Privacy notice on personal data processing in the application process pursuant to Art. 13 of the GDPR
The following section contains an overview of the processing of personal data submitted by you as part of the application process and also your rights under data protection laws.
1. Who is responsible
Chimaera GmbH
Am Weichselgarten 7
91058 Erlangen
Germany
Tel: +49 (0)9131 / 691 385
Fax: +49 (0)9131 / 691 386
Email: info(at)chimaera.de
2. Data protection officer
MKM Datenschutz GmbH
Äußere Sulzbacher Straße 118
90491 Nürnberg
Germany
Tel.: + 49 (0)911 / 990 860-0
Email: info(at)mkm-datenschutz.de
3. Purpose of processing and legal basis
We process your personal data for the purpose of carrying out the application process and for the application management. The processing of your personal data is necessary for the decision on the establishment of an employee relationship and is carried out according to Art. 6 para. 1 lit. b GDPR in conjunction with. Art. 88 GDPR and § 26 BDSG (Federal Data Protection Act).
If you do not provide us with your personal data, we will unfortunately not be able to consider you in the selection process for filling the vacancy. Should processing of your personal data be necessary for legal action after completion of the application process, the data processing will be carried out on the basis of a legitimate interest according to Art. 6 par. 1 lit. f GDPR. Our legitimate interest is then the defence of claims.
Insofar as we have received your consent to process your personal data for specific purposes (e.g. inclusion in an applicant pool for later consideration), this processing of personal data is based on Art. 6 par. 1 lit. a GDPR.
4. Categories of recipients
Within Chimaera GmbH, the departments that require your personal data as part of the application process will receive it. Processors used by us (Art. 28 GDPR) may also receive your data for these purposes.
The following categories of recipients may receive your data:
- IT service provider, e.g. for the provision the application platform.
5. Storage period
Your personal data will be processed from the time of collection and will be deleted six months after completion of the application process.
In case you have agreed to further storage of your personal data, we will delete your personal data after the agreed period has expired.
6. Will my data be transferred to third countries outside the European Union?
A data transfer to third countries (countries outside the European Economic Area - EEA) does not take place.
7. Does automated decision making take place?
Automated decision-making including profiling in within the meaning of Art. 22 GDPR does not take place.
8. Your rights
You are entitled to the following rights if the legal requirements are met:
You have the right to request information (Article 15 of the GDPR), rectification (Article 16 of the GDPR), erasure (Article 17 of the GDPR) or restriction (Article 18 of the GDPR) of your personal data in accordance with the statutory provisions. We will also provide you with your data in a structured, common and machine-readable format upon request (Art. 20 GDPR).
If we process your personal data on the basis of your consent, you can withdraw your consent at any time. From the time of withdrawal, we will no longer process your personal data for the purpose for which it was collected.
If we process your personal data on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR), you the right to object according to Art. 21 GDPR.
Irrespective of this, you can contact the competent data protection supervisory authority (Bayrisches Landesamt für Datenschutzaufsicht) if you are of the opinion that the processing of your personal data is not being carried out lawfully or if you have a complaint.