Skip to main content

Processing of (personal) data by the entity in charge of the online application process

We are happy that you would like to apply with us. In the following, we explain how we process your personal data in the context of an application and retain further relevant information in this connection.
Who is responsible for the processing of your personal data?
Kühne Logistics University GmbH, Großer Grasbrook 17, 20457 Hamburg (hereinafter referred to as "we") is the data controller within the meaning of the European General Data Protection Regulation ("GDPR").
2. Data protection officer
You can contact our personnel department at the email address jobs@the-klu.org or by telephone on 040/328707-113/-114 for any questions regarding the processing of your personal data or concerning your rights in accordance with the GDPR.
3. For which purposes and on which legal basis do we process personal data?
We process personal data about you for the purposes of processing your application for an employment relationship, provided this is necessary for deciding on the establishment of an employment relationship with us. The legal basis for this is Section 26 paragraph 1 in conjunction with paragraph 8 sentence 2 GDPR (new version).
Further, we can process your personal data if this is necessary for defending legal actions taken against us arising from the application process. The legal basis for this is Art. 6 paragraph 1(f) GDPR. Legitimate interests are, for example, a burden of proof in proceedings in accordance with the General equal Treatment Act (AGG).
Provided an employment relationship between you and us is established, we can continue to process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 paragraph 1 GDPR, if this is required for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of interests of the employee that arise from a law or a wage settlement, a works or labour agreement (collective agreement).
4. Which categories of personal data do we process?
We process data related to your application. This can be general data on your person (such as name, address and contact data), information on your vocational qualifications and education or information on professional development, or other information with which you provide us in connection with your application. In addition, we can process job-related information made publicly accessible by you, such as a profile on professional social media networks.
5. What categories of recipients of data are there?
We can pass on your personal data to our subsidiary, KLU Executive Education GmbH, Großer Grasbrook 17, 20457 Hamburg, provided this is permissible in the context of the purposes and legal bases stated in No. 3 above. In addition, personal data is processed on our behalf on a contractual basis in accordance with Art. 28 GDPR, in particular by host providers or the providers of application management systems.
6. Is transfer to a third country intended?
There is no intention to transfer data to a third country.
7. How long will your data be saved?
We save your personal data for as long as this is necessary to make a decision on your application. If an employment relationship is not established between you and us, we can continue to save data if this is necessary for the defence of any possible legal claims. In this, the application documents are deleted six months after announcement of the rejection decision, if further retention is not required due to legal dispute.
8. What rights do you have?
As an applicant with us, you have the following data rights, depending on the situation in each individual case; to exercise these rights, you can contact us or our personnel department at any time at the addresses provided under Nos. 1 and 2 above.
a. Information
You have the right to information on the personal data about you which is processed by us, as well as access to your personal data and/or to demand copies of this data. This includes information on the purposes of the use, the categories of the data used, the recipients of this and those authorised to access it, as well as, where possible, the planned duration of the retention of the data; or, if this is not possible, the criteria for the determination of this duration;
b. Correction, deletion or restriction of processing
You have the right to demand our immediate correction of incorrect personal data relating to you. Taking the purposes of the processing into consideration, you have the right to demand the completion of incomplete personal data, also by means of a supplementary declaration.
c. Right to objection
If the processing of your personal data is based on Art. 6 paragraph 1(f) GDPR, you have the right, for reasons arising from your personal situation, to object at any time to the processing of your data. We then cease to process this personal data, unless we can prove compelling, legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
d. Right of revocation
If the processing of the data is based on consent, you have the right to revoke this consent at any time; this does not affect the legality of the processing that took place based on your consent until the point of revocation. For this purpose, you can contact us or our personnel department at any time at the addresses provided above.
e. Right to deletion
You have the right to demand that we immediately delete your personal data and we are obligated to delete personal data immediately, provided one of the following reasons applies:
The personal data is no longer required for the purposes for which it was collected or otherwise processed
You object to the processing in accordance with No. 8c above and there are no overriding legitimate reasons for the processing.
The personal data has been processed unlawfully.
The deletion of the personal data is required for the fulfilment of a legal obligation pursuant to EU law or the law of the member states to which we are subject.
This does not apply when the processing is necessary
for the fulfilment of a legal obligation pursuant to EU law or the law of the member states to which we are subject and which require the processing.
for the assertion, exercise or defence of legal claims.
f. Right to the restriction of processing
You have the right to demand that we restrict processing if one of the following prerequisites apply:
the correctness of the personal data is disputed by you; in this case, processing of the data is restricted for the length of time that allows us to check the correctness of your personal data,
the processing is unlawful and you reject the deletion of the personal data, requesting instead the restriction of the use of the personal data;
we no longer need the personal data for the purposes of processing but you still require it for the assertion, exercise or defence of legal claims, or
you have raised an objection to the processing in accordance with No. 8 above, for as long as is not yet determined if our legitimate reasons outweigh yours.
If the processing is restricted in accordance with (e) above, this personal data, irrespective of its retention, may be processed only with your consent or for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person or on the basis of an important public interest of the EU or a member state.
If you have effected the restriction of processing, we will inform you before this restriction is lifted.
g. Right to appeal
Notwithstanding another administrative or legal remedy, you have the right to appeal to a supervisory authority, in particular in the member state in which you live, have your place of work or in which the alleged violation has occurred, if you are of the opinion that the processing of your personal data violates the GDPR.
9. Necessity of providing personal data
The provision of personal data is required neither legally nor contractually, nor are you obligated to provide personal data. However, the provision of personal data is required for the conclusion of a contract concerning an employment relationship with us. This means that we will be unable to enter into an employment relationship with you if you do not provide us with personal data in an application.
10. No automated decision-making
There is no automated decision-making in individual cases within the meaning of Art. 22 GDPR, i.e. the decision on your application is not based solely on automated processing.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.