Safety first
Privacy Policy for Applicants

We are pleased that you wish to apply to us. Below, we explain how we process your personal data as part of an application and provide further relevant information in this regard.

 

Who is responsible for the processing of your personal data?

tolingo GmbH, Winterstraße 2, 22765 Hamburg (hereinafter referred to as "we") is the data controller within the meaning of the EU General Data Protection Regulation ("GDPR").

 

Data Protection Officer

If you have any questions regarding the processing of your personal data or the exercise of your rights under the GDPR, you can contact our data protection officer as follows:

 

Responsible for data processing:
tolingo GmbH, Winterstraße 2, 22765 Hamburg,
Tel. +49 0 40 413 583 100, service@tolingo.com
Managing Director: Jens Völkel


You can reach the data protection officer of Tolingo GmbH at the following contact details:

Email: datenschutzbeauftragter@tolingo.com
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
https://www.datenschutzkanzlei.de

 

 

For what purposes and on what legal basis do we process personal data?

We process personal data about you for the purpose of your application for employment, as far as necessary for the decision regarding the establishment of an employment relationship with us.

The legal basis for this is § 26 Abs. 1 in conjunction with Abs. 8 S. 2 BDSG.

Additionally, we may process personal data about you to defend against asserted legal claims arising from the application process. The legal basis for this is Art. 6 Abs. 1, letter f of the GDPR, and the legitimate interest may be, for example, a duty of proof in a procedure under the General Equal Treatment Act (AGG).

If an employment relationship is established between you and us, we may process the personal data already provided by you for the purposes of the employment relationship, in accordance with § 26 Abs. 1 BDSG, if this is necessary for the execution or termination of the employment relationship or to exercise or fulfill the rights and obligations resulting from a law, a collective agreement, or an operational or service agreement (collective agreement).

Your application documents will only be processed and reviewed by the contact persons responsible for the application. All employees involved in data processing are obliged to maintain the confidentiality of your data.

 

What categories of personal data do we process?

We process data related to your application. This may include general data about you (such as name, address, and contact information), information about your professional qualifications and education, or information about professional development, or other details you provide us with in connection with your application. Additionally, we may process publicly available, professional information about you, such as a profile on professional social media networks.

 

From which sources do we obtain personal data if we do not collect it from you?

We process data related to your application. This may include general data about you (such as name, address, and contact information), information about your professional qualifications and education, or information about professional development, or other details you provide us with in connection with your application. Additionally, we may process publicly available, professional information about you, such as a profile on professional social media networks.

 

From which sources do we obtain personal data if we do not collect it from you?

If we do not directly collect the data from you, and you have an active profile on a career portal, or disclose to us an inactive or partially active profile during the application process, we may also obtain personal data from there.

 

Is the transfer to a third country intended?

Transfer to a third country is not intended.

 

How long will your data be stored?

We store your personal data as long as necessary for a decision about your application. If no employment relationship is established between you and us, we will retain the data you have submitted up to three months after the rejection for the purpose of answering questions related to the application process or the rejection. This does not apply if statutory provisions oppose deletion, if further storage is required for evidence purposes, or if you have explicitly consented to a longer storage period.

 

What rights do you have?

As an applicant with us, depending on the situation, you have the following data protection rights, which you can exercise by contacting us or our data protection officer at the contact details listed in sections 1 and 2:

Right to Access

You have the right to obtain information about the personal data we process about you and to request access to your personal data and/or copies of these data. This includes information about the purpose of the use, the category of data used, its recipients and access rights, as well as, if possible, the planned duration of the data storage or, if this is not possible, the criteria for determining this duration.

Right to Rectification

You have the right to request the immediate correction of any incorrect personal data about you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to Deletion or Restriction of Processing

You have the right to request that we delete personal data concerning you immediately and we are obligated to delete personal data immediately if one of the following reasons applies:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject.

The personal data has been unlawfully processed.

You have objected to the processing of the data and there are no overriding legitimate grounds for processing.

 

This does not apply if the processing is necessary:

to comply with a legal obligation that requires processing under Union or Member State law to which we are subject.

to assert, exercise, or defend legal claims.

Right to Restriction of Processing

You have the right to request that we restrict the processing of personal data if one of the following conditions is met:

The accuracy of the personal data is disputed by you, for a period that allows us to verify the accuracy of the personal data.

The processing is unlawful and you oppose the deletion of the personal data and instead request the restriction of its use.

We no longer need the personal data for processing purposes, but you need them to assert, exercise, or defend legal claims.

You have objected to the processing and it has not yet been determined whether our legitimate reasons override yours.

Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR.

 

Necessity of Providing Personal Data

Providing personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract for employment with us. This means that if you do not provide us with personal data when applying, we will not be able to enter into an employment relationship with you.

 

No Automated Decision-Making

No automated decision-making takes place within the meaning of Art. 22 GDPR.