Data protection information for applicants

1. name and contact details of the controller

This data protection information applies to data processing by:

Responsible: reev GmbH

Address: Sandstraße 3
80335 Munich

E-mail address: info@reev.com

Phone: 08921538970

2. contact details of the data protection officer

You can contact our data protection officer at the following address:

SiDIT GmbH
Langgasse 20
97261 Güntersleben
E-Mail: info@sidit.de
Website: https://sidit.de/

3. collection and storage of personal data in applications and on the basis of applicant profiles on applicant portals as well as the type and purpose and their use

3.1. Collection and storage

When

• – You are contacting us for the first time,
• – you submit an application to us,
• – we contact you for the first time on the basis of your applicant profile on applicant portals such as
  Experteer and/or Indeed or
• – we contact you for the first time based on your profile on professional social media platforms such as LinkedIn and/or XING,

then we usually process the following information:

• – Title, first name, last name,
• – Address,
• Valid eMail address
• – Telephone number (landline and/or mobile),
• – all other data that you provide in your application documents (in particular CV, certificates)
• – all other data that you have released in the applicant profile on applicant portals
• – all other data that you provide in the application process (in applicant questionnaires, interviews, etc.)
• – Voluntarily provided special categories of personal data

3.2 What do we process your data for (purpose of processing) and on what legal basis?

In the following, we will inform you what we process your data for and on what legal basis.

3.2.1. For the fulfillment of contractual obligations and pre-contractual measures (Art. 6 para. 1 letter b GDPR)

We process your data to fulfill contractual obligations and pre-contractual measures with you, i.e. in particular

• – for internal processing of your application
• – on the implementation of the application procedure
• – for correspondence with you
• – for the performance or termination of an employment relationship
• – to exercise or fulfill rights and obligations arising from the law or from a collective agreement, a works or service agreement
• – for the settlement of any liability claims and the assertion of any claims against you.

3.2.2 Based on your consent (Art. 6 (1) (a) GDPR)

As a rule, we delete your data no later than 6 months after the end of the application procedure, provided there are no further reasons for retention, see point 4. If you have given us consent to process your personal data as part of an “applicant pool,” we will delete this consent no later than three years after it was given. The purpose of the “applicant pool” is to be able to consider you for a future vacancy.

You can revoke your consent at any time with effect for the future. This also applies to declarations of consent that you gave us before the GDPR came into force, i.e. before 25 May 2018. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

3.2.3. Due to legal requirements (Art. 6 para. 1 letter c GDPR)

We are subject to various legal obligations, such as statutory storage and documentation obligations under German commercial law (from HGB, StGB, or AO).

3.2.4. The processing of special categories of personal data (Art. 9 (2) GDPR)

We process the special categories of personal data you have provided if you have given us consent pursuant Art. 9 Abs. 2 a) GDPR or if the processing is necessary for us to exercise your rights under labour law and social security and social protection law and to comply with our obligations in this respect.

4. transfer of data to third parties and processors

The transfer of personal data is also processed within the meaning of the previous section 2.2. However, at this point, we would like to inform you again separately about the issue of passing on information to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

Your personal data is generally transferred to third parties for the following purposes:

• – Processors with whom we have concluded an agreement in accordance with Art. 28 GDPR
• – Accounting (e.g. tax consultant)
• – Legal disputes (e.g. lawyer)
• – Communication platform (e.g. e-mail, WhatsApp, other messenger services)

5. deletion

Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

6. rights of data subjects

You have the right:

• according to Art. 7 par. 3 GDPR to revoke your consent once given to us at any time. As a result, we will no longer be able to continue the data processing based on this consent.

based on the previous strategy for the future;

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

• in accordance with Art. 16 GDPR to demand the correction of inaccurate or incomplete personal data stored by us without delay;

• in accordance with Art. 17 GDPR, your personal data saved by us will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal;

• – in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing

is unlawful, but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR;

• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and

• to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace for this purpose. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.

7. right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation. If you would like to exercise your right to object, simply send an e-mail to info@reev.com