Applicant Data Protection
Information on Applicant Data Protection at GLOBAL GRUPPE
We appreciate your interest in working at one of our locations in the future. Please read the following information about how we handle your application documents and personal data. We adhere to the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable labour law requirements.
If you have any questions, please feel free to contact our Human Resources department or our Group Data Protection Officer.
Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the data controller is Global Service GmbH, Eupener Straße 67, 50933 Cologne. As part of the group’s data protection framework, your application will also be processed by the relevant location or subsidiary, as well as by the ‘Human Resources’ shared service centre at Global Assekuranz Versicherungsmakler GmbH, Guerickestraße 25, 80805 Munich.
Global Service GmbH has appointed a Group Data Protection Officer for all subsidiaries. This is Harald Müller-Delius (Dipl.-Ing. (FH), MBA), who can be contacted at for information and to exercise your rights under the GDPR.
Purposes of Processing and Legal Bases
We process your personal data for the purpose of your employment application, in order to decide whether to establish an employment relationship with you. The legal basis for this processing is Article 6(1)(a), (b) and (c) of the GDPR, and Section 26(1) in conjunction with Section 8(2) of the Federal Data Protection Act (BDSG).
The legal basis for processing your application data is Section 26(1) of the Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) of the GDPR (initiation of an employment relationship). Where necessary to fulfil legal obligations, processing is also carried out on the basis of Article 6(1)(c) of the GDPR.
Consent pursuant to Article 6(1)(a) of the GDPR is obtained only where no other legal basis exists for specific processing operations; for example, in cases involving long-term inclusion in a candidate pool or the use of future specialised applicant management features.
To defend against or enforce legal claims arising from the application process, processing may also be carried out on the basis of Article 6(1)(f) of the GDPR.
Furthermore, we may process personal data about you to the extent necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Article 6(1)(f) of the GDPR; a legitimate interest in this context includes, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).
If an employment relationship is established between you and us, we may, pursuant to Section 26(1) of the Federal Data Protection Act (BDSG), on the basis of the employment contract under Article 6(1)(b) of the GDPR, and in accordance with the statutory provisions governing the employment relationship under Article 6(1)(c) of the GDPR, continue to process the personal data already received from you for the purposes of the employment relationship, if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of employee representation arising from a law, a collective bargaining agreement, or a company or service agreement (collective agreement).
Your data will be used exclusively for the purpose of conducting the application process; it will not be disclosed to third parties or used for advertising purposes.
Types and Categories of Data, Recipients of Your Data
We process all the data necessary for handling your application and filling the advertised position. This data is evident from our online application form and includes personal information, proof of qualifications and educational background, details of professional development and qualifications, and any other information you have provided us with in connection with your application. We also reserve the right to process career-related information that you have made publicly available. This includes data that you have published in your profile when applying through job portals, for example.
Once we have received all your application materials, the central Human Resources department of Global Service GmbH will process your data. If your profile matches a job opening advertised by one of our subsidiaries, we will grant the HR department or management of the relevant subsidiary access to your profile to obtain the necessary application documents.
Any personal data that we receive from you during the application process will be documented in your applicant profile.
If you are a suitable candidate, your applicant data will be processed by the HR department at Global Assekuranz Versicherungsmakler GmbH in accordance with Article 28 contracts of the GDPR, using REXX applicant and HR management software (REXX Systems Headquarters, Süderstrasse 75-79, 20097 Hamburg).
We will use the contact information you provide (phone number and email address) to coordinate the rest of the application process.
Source of Data
We only process data that you have provided to us through our online applicant portal, either voluntarily or as part of an unsolicited application, or data that you have published on job portals in connection with your application. If you applied via a job portal or social media, we will receive the data you transferred to us based on your consent.
Retention Period
We will store your personal data for as long as is necessary in order to make a decision regarding your application. If we do not enter into an employment relationship with you, we may continue to store your data to the extent necessary to defend against potential legal claims, such as those under the AGG. In such cases, application documents will be deleted six months after the rejection decision is communicated, unless longer storage is required due to legal disputes.
Unsolicited data will not be considered as part of your application and will be deleted immediately. Paper documents received by us – unless explicitly requested as part of the ongoing application process – cannot be processed and will be handed over for destruction.
If you use our Job Alert feature, we will use your data to notify you of job openings that match your selection criteria until you opt out.
Your Data Protection Rights
Every applicant has the right to request access to their personal data from us as the data controller pursuant to Art. 15 GDPR, rectification pursuant to Art. 16, erasure under Article 17, restriction of processing under Article 18, and to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format under Article 20. You may revoke any consent you have given for data processing at any time with future effect. Any data processing that has taken place up to that point remains unaffected.
In addition, you have the right to lodge a complaint with the relevant data protection supervisory authority pursuant to Article 77 of the GDPR: Depending on the federal state, this information can be found at https://www.datenschutz-wiki.de/Aufsichtsbeh%C3%B6rden_und_Landesdatenschutzbeauftragte.
Right to Object
You have the right to object to the processing of your personal data as part of your application to GLOBAL GRUPPE. If we are processing your data based on your consent under Article 6(1)(a) of the GDPR, or if we are processing your data to safeguard legitimate interests under Article 6(1)(f) of the GDPR, you may object to this processing if you have specific reasons relating to your personal situation that speak against the processing of your data. This objection can be submitted informally and should be addressed to the data controller. As part of the ongoing application process, your data will then be deleted in accordance with our deletion procedures.
Required Provision
Providing personal data is not required by law or contract, and you are not obliged to provide it. However, providing personal data is necessary for us to enter into an employment contract with you. This means that if you do not provide the personal data required for processing your application, we cannot enter into an employment relationship with you. This is because we would be unable to fulfil our legal obligations and our duty of care as an employer.
Automated Decision-Making
We do not currently use automated decision-making processes as defined in Article 22 of the GDPR. Any future AI tools used for applicant management will only be used with your consent, in accordance with Article 22(2)(c) of the GDPR.
Transfers to Third Countries
No data is transferred to a third country outside the scope of the GDPR.