Data protection information for applicants (m/f/d)

1. Name and contact details of the controller

This privacy policy applies to data processing by:

Responsible: Communi AG

Address: Koellikerstrasse 13, 97070 Würzburg

E-mail address:

Phone: 0931 809912 80

2. Contact details of the data protection officer

You can contact our data protection officer at the following address:

E-mail:

SiDIT GmbH, Langgasse 20, 97261 Güntersleben

3. Collection and storage of personal data in applications and based on applicant profiles on applicant portals as well as the type and purpose and their use

3.1. Collection and storage

You contact us for the first time
You submit an application to us
we first advertise you based on your applicant profile on applicant portals such as
Contact Experteer and/or Indeed or
we contact you for the first time based on your profile on professional social media platforms such as LinkedIn and/or XING,

then we usually process the following information:

Salutation, first name, last name
Address
a valid email address
Telephone number (landline and/or mobile)
all other data that you provide in your application documents (in particular CV, certificates)
all other data that you have released in the applicant profile on applicant portals
all other data that you provide during the application process (in applicant questionnaires, interviews, etc.)
voluntarily provided special categories of personal data

3.2 What do we process your data for (purpose of processing) and on what legal basis?

In the following we will inform you about why and on what legal basis we process your data.

3.2.1. To fulfil contractual obligations and pre-contractual measures (Article 6 (1) (b) GDPR)

We process your data to carry out contractual obligations and pre-contractual measures with you, i.e. in particular

for internal processing of your application
to carry out the application process
to correspond with you
for the implementation or termination of an employment relationship
to exercise or fulfil rights and obligations arising from the law or from a collective agreement, a works agreement or a service agreement
to handle any liability claims that may arise and to assert any claims against you.

3.2.2 Based on your consent (Article 6 (1) (a) GDPR)

As a general rule, we delete your data no later than 6 months after the end of the application process, unless there are other reasons for storing the data, see point 5. If you have given us your consent to process your personal data as part of an "applicant pool", we will delete this data no later than three years after you have given your consent. The purpose of the "applicant pool" is to be able to consider you for future vacancies.

You can revoke your consent at any time with effect for the future. We would like to inform you that the revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

3.2.3. Based on legitimate interests (Article 6 (1) (f) GDPR)

Furthermore, we may process your personal data to the extent that this is necessary to defend against legal claims arising from the application process against us based on legitimate interests (e.g. claims arising from the AGG), Art. 6 Para. 1 Letter f GDPR.

3.2.4. Due to legal requirements (Article 6 (1) (c) GDPR)

We are subject to various legal obligations, such as statutory commercial retention and documentation obligations (from the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)).

3.2.4. Processing of special categories of personal data (Article 9 (2) GDPR)

We process the special categories of personal data you have specified if you have given us your consent in accordance with Art. 9 (2) (a) GDPR or if the processing is necessary for us to exercise the rights you deriving from employment law and social security and social protection law and to fulfil our obligations in this regard.

4. Transfer of data to third parties and processors

The passing on of personal data also constitutes processing within the meaning of the previous section 3.2. However, we would like to inform you separately at this point about the issue of passing on data to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

Your personal data will generally be transferred to third parties for the following purposes:

Processors with whom we have concluded an agreement pursuant to Art. 28 GDPR
Accounting (e.g. tax advisor)
Legal disputes (e.g. lawyer)
Communication platform (e.g. email, WhatsApp, other messenger services)

5. Deletion

We will delete your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

6. Rights of data subjects

You have the right:

to revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR. This means that we may no longer continue the data processing based on this consent in the future;
pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;
pursuant to Art. 17 GDPR, to request the deletion of your personal data stored by us, insofar as these are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party and
to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or place of work.

7. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation. If you would like to exercise your right of objection, simply send an email to