We are pleased that you would like to apply for a job with us. In the following, we explain how we process your personal data in the context of an application and provide further relevant information in this context.

1. who is responsible for the processing of your personal data?

The fairforce.one System GmbH, Weißenfelser Str. 65J in 04229 Leipzig (hereinafter referred to as "we") is the controller within the meaning of the EU General Data Protection Regulation ("GDPR").

2. data protection officer

For all questions relating to the processing of your personal data and the exercise of your rights under the GDPR, you can consult our data protection officer, who can be contacted at

Michael Nachtigall
c/o DS Compliance GmbH
Carlsplatz 24
40213 Düsseldorf
Tel: 0211 942 588 - 24
E-mail: m.nachtigall@wecomply.de

reach.

3. for what purposes and on what legal basis do we process personal data?

We process personal data about you for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is § 26 para. 1 in conjunction with para. 8 sentence 2 BDSG.

Furthermore, we may process personal data about you if this is necessary for the defence of legal claims asserted against us in the application process. The legal basis for this is Article 6(1)(f) GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

If there is an employment relationship between you and us, we may process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation arising from a law or a collective agreement, a works or service agreement (collective agreement).

4 What categories of personal data do we process?

We process data in connection with your application. This may include general personal data (such as your name, address and contact details), details of your professional qualifications and school education or details of further professional training or other information that you provide to us in connection with your application.

We may also process work-related information that you have made publicly available, such as a profile on professional social media networks.

5 What categories of recipients of data are there?

We may transfer your personal data to companies affiliated with us insofar as this is permitted within the scope of the purposes and legal bases set out in Section 3. Otherwise, personal data will be processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by host providers or providers of applicant management systems.

6. is the transfer to a third country intended?

A transfer to a third country is not intended.

7 How long will your data be stored?

We store your personal data for as long as is necessary for the decision on your application. If an employment relationship between you and us does not materialise, we may also continue to store data if this is necessary for the defence against possible legal claims. In this case, the application documents will be deleted seven months after notification of the rejection decision, unless longer storage is required due to legal disputes.

8 What rights do you have?

As an applicant with us, you have the following data protection rights, depending on the individual situation, which you can exercise at any time by contacting us or our data protection officer using the details provided in sections 1 and 2:

a. Information

You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and authorised persons and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration;

b. Rectification, erasure or restriction of processing

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c. Right of objection

If your personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing of this data at any time on grounds relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

d. Right of cancellation

If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do so, you can contact us or our data protection officer at any time using the details provided above.

e. Right to cancellation

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:

This does not apply if the processing is necessary:

f. Right to restriction of processing

You have the right to demand that we restrict processing if one of the following conditions is met:

Where processing has been restricted in accordance with this point (e), such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained restriction of processing, we will inform you before the restriction is lifted.

g. Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

9. necessity of the provision of personal data

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract of employment with us. This means that if you do not provide us with any personal

data in an application, we will not enter into an employment relationship with you.