Privacy Notice

Purposes of processing and legal basis

Your application details (including personal and contact details, CV, evidence of qualifications, copies of certificates, details of your driving licence, a certificate of good conduct where applicable, and details of any severe disability where applicable) are collected directly from you by the relevant contact persons solely for the purpose of processing your application and are processed by the companies mentioned above. The provision of personal data is necessary for the lawfulness of the selection process to be carried out and for the subsequent execution of the contract. The scope of the data processed depends on the content of your application documents. We process your application data on the basis of Article 6(1)(b) of the GDPR.

In order to review incoming applications efficiently, we use AI-supported technology to assist the staff involved in the application process. This function uses artificial intelligence to analyse the application documents you have submitted – in particular your CV – in relation to the requirements of the respective advertised vacancy. In particular, details regarding your professional experience, qualifications, education, language skills and location may be taken into account. The function compares this information with the requirements specified for the relevant role, generates a structured summary of your CV and provides information on how well you match the role’s requirements. The results are used to assist our staff in reviewing and assessing applications.

Where special categories of personal data within the meaning of Article 9(1) of the GDPR are processed as part of the application process, this is done on the basis of Section 26(3) of the BDSG. Any further data processing (e.g. the storage of personal data in the talent pool) is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR or Section 26(2) of the BDSG. You will be informed of this in each case. Consent is voluntary; refusing to give consent will not result in any disadvantages.

Recipients

The recipients of the personal data contained in the application documents are the staff in the HR department at Communardo GmbH, the relevant HR managers, and internal staff at Communardo Group GmbH, Communardo GmbH and Communardo Products GmbH who are involved in the recruitment process.

We use the recruitment software provided by Personio SE & Co. KG to provide and utilise the talent screening tool. Personio processes the personal data required for this purpose on our behalf and in accordance with data protection agreements. Where further service providers are engaged to provide the AI function, processing by these providers may take place within the framework of contractual and data protection requirements.

Where necessary, we have data processing agreements in place with the service providers we use (e.g. providers of SaaS solutions) in accordance with Article 28 of the GDPR.

Further information on joint controllership

The companies listed above have set out their respective data protection obligations in an agreement within the meaning of Article 26(1) of the GDPR. Under this agreement, Communardo GmbH is responsible for providing data protection information in accordance with Articles 13 and 14 of the GDPR. Furthermore, Communardo GmbH ensures that the rights of data subjects are upheld. Notwithstanding this, data subjects may also exercise their rights directly with any of the named companies. In such cases, the relevant company will immediately forward the matter to the Data Protection Officer at Communardo GmbH for further processing.

With regard to ensuring the lawfulness of the processing of personal data, the security of the processing and the maintenance of internal data protection documentation, the named companies each act on their own responsibility.

Purpose of a transfer to a third country, including the legal basis

No personal data is transferred to a third country or to an international organisation.

Automated individual decision-making and profiling

The AI-supported analysis is used solely to assist our recruitment process. The results are reviewed by our relevant staff and assessed in conjunction with the rest of the application documents. Decisions regarding the next steps in the recruitment process, in particular whether to invite a candidate for an interview or to reject an application, are made by our staff. No decision is made solely by automated means within the meaning of Article 22 of the GDPR.

Retention period

The personal data you have provided will be deleted if you withdraw your application or if we are unable to offer you a vacancy, at the latest six months after the end of the application process. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purposes of providing evidence, or if you have consented to longer-term storage. You may also withdraw your consent in this regard at any time with future effect. The data in question will then be deleted immediately. If your application leads to the conclusion of a contract with us, we will process your data for the purposes of organisational and administrative processes and, in accordance with legal requirements, for the purposes of the employment relationship.

Information on data subjects’ rights

Data subjects may at any time request information about the personal data concerning them and, where applicable, request the rectification or erasure of such data, or the restriction of its processing, or object to its processing. Furthermore, they have a right to data portability. Furthermore, where data processing is carried out on the basis of consent, this consent may be withdrawn at any time with effect for the future. To exercise your rights, please contact Communardo GmbH or its Data Protection Officer using the contact details provided above.

Right to lodge a complaint with the supervisory authority

In accordance with Article 77 of the GDPR, every data subject has the right to lodge a complaint with a data protection supervisory authority if they suspect that the processing of their personal data is unlawful.

As at October 2026