RECRUITMENT PRIVACY NOTICE

This Privacy Notice aims to provide you with the information on why and how D.Med Healthcare GmbH & Co. KG and its respective affiliates (“D.Med”, “we” or “us”) processes your personal data when you apply for a job.

OVERVIEW

This Privacy Notice is layered,  and you can easily get information about specific topic by clicking on the single layer:

1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA;
2. OUR DATA PROTECTION OFFICER’S CONTACT DETAILS;
3. THE PURPOSES AND LAWFUL BASIS FOR PROCESSING YOUR PERSONAL DATA;
4. YOUR RIGHTS REGARDING PROCESSING OF YOUR PERSONAL DATA;
5. HOW LONG DO WE KEEP YOUR PERSONAL DATA?;
6. DO WE SHARE YOUR PERSONAL DATA?;
7. DO WE TRANSFER YOUR PERSONAL DATA TO THIRD COUNTRIES?;

1.  WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

D.Med Healthcare GmbH & Co. KG and its affiliate having particular job vacancy are joint controllers and responsible for processing of your personal data during the recruitment procedure.

The list of D.Med Healthcare GmbH & Co. KG’s affiliates is available here.

Your job applications are initially sent to D.Med Healthcare GmbH & Co. KG, company that is in charge of the first stage of the recruitment procedure, during which stage job applications are shortlisted. D.Med Healthcare GmbH & Co. KG is responsible for your personal data during this stage of the recruitment procedure.

Shortlisted applications are then proceeded to the particular D.Med Healthcare GmbH & Co. KG’s affiliate having respective job vacancy. During this stage of the recruitment procedure (which includes making hiring decision), D.Med Healthcare GmbH & Co. KG’s affiliate which has respective job position opened is responsible for your personal data.

Having in mind that some of D.Med Healthcare GmbH & Co. KG’s affiliates are located in third countries, please note that in case that job vacancy exists within such affiliate, transfer of your job application from D.Med Healthcare GmbH & Co. KG to this  particular affiliate having its seat in a third country is necessary for the performance of the contract concluded in your interest between D.Med Healthcare GmbH & Co. KG  and its affiliates in their capacity of joint controllers.

Our recruitment procedure does not involve any automated decision making.

There are several ways that you can contact us, including by post, email or telephone, by using the below contact details:

D.Med Healthcare GmbH & Co.KG
Klaus-Bungert-Straße 3, 40468 Düsseldorf, Germany

+49 211 650 415 60

2. DATA PROTECTION OFFICER’S CONTACT DETAILS

You can contact our Data Protection Officer with regard to all issues related to processing of your personal data and exercise of your rights. You can approach our DPO by post or email, using the below contact details:

D.Med Healthcare GmbH & Co. KG
Klaus-Bungert-Straße 3, 40468 Düsseldorf, Germany
E-mail address:
Please indicate for the attention of DPO.

3. THE PURPOSES AND LAWFUL BASIS FOR PROCESSING OF YOUR PERSONAL DATA

In the below table you can find out what categories of personal data we process, for what purpose and on what legal grounds.

4.  YOUR RIGHTS REGARDING PROCESSING OF YOUR PERSONAL DATA

Below you can find out more information on the rights you have in regard with processing of your personal data by us in the course of recruitment procedure.

4.1  Right to know whether and how your personal data are processed by us

You can request access to information about your data at any time in order to find out whether we process your personal data, what personal data we process about you and in what manner. You can also request copies of your personal data which we hold.

You can exercise this right by sending us a written notice via post or an e-mail indicating the request to access.

We do not charge the exercise of this right, unless in case of manifestly unfounded or excessive character of the request when we can charge reasonable fee or refuse to act on the request.

 4.2 Right to get your personal data corrected

You can request from us to correct inaccurate or incomplete personal data which we hold on you.

You can submit this request by sending us written notice via post or e-mail, stating which data is inaccurate or incomplete and how it should be corrected, followed by respective proofs, if applicable.

We do not charge the exercise of this right, unless in case of manifestly unfounded or excessive character of the request when we can charge reasonable fee or refuse to act on the request.

4.3 Right to get your personal data deleted

You can ask us to delete your personal data. Please note that the right to erasure could be refused under certain circumstances (e.g. in case when processing is necessary for compliance of legal obligation or for the establishment, exercise or defense of legal claims).

The right to deletion applies when (i) we no longer need your personal data, (ii) when you have withdrawn consent for data processing, (iii) when we unlawfully process your personal data, (iv) when we have legal obligation to erase them, (v) when you have successfully exercised your right to object to processing.

You can perform this right by sending us written notice via post or e-mail with indication of what personal data shall be deleted and why.

We do not charge the exercise of this right, unless in case of manifestly unfounded or excessive character of the request when we can charge reasonable fee or refuse to act on the request.

4.4 Right to limit how we use your personal data

You can request us to suspend the processing of your personal data in the following circumstances: (i) if you contested the accuracy of the personal data, for the period which is necessary to verify the data accuracy, (ii) if you objected to processing but we need to verify whether we have overriding legitimate interest to use it, (iii) if your personal data were processed unlawfully, but you do not want us to erase it, (iv) if we no longer need your personal data but you want us to keep it so you can establish, exercise or defense legal claims.

You can perform this right by sending us written notice via post or e-mail with indication of what personal data shall be suspended and why.

 We do not charge the exercise of this right, unless in case of manifestly unfounded or excessive character of the request when we can charge reasonable fee or refuse to act on the request.

4.5 Right to data portability

You can ask us to get your personal data in accessible and machine readable form, as well as to transfer these data to a third party.

Please note that this right applies to your personal data that are processed by automated means and where processing is based on consent (Article 6 ¶ 1 point a) of GDPR) or on taking steps prior to entering into employment contract (Article 6 ¶ 1 point b) of GDPR).

You can exercise this right by sending us written notice via post or e-mail indicating the data portability request.

 We do not charge the exercise of this right, unless in case of manifestly unfounded or excessive character of the request when we can charge reasonable fee or refuse to act on the request.

4.6 Right to object to the use of your data

You can use your right to object only when we use your personal data based on our legitimate interest, which would be the case regarding processing of your personal data publicly available on professional social networks. If you perform the right to object, we shall stop processing your personal data based on this legal ground unless we demonstrate that our legitimate grounds override your interests, rights and freedoms.

You can exercise this right by sending us written notice via post or e-mail indicating request for objection.

We do not charge the exercise of this right, unless in case of manifestly unfounded or excessive character of the request when we can charge reasonable fee or refuse to act on the request.

4.8 Right to withdraw consent at any time

You may exercise this right any time when processing is performed based on your consent. This is the case when we keep your job application in our records after respective recruitment procedure is over in order to assess your eligibility and enter into employment relationship with you regarding later job vacancies.

We do not charge the exercise of this right.

4.9  Right to lodge complaint to supervisory authority

 In case you think that processing of your personal data is not in accordance with the applicable legislation you can submit complaint to the Commissioner for Data Protection and Freedom of Information of the North Rhine-Westphalia by fulfilling complaint form available on the official webpage https://www.ldi.nrw.de/mainmenu_Aktuelles/Formulare-und-Meldungen/index.html. The complaint form and supporting documentation shall be sent to the Commissioner via fax to the fax. no.: 0211 38424-10 or via e-mail to the e-mail address:  or via post to:

Country Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Kavalleriestrasse 2-4
40213 Dusseldorf
Germany

You can also lodge complaint to supervisory authority of any state in which D.Med Healthcare GmbH & Co. KG’s affiliates are seated, including both EU Member States and German Federal States, as well as to the supervisory authority of the EU Member State of your habitual residence, place of work or place of the alleged infringement.

5. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We will retain your personal data for the period of seven months as of the day of rendering decision on cancellation of the recruitment procedure or decision on selection of the candidate.

If we want to keep your personal data in our records for the purposes of assessing your eligibility and entering into employment relationship with you regarding later job vacancies, we will require your consent prior to processing your personal information for these purposes. Once we obtain your consent for these purposes, your personal data will be retained with us for the period of two years.

Your personal data will be stored for the longer time period only in case that storage is necessary for the establishment, exercise and defense of legal claims.

6. DO WE SHARE YOUR PERSONAL DATA?

Access to your personal data shall be limited only to D.Med’s employees and/or persons engaged by D.Med who are in charge of the recruitment procedure, as well as external IT support, based on contractual arrangements.

In order to introduce yourself with the manner how your personal data are shared during the recruitment procedure between D.Med Healthcare GmbH & Co. KG and its affiliate which has job vacancy please refer to the section 1 Who is responsible for your personal data.

7.  DO WE TRANSFER YOUR DATA TO THIRD COUNTRIES?

We do transfer your personal data to third countries but only in case that D.Med Healthcare GmbH & Co. KG’s affiliate having its seat in a third country has opened job position, when the transfer is necessary for the performance of contract concluded in your interest between D.Med Healthcare GmbH & Co. KG  and its affiliates in the capacity of joint controllers. The list of D.Med affiliates is available here.