Privacy Applicant

Information on data protection for applicants

With the following information we would like to give you an overview of the processing of your personal data by us, as part of the application process and the protection of your personal data and your rights under data protection law. The general data protection information, which you can find here, also applies.

responsibilities

Responsible for data processing is:

classmarkets GmbH

Ziegelstrasse 29, 10117 Berlin

Em.Mail: recruiting[at]classmarkets.com

Phone: 030 549 05 80 10

Our data protection officer can be contacted by e-mail at privacy-contact[at]classmarkets.com or by post at our postal address. In the latter case, please mark the envelope "Attn: Data Protection Officer".

1. Origin of Data

We process personal data that we have received from you or that we have obtained about you as part of the application process. In addition, we process - insofar as this is necessary for the decision on the establishment of the employment relationship - personal data that we obtain from publicly accessible sources (e.g. Internet) in a permissible manner.

2. Data Categories

We process the following of your personal data:

Personal details (e.g. first name, surname, address and other contact details, date of birth, place of birth, nationality) Family data (e.g. marital status, information about children) Religious affiliation Health data (e.g. severe disability) Information on qualifications, professional career.

3. Purposes and legal basis of data processing

We process the personal data you provide as part of an application exclusively for the purpose of selecting applicants in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):

3.1 to fulfill contractual obligations (Article 6 paragraph 1 lit. b GDPR in conjunction with Article 88 GDPR, Section 26 paragraph 1 sentence 1 BDSG).

The processing of your personal data takes place to decide on the establishment of an employment relationship.

3.2 Based on your consent (Article 6 paragraph 1 lit. a GDPR in conjunction with Article 88 GDPR, Section 26 BDSG)

If you have given us your consent to process personal data for specific purposes (e.g. storage in our pool of applicants), the legality of this processing is given on the basis of your consent. You can revoke the consent you have given us at any time. A short message to our above contact details is sufficient. The revocation of consent is effective for the future and does not affect the legality of the data processing that took place up to the point of revocation.

4. Recipients of your personal data

We only transfer your personal data to third parties if this is permitted by law or if you have given your consent in advance. Within our company, those departments that need your data to fulfill our contractual and legal obligations (e.g. potential supervisors, HR department, works council, representatives for severely disabled persons) have access to your data. Service providers commissioned by us (perbit GmbH) can also receive your data, e.g. service providers whom we commission within the framework of order processing relationships.

5. Storage of your personal data

In the event that the application results in an employment relationship, your personal data will be transferred to the personnel file. If an application is rejected, the data will be deleted by us six months after the rejection of an application. If the data processing is based on your consent, the personal data will be deleted as soon as your consent is revoked for the future.

6. Data transfer to a third country or to an international organization

For certain tasks, we commission service providers who usually also commission service providers who may have their registered office, parent company and/or data center in a third country. In these cases, the service providers are obliged to comply with the data protection level of the DS-GVO in addition to our instructions through the agreement of the EU standard contractual clauses.

6.1 Special notes on conducting job interviews & processing technical tasks with Zoom, Google Meet & Slack

We would like to inform you below about the processing of personal data in connection with the use of "Zoom" or "Google Meet" and "Slack".

purpose of processing

We use the tools "Zoom" or "Google Meet" as well as "Slack" to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: "online meetings"). These tools are used in the recruiting of classmarkets GmbH. "Google Meet" or "Zoom" can be used to conduct the interview after consultation with the applicant. This is particularly the case due to the pandemic or when discussions cannot be carried out on site due to great physical distance. In order to complete the technical test task, which may be necessary for some positions is provided, the "Slack" tool is used to make the file available and to answer possible questions from the applicant in the chat.

"Zoom" is a service of Zoom Video Communications, Inc., which is based in the United States.

"Google Meet" is a video conferencing service provided by Google Ltd, which is based in the USA.

"Slack" is a web-based instant messaging service provided by Slack Technologies Inc., which is based in the USA.

Responsible

classmarkets GmbH is responsible for data processing directly related to the implementation of "online meetings".

Note: If you call up the "Zoom", "Google Meet" or "Slack" websites, the respective providers of "Zoom", "Google Meet" and "Slack" are responsible for data processing. Accessing the website is only necessary to use "Zoom", "Google Meet" or "Slack" in order to download the software for using "Zoom", "Google Meet" or "Slack".

You can also use "Zoom" if you enter the respective meeting ID and, if necessary, other access data for the meeting directly in the "Zoom" app.

You can use Slack if you log in to the specified workspace with your email address.

If you do not want to or cannot use the apps, you can also use "Zoom", "Google Meet" and "Slack" via a browser version, which you can also find on the respective websites. If conducting the interview using the aforementioned tools is not an option for you, we ask that you notify us in good time so that another technical alternative can be determined.

Which data are processed?

Various types of data are processed when using “Zoom”/ “Google Meet” and “Slack”. The scope of the data also depends on what information you provide before or when you participate in an "online meeting". Depending on the tool, not all information is always requested, so it may vary depending on the tool.

The following personal data are subject to processing:

User information: first name, last name, phone (optional), email address, password (if "single sign-on" is not used), profile picture (optional),

department (optional)

Meeting metadata: topic, description (optional), participant IP addresses, device/hardware information.

When dialing in with the telephone: information on the incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.

Text, audio and video data: You may have the option of using the chat, question or survey functions in an "online meeting". In this respect, the text you enter will be processed in order to display it in the "online meeting" and, if necessary, to log it. In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera on the end device are processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via “Zoom”/ “Google Meet”/ “Slack”.

In order to take part in an "online meeting" or to enter the "meeting room", you may at least have to provide information about your name.

scope of processing

We use "Zoom"/ "Google Meet" and "Slack" to conduct "online meetings". If we want to record "online meetings", we will inform you transparently in advance and - if necessary - ask for your consent. The fact of the recording will also be shown to you in the “Zoom” app and on “Google Meet”. Recording is not possible with "Slack". The recording function for “Google Meet” has been deactivated.

If necessary for the purposes of logging results of an online meeting, we will log the chat content. However, this will usually not be the case.

In the case of webinars, we can also process the questions asked by webinar participants for the purpose of recording and following up on webinars.

If you are registered with "Zoom" as a user, reports on "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored on "Zoom" for up to one month.

If you are registered as a "Google Meet" user, reports about "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, polling function in webinars) can be uploaded to "Google Meet" for up to one month deletion are stored.

Automated decision-making within the meaning of Art. 22 GDPR is not used.

Legal bases of data processing

Insofar as personal data is processed by employees of classmarkets GmbH, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of "Zoom"/ "Google Meet" and "Slack", personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component when using "Zoom"/ "Google Meet" and be "Slack", Art. 6 Para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, our interest is in the effective implementation of "online meetings".

Otherwise, the legal basis for data processing when conducting "online meetings" is Art. 6 (1) (b) GDPR, insofar as the meetings are held within the framework of contractual relationships.

If there is no contractual relationship, the legal basis is Article 6 Paragraph 1 Letter f) GDPR. Here, too, we are interested in the effective implementation of "online meetings".

Recipients / disclosure of data

Personal data processed in connection with participation in "online meetings" are generally not passed on to third parties unless they are intended to be passed on. Please note that content from "online meetings" as well as from face-to-face meetings is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Other recipients: The providers of "Zoom", "Google Meet" and "Slack" necessarily receive knowledge of the above data, insofar as this is provided for in the context of our order processing contracts with "Zoom", "Google" and "Slack".

Data processing outside the European Union

"Zoom", "Google Meet" & "Slack" are services provided by a provider from the USA. Processing of the personal data also takes place in a third country. We have concluded an order processing contract with the provider of “Zoom”, “Google Meet” and “Slack”, which meets the requirements of Art. 28 GDPR.

An appropriate level of data protection is guaranteed by the conclusion of the so-called EU standard contractual clauses.

More information about all services can be found here:

Zoom: https://explore.zoom.us/de/privacy/

Google Meet: https://support.google.com/meet/answer/9852160?hl=de#zippy=

Slack: https://slack.com/intl/de-de/trust/compliance/gdpr

Data Protection Officer

We have appointed a data protection officer.

Your rights as a data subject

You have the right to information about the personal data concerning you. You can contact us at any time for information.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require evidence from you that proves that you are the person you say you are.

Furthermore, you have the right to correction or deletion or to restriction of processing, insofar as you are legally entitled to this.

Finally, you have the right to object to the processing within the framework of the legal requirements.

A right to data portability also exists within the framework of data protection regulations.

deletion of data

We generally delete personal data when there is no need for further storage. A requirement can exist in particular if the data is still required in order to fulfill contractual services, to be able to check and grant or ward off warranty and, if necessary, guarantee claims. In the case of statutory storage obligations, deletion can only be considered after the respective storage obligation has expired.

Right to lodge a complaint with a supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.

Changes to this privacy notice

We revise this data protection information in the event of changes in data processing or for other reasons that make this necessary. You can always find the current version on this website.

7. Your Rights

To exercise your rights to information, correction, deletion, restriction of processing, data transferability and objection according to Art. 15 to Art. 21 DS-GVO, a short message to our contact details mentioned above is sufficient. If, in exceptional cases, we process your personal data on the basis of your consent, you have the right to revoke your consent at any time for future data processing (Art. 7 Para. 3 DS-GVO). A short message to our contact details given above is sufficient for this.

You also have the right, in accordance with Art. 77 GDPR, to complain to a data protection supervisory authority if you believe that we are not processing your personal data lawfully. The address of the Berlin data protection supervisory authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstrasse 219, 10969 Berlin,

Email: mailbox@datenschutz-berlin.de

If you have any questions, please feel free to contact us at any time.

Stand: October 2022