Information obligations for applicants

Download file

Data protection information on the processing of applicant data in accordance with Art. 13 GDPR

June 2023

To all applicants,

Thank you for your interest in Alasco. In accordance with the provisions of Art. 13 / 14 and the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data provided by you as part of the application process and, if applicable, collected by us, and your rights in this regard. In order to ensure that you are fully informed about the processing of your personal data as part of the application process, we ask you to take note of the following information.

1. Name and contact details of the responsible party

Responsible for the processing of your personal data in the context of the present contact is the

Alasco GmbH
Leopoldstr. 21
80802 Munich

E-mail: legal@alasco.de
Telephone: +49 (0) 89 248867750

Website: https://www.alasco.de/

2. Contact details of the data protection officer

The designated data protection officer is

DataCo GmbH
Dachauer Str. 65
80335 Munich
Tel.: +49 (0) 89 7400 458 40
E-mail: datenschutz@dataguard.de
Website: www.dataguard.de

3. Categories of personal data

As part of the application process, we only process data that is related to your application. This can be the following personal data about you.

Application via the applicant portal or sending documents by e-mail:

  • Personal master data (e.g. title, first name, surname, date of birth)
  • Address data (e.g. street, house number, postcode, city, country)
  • Contact data (e.g. mobile phone number, e-mail address)
  • Skills (e.g. language skills, additional skills)
  • Application or profile data (e.g. cover letter, CV, references, earliest starting date, desired job, desired locations, salary expectations, how you became aware of us)
  • Details of contact persons for a reference; existence of your consent to contact references named by you and, if applicable, data from correspondence with these references
  • Information on current remuneration and performance benefits
  • Data on areas of interest
  • Link to professional networks, such as XING or LinkedIn profile
  • Bank details for travel expenses, if applicable
  • Profile picture
  • Your consent to be included in the applicant and/or talent pool
  • Your consent to the forwarding of your profile to us by a recruitment agency or a contract between you and the recruitment agency.

When accessing and using the applicant portal:

  • IP address
  • Information about the browser type and its version
  • The operating system of the terminal device
  • Your internet service provider
  • Date and time of access
  • Websites that you access via our website, cookie data (e.g. pseudonymous cookie ID, length of stay on our applicant portal, page views, movement via links)
  • Content shared by you, if applicable

We process personal data that we receive from you digitally / by e-mail / via LinkedIn or that you send us via https://www.alasco.de/en/career/ in the course of contacting you or submitting your application.

4. Purposes of the processing and its legal basis

Your personal data will be processed for the following purposes:

We do not collect sensitive data (so-called special categories of personal data relating to racial or ethnic origin, physical or mental health or condition, trade union membership, offences committed or alleged to have been committed and related legal actions) for the processing of your application and the selection of our employees. We ask that you do not submit such information with your application. If you do, we will take this as consent to process this data as part of the application process. The data will not be considered in the selection process.

If you do not provide us with the personal data we need to recruit, establish employment or fulfil our obligations as an employer, we may not be able to consider your application or fulfil our obligations as a potential future employer.

5. Recipients or categories of recipients of the personal data

In the course of processing your personal data, we may disclose your personal data to the following recipients:

  • Within our company, exclusively to the departments and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest
  • Human resources department incl. external employees / freelancers
  • (Order) processors

Your personal data is processed on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of internet services and providers of applicant management systems and software.

Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if we have your consent.

6. Transfer of personal data to a third country

In principle, personal data collected and generated during the provision of relevant products and services is stored on our servers in the European Union. However, as the providers of our software solutions, among others, offer their products and/or services based on available resources and servers worldwide, your personal data may be transferred to or accessed from other jurisdictions outside the European Union and the European Economic Area. In particular, personal data is transmitted to the third country USA within the meaning of Art. 15 (2) GDPR. In order to ensure the continued existence of the necessary level of protection when data is transferred to a third country, contractual measures are agreed for this purpose. The software provider has its registered office in the United States of America, which has not been recognised as providing an adequate level of data protection. In order to ensure appropriate guarantees for the protection of the transmission and processing of personal data outside the EU, data transmission to and data processing by our service providers is carried out on the basis of appropriate guarantees pursuant to Art. 46 et seq. GDPR, in particular by the conclusion of so-called standard data protection clauses pursuant to Art. 46 (2) (c) GDPR.

7. Duration of the storage of personal data

We store your personal data for as long as is necessary to make a decision about your application.

If an employment relationship between you and us does not arise, your personal data will be deleted from the system six months after the end of the process.

If an employment relationship arises between you and us, we may process the personal data already received from you for the purposes of the employment relationship in accordance with
§ 26 (1) of the BDSG if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations arising from a law.

8. Data subject rights

You have the following rights under the General Data Protection Regulation:

  • If your personal data is processed, you have the right to obtain information from the responsible party about the data stored about you (Art. 15 GDPR).
  • If inaccurate personal data is processed, you have the right to rectification (Art.16 GDPR).
  • If the legal requirements are met, you may request the deletion or restriction of processing (Art. 17 and 18 GDPR).
  • If you have consented to the data processing or if there is a contract for data processing and the data processing is carried out using automated procedures, you may have the right to data portability (Art. 20 GDPR).
  • If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
  • Furthermore, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA). You can reach them at

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel: +49 (0) 981 180093-0
Website: https://www.lda.bayern.de/de/index.html

If the legal requirements are met, you may, for reasons arising from your particular situation, object at any time to the processing of personal data relating to you, which is based on Art. 6 (1) (e) or (f) GDPR, lodge an objection (Art. 21 GDPR).

Right of revocation for consent
If you have consented to the processing of your personal data by the responsible party, you can revoke your consent at any time for the future. In this case, the lawfulness of the data processing that took place until the revocation will not be affected.

We reserve the right to make changes to this data protection information at any time. The data protection information is updated regularly and all changes are automatically published on our website.