Data Protection Declaration

Your person-related data is protected by technical and organizational measures in the collection, storage and processing so that it is not accessible to third parties. In the case of unencrypted communication via E-mail we cannot guarantee complete data security during transmission to our IT systems so that for information with a high necessity for secrecy we recommend encrypted communication or the use of postal services.

• Extent of processing of person-related data

We specifically inform you that our E-mail system disposes of an automated archiving procedure. All incoming and outgoing E-mails are archived digitally in a manner that is secure for auditing.

• Legal basis for the processing of person-related data

Art. 6 Para. 1 lit. c GDPR (legal obligation). The legal obligation lies in the observation of taxation and trade legislation (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).

• Purpose of the data processing

The purpose of the archiving lies in the observation of taxation legislation (e.g. §§ 146, 147 AO – obligation to keep taxation-relevant E-mails) and trade legislation (e.g. §§ 238, 257 HGB – obligation to archive business correspondence).

• Duration of data storage

The storage of our E-mail communication takes place until the expiry of the storage obligations according to the taxation and trade legislation. The duration of storage can be up to 10 years.

• Objection and data deletion possibilities

You can object to this processing according to Art. 21 GDPR at any time and demand deletion of the data according to Art. 17 GDPR. Which rights you have and how you can assert these rights can be found in the lower area of this data protection declaration.

• Handling of job application documents

If you have questions relating to our E-mail archiving system, please contact our Data Protection Officer. In addition, we would like to point out that we only accept application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and are not delivered. We do not accept applications in Word file format or other file formats and delete them unread. Please note that application documents sent unencrypted by E-mail could possibly be opened by third parties before they reach our IT systems. We assume that unencrypted application E-mails may also be answered in an unencrypted manner. If you do not wish this to happen, please inform us of this in your application E-mail.

You have the right to demand confirmation as to whether we process/store person-related data from you. If this is the case, you have the right to information as described in Art. 15 Para. 1 GDPR insofar as the rights and freedoms of other persons are not impaired (see Art. 15 Para. 4 GDPR). We would be pleased to make a copy of the data available to you.

According to Art. 16 GDPR you have the right to have corrections made to any person-related data stored by us that is incorrect (e.g. address, name etc.) at any time. You can also demand the completion of the data stored by us at any time. Corresponding changes will be made without delay.

According to Art. 17 Para. 1 GDPR you have the right that we delete the person-related data that we have collected about you if

• the data is no longer needed;
• due to the withdrawal of your consent the legal basis for processing the data has become invalid, without any replacement;
• you have objected to the processing and there is no legitimate reason for the processing;
• your data is being processed illegally;
• a legal obligation makes this necessary or data collection took place according to Art. 8 Para. 1 GDPR.

According to Art. 17 Para. 3 GDPR this right does not exist if

• the processing is necessary in order to exercise the right to freedom of speech and information;
• your data was collected on the basis of a legal obligation;
• processing is necessary for reasons of public interest;
• the data is necessary for the assertion, exercise or defence of legal rights.

According to Art. 18 Para. 1 GDPR in individual cases you have the right to demand the limitation of the processing of your person-related data.

This is the case if

• the correctness of the person-related data is disputed by you;
• the processing is illegal but you do not agree to deletion;
• the data is no longer needed for the processing purpose but the collected data serves to facilitate the assertion, exercise or defence of legal rights;
• an objection to processing according to Art. 21 Para. 1 GDPR has been made and it is not yet clear which interests predominate.

Insofar as you have given us specific consent to the processing of your person-related data (Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit a GDPR) you can withdraw this consent at any time. Please note that this does not affect the legality of the processing that took place on the basis of this consent until it was withdrawn.

According to Art. 21 GDPR you have the right to object at any time to the processing of person-related data that relates to you and was collected on the basis of Art. 6 Para. 1 lit. f (in the context of a legitimate interest). You only have this right when there are special circumstances opposing the storage and processing.

You can exert your rights at any time using the following contact data:

Prof. Schumann GmbH
Jutta-Limbach-Straße 1
37073 Göttingen
E-mail: info@prof-schumann.de
Tel.: +49 (0) 551 - 383150
Fax: +49 (0) 551 - 3831520

According to Art. 20 GDPR you have the right to the communication of your person-related data. We will make the data available in a structured, accessible and machine-readable format. You may choose whether the data is sent directly to you or to a responsible third party named by you.

Upon inquiry we will make the following data available to you according to Art. 20 Para. 1 GDPR:

• Data collected on the basis of specific consent according to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR;
• Data that we have obtained from you according to Art. 6 Para. 1 lit. b GDPR within the framework of existing contracts;
• Data that was processed within the framework of an automated procedure.

We will perform the transfer of the person-related data directly to a responsible third party desired by you insofar as this is technically possible. Please note that we are not allowed to communicate data that affects the rights or freedoms of other persons according to Art. 20 Para. 4 GDPR.

If you have the suspicion that your data has been illegally processed on our website, you can of course obtain clarification of the problem through the courts of law at any time. In addition, all other legal possibilities are open to you. Independently of this, you have the possibility to contact a regulatory authority according to Art. 77 Para. 1 GDPR. The right to lodge a complaint according to Art. 77 GDPR is available to you in the EU member state in which you are residing, in which your place of work is located and/or the location of the alleged violation, meaning that you can select the regulatory authority you wish to contact in any of the aforementioned locations. The regulatory authority to which you make the complaint will then inform you about the status and the results of your submissions, including the possibility of obtaining legal help through the courts according to Art. 78 GDPR.