Privacy policy

The following information provides you with an overview of how we handle your personal data (hereinafter referred to as “data”) and your data protection rights. The specific data we process from you is determined by the application process.
When applying via our online job market:
If you visit the websites of Lanserhof Management GmbH as part of the application process, the data protection declaration at https://lanserhof.com/de/datenschutzerklaerung/ also applies.

Data protection information in connection with your application
– Who is responsible for data processing and who can I contact?
– What data do we use and where does it come from?
o Applying for a job at Lanserhof Management GmbH via the contact form
o Applying for a job via LinkedIn
– For what purpose do we process your data and on what legal basis?
– Who receives your data?
– Will your data be transferred to a third country?
– How long will the personal data be stored?
– What data protection rights can you assert as a data subject?
– Are you obliged to provide your data?
– To what extent is there automated decision-making or profiling?
– Right to object

Art. 13 para. 1 lit. a GDPR
The controller responsible for data processing is
Lanserhof Management GmbH
New ABC-Str. 8
20354 Hamburg
Hamburg, Germany
Managing Director: Dr. jur Christian Harisch
Commercial register: Munich Local Court

You can contact the data protection officer of Lanserhof Management GmbH at datenschutz@lanserhof.com .

Your personal data is collected directly from you as part of the application process. We only collect and process data related to your application. These are in particular
– general personal data (master data such as first name, surname, name affixes)
– Contact details (e.g. private address, (mobile) telephone number, e-mail address)
– Information on your professional qualifications (in particular school education, vocational training, previous activities, information on further professional training, certificates, other qualifications)
– Other data from the entire application process (e.g. cover letter, questionnaires, interviews)
– Profile information from job-related social media (e.g. LinkedIn, Xing)
– Notes about applicants
– Work results as part of the practical day
– Other information that you provide to us in connection with your application.
–

If you have also voluntarily provided special categories of personal data (such as health data, religious affiliation, degree of disability) in the letter of application or during the application process, processing beyond storage will only take place if you have consented to this or if a legal permission justifies this.
In addition to the contact form on our application portal, you can also apply for a job via email or LinkedIn.

Art. 13 para. 1 lit. c GDPR
For the fulfillment of contractual obligations
We collect and process your data in accordance with the statutory provisions, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes
– to carry out and process the application procedure and to assess the extent to which you are suitable for the employment relationship in question or other vacant positions (Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG)
– if an employment relationship is established between you and us: for the further processing of the data already received from you for the purposes of the recruitment process and for the implementation / termination of the employment relationship (Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG)

Due to legal requirements or in the public interest
– To fulfill legal obligations or official requirements. Processing also takes place in order to fulfill our legal obligations.

SG)

Due to legal requirements or in the public interest
– To fulfill legal obligations or official requirements. The processing also takes place in order to fulfill our legal obligations as an employer, in particular in the area of tax and social security law, as well as to fulfill control and reporting obligations (Art. 6 para. 1 lit. c and lit. e GDPR in conjunction with § 26 BDSG).
– If you specify a degree of disability, we are obliged under SGB IX to forward this data internally to the representative body for severely disabled employees. In this case, the legal basis is § 26 para. 3 sentence 1 BDSG in conjunction with the corresponding standards from SGB IX.

If necessary, we process your data to protect our legitimate interests or those of third parties (Art. 6 para. 1 lit. f) GDPR), in particular
– anonymized processing for our own statistical purposes (e.g. studies on applicant behavior)
On the basis of consent
– If it is clear from your letter of application or CV that you wish the processing of disclosed personal data, including special categories (such as information on voluntary activities in a political party or religious organization), for which there is no legal permission, we assume that you consent to the processing. In this case, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR, possibly in conjunction with Art. 9 para. 2 lit. Art. 9 para. 2 lit. a GDPR. You can withdraw your consent at any time, even during the application process.
– If you enter personal data in your letter of application or CV that we are not permitted to collect ourselves, we will assume that you have given your consent to the storage of this data on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR and will not use it for other purposes. You can withdraw your consent at any time, even during the application process.

Contact by e-mail or telephone Telephone interview / video interview

As part of the application process, we will contact you regarding your application, in case of queries or to arrange interviews and, if necessary, to arrange a practical day. For this purpose, we will use the contact details you have provided and contact you by e-mail or telephone. The job interviews and, if applicable, the internship day will take place regularly via the service providers named below; alternatively, job interviews can also be conducted by telephone. You will find information on the handling of your data in the following sections:
We use Rainbow from ALE International and WebEx from Cisco Systems (as telephone/video conferences) to conduct job interviews and the practical day with you. ALE International and Cisco Systems are responsible for the processing of data via Rainbow and WebEx (app or browser).
The scope of the data processed depends, on the one hand, on the information you provide yourself before and during participation in an online meeting and, on the other hand, on how you participate in the meeting.

The purpose of the data processing is to conduct the job interviews, the practice day and, if necessary, the exchange of data via the chat function. The legal basis is the implementation of pre-contractual measures, Section 26 para. 1 sentence 1 BDSG in conjunction with Art. 6 para. 1 GDPR.

Personal data processed in connection with participation in an online meeting will not be passed on to third parties unless they have been transmitted for the purpose of disclosure. We use service providers to process personal data on our behalf in order to conduct the online meetings. These companies are based in the USA. Please note the information in the section on third country transfers below with regard to the associated risks.

Inclusion in the application pool
In some cases, we may not be able to consider applicants for the advertised position. In some cases, we offer the possibility of inclusion in our application pool.
Such inclusion in the application pool only occurs if you voluntarily give us your consent to include you in the application pool. You will be informed of the duration of storage when your consent is obtained.
You can revoke your consent at any time for the future.

Art. 13 para. 1 lit. e GDPR
Within our company, those persons who need your data to fulfill the above-mentioned purposes, in particular for the decision on recruitment and to fulfill our pre-contractual/contractual and legal obligations, e.g. responsible managers, employees of the P&C department, will have access to your data.
As an employer, we already have legal obligations to pass on data in certain cases during the application process. In addition, we use selected service companies (processors) and vicarious agents of the categories listed below, who may have access to your data to the extent necessary and use it to fulfill the orders placed by us.
Under these conditions, recipients of your data may be

– Public bodies and institutions in the event of a legal or regulatory obligation,
– Third parties who process your data for their own purposes
o Payment service providers / banks
o Postal service companies
o Auditing companies / legal services companies
– Service companies (processors) / vicarious agents in the following areas
o Recruiting software
o Personnel management software
o Office applications
o Video telephony software

Art. 13 para. 1 lit. f GDPR

Lanserhof Management GmbH uses various service companies as processors for the aforementioned purposes in the context of recruitment. Some of these are based outside the European Union or the European Economic Area (EEA) or use corresponding service companies, e.g. for hosting purposes. Our contracts with the service providers provide for exclusive processing on servers in the EU. We have also agreed standard contractual clauses as a suitable guarantee.
Some service providers also have so-called approved rules of conduct (Binding Corporate Rules), which ensure that the company complies with European data protection standards.

Art. 13 para. 2 lit. a GDPR
We process and store your data as long as it is necessary for the fulfillment of the above-mentioned purposes, in particular for the decision on your application and your suitability for vacant positions. If an employment relationship between you and us does not materialize, we will delete your data 6 months after completion of the application process, unless statutory provisions prevent deletion or longer storage is required due to legal disputes or you have consented to longer storage.

Art. 13 para. 2 lit. b – d GDPR
As a data subject, you have the following rights
– in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein
– in accordance with Art. 16 GDPR, the right to demand the immediate rectification of incorrect or incomplete personal data stored by us
– in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest or for the establishment, exercise or defense of legal claims
– in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you; the processing is unlawful, but you refuse to delete it; we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

– in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller
– in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. The following supervisory authority is responsible for Lanserhof Management GmbH
– The Hamburg Commissioner for Data Protection and Freedom of Information

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction of processing or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact our company data protection officer.

Art. 13 para. 2 lit. e GDPR
As part of your application, you must provide the data that is required to carry out the application process and the suitability assessment or that we are legally obliged to collect. Without this data, we will not be able to carry out the application process and make a decision on the establishment of an employment relationship with you.

Art. 13 para. 2 lit. f GDPR
In principle, we do not use fully automated decision-making or profiling to establish, implement or terminate an employment relationship in accordance with Article 22 GDPR. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
If we process personal data as explained above in order to safeguard our legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are grounds relating to your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.