Processing of (personal) data by the entity in charge of the online application process

Dear applicant,
In the following we would like to inform you about the processing of your personal data, which takes place within the application procedure.

1. Responsible entity

a. Controller for the processing of your data
HolidayCheck Group AG
Arabellastraße 23
81925 München
Deutschland

b. Data Protection OfficerYou can contact our data protection officer by mail via the contact details listed under 1. (for the attention of the Data Protection Department) or via e-mail at datenschutzbeauftragter@holidaycheck.com.

2. Legal basis of processing

There is no legal or contractual obligation to provide your application documents. However, we would like to point out that a decision on your application or the establishment of an employment relationship is not possible without your application documents. We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the applicable national data protection regulations.

a. Your application documents are regularly processed for the purpose of establishing an employment relationship and are therefore based on the legal basis of Section 26 (1) Sentence 1 Var. 1 BDSG.
If you also provide information on your religious affiliation, nationality or state of health in your application documents, we process these "special categories of personal data" on the legal basis of Section 26 (3) BDSG.

b. If you voluntarily provide us with further personal information during the application process that is not absolutely necessary to establish the desired employment relationship, your personal data will be processed on the basis of your consent pursuant to Section 26 (2) BDSG.
If you have agreed to the further storage of your application documents (after the end of the application process), we will also process your personal data on the basis of your consent pursuant to Section 26 (2) BDSG.
If you also provide us with special categories of personal data in this context, this processing will also be based on your consent pursuant to Section 26 (2), (3) sentence 2 BDSG.
You can revoke your consent to processing at any time for the future. The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this.

c. In individual cases, the processing of your application documents is also necessary to fulfill our legal obligations. The processing is carried out on the basis of Art. 6 (1) sentence 1 lit. c DS-GVO in conjunction with the respective specific obligation. Legal obligations to process your personal data may arise, for example, from the requirements of the German Fiscal Code ("AO") or the German Commercial Code ("HGB").

d. The processing of your application documents may also be carried out to protect our overriding legitimate interests within the meaning of Art. 6 para. 1 sentence 1 lit. f Alt. 1 DS-GVO.

e. In individual cases, we approach applicants who might be suitable for a vacancy directly via professional networks such as Xing or LinkedIn and only process personal data that has been made publicly available within the professional network. The legal basis for this is Art. 6 (1) sentence 1 lit. f DS-GVO, whereby our legitimate interests lie in the targeted search, approach and recruitment of suitable applicants.

f. If we receive, provide or receive your application documents in the context of participation in recruiting and career events / job fairs, the basis of the processing is based on your consent. In addition, we publish job postings for working students via our company account on the job boards of some universities.

3. Purpose of the processing

The relevant purpose of processing your personal data is for the purpose of establishing the intended employment relationship. In connection with this justification, the following purposes are also pursued:

processing for the purpose of determining suitability
processing for the purpose of contacting you within the scope of the application process (e.g. for queries, coordinating appointments, scheduling appointments, notifying you of decisions, etc.).
if applicable, processing for the purpose of including your application documents in our applicant pool, if you have consented to the inclusion and the associated longer storage period
processing for the creation of necessary contract documents and transfer of your application documents to the personnel file
processing for legal defense and enforcement, if there is a threat of unjustified claims based on the application process

4. Storage period / duration of processing

Your personal data will only be stored for as long as it is needed for the pursuit of the purposes stated under 3. or until you have revoked your consent to the processing.
This means that if your application does not lead to the establishment of an employment relationship, we will store your application documents for a maximum period of 6 months after the end of the application process.
Longer storage will only take place if this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of the legal dispute.
If you have declared your consent to longer storage after the end of the application process ("inclusion in the applicant pool"), we will generally store your personal data for 18 months after the end of the application process or until you revoke your declaration of consent if this should occur before the end of the 18 months.
If an employment, training or internship relationship is established following the application process, your application documents will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.

5. Recipients of personal data; transfer to third countries

We pass on your personal data within the HolidayCheck Group AG group of companies exclusively to those departments and persons who require this data as part of the application process and in order to fulfill the legal obligations arising from the purposes listed in section 3.
We also pass on your data to external service providers who support us in processing it for the purposes listed above. This includes software, hosting and cloud service providers as well as service providers in the context of personnel administration and accounting or lawyers / attorneys for legal defense / enforcement. It is ensured that these aforementioned service providers process your application documents exclusively confidentially on the basis of separate contractual agreements.
As part of the Group-wide cooperation or transfer of functions between HolidayCheck Group AG companies, personal data is regularly transferred to Switzerland.
In addition, your personal data may also be transferred to third countries (countries outside the European Union or the European Economic Area) as part of the cooperation with our external service providers. In this case, we ensure that the recipient either has an adequate level of data protection (e.g., through an adequacy decision by the EU Commission or the conclusion of corresponding standard data protection clauses with the recipients) or has sufficient consent from you.

6. Automated decision-making

No automated decisions are made in individual cases as part of the application process.

7. Data subject rights

If we process your personal data in the context of your application, you have the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to notification under Article 19 of the GDPR, and the right to data portability under Article 20 of the GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DS-GVO if you believe that the processing of your personal data is not lawful. The competence of the supervisory authority depends on the registered office of the company to which you apply. The right of appeal is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on consent, you are entitled to revoke your consent to the use of personal data at any time in accordance with Art. 7 DS-GVO. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.
Insofar as the processing of personal data is carried out for the protection of legitimate interests pursuant to Art. 6 (1) lit. f DS-GVO, you have the right, pursuant to Art. 21 DS-GVO, to object to the processing of this data at any time for reasons that may arise from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
To exercise these rights, please contact us using the contact details listed under 1. or send an informal email to peopledesk@holidaycheck.com.

Sachbearbeiter Kundenservice - Eskalationen & Beschwerden (all genders)

Your application

Documents