– Information pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR) –
Dear Applicant,
Below, we provide information regarding the processing of your personal data (Art. 4(2) GDPR) in connection with the application you have submitted to us.
1. Who is responsible for data processing and who can I contact?
The company within the Duvenbeck Group to which you have applied, together with
Duvenbeck Logistics Holding GmbH & Co.KG
Ruhrallee 7, 46395 Bocholt
Email:
You can reach our Data Protection Officer at the above mailing address, with the note “To the Data Protection Officer,” or at the email address
2. What data do we process, for what purpose, and on what legal basis?
- Application Process
- We process personal data that we receive from you as part of the application process. This includes, among other things, basic information (such as name, address, phone numbers and email address, date of birth, marital status, gender, nationality, etc.), health data if applicable, data regarding your education and vocational training, data regarding your non-work-related interests, data regarding the nature of past/current employment relationships, a photograph, and other data that you voluntarily provide to us during the application process. In general, Article 6(1)(b) of the GDPR serves as the legal basis for processing data for the purpose of deciding on the establishment, the establishment itself, and the performance of employment relationships.
You can submit your applications via the web portal. To do so, depending on the type of position you are applying for, you must provide your first and last name, your email address, your resume, and, if applicable, your phone number and place of residence. Last but not least, we also need this information—and any additional data—to respond to requests, questions, and feedback. The legal basis for processing is Article 6(1)(b) of the GDPR.
- Candidate Pool
- If your application is unsuccessful, you may be added to our applicant pool. Should a similar or otherwise suitable position become available, we may then contact you regarding it. The legal basis for this is the data subject’s consent to be included in the applicant pool pursuant to Article 6(1)(a) of the GDPR. You may revoke this consent to be included in the pool at any time.
- Pre-Employment Screening (PES)
As part of the application process, we conduct a check against international sanctions lists. This is done only if the application process was successful and we wish to send you an employment contrac . This check serves to ensure that there are no legal or regulatory obstacles that could prevent your hiring. In doing so, your personal data is compared with the relevant sanctions lists.
The legal basis for this is our legal obligations and legitimate interests in ensuring the integrity and security of our company, in accordance with Article 6(1)(c) and (f) of the GDPR.
3. What are the sources of the data?
We process personal data that we receive from you as part of the application process. We also receive applications from recruitment agencies.
4. Who receives my data?
Within the Duvenbeck Group, your data will only be shared with those departments responsible for preparing and conducting the application process. These include employees in the Human Resources department, the departments where a position is to be filled, managers, and potential supervisors.
In addition, the works council may receive the application documents.
To the extent that we use third-party service providers (so-called processors) to carry out and manage data processing operations, the provisions of the GDPR are complied with. Service providers who assist us in providing our services to you are:
- - Hosting providers
- - Email service providers
- - IT service providers (especially in the area of e-recruiting)
- Data destruction service providers
- Service providers for video conferencing, online meetings, webinars, and screen sharing
- Sanctions list verification service providers
In addition, On-apply GmbH supports us in operating the applicant tracking system. We have entered into a data processing agreement with this service provider to ensure that data processing is carried out in a lawful manner. You can find information on data protection at On-apply GmbH at https://www.onapply.de/rechtliche-angaben/datenschutzerklarung.
5. How long will my data be stored?
To the extent necessary, we process and store your personal data for the duration of the application process. If an employment relationship is established following the application process, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends upon the applicant’s receipt of a rejection notice. The data will be deleted no later than 6 months after receipt of the rejection notice. This does not apply if the processing and storage of your personal data is necessary in a specific case to assert, exercise, or defend legal claims (duration of a legal dispute).
In individual cases, certain data may be stored for a longer period (e.g., travel expense reports). The duration of storage is then determined by statutory retention requirements, such as those under the German Fiscal Code (6 years) or the German Commercial Code (10 years). Finally, the storage period is also determined by the statutory limitation periods, which, for example, under Sections 195 et seq. of the German Civil Code (BGB) can be up to thirty years, although the standard limitation period is three years.
If the application process has not been discontinued but your application remains of interest to us, we will ask you whether we may retain your application for future job openings.
6. Is data transferred to a third country or to an international organization?
Data is not transferred to third countries.
7. What data protection rights do I have?
Every data subject has the right to access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, and the right to data portability under Article 20 of the GDPR. To exercise the aforementioned rights, you may contact the controller (Section 1).
To the extent that the processing of your personal data is carried out to pursue our legitimate interests pursuant to Article 6(1)(f) of the GDPR, you may object to such processing in accordance with the legal provisions of Article 21 of the GDPR. The objection may be submitted in any form, including via
If you have given us your consent to collect your data, you may revoke it at any time without having to follow any specific procedure, including by contacting us at
In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) if you believe that the processing of your personal data is not lawful.
8. Am I required to provide data?
There is no legal or contractual obligation to provide data. As part of your application, you should only provide the personal data necessary for the acceptance and processing of your application. However, without this data, we will have to refuse to include you in the application process.
9. To what extent is automated decision-making used in individual cases?
- Our decision-making as part of the application process is not based on automated processing pursuant to Article 22 of the GDPR.