Privacy Policy Applicants

Version May 2021

This privacy policy relates exclusively to the data collected as part of the application process.

Processing
by the controller

1. Data processing

We offer you the opportunity to apply for vacancies in our company via our websites and by e-mail. For this purpose, we use Lever, Inc. as a software partner. The software partners are processors in the sense of data protection law and are obliged by corresponding contracts to handle your data in compliance with data protection regulations.

2. Data security and confidentiality

Data protection is important to us. Vimcar GmbH and our software partner have taken the necessary organizational and technical measures to ensure the confidentiality of your application.

All employees in the HR department and our software partners are obliged to maintain confidentiality regarding personal data as part of their employment contract. Thanks to automatically activated 128-bit encryption, secure transmission of your data is ensured. The general standards for data security in accordance with the current state of the art are taken into account during data processing.

3. use of your personal data

During the application process, the usual correspondence data such as postal address, e-mail address and telephone numbers are stored in the applicant database in addition to salutation, surname and first name. In addition, application documents such as letters of motivation, CVs, professional, training and further education qualifications and references are recorded. This data is only stored, evaluated, processed or forwarded internally as part of your application. They are only accessible to employees of the HR department and the persons responsible for selection at Vimcar GmbH. Under no circumstances will your data be passed on to companies or persons outside Vimcar GmbH. In addition, our employees are strictly bound by instructions and may not process the data for their own purposes. The data may be processed for statistical purposes (e.g. reporting). It is not possible to draw conclusions about individual persons.
When you apply to us, we process the information that we receive from you as part of the application process, e.g. through letters of application, CVs, references, correspondence, telephone or verbal information. In addition to your contact details, information about your education, qualifications, work experience and skills is of particular relevance to us.

We do not require any special categories of personal data within the meaning of Art. 9 GDPR (e.g. health data in the context of severe disability or similar) for the application process. We ask you not to send us any such information from the outset. If such information is exceptionally relevant to the application process, we will process it together with your other applicant data. This may, for example, concern information about a severe disability, which you can provide to us voluntarily and which we then have to process in order to fulfill our special obligations with regard to severely disabled persons. In these cases, the processing serves the exercise of rights or the fulfillment of legal obligations arising from labor law, social security law and social protection. The legal basis for data processing is then Art. 9 para. 2 lit. b GDPR, §§ 26 para. 3 BDSG, 164 SGB IX. In exceptional cases, it may be necessary to obtain information about your health or a disability or information from the Federal Central Criminal Register, i.e. about previous convictions, in order to assess your suitability for the intended job. The legal basis for this is § 26 BDSG.
Your data will not be used by us for automated decision-making or profiling, nor will it be passed on to third parties.

In addition, Vimcar uses the services of Cartha UG for processing.
The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to support effective, systematic personnel planning in the company on an ongoing basis and throughout the company. Cartha allows us to map the positions to be filled holistically and acts as an interface between financial and personnel planning. Personal data is stored for as long as it is required to fulfill the purpose of processing. The data is deleted as soon as it is no longer required to achieve the purpose. Please note Cartha's data protection information.

4. Rights of data subjects

You have the right to rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR). You also have the right to data portability (Art. 20 GDPR) and restriction of processing (Art. 18 GDPR). If the processing of the data is based on your consent, you can revoke it at any time with future effect (Art. 21 GDPR).

As a rule, you can assert your rights informally and without giving reasons.

With a request for information in accordance with Art. 15 GDPR, you can request information about which data about you is being processed. To do so, please contact our data protection department (email: datenschutz@vimcar.com, address: Warschauer Straße 57, 10243 Berlin).

5. Storage and deletion of data

If you apply for a job at Vimcar GmbH, your personal data, or an extract thereof, will be placed in your personnel file.

If you have applied but have received a rejection, your data will be stored on the basis of your consent for approximately three (3) months after completion of the application process and then deleted (profile and application). You will not be notified of the deletion of your data.

If you have applied but we are unable to offer you a suitable position at this time, we reserve the right to assign your application to our talent pool (Vimcar Connect). In this case, you will receive a message by e-mail. You can then agree to the storage and consent to us storing your data for twelve (12) months and then deleting it. If you no longer agree to this or are no longer interested, you can object to further data processing.

After the storage period has expired, the data will be anonymized and can no longer be directly assigned to you. However, if you apply for a job again using the same e-mail address, your profile will be reactivated and we will also be able to view data from past applications.

Processing
by the operator of the recruiting site

1. General

On behalf of Vimcar GmbH, applicant data is processed using a system from Lever Inc. The use of the software enables an effective and systematic application process to be mapped, from which applicants also benefit through rapid feedback. Integrated ATS and CRM functions are used for this purpose. The data is processed in data centers within the EU.

Both we as a company, any employees involved in the application process and any third-party companies involved, such as Lever, are instructed to take appropriate organizational and technical measures to protect personal data from misuse, unauthorized disclosure and loss. These measures meet at least the requirements of § 64 BDSG. The legal basis for the processing of applications for vacancies and unsolicited applications is Art. 6 para. 1 sentence 1 lit. b and Art. 88 para. 1 GDPR in conjunction with Section 26 para. 1 sentence 1 BDSG. For inclusion in the talent pool, we rely on your consent and thus on Art. 6 para. 1 sentence 1 lit. a GDPR.
We have concluded an order processing contract with Lever in accordance with Art. 28 and supplementary SCCs.

2. Responsible body

For data processing in the context of the application process via Lever, the responsible body within the meaning of data protection law is
Lever, Inc.
1125 Mission Street
San Francisco, CA 94103
If you have any questions regarding data processing and/or data subject rights, you can contact Lever's data protection officer at privacy@lever.co. You can contact the representative established in the EU within the meaning of Article 27 GDPR VeraSafe via this contact form, by telephone on +44 (20) 4532 2003 or by writing to VeraSafe Ireland at North Point Business Park, Unit 3D North Point House, New Mallow Rd, Co. Cork, T23 AT2P, Ireland.

3. Use of cookies

Lever, Inc. uses first-party cookies for website analytics purposes, such as collecting information about website activity, including session duration, website content accessed and interactions and user interface clicks related to such content, the Internet Protocol (IP) address of the device from which the websites were accessed, the browser used, its version and language preference (i.e. locale), and the territory from which you accessed the websites. In addition, Lever uses third-party cookies to deliver more relevant ads for products and services when you browse the internet (also known as "retargeting"). Further information on the use of cookies can be found at: https://www.lever.co/cookie-policy

4. Rights of data subjects

In accordance with Article 7 (3) GDPR, you have the right to withdraw your consent at any time. As a result, we will no longer continue the data processing that was based on this consent in the future. In this way, you can prevent further storage in our talent pool. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can object to the data processing, which we base on our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR, at any time in accordance with Art. 21 GDPR.

You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR.

In addition, you can request information in accordance with Art. 15, rectification in accordance with Art. 16 or erasure in accordance with Art. 17 GDPR. To exercise your data subject rights, please send an informal message describing your request to the contact details listed under A.4.

Subject to applicable law, you have the right under Art. 77 GDPR to lodge a complaint with your local data protection authority.

Subject to applicable law, you have the right under Art. 77 GDPR to lodge a complaint with your local data protection authority.

5. Final provisions

Due to the further development and optimization of our application process or the implementation of new functions or technologies, it may become necessary to amend these data protection provisions. We reserve the right to make such changes at any time. In the event of changes to Lever's privacy policy, we will endeavor to notify you proactively. The latest version can be found at https://www.lever.co/privacy.