We are pleased that you would like to apply for a job with us. In the following, we would like to explain how we process the personal data you provide to us as part of the application process.

Who is responsible for processing your personal data?

House of PM GmbH
Ferdinandstraße 12
20095 Hamburg
Phone: (+49) 40 - 380 8819 10
E-Mail: datenschutz[at]hopm.eu

Who is our data protection officer?

If you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, please contact datenschutz@hopm.eu. 

If you wish to communicate directly with our external data protection officer (for example, because you have a particularly sensitive request), please contact them by post, as communication by e-mail can always have security gaps. Please state in your request that your concern relates to House of PM.

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer

Burchardstraße 14
20095 Hamburg

What personal data do we process?

As part of the application process, we collect and process the personal data you provide to us. This may include: contact and address information, your application photo, information about your previous career, your education and professional training, other information that you provide to us as part of your application. 

Purposes of the processing

The purposes of the processing are the implementation of the application process and the selection of the applicant.

If you give your separate consent by joining our talent pool, your personal data will be processed in order to contact you by e-mail and telephone and to inform you about suitable vacancies.

On what legal basis do we process your data?

We base the processing of your data on the following legal bases:

• Your consent, if you have given us such consent (Art. 6 Abs. 1 lit. a) DSGVO),
• The initiation or performance of a contract with you (Art. 6 (1) (b) GDPR),
• The fulfillment of legal obligations (Art. 6 para. 1 lit. c) GDPR),
• The implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR).

The legitimate interest arises from the burden of proof in proceedings under the General Equal Treatment Act (AGG).

Requirement or obligation to provide data

Unless expressly stated, the provision of your data is not required or mandatory.

How long do we store your data?

We store your data a) if you have provided consent for processing, for no longer than until you withdraw your consent; b) if the data is required to fulfill a contract, for no longer than the duration of the contractual relationship; c) if we process the data based on a legitimate interest, for no longer than until your interest in deletion or anonymization outweighs ours; d) if statutory retention obligations apply, for the duration of those legal obligations.

We generally store data from recruitment processes for a maximum of 6 months after the conclusion of the process to defend against potential legal claims. If you provide us with your explicit consent, we will retain your application data for up to 12 months to consider you for future job openings. You may withdraw this consent at any time with effect for the future.

To whom do we transfer your data?

Service providers involved in the application process, group companies of the controller and affiliated companies.

The service providers used fall into the following categories:

Social Media, Systeme zur Erstellung der Webseite und Hosting-Dienstleister unserer Karriereseiten, Konferenz- und Webinarsoftware, E-Mail-Provider und weitere Dokumentenmanagement-Services.

Data is only ever passed on to third parties to the extent permitted by law and to the extent necessary for the performance of the employment relationship.

As the data subject, you have the following rights:

• to request information about the processing of your data and to receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data being processed, the recipients of the data (if it is passed on), the duration of storage or the criteria for determining the duration;
• to receive the personal data concerning you in a structured, commonly used and machine-readable format or to transmit those data to another controller;
• to rectify your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of the processing;
• to have your data deleted or blocked;
• to have the processing restricted;
• to object to the processing of your data;
• to withdraw your consent to the processing of your data for the future, and
• to complain to the competent supervisory authority about unauthorized data processing.

Status of the privacy policy:

August 2024

We adapt the information in the event of changes to our processes.