Applicant management in the context of personnel recruitment
Privacy Notice pursuant to Article 13, subsections 1 and 2, of the General Data Protection Regulation (GDPR) regarding applicant management as part of the recruitment process at the Zittau/Görlitz University of Applied Sciences (HSZG).
Person responsible for data processing
Zittau/Görlitz University of Applied Sciences
Theodor-Körner-Allee 16
02763 Zittau
Please direct any inquiries regarding data processing to datenschutz(at)hszg.de
. Your inquiry will be forwarded to the appropriate department and processed promptly.
Data Protection Officer (DPO) of the controller
The data protection officer can be contacted at
DID Dresdner Institut für Datenschutz
Hospitalstraße 4
01097 Dresden
Web.: www.dids.de
Phone: +49 (0)351 / 655 772 - 0
E-mail: dsb(at)hszg.de
Purposes of data processing
The purpose of processing personal data is recruitment. Recruitment takes place in connection with filling positions for employees, trainees, support staff, and interns. Personal data from unsolicited applications is processed only to the extent that it can be included in ongoing hiring processes. Applicant data is used solely for the purpose of conducting the hiring process. Personal data is collected directly as part of the establishment of the employment relationship. If the applicant does not consent to providing the personal data required for the recruitment process, the applicant cannot be considered in the process.
Legal basis
Personal data is processed exclusively for the purposes of this processing activity and, in particular, to make decisions regarding the establishment of employment relationships based on Art. 88(1) of the GDPR, Article 6(1)(c) of the GDPR, Section 11 of the Saxon Data Protection Act (SächsDSDG), and Section 80(1)(1) of the Saxon Personnel Representation Act (SächsPersVG).
Data subjects whose personal data is being processed provide their data to the HSZG pursuant to Article 6(1)(a) and (b) of the GDPR for the purpose of carrying out precontractual measures as part of the application process with the aim of concluding an employment contract.
Recipients
The HSZG discloses applicant data exclusively for the purposes of this processing activity to the following recipients, who are not members of the HSZG, and where participation is required by law under co-determination rights:
In the appointment process:
- External expert (e.g., a member of another university)
- Reviewers for evaluating applications eligible for inclusion on the shortlist (e.g., experts from other institutions or universities)
The HSZG does not transfer personal data to a third country or an international organization.
Storage duration
Notwithstanding the right to erasure (Art. 17 of the GDPR), application materials will be stored (processed) for the duration of the application process. In the event of a rejection, we will retain the application documents for 6 months, in accordance with the statutory objection periods, until the end of that period.
Rights of the data subjects
As a person affected by the processing of your personal data, you have the following rights if the legal requirements are met.
- You have the right to information about the processing of your personal data(Art. 15 GDPR).
- You have the right to rectification of inaccurate personal data concerning you (Art.16 GDPR)
- You have the right to erasure of your personal data (Art.17 GDPR).
- You have the right to request the restriction of the processing of your personal data (Art.18 GDPR)
- You have the right to data portability of your personal data (Art.20 GDPR)
- You have the right to object to the processing of your personal data at any time (Art.21 GDPR)
- You have the right to withdraw your consent to data processing at any time. The lawfulness of the data processing carried out on the basis of your consent until revocation remains unaffected(Art. 13 para. 2 lit. c GDPR).
- You have the right to lodge a complaint with the Saxon data protection officer
(for contact details, see https://www.saechsdsb.de/n-kontakt).
Provision of personal data
The provision of personal data is not required by law; however, it is necessary for the conclusion of a contract (Art. 13(2)(e) GDPR).
There is no obligation to provide personal data. Failure to provide personal data will preclude participation in the application process and consideration for the open position.
Decision-making and profiling
No automated decision-making or profiling in accordance with Art. 22 GDPR is carried out in the processing activity "Collection of applicant data".