at­ment Act (AGG)
  • If an emp­loy­ment rela­ti­onship is estab­lis­hed: to send you a draft emp­loy­ment agree­ment and regis­ter you as an emp­loyee

The legal basis is Art. 88 of the Gene­ral Data Pro­tec­tion Regu­la­tion (GDPR) in con­junc­tion with § 26 (1) sen­tence 1 of the Federal Data Pro­tec­tion Act (BDSG). If you have con­s­en­ted to the pro­ces­sing, the legal basis is also Art. 6 (1 a) of the GDPR.

In addi­tion, if necessary, your data will be exchan­ged bet­ween Ebner Stolz com­pa­nies for the pur­pose of group mana­ge­ment, inter­nal com­mu­ni­ca­tion and other admi­ni­s­t­ra­tive pur­po­ses. In parti­cu­lar, Ebner Stolz PG will pass on inco­ming app­li­ca­ti­ons to other Ebner Stolz com­pa­nies if you have app­lied for a posi­tion with one of these com­pa­nies. The legal basis is Art. 6(1)(f) of the GDPR. Accor­ding to that Arti­cle, pro­ces­sing is law­ful if it is necessary to pro­tect the legiti­mate inte­rests of the data con­trol­ler or a third party, except where such inte­rests are over­rid­den by your inte­rests or fun­da­men­tal rights and free­doms that require pro­tec­tion of data. We have a legiti­mate inte­rest in main­tai­ning a cen­tral recrui­ting sys­tem at Ebner Stolz.

In addi­tion, we pro­cess your data for the pur­pose of inter­nal con­trol­ling in order to eva­luate the res­ponse rate to job exchan­ges com­mis­sio­ned by us and our uni­ver­sity appearan­ces. The legal basis is Art. 6(1)(f) of the GDPR. We have a jus­ti­fied eco­no­mic inte­rest in iden­ti­fying and imp­le­men­ting parti­cu­larly suc­cess­ful recrui­ting mea­su­res in a tar­ge­ted man­ner.

2. Pro­ces­sing on the basis of your con­sent

If you enter data in vol­un­tary fields in the online form or your app­li­ca­tion docu­ments con­tain addi­tio­nal data that goes beyond your basic data or proof of qua­li­fi­ca­tion, we will also pro­cess this data only for the pur­po­ses men­tio­ned above. The legal basis is your con­sent (Art. 6 (1)(a) of the GDPR in con­junc­tion with § 26 (2) of the Federal Data Pro­tec­tion Act). If you have agreed to the reten­tion of your app­li­ca­tion docu­ments beyond the spe­ci­fic app­li­ca­tion pro­ce­dure, we may inform you in the future of new job offers; in this respect, your con­sent is also the legal basis. You can revoke your con­sent to the pro­ces­sing of this data at any time and need not state any rea­sons for doing so (see Sec­tion VIII).

We ask that you not pro­vide us with any spe­cial cate­go­ries of data (Art. 9 (1) of the GDPR) that con­tain infor­ma­tion about mat­ters such as your racial or eth­nic ori­gin, politi­cal, reli­gious or ideo­lo­gi­cal beliefs, labor union mem­bership, state of health, sexual iden­tity or main­tenance obli­ga­ti­ons (e.g., mar­i­tal sta­tus, spouse, child­ren). Howe­ver, if you do pro­vide us with such data, you con­sent to its pro­ces­sing. The pro­ces­sing will be limi­ted to sto­rage and casual inspec­tion by HR emp­loyees, if and so far as this can­not be avo­i­ded with rea­sonable effort. The legal basis is Art. 9 (2a) of the GDPR in con­junc­tion with § 26 (2, 3) sen­tence 2 of the Federal Data Pro­tec­tion Act, and if app­lica­ble, Art. 9 (2 f) of the GDPR.

3. Com­p­li­ance with sta­tutory obli­ga­ti­ons

We also pro­cess your data to ful­fil our legal obli­ga­ti­ons under Art. 6 (1)(c) of the GDPR, in parti­cu­lar in connec­tion with the fol­lo­wing laws and for the fol­lo­wing pur­po­ses:

  • Pro­vi­sion of infor­ma­tion in accor­dance with § 57 Second Book of the Social Code (SGB II)
  • Com­pa­ri­son with "anti-ter­ror lists" in accor­dance with Regu­la­ti­ons (EC) No. 2580/2001 and No. 881/2002 in con­junc­tion with Art. 22 (2)(b) of the GDPR
  • Audit in accor­dance with the Money Laun­de­ring Act (GwG), inso­far as we are legally obli­ged to do so
  • Sto­rage obli­ga­ti­ons (see Sec­tion III)

III. How long is this data sto­red?

If the app­li­ca­tion pro­cess is com­p­lete and you do not enter into an emp­loy­ment agree­ment with us, your data will ini­tially be blo­cked. We will store your blo­cked data for a maxi­mum of six months after com­p­le­tion of the app­li­ca­tion pro­cess. The data will then be dele­ted or des­troyed, unless we are legally requi­red or entit­led to store or retain such data beyond that point.

If you enter into an emp­loy­ment agree­ment with us, your data may be pro­ces­sed for the pur­pose of estab­lis­hing, imp­le­men­ting and ter­mi­na­ting the emp­loy­ment rela­ti­onship. In this case, we will pro­vide you with furt­her infor­ma­tion on data pro­tec­tion during your emp­loy­ment when you enter into your emp­loy­ment agree­ment.

If we are legally requi­red to store cer­tain data pur­su­ant to Art. 6 (1)(c) of the GDPR, this entit­les us to store such data until the expi­ra­tion of the reten­tion periods spe­ci­fied in § 257(1) (2) and (3) of the Ger­man Com­mer­cial Code and § 147 of the Ger­man Tax Code. The sto­rage periods are up to 10 years.

IV. Do I have to pro­vide my data?

You are not requi­red to pro­vide your data by law or by con­tract. Howe­ver, if you would like to estab­lish an emp­loy­ment rela­ti­onship with us, you must pro­vide your basic data as well as your dip­loma and proof of qua­li­fi­ca­tion in accor­dance with the job adver­ti­se­ment. Other­wise we will not be able to review your app­li­ca­tion and con­tact you. The pro­vi­sion of furt­her data is not a pre­re­qui­site for a pos­si­ble con­tract with us and is the­re­fore vol­un­tary.

V. Which sour­ces does my data come from?

As a rule, you have made your data available to us your­self. We may receive data from pri­vate emp­loy­ment agen­cies that have for­war­ded your app­li­ca­tion to us with your con­sent.

VI. Will my data be pas­sed on to third par­ties?

We trans­mit your data to the fol­lo­wing con­trac­tors for the fol­lo­wing pur­po­ses:

  • to Per­sis GmbH, Theo­dor-Heuss-Straße 5, 89518 Hei­den­heim an der Brenz (main­tenance of the HR mana­ge­ment soft­ware)
  • poten­tially to other con­trac­tors, in accor­dance with our Pri­vacy Policy

Under cer­tain cir­cum­stan­ces, your data will be pas­sed on to the fol­lo­wing reci­pi­ents if we are legally requi­red to do so (Art. 6 (1)(c) of the GDPR), if this is necessary to enforce or defend against legal claims or to safe­guard other legiti­mate inte­rests (Art. 6 (1)(f) of the GDPR):

  • other Ebner Stolz com­pa­nies as descri­bed in Sec­tion II.1
  • job cen­ters (emp­loy­ment agen­cies)
  • pos­tal and tele­com­mu­ni­ca­ti­ons ser­vice pro­vi­ders for con­tact pur­po­ses

VII. Will there be "auto­ma­ted deci­sion making" as defi­ned in Art. 22 of the GDPR?

In accor­dance with Regu­la­ti­ons (EC) No. 2580/2001 and No. 881/2002 and the Money Laun­de­ring Act, we are requi­red to com­bat the finan­cing of ter­r­o­rism and, if necessary, to con­duct a money laun­de­ring audit. During the relia­bi­lity veri­fi­ca­tion pro­cess, some of your basic data can be com­pa­red with pub­lic lists con­tai­ning per­sons and orga­niza­ti­ons sub­ject to sanc­ti­ons. If you are affec­ted by these sanc­ti­ons, we will not estab­lish an emp­loy­ment rela­ti­onship with you.

VIII. What rights do I have with regard to my data?

Under the con­di­ti­ons of Art. 15 of the GDPR, you can requ­est infor­ma­tion from us as to whe­ther we pro­cess data from you, and if so, which data. You may requ­est to have your data cor­rec­ted and if necessary com­p­le­ted in accor­dance with Art. 16 of the GDPR. You have the right to requ­est that we delete your data under the con­di­ti­ons of Art. 17 of the GDPR or block it under the con­di­ti­ons of Art. 18 of the GDPR. Accor­ding to Art. 21 of the GDPR, you have the right to receive your data trans­mit­ted to us on the basis of a con­sent or a con­tract, pro­vi­ded that the pro­ces­sing is auto­ma­ted. If you so per­mit and it is tech­ni­cally pos­si­ble, we trans­mit this data to a third party. Your rights may be limi­ted or exclu­ded by law under cer­tain cir­cum­stan­ces.

If we pro­cess data for the pro­tec­tion of our inte­rests exclu­si­vely on the basis of Art. 6 (1)(f) of the GDPR, you have the right to object to the pro­ces­sing of your data for rea­sons ari­sing from your parti­cu­lar situa­tion. If you file an objec­tion, we will no lon­ger pro­cess the data con­cer­ned, unless we can prove com­pel­ling rea­sons wor­thy of pro­tec­tion for the pro­ces­sing that out­weigh your inte­rests, rights and free­doms, or the pro­ces­sing ser­ves to enforce legal claims.

If you have con­s­en­ted to the data pro­ces­sing, you have the right to revoke your con­sent at any time. The lega­lity of the pro­ces­sing until revo­ca­tion is not affec­ted until it occurs. You can revoke your con­sent by sen­ding an email to info@eb­ner­ After revo­ca­tion, we will no lon­ger pro­cess the data unless we are legally entit­led or requi­red to do so.

You have the right to file com­p­laints under data pro­tec­tion law with a data pro­tec­tion aut­ho­rity, e.g., the State Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of Infor­ma­tion, Kön­ig­straße 10a, 70173 Stutt­gart.

Last upda­ted: May 23, 2018