Data protection information for applicants and other candidates

The following information is intended to give you an overview of how we process your personal data and your rights under data protection law. The scope of this privacy policy covers both the processing of your data for personnel or job placement with our customers and the processing for internal application procedures. The specific data processed depends largely on the circumstances of each individual case. Therefore, not all parts of this information may apply to you.

1. Responsible body and contact details of the data protection officer

The data controller responsible for data processing through this website is

SOMI Experts GmbH
Kennedyallee 93
60596 Frankfurt

You can contact our data protection officer at

datenschutz@somi.de

2. Processing of personal data of candidates

As a personnel service provider, SOMI places candidates with cooperation partners for the purpose of establishing contractual or employment relationships. The relevant processes are primarily handled via our “MySOMI” platform. All personal data that you provide to SOMI will be processed on the MySOMI platform.

Your personal data will be treated confidentially and processed exclusively for the purpose of order and application processing, i.e. for personnel recruitment, recruitment and the establishment of a contract or employment relationship. It is essential for the processing of this process that SOMI employees have access to your personal data.

Your personal data will be processed beyond the application for a specific position or a specific order or hiring date if you give us your consent to contact you about other positions that match your profile. In this case, processing for other positions also includes access to your personal data by employees in the human resources department and employees with personnel decision-making authority from other parts of the company, insofar as this is necessary to decide on filling a position.

2.1. Source of your data

If you apply for a job with us, we receive your data directly from you. If we contact you without you having previously applied to us, we have obtained your data from publicly available sources; we use this data to contact you. For these purposes, we generally search the platforms XING, LinkedIn, freelance.de, and Freelancermap. Our legitimate interest in collecting your data and contacting you is to be able to refer you to our customers.

2.2. Data categories and purpose of data processing

As part of the process, we generally process the following categories of personal data:

Personal data (first and last name, date of birth, address, school leaving certificate)
Communication data (telephone number, mobile phone number, fax number, email address)
Data on assessment and evaluation in the application process
Data on education (school, vocational training, civil/military service, studies, PhD)
Data on previous professional experience, training and work references
Information on other qualifications (e.g., language skills, computer skills, volunteer work)
Application photo
Salary requirements
Application history

Personal data that you provide to us in your application will be stored and used exclusively for the purpose of processing your application and, if applicable, for the subsequent employment relationship.

2.3. Legal basis for data processing

The processing of your personal data within the scope of the procedure is based on Art. 6 (1) lit. b GDPR (establishment and performance of a contract) and Art. 6 (1) lit. f GDPR, insofar as we require this to assert our own claims or to defend ourselves against third-party claims.

Any further processing of the data will only take place on the basis of an explicit declaration of consent. This is particularly the case if we are unable to make you a current offer but consider your application suitable for future positions. In this case, your data will be stored and processed on the basis of your consent in accordance with Art. 6 (1) lit. a DS-GVO (GDPR).

2.4. Transfer of data

Your data will be made available to the relevant employees in the Human Resources department and the relevant employees or supervisors in the department(s) responsible for the position you have applied for.

We do not pass on your application data to affiliated subsidiaries or parent companies unless your application also relates to these companies or is kept open for this purpose. We also use processors (e.g., IT service providers). Your data will be passed on to them in strict compliance with the obligation of confidentiality and the requirements of the GDPR. The processors we commission may only process the data for us and not for their own purposes. In these cases, responsibility for data processing remains with us.

Data will also be passed on if we are obliged to do so by law and/or by official or court orders.

2.5. Publication of excerpts from your profile

In order to increase your employment opportunities, we publish your profile or parts thereof on our website without mentioning your name and without your photo.

We assign an ID to your profile so that we can match your profile to you when we receive contact requests and inform you about inquiries from our customers. This enables us to place you even more effectively, as it also allows customers and potential customers who have not yet submitted a search order to us or who have not yet seen your skill profile to become aware of your profile.

3. Processing of personal data for internal application purposes

In addition to placing candidates with our clients, we also process applicant data for our own purposes. If you apply for a specific position with us, we generally process the following categories of personal data:

Personal data (first and last name, date of birth, address, school leaving certificate)
Communication data (telephone number, mobile phone number, fax number, email address)
Data on assessment and evaluation in the application process
Data on education (school, vocational training, civil/military service, studies, doctorate)
Data on previous professional experience, training and work references
Information on other qualifications (e.g., language skills, PC skills, volunteer work)
Application photo
Salary requirements
Application history

In the case of an unsolicited application, your application documents will be made available to the relevant employees in the Human Resources department and to the relevant employees and supervisors in the relevant departments for whom your application may be of interest.

If no employment relationship is established, the application documents will be deleted six months after rejection. The legal basis for this storage is Art. 6 (1) lit. f GDPR. Our legal interest in this regard is to defend ourselves against any claims arising from the General Equal Treatment Act (“AGG”). In all other respects, the general deletion periods and information under Section 6 apply.

4. Recipient organizations and categories of recipient organizations

Within our company, those departments that need your data to fulfill their contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes, provided that they maintain confidentiality and integrity. These are companies in the categories of IT services, telecommunications, and sales and marketing.

With regard to the transfer of data to third parties outside our company, it should first be noted that we only transfer necessary personal data in compliance with the applicable data protection regulations. We may only pass on information about you if this is required by law, if you have given your consent, or if we are authorized to provide such information. Under these conditions, third parties may include:

public authorities and institutions (such as law enforcement authorities) if there is a legal or official obligation to do so,
other group-affiliated companies for risk management based on legal or official obligations, and
service providers that we use within the scope of order processing relationships.

5. Transfer to third countries

Personal data of applicants or candidates will not be transferred.

6. Storage period

The general retention and deletion periods apply. We store your personal data for as long as is necessary to decide on your application and beyond that only if there is another legal basis for further storage. Such other legal grounds may arise in particular from tax and accounting obligations or from the defense of possible legal claims, in particular under the General Equal Treatment Act (AGG). If you have not consented to further processing of your data for other positions that may be suitable for your profile, we will delete your data no later than six months after the application process has been completed. If you have consented to being considered for other positions or have submitted an unsolicited application without any time restriction, we will store your personal data for a maximum period of three years, beginning at the end of the year in which you gave us your consent or submitted your unsolicited application. If your application is successful, we will transfer your application documents to your personnel file.

7. Data security

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the webmaster, SSL or TLS encryption is implemented on our website.

You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

Our employees and the service providers we commission are also obliged to maintain confidentiality and comply with the provisions of the applicable data protection laws. The company takes appropriate technical and organizational security measures to protect your personal data from loss, alteration, destruction, and access by unauthorized persons or unauthorized disclosure. Our security measures are continuously improved in line with technological developments.

8. Data Subject Rights

As a data subject, you have the right to access your data (Article 15 GDPR), to rectify inaccuracies (Article 16 GDPR), to request erasure (Article 17 GDPR), the right to restriction of processing under Art. 18 GDPR, and the right to data portability under Art. 20 GDPR.

The restrictions under Sections 34 and 35 of the BDSG apply to the right to information and the right to erasure. In addition, there is a right to lodge a complaint with a competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the BDSG).

You may withdraw your consent to the processing of your personal data at any time with future effect. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future.

You also have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, in particular on the basis of Art. 6 (1) lit. f GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. This includes, in particular, processing necessary for the assertion, exercise, or defense of legal claims.

You also have the right not to be subject to decisions based solely on automated processing as set out in Article 22 GDPR. We do not use fully automated decision-making for the establishment, implementation, and termination of the business relationship. Should we use these procedures in individual cases (e.g., to improve our products and services), we will inform you separately about this and your rights in this regard, provided that this is required by law.

9. Obligation to provide data

Within the scope of our online offering, we rely on the processing of usage data that is necessary for the performance and termination of the service and for the fulfillment of the associated obligations. Without the collection of usage data, we and our service providers are unable to provide you with our online offering.

10. Profiling

We do not process your personal data automatically in a way that has legal effects on you or significantly affects you in a similar way.