Privacy Statement for Applicants
With the following statement, we would like to give you an overview of the processing of personal data as an applicant for a job offer or in the context of an unsolicited application.
Owner and data controller
Responsible for data processing in the context of the GDPR is
Karakun AG
Elisabethenanlage 25
4051 Basel
Switzerland
E-mail address: datenschutz@karakun.com
Types of collected data
We only process the personal data you send us with your application. In general, this involves the following data:
- First and last name
- date of birth
- contact data (telephone number, e-mail address)
- application data such as curriculum vitae, cover letter and certificates; if applicable, a photo
- account data in case of reimbursement of travel expenses
- any other information you choose to provide in connection with your application.
Personal data may be freely provided by the applicant. You are not obliged to provide such information. However, please note that we require personal data for deciding about an application or the conclusion of a contract relating to employment with us. If you do not provide any personal data, we will not be able to decide on an employment relationship. We recommend that you only provide personal data as part of your application required to complete the application.
Purpose of processing
We process the data you provide to review your application and suitability for the announced position and the application procedure. The legal basis is §26 German Federal Data Protection Act (BDSG).
It may also be necessary to process your data for defending or enforcing legal claims. This purpose is our legitimate interest. The legal basis for this processing is Sect. 6 Para. 1 p. 1 lit. f GDPR.
If your application contains special categories of personal data according to Sect. 9 (1) GDPR, we will process these during the application procedure for exercising rights or fulfilling obligations arising from labour law, social security law and social protection. Legal basis in this respect is Sect. 6 Para. 1 cl. 1 lit. c GDPR in conjunction with Sect. 9 Para. 2 lit. b GDPR and Sect. 26 Para. 3 BDSG.
Sources of data
We process personal data we receive from you by mail or e-mail.
Retention time
We will automatically delete your data six months after the end of the application process for the position you applied for unless we hired you. Your data will then be transferred to your personnel file.
We may invite you to join our talent pool after the application process has ended without employment. That allows us to consider you in our selection of applicants for suitable vacancies in the future. Upon your explicit wish to join our talent pool, we will store your data until you revoke, but not longer than two years. After this period, we delete your data without separate notification. Legal basis for this is Sect. 6 Para. 1 p. 1 lit. f GDPR.
Data transfer
We transfer your application details to those departments or persons in the company in charge of the application process to check the applicants.
A data transfer may take place within the Karakun companies – between the locations in Germany and Switzerland.
Your rights
According to GDPR, you may exercise certain rights regarding your data processed by the Owner. In particular, you have the right to do the following:
- When personal data is processed, you have the right to request information about your personal data stored. (Sect. 15 GDPR)
- When incorrect personal data is processed, you have the right to correct errors of the data stored (Sect. 16 GDPR).
- You may request the deletion, restriction of processing and object to processing. (Sect. 17, 18, 21 GDPR).
- You have the right to have your data transmitted to another controller without any hindrance. This provision is applicable when the data is processed by automated means and processing is based on your consent, on a contract you are part of or on pre-contractual obligations thereof (Sect. 20 GDPR). According to Sect. 21 (1) GDPR, you have the right to object to the processing of your data based on Sect. 6 (1) (f) GDPR at any time. In this case, you have to justify the objection.
Withdrawal of your consent
You may withdraw your consent to processing your data at any time. The legality of data processing based on a given consent until your withdrawal is not affected by this.
Upon your withdrawal, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
Lodge a complaint to a data protection authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint to a data protection authority following Sect. 77 (1) GDPR. The right of appeal is without prejudice to any other administrative or judicial remedy.