0

Privacy Policy for applicants

We are pleased that you would like to apply a company within the YOURCAREERGROUP. In the following, we explain how we process your personal data in the context of an application and provide further information relevant in this context.

1. Who is responsible for processing your personal data?

Your application will be processed by affiliated companies to some extent within the framework of a joint controller arrangement pursuant to Art. 26 GDPR. Depending on the country in which you are applying, other companies may be responsible for processing your data. Detailed information:

Applying for a position at

Germany

Jointly responsible for data protection within the meaning of Art. 26 GDPR

  • YOURCAREERGROUP GmbH (hereinafter referred to as “YCG”), Völklinger Straße 1, 40219 Düsseldorf, Germany, Tel: +49 (0) 211 – 93 88 97 0 and
  • The StepStone Group Deutschland GmbH (hereinafter referred to as “StepStone”), likewise Völklinger Straße 1, 40219 Düsseldorf, Tel: +49 211 93493-0

Actual functions and relationships of joint controllers in relation to you

Hiring is at, and the decision regarding hiring is made by, YCG. However, as YCG does not have its own personnel department, the entire recruiting process is carried out by StepStone. In this context, StepStone takes over the initial processing of your application and the pre-selection of suitable applicants and conducts job interviews, prepares contracts and undertakes the related organisational processes. After a pre-selection and first interviews if necessary, StepStone forwards the application to YCG for further selection and final decision and supports YCG during the selection and decision-making process.

Austria

Jointly responsible for data protection within the meaning of Art. 26 GDPR

  • YOURCAREERGROUP GmbH (hereinafter referred to as “YCG”), Völklinger Straße 1, 40219 Düsseldorf, Germany, Tel: +49 (0) 211 – 93 88 97 0
  • The StepStone Group Deutschland GmbH (hereinafter referred to as “StepStone”), likewise Völklinger Straße 1, 40219 Düsseldorf, Tel: +49 211 93493-0 and
  • YOURCAREERGROUP Österreich GmbH (hereinafter referred to as “YCG AT”), Frankenberggasse 13/17, 1040 Vienna, Austria

Actual functions and relationships of joint controllers in relation to you

Hiring is via YCG AT. The decision regarding hiring is made by YCG. However, as YCG does not have its own personnel department, the entire recruiting process is carried out by StepStone. In this context, StepStone takes over the initial processing of your application and the pre-selection of suitable applicants and conducts job interviews, prepares contracts and undertakes the related organisational processes. After a pre-selection and first interviews if necessary, StepStone forwards the application to YCG for further selection and final decision and supports YCG during the selection and decision-making process.

Switzerland

Jointly responsible for data protection within the meaning of Art. 26 GDPR

  • YOURCAREERGROUP GmbH (hereinafter referred to as “YCG”), Völklinger Straße 1, 40219 Düsseldorf, Germany, Tel: +49 (0) 211 – 93 88 97 0
  • The StepStone Group Deutschland GmbH (hereinafter referred to as “StepStone”), likewise Völklinger Straße 1, 40219 Düsseldorf, Tel: +49 211 93493-0 and
  • YOURCAREERGROUP Schweiz GmbH (hereinafter referred to as “YCG CH”), Industriestraße 30, 8032 Kloten, Switzerland

Actual functions and relationships of joint controllers in relation to you

Hiring is via YCG CH. The decision regarding hiring is made by YCG. However, as YCG does not have its own personnel department, the entire recruiting process is carried out by StepStone. In this context, StepStone takes over the initial processing of your application and the pre-selection of suitable applicants and conducts job interviews, prepares contracts and undertakes the related organisational processes. After a pre-selection and first interviews if necessary, StepStone forwards the application to YCG for further selection and final decision and supports YCG during the selection and decision-making process.

Poland

Jointly responsible for data protection within the meaning of Art. 26 GDPR

  • YOURCAREERGROUP GmbH (hereinafter referred to as “YCG”), Völklinger Straße 1, 40219 Düsseldorf, Germany, Tel: +49 (0) 211 – 93 88 97 0
  • StepStone Services Sp. z o.o. (hereinafter referred to as “StepStone PL”), Saturn Office Building Ul. Dmaniewska 41 02-672 Warsaw, Poland

Actual functions and relationships of joint controllers in relation to you

The entire recruitment process is set up and carried out by StepStone PL. In this context, StepStone PL takes over the initial processing of your application and the pre-selection of suitable applicants and conducts job interviews, prepares contracts and undertakes the related organisational processes. The decision regarding hiring is made by YCG. After a pre-selection and first interviews if necessary, StepStone PL forwards the application to YCG for further selection and final decision and supports YCG during the selection and decision-making process.

France

Jointly responsible for data protection within the meaning of Art. 26 GDPR

  • YOURCAREERGROUP GmbH (hereinafter referred to as “YCG”), Völklinger Straße 1, 40219 Düsseldorf, Germany, Tel: +49 (0) 211 – 93 88 97 0
  • StepStone France SAS (hereinafter referred to as “StepStone FR”), 78 Ter 80 rue Laugier, 75017 Paris, France
  • StepStone NV (hereinafter referred to as “StepStone BE”),
    Koningsstraat 47 Rue Royale
    1000 Brussels

Actual functions and relationships of joint controllers in relation to you

Hiring is via StepStone FR. StepStone BE conducts the application process which takes over the initial processing of your application and the pre-selection of suitable applicants and conducts job interviews, prepares contracts and undertakes the related organisational processes. The decision regarding hiring is made by YCG. After a pre-selection and first interviews if necessary, StepStone BE forwards the application to YCG for further selection and final decision and supports YCG during the selection and decision-making process.

Spain

Jointly responsible for data protection within the meaning of Art. 26 GDPR

  • Turijobs Tourism Services S.L., número 1 C/Estació 08630 Abreara, Spain
If you apply for a senior position, Turijobs is jointly responsible with:
  • YOURCAREERGROUP GmbH (hereinafter referred to as “YCG”), Völklinger Straße 1, 40219 Düsseldorf, Germany, Tel: +49 (0) 211 – 93 88 97 0

Actual functions and relationships of joint controllers in relation to you

Processing for most positions is the sole responsibility of Turijobs Tourism Services S.L.

If you are applying for a senior position, the recruitment process is carried out by Turijobs, but the actual decision is made by YCG.

2. Data protection officer

If there is a duty to appoint a data protection officer, you can reach them for the following companies under the following contact details:

and otherwise also at the addresses stated in Section 1.

3. For what purposes and on what legal basis do we process personal data?

We process personal data about you for the purpose of your application for an employment relationship at the relevant company referred to in Section 1 at which hiring will also take place, insofar as this is necessary for the decision to establish an employment relationship with us.

To the extent the decision is made by YCG in Germany, the legal basis is Section 26 (1) in conjunction with paragraph (8), second sentence of the Federal Data Protection Act (BDSG). If hiring is made in another country, the legal basis is Art. 6 (1) (f) GDPR, namely that the respective processing is in pursuit of a legitimate interest, i.e. to recruit suitable employees for the respective company.

Processing pursuant to joint responsibility as referred to in Section 1 is carried out on the legal basis of a legitimate interest of the respective companies according to Art. 6 (1)(f) GDPR, as they either do not have their own personnel department, or the respective applicant will work to a considerable extent for such other respective company.

In the event that an employment relationship is established between you and the respective company, data already provided by you may be further processed, in Germany pursuant to section 26 (1) BDSG and in other countries pursuant to Art. 6 (1) (b) GDPR, for the purpose of such employment relation if necessary for the performance or termination of such employment relationship or for exercising or fulfilling the rights and obligations of the lobby group or employees resulting from a law or a collective agreement.

4. Which categories of personal data do we process?

We process data related to your application. This may include general information about you (such as your name, address and contact details), information about your professional qualifications and schooling or information about professional development or other information you provide to us in connection with your application. Incidentally, we may process your publicly available job-related information, such as profiles in professional social media networks.

5. What are the sources of personal data if we do not collect them from you?

As a rule, we collect personal data from you. In connection with an application, however, we may also collect personal data about You on professional social networks (e.g. LinkedIn, XING), insofar as this is required as part of the hiring process.

6. What categories of recipients of are there?

6.1 Affiliated companies

We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the scope of the purposes and legal bases set out in Section 3 because it is possible that you may likewise work for these companies within the scope of your employment relationship. An overview of these affiliated companies can be found in Annex 1 at the end of this Privacy Policy.

6.2 Data processors

We also use contract processors, i.e. companies that process personal data on our behalf and in accordance with our instructions within the framework of a contract concluded with us. These contractors are:

  • the StepStone GmbH, Axel-Springer-Str.65, 10969, which administers applications for us in an applicant management system
  • eArcu Ltd, Mardall House, 9-11 Vaughan Road, Harpenden, Hertfordshire, AL5 4HU, which, as subcontractor of StepStone GmbH, provides the application management system.
  • Rackspace Limited, Hyde Park Hayes, 5 Millington Rd, Hayes UB3 4AZ, United Kingdom, which as subcontractor for eArcu Ltd hosted the candidate management system
  • On Direct Business Services Limited, 1 London Street, Reading RG1 4QW, United Kingdom, which performs backups of the candidate management system as a subcontractor for eArcu Ltd

7. Is the transfer to a third country intended?

As described in Section 1, a Swiss company is jointly responsible for any application in Switzerland. In all other cases, the transfer may also be made to such company as an affiliated company as described in Section 6.1. Such transfers to Switzerland are made on the basis of an adequacy decision pursuant to Art. 45 GDPR which you can find under https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32000D0518&from=EN .

8. How long will your data be stored?

We store your personal data for as long as it is necessary to make a decision about your application. If we do not hire you, we may also continue storing your data if necessary to defend against possible legal claims. Application documents will be deleted two months after notification the decision to reject your application, unless retention for a longer period is required in connection with legal disputes.

9. Access - What rights do you have?

As an applicant with us, you have the following data protection rights, depending on the situation in individual cases, for the exercise of which you can contact us or our data protection officer at any time using the data specified in Sections 1 and 2: You can assert your rights at and in relation to each of the joint controllers.

9.1 Access

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right to receive information about this personal data free of charge, including the right to receive a copy of this data and to receive the following information:

  1. the processing purposes;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this period;
  5. the existence of a right of rectification or deletion of personal data concerning you or of a restriction on processing by the data controller or of a right to oppose such processing;
  6. the existence of a right to lodge a complaint with a supervisory authority;
  7. if the personal data is not collected from the data subject: all available information about the origin of the data;
  8. the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for you.

9.2 Rectification

You have the right to request the correction of your personal data without undue delay. Taking into account the purpose of the data processing, you also have the right to demand the completion of your incomplete personal data – also by means of a supplementary declaration.

9.3 Right to object

To the extent that data concerning you is processed on the basis of Art. 6 (1) () GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of such personal data. We shall then no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

9.4 Right of revocation

If processing is based on consent, you have the right to revoke such consent at any time without affecting the legality of the processing carried out on the basis of the consent prior to its revocation. You can contact us or our data protection officer at any time using the contact details provided above.

9.5 Right to erasure

You have the right to demand that we delete personal data concerning you without delay and we are obliged to delete personal data without delay if one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed
  • You object pursuant to Section 9.3 above and there are no overriding legitimate grounds for the processing.
  • The personal data have been processed unlawfully.
  • The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
This does not apply if processing is necessary:
  • to fulfil a legal obligation which processing requires under the law of the Union or of the Member States to which we are subject.
  • to establish, exercise, or defend legal claims.

9.6 Right to request restriction of processing

You have the right to request us to restrict processing if one of the following conditions is met:

  • the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
  • the processing is unlawful and you reject the deletion of the personal data and instead demand the restriction of the use of personal data;
  • we no longer need the personal data for the purposes of processing, but it is required by you for the establishment, exercise or defence of legal claims or
  • You have objected to processing pursuant to Section 9.3 above, pending the verification whether our legitimate grounds override yours.

If processing has been limited pursuant to the section, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained a restriction on processing, we will inform you before the restriction is lifted.

9.7 Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, Art. 77 GDPR provides you the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

10. Requirement to provide personal data

The provision of personal data is neither required by law nor by contract, nor are you obliged to provide the personal data. However, the provision of personal data is required for a contract of employment with us. This means that we will not enter into an employment relationship with you if you do not provide us with the data we have marked as required for an application.

Appendix 1

  • Overview of affiliated companies as possible recipients of your data in accordance with Section 6
  • YOURCAREERGROUP GmbH, Völklinger Str. 1, 40219 Düsseldorf, Germany
  • YOURCAREERGROUP Schweiz GmbH, Industriestrasse 30, 8032 Kloten, Switzerland
  • YOURCAREERGROUP Österreich GmbH, Frankenberggasse 13/17, 1040 Vienna, Austria
  • StepStone NV, Koningsstraat 47 Rue Royale, 1000 Brussels, Belgium
  • StepStone France SAS, 78 Ter 80 rue Laugier, 75017 Paris, France
  • StepStone Services Sp. z o.o., Saturn Office Building Ul. Dmaniewska 41 02-672 Warsaw, Poland
  • Turijobs Tourism Services S.L., número 1 C/Estació 08630 Abreara, Spain