Information Security

Information Security

This is a courtesy English translation. The legally binding version is the German original (Informationssicherheit).

MeJuvante GmbH · Your rights as a data subject · Privacy notice for online applications

MeJuvante GmbH

Privacy Notice

(Information pursuant to Art. 13, 14 GDPR)

We are pleased about your interest in our company and that you have contacted us. Pursuant to Art. 13 GDPR, we inform you below about the processing of your personal data in connection with your contact.

Controller within the meaning of data protection law

MeJuvante GmbH,

represented by the managing partner

Timo Traurig (hereinafter "we"),

Robert-Bosch-Str. 4b, 35440 Linden

E-mail: working[at]mejuvante.com

Data protection officer

You can reach our data protection officer at

evelyn.schiener[at]mejuvante.com

or by post at our address given above, marked

"Attn.: Data Protection Officer".

What data do we process and for what purposes?

We process personal data. This means all information relating to an identified or identifiable natural person (Art. 4(1) GDPR).

In the course of our business activities, we process in particular the contact details of our customers and their employees, of business partners and of other third parties. In addition, we process payment data and — where necessary — further information on personal and economic circumstances, insofar as this is required for the provision of our services.

In some cases we process data that we have not received directly from you, but from customers or other third parties. In doing so, we also draw on publicly available sources, in particular directories, registers and freely accessible content from the internet.

We also process the data that you provide to us when contacting us (e.g. by e-mail, business card, enquiry or telephone). This is done, for example, to initiate a business relationship, to answer your enquiry or generally to communicate with you. Furthermore, storage and processing may take place insofar as this is legally required. We likewise process personal data that is necessary for the conclusion and performance of a contract concluded between us.

Legal basis for the data processing

The legal basis for the processing of your personal data is in particular

• Art. 6(1)(f) GDPR (legitimate interest, e.g. for initiating business or answering requests for information), as well as
• Art. 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures).

Storage period

The collected data is stored for as long as it is required to achieve the purpose for which it was collected. Beyond this, we store personal data on the basis of statutory retention and documentation obligations under tax and commercial law (e.g. HGB, StGB or AO), which require longer storage.

Storage beyond this takes place if you have consented to it or if a further legitimate interest exists pursuant to Art. 6(1) sentence 1 (f) GDPR. Where several retention periods apply, the longest is decisive in each case.

Recipients of the data / disclosure

The personal data collected in the course of contact is generally not passed on to third parties, unless

• this is required by law,
• it is necessary for the fulfilment of contractual obligations,
• it is necessary due to the legitimate interests of third parties, or
• it is done on the basis of your consent.

Possible recipients are in particular:

• processors commissioned by us,
• public bodies and authorities,
• customers and business partners.

A transfer to countries outside the European Economic Area (EEA) only takes place if an adequate level of data protection has been established by the EU Commission, if suitable safeguards exist, if the transfer is necessary for the performance of a contract, or if you have expressly consented.

For the performance of contracts, we involve group-affiliated companies of the MeJuvante Group, which are subject to a confidentiality obligation (the MeJuvante GmbH group includes, among others, the subsidiary MeJuvante Consulting GmbH & Co. KG). In addition, we use technical support services, IT maintenance, hosting services and services for the disposal of files and data media. We conclude data processing agreements pursuant to Art. 28 GDPR with all relevant service providers.

Place of data processing

Your personal data is processed in our internal systems, at commissioned processors and in data centres within the Federal Republic of Germany.

Data security / data backup

We are obliged to carry out regular data backups where necessary. In addition, we use technical and organisational measures pursuant to Art. 32 GDPR to protect our systems against unauthorised access, loss, manipulation or other attacks. These include, in particular, measures to protect against malicious software as well as physical security measures to protect our business premises.

Your rights as a data subject

You have the right to information about the personal data processed about you (Art. 15 GDPR).

Furthermore — where legally provided for — you have the right to rectification, erasure or restriction of processing (Art. 16–18 GDPR), the right to object to processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR).

Where the processing is based on your consent, you can revoke it at any time without giving reasons (Art. 7(3) GDPR).

In addition, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). The competent authority is generally the supervisory authority of your habitual residence.

Competent supervisory authority for MeJuvante GmbH:

The Hessian Commissioner for Data Protection and Freedom of Information

www.datenschutz.hessen.de

We would appreciate it if, before lodging a complaint, you would first contact us (e.g. by e-mail to datenschutz[at]mejuvante.de).

Privacy notice for online applications

Thank you for your interest in our job posting. The protection of your personal data is very important to us. Below we inform you about the processing of your data in the course of the online application procedure.

Data collection

In the course of your application, we collect and process the following data:

Surname, first name, address, telephone number, e-mail address and application documents (cover letter, CV, references, certificates and similar).

Purpose of the processing / disclosure

Your application data is processed exclusively to carry out the application procedure and to fill positions within our company. Your data is only passed on to the internal offices and specialist departments responsible for the application procedure. Disclosure to companies other than MeJuvante GmbH and MeJuvante Consulting GmbH & Co. KG does not take place without your express consent.

Retention period for application data

Your application data is generally deleted automatically three months after the conclusion of the application procedure, unless statutory retention obligations preclude this, longer storage is required for the purpose of providing evidence, or you have expressly consented.

Storage for future job postings

If we are currently unable to offer you a position but your application appears of interest for future positions, we store your data for up to twelve months, provided you have expressly consented to this.

Data security

To protect your application data against manipulation and unauthorised access, we use technical and organisational measures. Your online application is transmitted in encrypted form according to the current state of the art.

Right to information and revocation

Where the processing of your data is based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing pursuant to Art. 21 GDPR. An objection to direct marketing is possible at any time without giving reasons.

To exercise your rights, an e-mail to datenschutz[at]mejuvante.de is sufficient.

If you have any questions about the processing of your personal data, please contact our data protection officer:

Bastian Liewig

MeJuvante GmbH & Co. KG

Robert-Bosch-Str. 4b

D-35440 Linden

E-mail: datenschutz[at]mejuvante.de