Data Protection Information for Applicants

We are pleased that you wish to apply for a job with us. In the following, we would like to explain how we process the personal data you provide to us as part of the application process.

1. Definitions

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. The data subject is the employee.

2. What data do we process?

As part of the application process, we collect and process personal data that you provide to us, namely contact and address information, your application profile, information about your career to date, and your educational and professional training.

3. The purpose of the processing

The purpose of the processing is the implementation of the application process and the selection of the applicant.

4. On what legal basis do we process your data?

The legal basis is Article 6 (1) b) GDPR, namely the implementation of pre-contractual measures.

We receive the data from you. If we do not collect the personal data directly from you, we will also tell you the source of the personal data and, if applicable, whether it comes from publicly available sources.

5. Is your data transferred to third parties?

As part of the application process, data may be transferred to service providers, companies from the Klaus Tschira Group, the responsible party and affiliated companies. Data is only ever passed on to third parties within the legally permissible scope and to the extent necessary for carrying out the application process.

6. Storage period

We only store your personal data for as long as is necessary to achieve the purpose of the processing or for as long as the storage is subject to a statutory retention period. In the event that we are unable to offer you a position as a result of the application process, we will return your submitted documents to you and delete the data collected in our systems six months after the end of the application process.

7. Your rights

You have the right to a) request information about the processing of your data, b) receive a copy of your personal data, c) correct your data. If your personal data is incomplete, you have the right, taking into account the processing purposes, to complete the data, to have your data erased or blocked, to have the processing restricted, to object to the processing of your data, to revoke your consent to the processing of your data for the future and to complain to the competent supervisory authority about unlawful data processing. If you wish to exercise your rights as a data subject or have other questions about this notice, please contact the data protection officer of HeiGIT gGmbH, who can be reached at

Unless expressly stated at the time of collection, the provision of data is not required or obligatory. Such an obligation may result from legal or contractual regulations.

Status: November 2022