Data protection declaration for applicants

A. Responsible body

The responsible body within the meaning of the General Data Protection Regulation (GDPR) is

evolutionID GmbH
Nördliche Auffahrtsallee 19
80638 Munich-Nymphenburg
Telephone: +49 (0) 89-693 102-222
Telefax: +49 (0) 89-693 102-221
Email:

(hereinafter referred to as evolutionID).
You can reach the person appointed by the responsible body as data protection officer at:

Telephone: 0 68 41 / 98 16 – 0
Telefax: 0 68 41 / 98 16 – 29

If you have any questions related to the processing of your personal data and the exercise of your rights under the GDPR, please feel free to contact our data protection officer.

B. Purposes and legal basis for processing your application data

We process personal data about you for the purpose of your application for an employment relationship, to the extent that this is necessary for the decision to establish an employment relationship with us. The relevant legal basis is Section 26 Paragraph 1 in conjunction with Paragraph 8 Sentence 2 BDSG, insofar as evolutionID processes personal data about you for the purpose of your application for an employment relationship, to the extent that this is necessary for the decision to establish an employment relationship with us . Furthermore, evolutionID can process personal data about you to the extent that this is necessary to defend against legal claims asserted against us from the application process. The legal basis in this context is Article 6 Paragraph 1 Letter f GDPR. The legitimate interest arises from the procedural steps associated with the purpose and is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

If there is an employment relationship between you and evolutionID, evolutionID is entitled in accordance with Section 26 Paragraph 1 BDSG to further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or Fulfillment of the rights and obligations of employee representation arising from a law or a collective agreement, a company or service agreement (collective agreement) is necessary.

C. Categories of personal data processed

evolutionID processes your personal data that is related to your application. This can be general data about you (such as name, address and contact details), information about your professional qualifications and school education or information about further professional training or other information that you provide to evolutionID in connection with your application. Furthermore, evolutionID can, in individual cases, process job-related information that you have made publicly accessible, such as a profile on professional social media networks.

Please do not provide evolutionID with any information that is not related to the application. In particular, we would like to ask you not to send us information revealing racial and ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data to uniquely identify a natural person, health data or data relating to sexual life or to abstain from sexual orientation.

D. Sources of the Data Processed

As a rule, the data is collected directly from you. This is done by sending your application documents to evolutionID. In individual cases, job-related information that you have made publicly available may also be processed, such as that which can be accessed via a profile from professional social media. Such a case occurs in particular if you disclose a profile on a social media platform as part of the application process or contact us via such a profile or communication channel for the purpose of applying.

E. Categories of recipients

evolutionID can transmit your personal data to its affiliated companies within the meaning of Art. 4 No. 19 GDPR, to the extent that this is permissible within the scope of the purposes and legal bases set out above. Furthermore, personal data is processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by host providers or providers of applicant management systems.

Within the evolutionID organization, your data will be forwarded to the human resources department and the departments responsible for the decision. The latter are in particular the decision-makers within the department in which the position for which they have applied is located.

F. Deletion of your data

evolutionID stores your personal data for as long as is necessary to decide on your application. If an employment relationship does not come about between you and evolutionID, evolutionID can also continue to store data to the extent this is necessary to defend against possible legal claims. The application documents will be deleted six months after the rejection decision is announced, unless longer storage is necessary due to legal disputes.

This only does not apply if you have agreed to be included in the evolutionID applicant pool. The applications stored in the applicant pool can be used for later advertised positions that match the applicant’s profile. However, personal data in the applicant pool will also be deleted after three years at the latest. After this time has expired, you must send evolutionID your information again so that it can be taken into account in further application processes.

G. Transfer to a third country

A transfer to a third country is not intended.

H. What rights do you have?

As an applicant, you have the following data protection rights, depending on the situation in each individual case, to exercise which you can contact evolutionID or the data protection officer at any time using the details mentioned above:

Information : You have the right to obtain information about your personal data processed by evolutionID and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and those authorized to access it and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration;

Correction, deletion or restriction of processing : You have the right to immediately request evolutionID to correct incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary statement.

Right to object : If the processing of personal data concerning you is based on Article 6 Paragraph 1 Letter f of the GDPR, you have the right to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless evolutionID can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right of withdrawal : If the processing is based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of the processing carried out based on consent before its withdrawal. To do this, you can contact us or our data protection officer at any time using the details mentioned above.

Right to deletion : You have the right to request that evolutionID delete personal data concerning you immediately, and evolutionID is obliged to delete personal data without delay if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed
• You object to the processing in accordance with Art. 21 GDPR and there are no overriding legitimate reasons for the processing.
• The deletion of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject. This does not apply to the extent that processing is necessary for compliance with a legal obligation that requires processing under Union or Member State law to which we are subject.

Right to restrict processing : You have the right to request evolutionID to restrict processing if one of the following conditions is met:

• The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
• The processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
• evolutionID no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or you have objected to the processing as long as it is not yet clear whether our legitimate reasons outweigh yours.
• If processing has been restricted, these personal data may not be stored – only with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a processed in the Member State.

If you have obtained a restriction on processing, we will inform you before the restriction is lifted.

Right to lodge a complaint : Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data is contrary to violates the GDPR. You can also contact evolutionID’s data protection officer. You can reach this at:

Telephone: 0 68 41 / 98 16-0
Telefax: 0 68 41 / 98 16-29

I. Necessity of providing personal data

The provision of personal data is not required by law or contract, nor are you obliged to provide the personal data. However, the provision of personal data is necessary to conclude an employment contract with us. This means that if you do not provide us with any personal data when applying, we will not enter into an employment relationship with you.

J. No automated decision making

There is no automated decision in individual cases within the meaning of Art. 22 GDPR, which means that the decision on your application is not based exclusively on automated processing.