Data protection statement for clients and candidates
With this document, we seek to fulfil our duty to provide information under Art. 13 General Data Protection Regulation (GDPR) and to provide you with comprehensive information in relation to the collection of your data:
RAU |Consultants GmbH, Friedenheimer Brücke 21, 80639 Munich, Germany,
Phone: +49 89 1895520-0
is the controller within the meaning of the GDPR
Data Protection Officer: Ms. Kathrin Erhard, phone: +49 89 1895520-15,
2. Purpose and legal basis for data processing
Your data are processed in order to fill positions or interim mandates.
As a candidate or interim manager, you provide us with your data in the context of your application so that we can match you with current projects and/or so we can contact you in the future if any suitable positions become available. This is our core business and our area of expertise.
This core business also includes providing information about current job offers and other related news.
All data you have provided and/or will provide in the context of your application will be stored in our database on our own company server. We employ suitable technical and organisational measures to ensure that access to your data is restricted to authorised persons who are responsible for processing this data and who will handle your data correctly and confidentially.
We will ask you for your express consent before collecting/processing your data. If you apply via our home page, you can give your consent immediately; for all other types of applications we will contact you via mail after receiving your application.
The legal basis for this is Art. 6 para. 1 lit. a EU GDPR.
In order to process your application, we will store your personal data (name, address, place and date of birth, contact details) as well as information on your professional career, after you give your consent. We will ask you for additional information such as your notice period, your willingness to relocate and your salary expectations if and when we require it.
If your profile matches the requirements of our clients, you will receive further information about the position, enabling you to decide whether you want to pursue the project further.
You will have the opportunity to learn more about the position through a personal discussion with our consultants. During this discussion, our consultants will take notes which are important for the further phases of the process.
Should you consent to our staff disclosing your data, our employees will then forward your documents/data to our client.
We of course ask our clients to comply with data protection rules and legislation in handling your data.
References from your previous employers and superiors will only be requested with your agreement and results from these talks may be recorded and stored.
We also protect the data of our clients through appropriate technical and organisational measures. We only store the data required for fulfilling contractual provisions and obligations. The legal basis for this is Art. 6 lit. b GDPR.
This legal basis also applies for our JobMail, which we will send you on a regular basis to provide you with information about open positions matching your pre-defined search profile.
Art. 6 para. 1 lit. c GDPR is the legal basis for cases where we are legally obligated to process data.
If the data processing is required to protect a legitimate interest of our company or a third party, and if such legitimate interest overrides the interests, fundamental rights and freedoms of the data subject, then Art. 6 para. 1 lit. f GDPR is the applicable legal basis.
3. Additional recipients of your data
We will not forward your data to our clients without your express consent.
In order to successfully place you in a position, we will provide our clients with your profile including the application documents, as soon as we receive your express consent.
We also use data processors, such as the operators of our database that may receive personal data. We have concluded appropriate agreements with these recipients to ensure the security of your data.
We do not disclose your data to other third parties (e.g. for advertising purposes).
4. Storage period
After your consent expires, you will be asked to declare your consent anew. You can of course withdraw your consent at any time.
5. Rights of the data subjects
Once we are in possession of your data, you gain certain rights, about which we will now inform you: Should you wish to contact us in order to exercise these rights, please do so via email@example.com.
a) Access right pursuant to Art. 15 GDPR
You can ask us at any time to provide confirmation in which we inform you about which of your data we have stored. For your protection, we will verify your identity before providing you with this information.
b) Right to rectification pursuant to 16 GDPR
Should our stored data be incorrect or incomplete, you can at any time request that these data be corrected, completed and updated.
c) Right to erasure pursuant to Art. 17 GDPR
You can demand that your data be “erased” from our database. We will then block your data in a timely fashion, so that you will no longer be contacted, and we will proceed to erase the data within a reasonable time period. Please understand that for evaluation purposes, your dataset will remain linked to projects in which you participated. However, this is done on an anonymous basis, i.e. without personal data files or similar.
d) Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to restrict the processing of your data at any time. Please note however, that depending on the type and scope of the restriction, we may be unable to carry out our recruitment assignment in this case.
e) Right to object pursuant to Art. 21 GDPR
You have the right to object to the processing of your data at any time or to withdraw your consent to such processing.
f) Right to data portability pursuant to Art. 20 GDPR
You have the right to require us to transfer your data to another controller at any time. We will provide the data either to you or the recipient directly, in an appropriate form.
g) Right to lodge a complaint with a supervisory authority
In the event of any infringement of the data protection policies and laws on our part, you have the right to lodge a complaint with the supervisory authority under whose jurisdiction we fall:
Bayrisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany
We reserve the right to change this data protection statement in accordance with data protection rules, if required. You can always view the valid and current version on our homepage or request it from us.
Thank you for your confidence in us!
By agreeing to this Privacy Statement, you agree to the storing and use of your data; you may revoke your consent at any time. Please email your withdrawal of consent to firstname.lastname@example.org. For questions relating to data privacy, please contact email@example.com.