I. Who is responsible for data processing and whom can I contact?
- We are jointly responsible for the processing of your data on this website:
- Ebner Stolz Mönning Bachem Wirtschaftsprüfer Steuerberater Rechtsanwälte
- Partnerschaft mbB (nachfolgend: Ebner Stolz PG)
- Ebner Stolz GmbH & Co. KG
- Wirtschaftsprüfungsgesellschaft Steuerberatungsgesellschaft
- Ebner Stolz Management Consultants GmbH
- Ebner, Dr. Stolz Management Support GmbH
The contact details of these companies ("Ebner Stolz") can be found on the legal notices page of our website. To regulate our data protection responsibilities, these companies have entered into an agreement, the essential content of which we will send to you by email upon request.
If you have any questions about data protection, please contact our data protection officer using the contact details below:
Ebner Stolz, Datenschutzbeauftragter, Kronenstraße 30, 70174 Stuttgart, Email: email@example.com
II. Why is my data processed?
1. Decisions about your application
Data you submit with your application documents or enter in our online form will be processed by us for the purpose of deciding whether to offer you employment with one of the companies mentioned above.
In particular, if necessary, your data will be processed for the following purposes:
- To examine whether your application, qualifications and professional background meet the requirements of the job advertisement in question
- To contact you to inform you of our decision
- To organize and conduct job interviews and/or assessment centers
- To return your application documents to you (if applicable)
- To reimburse you for transfer your proven interview costs and transfer the funds (if applicable)
- To enforce and defend against possible legal claims, including defense against possible claims under the General Equal Treatment Act (AGG)
- If an employment relationship is established: to send you a draft employment agreement and register you as an employee
The legal basis is Art. 88 of the General Data Protection Regulation (GDPR) in conjunction with § 26 (1) sentence 1 of the Federal Data Protection Act (BDSG). If you have consented to the processing, the legal basis is also Art. 6 (1 a) of the GDPR.
In addition, if necessary, your data will be exchanged between Ebner Stolz companies for the purpose of group management, internal communication and other administrative purposes. In particular, Ebner Stolz PG will pass on incoming applications to other Ebner Stolz companies if you have applied for a position with one of these companies. The legal basis is Art. 6(1)(f) of the GDPR. According to that Article, processing is lawful if it is necessary to protect the legitimate interests of the data controller or a third party, except where such interests are overridden by your interests or fundamental rights and freedoms that require protection of data. We have a legitimate interest in maintaining a central recruiting system at Ebner Stolz.
In addition, we process your data for the purpose of internal controlling in order to evaluate the response rate to job exchanges commissioned by us and our university appearances. The legal basis is Art. 6(1)(f) of the GDPR. We have a justified economic interest in identifying and implementing particularly successful recruiting measures in a targeted manner.
2. Processing on the basis of your consent
If you enter data in voluntary fields in the online form or your application documents contain additional data that goes beyond your basic data or proof of qualification, we will also process this data only for the purposes mentioned above. The legal basis is your consent (Art. 6 (1)(a) of the GDPR in conjunction with § 26 (2) of the Federal Data Protection Act). If you have agreed to the retention of your application documents beyond the specific application procedure, we may inform you in the future of new job offers; in this respect, your consent is also the legal basis. You can revoke your consent to the processing of this data at any time and need not state any reasons for doing so (see Section VIII).
We ask that you not provide us with any special categories of data (Art. 9 (1) of the GDPR) that contain information about matters such as your racial or ethnic origin, political, religious or ideological beliefs, labor union membership, state of health, sexual identity or maintenance obligations (e.g., marital status, spouse, children). However, if you do provide us with such data, you consent to its processing. The processing will be limited to storage and casual inspection by HR employees, if and so far as this cannot be avoided with reasonable effort. The legal basis is Art. 9 (2a) of the GDPR in conjunction with § 26 (2, 3) sentence 2 of the Federal Data Protection Act, and if applicable, Art. 9 (2 f) of the GDPR.
3. Compliance with statutory obligations
We also process your data to fulfil our legal obligations under Art. 6 (1)(c) of the GDPR, in particular in connection with the following laws and for the following purposes:
- Provision of information in accordance with § 57 Second Book of the Social Code (SGB II)
- Comparison with "anti-terror lists" in accordance with Regulations (EC) No. 2580/2001 and No. 881/2002 in conjunction with Art. 22 (2)(b) of the GDPR
- Audit in accordance with the Money Laundering Act (GwG), insofar as we are legally obliged to do so
- Storage obligations (see Section III)
III. How long is this data stored?
If the application process is complete and you do not enter into an employment agreement with us, your data will initially be blocked. We will store your blocked data for a maximum of six months after completion of the application process. The data will then be deleted or destroyed, unless we are legally required or entitled to store or retain such data beyond that point.
If you enter into an employment agreement with us, your data may be processed for the purpose of establishing, implementing and terminating the employment relationship. In this case, we will provide you with further information on data protection during your employment when you enter into your employment agreement.
If we are legally required to store certain data pursuant to Art. 6 (1)(c) of the GDPR, this entitles us to store such data until the expiration of the retention periods specified in § 257(1) (2) and (3) of the German Commercial Code and § 147 of the German Tax Code. The storage periods are up to 10 years.
IV. Do I have to provide my data?
You are not required to provide your data by law or by contract. However, if you would like to establish an employment relationship with us, you must provide your basic data as well as your diploma and proof of qualification in accordance with the job advertisement. Otherwise we will not be able to review your application and contact you. The provision of further data is not a prerequisite for a possible contract with us and is therefore voluntary.
V. Which sources does my data come from?
As a rule, you have made your data available to us yourself. We may receive data from private employment agencies that have forwarded your application to us with your consent.
VI. Will my data be passed on to third parties?
We transmit your data to the following contractors for the following purposes:
- to Persis GmbH, Theodor-Heuss-Straße 5, 89518 Heidenheim an der Brenz (maintenance of the HR management software)
Under certain circumstances, your data will be passed on to the following recipients if we are legally required to do so (Art. 6 (1)(c) of the GDPR), if this is necessary to enforce or defend against legal claims or to safeguard other legitimate interests (Art. 6 (1)(f) of the GDPR):
- other Ebner Stolz companies as described in Section II.1
- job centers (employment agencies)
- postal and telecommunications service providers for contact purposes
VII. Will there be "automated decision making" as defined in Art. 22 of the GDPR?
In accordance with Regulations (EC) No. 2580/2001 and No. 881/2002 and the Money Laundering Act, we are required to combat the financing of terrorism and, if necessary, to conduct a money laundering audit. During the reliability verification process, some of your basic data can be compared with public lists containing persons and organizations subject to sanctions. If you are affected by these sanctions, we will not establish an employment relationship with you.
VIII. What rights do I have with regard to my data?
Under the conditions of Art. 15 of the GDPR, you can request information from us as to whether we process data from you, and if so, which data. You may request to have your data corrected and if necessary completed in accordance with Art. 16 of the GDPR. You have the right to request that we delete your data under the conditions of Art. 17 of the GDPR or block it under the conditions of Art. 18 of the GDPR. According to Art. 21 of the GDPR, you have the right to receive your data transmitted to us on the basis of a consent or a contract, provided that the processing is automated. If you so permit and it is technically possible, we transmit this data to a third party. Your rights may be limited or excluded by law under certain circumstances.
If we process data for the protection of our interests exclusively on the basis of Art. 6 (1)(f) of the GDPR, you have the right to object to the processing of your data for reasons arising from your particular situation. If you file an objection, we will no longer process the data concerned, unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to enforce legal claims.
If you have consented to the data processing, you have the right to revoke your consent at any time. The legality of the processing until revocation is not affected until it occurs. You can revoke your consent by sending an email to firstname.lastname@example.org After revocation, we will no longer process the data unless we are legally entitled or required to do so.
You have the right to file complaints under data protection law with a data protection authority, e.g., the State Commissioner for Data Protection and Freedom of Information, Königstraße 10a, 70173 Stuttgart.
Last updated: May 23, 2018