Compliance with data protection regulations is very important to us. Below, we would like to inform you about the collection and processing of your personal data:

Responsible
Goethe Business School gGmbH is responsible for data processing.
Telephone: +49 69 798 33500
Email: info@gbs.uni-frankfurt.de

Purpose and legal basis of data processing
We process your personal data for the purpose of deciding whether to establish an employment relationship. As part of the application process, we process in particular your contact details, such as your name and address, as well as all data related to your application, such as your resume, certificates, and qualifications. If you submit a request for reimbursement of travel expenses, we also require your bank details. The legal basis for the processing of your data is Art. 88 GDPR in conjunction with § 26 (1) sentence 1 BDSG or Art. 6 (1) sentence 1 lit. b GDPR.

In addition, we collect and process personal data that you voluntarily provide to us. This data is processed on the basis of your revocable consent in accordance with Art. 6 (1) sentence 1 lit. a, Art. 7 GDPR in conjunction with § 26 (2) BDSG.

Furthermore, we reserve the right to use publicly available information about you in the selection process in addition to the application documents you have submitted. However, this only applies if such information is publicly available on the Internet via search engines (e.g., Google). In addition, we only use such information if and to the extent that this information is suitable for making a further or confirmatory statement about your qualifications or your suitability for the position to be filled. This may also include publicly available reports about you, publicly available user profiles (e.g., on business networks such as LinkedIn or Xing), or your own statements ("posts") or photos on the internet, provided that you have posted them publicly yourself.

Talent pool
If you have not been hired but your application is still of interest to us, we may ask you if we may retain your application for future vacancies. This longer retention period is based on your revocable consent in accordance with Art. 6 (1) (a), Art. 7 GDPR in conjunction with § 26 (2) BDSG. Inclusion in our talent pool is voluntary, and failure to give the relevant consent has no effect on other ongoing application procedures.

Recipients of your data
We will, of course, treat your data confidentially and will not pass it on to third parties.

Where necessary, we use service providers who are strictly bound by our instructions and who support us, for example, in the areas of IT or the archiving and destruction of documents, and with whom separate contracts for order processing have been concluded. 

Storage period/criteria for determining the storage period
If there is no legal retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. If no appointment is made, this will normally be the case no later than three months after completion of the application process or after receipt of the rejection. We also delete data if you revoke your consent to the processing of your data.

We store applications that we have included in our talent pool for one year. After that, the documents are deleted. We retain your declaration of consent to be included in our talent pool for a further three years in order to comply with our accountability obligations within the meaning of Art. 5 (2) GDPR. In individual cases, individual data may be stored for a longer period (e.g., travel expense reports). The duration of storage is then based on the statutory retention obligations, e.g., from the German Fiscal Code (6 years) or the German Commercial Code (10 years). Further storage of your data is also permissible if, after weighing up the interests involved, we determine that further processing is necessary for the assertion, exercise, or defense of legal claims.

Your data protection rights
You have the right to request information about your stored personal data free of charge (Art. 15 (1) GDPR). In addition, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and restriction of processing (Art. 18 GDPR) of your personal data, as well as the right to data portability (Art. 20 GDPR).

You have the right to withdraw your consent at any time with effect for the future if the data is processed on the basis of Art. 6 (1) (a) or Art. 9 (2) (a) GDPR.

You have the right to object to data processing in accordance with Art. 21 GDPR if the data is processed on the basis of Art. 6 (1) (e) or (f) GDPR.

To assert your rights, please contact us at the following address: info@gbs.uni-frankfurt.de

You have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR. The right to lodge a complaint can be exercised in particular with a supervisory authority in the member state of the place of residence or workplace of the data subject or the place of the alleged infringement.

Our data protection officer
You can reach our data protection officer by Tel.: +49 931 304976-0, Email: office@datenschutz-sued.de. Please indicate the above-mentioned responsible party when making inquiries to our data protection officer.