Information obligation according to Art. 13, 14 GDPR for the collection of personal data.
For reasons of readability, the masculine form has been chosen for the aforementioned personal designations; however, the information refers to members of all genders. With regard to subcontractors, it is assumed for the applicability of these data protection notices that personal data, e.g., of a managing director, is actually processed at all.

1. Name and contact details of the joint controllers

Comites – perfect placements and cardea Life Science as joint controllers within the meaning of Art. 26 GDPR
represented by the Managing Directors
Stephanie Schorp and Dr. Andreas Föller
Münchner Straße 113
85774 Munich-Unterföhring

Purposes of data processing, data categories, data sources, and the legal basis for processing

2.1. Purposes of data processing:

We, as well as third parties commissioned by us, process personal data,

• to contact you (again) as an interesting candidate or based on your initiative and to initiate a possible application process (recruiting, acquisition measures)
• to contact you as an interesting contractual partner or on your initiative and to initiate a business relationship or a specific contractual relationship (contracting)
• to be able to carry out an application process, i.e., in particular to send your candidate profile to our customers and any upstream MSP providers (= Managed Service Providers) on the customer side and to coordinate and conduct customer interviews together with you (recruiting)
• to be able to present you as a person or your company to our customers in the area of contracting (including freelance placement)
• to conduct application and, if applicable, briefing interviews, including via video call (Microsoft Teams)
• to be able to effectively negotiate and conclude a contract, i.e., in particular to conduct contract negotiations, create draft contracts using various software tools, etc. (recruiting, HR, sales)
• to be able to execute a concluded contract (HR, accounting)
• to conduct surveys to ensure the legally accurate execution of our contracts and to constantly improve ourselves as a service provider (execution of contractual relationship)

2.2. The following data categories are relevant:

• Salutation
• First and last name
• regarding subcontractors: Company name
• Place of residence
• regarding subcontractors: Registered office
• Telephone/mobile number
• Date of birth
• Email address
• Salary expectations (hourly rate)
• Vocational training
• School leaving certificate
• Professional experience
• Nationality (if applicable)
• Availability, flexibility (if applicable)
• Photo/face in the context of a video call (if applicable)
• Other information in the CV, references, certificates (if applicable)

2.3. Data sources

• You yourself, if you have proactively provided us with your personal data for the purpose of contacting you (business cards, etc.)
• You yourself, if and to the extent that you have provided us with your personal data yourself in the course of contacting (acquisition) or in the course of the application process
• You yourself, if and to the extent that you are already one of our customers and we have received your personal data from you in the context of the customer contract relationship also for the purpose of initiating candidate contract relationships
• If applicable, any contact persons personally known to you in your company
• If applicable, other third parties such as credit agencies or address service providers from whom personal data is legally transmitted to us
• Publicly accessible (job) portals on which you have made your personal data public yourself
• Other publicly accessible sources, such as: debtor registers, land registers, commercial and association registers, the press, obtained permissibly or legitimately transmitted by other third parties (a credit agency or an address service provider)

2.4. Categories of data recipients

• Authorities to fulfill legal reporting obligations
• IT service providers to maintain our IT infrastructure
• Debt collection service providers and lawyers to collect receivables and enforce claims in court
• If applicable, service providers who provide and maintain our applicant pool
• Mutually customers / applicants / subcontractors and MSP

2.5. Legal bases

2.5.1. Data processing based on our legitimate interest Art. 6 para. 1 sentence 1 lit. f) GDPR

We process your personal data in the course of the aforementioned acquisition measures based on our primary legitimate interest in contacting and retaining you as a potential candidate and contractual partner for our customer projects to be specified in each case. The same applies to the temporary transfer and storage of your personal data in our applicant pool for the period that a specific acquisition measure, with an attached recruiting process, lasts and we may assume your concurrent interest in being contacted for any positions.

Data processing for the performance of the contract to be concluded or concluded between you and us (Art. 6 para. 1 sentence 1 lit. b) GDPR)

We process your personal data, naturally also for the purpose of initiating a contract, i.e., on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR, if in individual cases a check/verification of your details in the CV is required, or in the case of providing a reference is even desired by you, by inquiring at former schools, (technical) colleges, and former employers—provided the data processing of the persons concerned there is permissible under data protection law.
In the event of the conclusion of a service or work contract with you as a freelancer, we process your data for the execution of the service or work contract. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) Var. 1 GDPR.

2.5.3. Data processing based on your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)

If and to the extent that you agree to us continuing to contact you even after a specific acquisition measure, i.e., in particular to contact you by telephone and to write to you by post or via email, the legal basis for this is the declaration of consent you have given us, and thus Art. 6 para. 1 sentence 1 lit. a) GDPR.
In addition, based on your consent, we may contact you for the duration of the storage of your data to conduct internal surveys, as well as for direct marketing, as described in the declaration of consent submitted by you. The legal basis in each case is Art. 6 para. 1 sentence 1 lit. a) GDPR.

3. Obligation to provide personal data

The provision of personal data is necessary for the execution or conclusion of the contract (employee leasing contract, service or work contract) at comites – perfect placements / cardea Life Science. Failure to provide this would mean that the application process could not be carried out or a contract could not be concluded.

4. Automated decision-making including profiling

No profiling measures are carried out by the joint controllers.

5. Data transfer to a third country

Data transfers to countries outside the EU and the European Economic Area (“third countries”) occur within the scope of the administration, development, and operation of IT systems.
The transfer only takes place in the following cases:

• the transfer is generally permissible because a legal permission is fulfilled or you have consented to the data transfer and
• the special requirements for a transfer to a third country are met.

6. Storage duration

Personal data is stored until the purpose pursued at the time of collection has been achieved. Personal data may also be stored for the performance of a task carried out in the public interest or in the exercise of official authority. In addition, personal data may also be stored for the duration of the exercise or defense of legal claims.
Documents from rejected applicants are kept for up to six months on the basis of the General Act on Equal Treatment (AGG) and the Code of Civil Procedure (ZPO).
If consent has been given for the storage of the application in an applicant pool, storage takes place beyond this for the period of validity of this declaration of consent.
In the event of the conclusion of an employment contract, personal data is stored for the duration of the employment relationship. The same applies to service or work contracts with freelancers.
Personal data may also be stored for the performance of a task carried out in the public interest or in the exercise of official authority. In addition, personal data may also be stored for the duration of the exercise or defense of legal claims.
After termination of the employment relationship, the personnel file is generally kept for up to three years until the end of the statutory limitation period from the date the claim becomes due. Individual documents in the personnel file (e.g., wage accounts, exemption certificates) are kept for a period of up to six years (in accordance with the Income Tax Act and the Tax Code) or up to ten years (in accordance with the Commercial Code).

7. Data subject rights

Comites – perfect placements and cardea Life Science, Münchner Straße 113, 85574 Munich-Unterföhring, are jointly responsible for the processing of your data, unless otherwise stated. You can request information from us at any time about the data stored about you and its correction in the event of errors. Furthermore, you can request the restriction of processing, the portability of the data provided by you to us in a machine-readable format, or the deletion of your data—as far as it is no longer required.
In addition, you have the right at any time to object to the use of your data based on public or legitimate interests. Insofar as we process your data on the basis of consent given by you, you can revoke this consent at any time with effect for the future. From the receipt of your revocation, we will no longer process your data for the purposes stated in the context of the consent. Please send your revocation or an objection to:
Comites – perfect placements
Münchner Straße 113
85574 Munich-Unterföhring
info@comites.com

8. Right to lodge a complaint with a supervisory authority

In addition, you can contact a supervisory authority with a complaint at any time. For us, the Bavarian State Office for Data Protection Supervision, P.O. Box 606, 91511 Ansbach, is generally responsible. Alternatively, you can contact the supervisory authority responsible for your local area.

Are you an interested party or a customer? Then you can find our privacy policy here.

More details on data processing on our websites can be found in our general privacy policy here.