DATA PROTECTION DECLARATION FOR APPLICATIONS
We are pleased that you are interested in applying for a position with us. Below, we explain how we process your personal data in connection with your application and provide additional relevant information.
1. who is responsible for the processing of your personal data?
KPM VHV, Berlin (hereinafter referred to as “we”), is the data controller within the meaning of the EU General Data Protection Regulation (“GDPR”).
2. contact details of the data protection officer
For any questions regarding the processing of your personal data or the exercise of your rights under the GDPR, please contact our Data Protection Officer, who can be reached at:
WS Datenschutz GmbH
Dircksenstr. 51
10178 Berlin
kpm-berlin@ws-datenschutz.de
3. for what purposes and on what legal basis do we process personal data?
We process personal data about you for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with. § Section 26 (1) BDSG-new.
Furthermore, we may process personal data about you if this is necessary to defend against legal claims asserted against us in the application process. The legal basis for this is Article 6(1)(f) GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If there is an employment relationship between you and us, we may process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG-new if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).
4 What categories of personal data do we process?
We process data in connection with your application. This may include general personal data (such as name, address and contact details), information about your professional qualifications and schooling or information about further professional training or other information that you provide to us in connection with your application. We may also process job-related information that you have made publicly available, such as a profile on professional social media networks.
5. recipient of the personal data
Upon receipt of your application, your application data will be reviewed by the HR department and the relevant managers. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. Within the company, only those persons have access to your data who need it for the proper course of our application procedure.
6. is the transfer to a third country intended?
Your applicant data will generally not be transferred to a third country. Exceptionally, this may be the case with certain programs if we use them for applicant management.
7 How long will your data be stored?
We will retain your personal data for as long as necessary to make a decision regarding your application. If an employment relationship between you and us is not established, we may continue to retain your data to the extent necessary to defend against potential legal claims. Your application documents will be deleted two months after notification of the rejection decision, unless longer retention is required due to legal disputes.
8 What rights do you have?
As a job applicant with us, you have the following data protection rights, depending on the specific circumstances of your case. To exercise these rights, you may contact us or our Data Protection Officer at any time using the contact information provided in Sections 1 and 2:
8.1 Information
You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and authorized persons and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration.
8.2 Rectification, erasure or restriction of processing
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
8.3 Right of objection
If your personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing of this data at any time on grounds relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
8.4 Right of withdrawal
If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do so, you can contact us or our data protection officer at any time using the contact details given above.
8.5 Right to erasure
You have the right to request that we delete your personal data without delay, and we are required to delete your personal data without delay if any of the following applies: • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You object to the processing in accordance with point 8.3 above and there are no overriding legitimate grounds for the processing.
- The personal data was processed unlawfully.
- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
- This does not apply if the processing is necessary:
- for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject.
- for the assertion, exercise or defense of legal claims.
8.6 Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if any of the following conditions apply: You contest the accuracy of your personal data, for a period that allows us to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use; we no longer need the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims; or you have objected to the processing in accordance with section 8.c above, as long as it has not yet been determined whether our legitimate grounds override yours. If processing has been restricted pursuant to this subsection (e), such personal data—apart from its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State. If you have obtained a restriction on processing, we will notify you before the restriction is lifted.
8.6 Right of appeal
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
9. necessity of the provision of personal data
The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract of employment with us. This means that if you do not provide us with any personal data when applying, we will not enter into an employment relationship with you.
KPM VHV, Berlin, April 20, 2026