Privacy Policy

Privacy Policy - Applicants

The protection of your personal data is important to us. Therefore, in the following paragraphs we inform you about the processing of your personal data by us, in particular why we process your data and with whom we share your data. When we refer to data in the following, we mean your personal data. This is all information that can be used to identify you directly or indirectly as a natural person. We are obliged to provide this information in accordance with the EU General Data Protection Regulation (GDPR).

Who is responsible for data processing and who can I contact?

The controller of data processing is:

Cinven GmbH
 Große Gallusstrasse 16-18
 60312 Frankfurt am Main
 Germany
 Phone: +49 69 90027-0; email: info@cinven.com

What sources and data do we use?

We process the data that we receive from you as part of the application process. We also process personal data that we have received about you from headhunters with your knowledge. 

The data we process includes, in particular, your contact details (such as first name, surname, address, telephone number, email address), data relating to your career (such as CV, qualifications, certificates, professional experience) and other data that you provide to us or the headhunter. The data may also include special categories of personal data within the meaning of Article 9 (1) GDPR (such as severe disability, religious beliefs or information about your racial or ethnic origin).

What do we process your data for (purposes) and on what legal basis?

We process your data to carry out the application process. This processing is based on Article 6 (1) lit. b), Article 88 GDPR in conjunction with Section 26 (1) sentence 1 of the German Federal Data Protection Act (BDSG).

If you have given us your consent to include your data in our applicant database, the processing of your data is based on this consent in accordance with Article 6 (1) lit. a), Article 88 GDPR in conjunction with Section 26 (2) BDSG and, in the case of the processing of special categories of personal data, on Article 9 (2) lit. a), Article 88 GDPR in conjunction with Section 26 (3) sentence 2 BDSG. With our applicant database, we offer you the option of storing your data for a longer period of time so that it can be taken into account for future job placements.

Where necessary, we process your personal data to protect our legitimate interests or those of third parties. 

Who receives my data? 

If you apply for a position with us, we might share your data with Cinven Limited, 21 St James’s Square, London, SW1Y 4JZ, United Kingdom, in order to support the application process and, in particular, to conduct interviews with you. If you have given us your consent to include your data in our applicant database, Cinven Limited will also have access to your data stored in the applicant database.

As part of our online application process, we use Pinpoint, a software from the provider The Infuse Group Ltd, UK. For this purpose, the provider receives and processes the above data on our behalf. We have concluded a data processing agreement with the provider so that your personal data collected via our website is processed solely on our behalf and in accordance with our instructions. If the data is transferred to the United Kingdom, such transfer to a third country is based on Article 45 (1) sentence 1 GDPR, as the EU Commission has issued an adequacy decision for the United Kingdom, confirming that an adequate level of data protection exists there.

How long will my data be stored? 

In the event that no employment relationship (employment or internship) is established with you, we will continue to store your data for 6 months from the date of rejection after the application process has ended (e.g. in the event of a rejection). If you have given us your consent to include your data in our applicant database, we will store your data for four years from receipt of your application. This does not apply if you withdraw your consent before the end of this period; we will then delete your data stored by us immediately, but at the earliest 6 months after issuing a rejection.

If your application leads to the establishment of an employment relationship with us (employment or internship), your data will continue to be stored by us for the purpose of implementing the employment relationship. In this case, you will receive separate data protection information from us, in which we will inform you in more detail about the processing of your data in the employment relationship.

In addition, we are subject to various statutory retention and documentation obligations, including those arising from the German Commercial Code (HGB), the German Banking Act (KWG) and the German Fiscal Code (AO), which range from two to ten years.

What data subject rights do I have?

You have the following rights in relation to your data and our processing of your data:

• Right of access to your data in accordance with Article 15 GDPR;
• Right to rectification in accordance with Article 16 GDPR;
• Right to erasure of your data in accordance with Article 17 GDPR;
• Right to restrict the processing of your data in accordance with Article 18 GDPR;
• Right to data portability in accordance with Article 20 GDPR;
• Right to object to the processing of your data in accordance with Article 21 GDPR.

If the data processing is based on consent, you have the right to withdraw your consent at any time without giving reasons and with effect for the future (Article 7 GDPR). This does not affect the lawfulness of the processing carried out based on your consent until the withdrawal.

To assert these rights, please contact us directly using the contact details above.

You also have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR.

Do I have an obligation to provide data? 

For the application process with us, you must provide the data required to assess your professional and personal suitability for the job position. Without this data, we will generally not be able to carry out the application procedure and will therefore terminate the application process.

Is there an automated decision in individual cases?

In principle, no fully automated decision-making takes place during the application process.