a) IMPLEMENTATION OF RECRUITMENT PROCESSES
If you provide us with your CV or other documents related to the job search or in response to a recruitment advertisement, we will process your data provided in the submitted application documents on the basis of your consent–respectively for participation in a specific recruitment process or in future recruitment–in accordance with Article 6(1)(a) and Article 9(2)(a) of the GDPR. Personal data for future recruitment will be processed for 3 years, calculated from 1 January of the calendar year following the year in which you gave the consent in question. In the last month before the aforementioned deadline arrives, a link will be sent to you (or we may call you), through which it will be possible to agree to leave your CV or other job-seeking documents in our database for a further three years, including the possibility of updating your details. You are independently entitled to revoke your consent in advance. If, on the other hand, you have not given your consent for future recruitments, your data will be processed until the closing date of the recruitment process in question and thereafter–but only in the form of storage–for the period necessary for the purpose of establishing, investigating or defending claims, which is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

b) ESTABLISHMENT AND COURSE OF EMPLOYMENT
If you have taken up or intend to take up employment with us, we will process your personal data necessary to fulfil the employer’s legal obligations in connection with the establishment (including possible legalisation, which applies to foreign nationals) and the course of the employment relationship–on the basis of Article 6(1)(c) and Article 9(2)(b) of the GDPR. Such data will be processed for a period of time as required by law (e.g. labour law, pension, health care, tax law, etc.). In addition, if you intend to take up employment with us, we will also process your personal data for the purpose of entering into and performing a contract on the basis of Article 6(1)(b) of the GDPR–for the duration of the contract (if we have acquired rights by virtue of the contract, the data will be processed for at least the duration of those rights) and until we are required to do so by law, including the expiry of time limits for the assertion of claims. In the case of voluntary consent to the processing of data other than those resulting from legal provisions, such data will be processed on the basis of Article 6(1)(a) and Article 9(2)(a) of the GDPR–until the consent is revoked.

c) IMPLEMENTATION OF SERVICES PROVIDED BY THE ADMINISTRATOR
If you use our services or are interested in engaging in a partnership, we will process your contact data and data obtained in connection with the provision of such services on the basis of Article 6(1)(b) of the GDPR. If you will not be a party to such a contract but have only been designated by your organisation as a so-called contact person or we are processing your data because it has been provided to us by your organisation or directly by you because it is necessary for the provision of a particular service (e.g. payroll report, training), then the legal basis for the processing of this data is Article 6(1)(f) GDPR, i.e. it is our legitimate interest to provide the requested service–for the duration of the contract negotiation and its duration and until the expiry of the time limits for the assertion of claims.

d) ARCHIVING OF SETTLEMENT DOCUMENTS
If you use our services, it is necessary to archive settlement documents pursuant to Article 6(1)(c) of the GDPR–until the expiry of the limitation period for tax liability.

e) MARKETING OF THE ADMINISTRATOR’S SERVICES
In relation to legitimate interest, we may carry out marketing of products and services on the basis of Article 6(1)(f) GDPR, where the legitimate interest is to carry out marketing activities to promote our business, until you object. Marketing activities may in particular take place using electronic means of communication, provided that you have given a separate consent (to receive electronic messages or voice calls).

f) VINDICATION OF CLAIMS
Your personal data may also be processed by us to a limited extent after the expiry of the other grounds for processing in connection with the need to assert possible claims on the basis of Article 6(1)(f) of the GDPR–until their statute of limitations under the law.

g) STATISTICAL OBJECTIVES
Your personal data may also be processed by us for statistical purposes on the basis of Article 6(1)(f) of the GDPR, where the legitimate purpose is to have information about the statistics of the activities we carry out which allows us to improve our business, until we have an additional, different legal basis for processing–in case we lose this basis the data is anonymised.