Privacy notice on personal data processing in the application process pursuant to Art. 13 of the GDPR
The following section contains an overview of the processing of personal data submitted by you as part of the application process and also your rights under data protection laws.
1. Who is responsible
Chimaera GmbH
Am Weichselgarten 7
91058 Erlangen
Germany
Tel: +49 (0)9131 / 691 385
Fax: +49 (0)9131 / 691 386
Email: datenschutz(at)chimaera.de
2. Data protection officer
MKM Datenschutz GmbH
Äußere Sulzbacher Straße 118
90491 Nürnberg
Germany
Tel.: + 49 (0)911 / 990 860-0
Email: datenschutz(at)chimaera.de
3. Purpose of processing and legal basis
We process your personal data for the purpose of carrying out the application process and application management. The processing of your personal data is necessary for the decision on the establishment of an employment relationship and is carried out in accordance with Art. 6 para. 1 lit. b GDPR in conjunction with Art. 88 GDPR in conjunction with Art. 88 GDPR. Art. 88 GDPR in conjunction with. § 26 BDSG.
If you do not provide us with your personal data, we will unfortunately not be able to consider you for the advertised position. If it is necessary to process your personal data for legal prosecution after the application process has been completed, the data processing is carried out on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest then lies in the defense against claims.
If we have received your consent to process your personal data for specific purposes (e.g. inclusion in an applicant pool for later consideration), this processing of personal data is based on Art. 6 para. 1 lit. a GDPR.
4. Categories of recipients
Within Chimaera GmbH, those departments that require your personal data as part of the application process and for decision-making purposes will receive it. Processors employed by us (Art. 28 GDPR) may also receive data for these purposes.
The following categories of recipients may receive your data:
- IT service providers, e.g. for the provision of our email addresses
5. Storage period
Your personal data will be processed for the first time from the time of collection and deleted six months after completion of the application process.
In the event that you have consented to further storage of your personal data, we will delete your personal data at the end of the agreed period.
6. Will my data be transferred to third countries outside the European Union?
A data transfer to third countries (countries outside the European Economic Area - EEA) does not take place.
7. Does automated decision making take place?
Automated decision-making including profiling in within the meaning of Art. 22 GDPR does not take place.
8. Your rights
You have the following rights if the legal requirements are met:
You have the right to request information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction (Art. 18 GDPR) of your personal data from us in accordance with the statutory provisions. We will also provide you with your data on request in a structured, commonly used and machine-readable format (Art. 20 GDPR).
If we process your personal data on the basis of your consent, you can withdraw your consent at any time. Once you withdraw your consent, we will no longer process your personal data for the purpose for which it was collected.
If we process your personal data on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR), you have a separate right to object in accordance with Art. 21 GDPR.
Irrespective of this, you can contact the competent data protection supervisory authority (Bavarian State Office for Data Protection Supervision) if you believe that the processing of your personal data is not lawful or if you have a complaint.