Privacy policy application portal Sycor

The Sycor Group attaches particular importance to the protection and responsible handling of your personal data. We use your personal data only within the framework of the applicable legal provisions. In addition to our general privacy policy, we would like to inform you here about the processing of your personal data as part of the application process.

If you apply for a specific advertised position, the company named in the respective job advertisement is responsible for the use of your personal data. If you have also decided to join our pool of applicants, or if you have submitted a speculative application to a Sycor Group corporation, we will have the opportunity to consider your personal details for future positions within the global Sycor Group and contact you as a result.

To use the online application process, personal data such as name, address, telephone number, e-mail address, date of birth and information about your qualifications, Curriculum Vitae (CV) and work history are collected. In addition, you have the option to submit documents such as certificates and other attachments.

1. Contact details of the data controller and the data protection officer

a) Contact details of the data controller

SYCOR GmbH
Heinrich-von-Stephan-Str. 1-5
37073 Göttingen

Postfach 3345
37073 Göttingen

Tel.: +49 551 490 0
Fax: +49 551 490 2000
info@sycor.de

b) Contact details of the data protection officer

Frau Astrid Waldt
SYCOR GmbH
Heinrich-von-Stephan-Str. 1-5
37073 Göttingen

Postfach 3345
37073 Göttingen

Tel.: +49 551 490 0
Fax: +49 551 490 2000
datenschutz@sycor.de

2. Purpose and legal basis 

The SYCOR GmbH processes personal data such as name, address, CV, certificates, knowledge, skills and other personal data and communication data in the context of applications for the purpose of the application process, as far as these are relevant for the decision regarding the establishment of an employment relationship. Legal basis for this is Article 88 (1) General Data Protection Regulation (GDPR), Section 26 (1) Federal Data Protection Act (Bundesdatenschutzgesetz (BDSG)) and Article 6 (1) (b) GDPR.

As far as SYCOR GmbH collects special categories of personal data process in the terms of Article 9 (1) GDPR as part of the application process the legal basis for this processing is Article 9 (2) (b) GDPR, Section 26 (3) and (4) Federal Data Protection Act (BDSG). The legal basis for the inclusion in the applicant pool is your consent pursuant to Article 6 (1) (a), Article 9 (2) (a) GDPR. For applications from minors, the consent of the legal guardian is the legal basis for processing of personal data.

The service provider of our applicant management system collects log data in the form of your username, applicant name and IP address. This data is deleted after 180 days. The purpose of processing log data is to ensure proper system operation and to prevent attacks on the system. Legal basis for log data is next to Article 88 GDPR, Section 26 Federal Data Protection Act (BDSG) also Article 6 (1) (f) GDPR and the overriding legitimate interest is expressed in ensuring the proper technical operation of the applicant management system and thus of the application process.

3. Recipient of your personal data (third parties) 

Your application will be submitted via the integrated application portal and applicant management system d.vinci of the company d.vinci HR-Systems GmbH, Nagelsweg 37 – 39, 20097 Hamburg. The d.vinci HR-Systems GmbH was carefully selected by us. Contractual regulations according to Article 28 GDPR were concluded with the d.vinci HR-System GmbH. The data will only be transmitted to internal recipients at Sycor GmbH (for example for the legally required Works council consultation process based on Article 6 (1) (c) GDPR to the Works Council of the Sycor GmbH or to the respective department involved). Your application and personal data will not be passed on to other third parties.

4. Applicant pool

If you have decided to be included in our applicant pool, or if you have submitted an unsolicited application to a Sycor Group company, we will have the opportunity to consider your personal information for future positions within the globally operating Sycor Group and to contact you thereupon if you submit a corresponding declaration of consent for inclusion in our applicant pool.

This consent is freely given and has no effect on your chances in the application process. The consent can be withdrawn at any time and without stating reasons (see below in this privacy policy under "Your rights as a data subject" and here your right to withdraw your consent at any time).

5. Duration

We process your application and thus your contained personal data during the running application process. After completion of the application process, also in case of a rejection, we will save your personal data in form of your application and documents for six months and delete it afterwards. This retention period results, among other things, from the german General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz).

Applications are only stored for longer than six months if applicants have consented to longer storage to be considered for future vacancies by giving their consent to be included in our applicant pool. In this case, your personal data will be stored for a further six months, so in all for a period of 12 months, and afterwards deleted. Log data processed by our application management system, will be deleted after 180 days.

6. Transmission of data to a third country

A transfer of your personal data to a third country, i.e. a country outside of the European Economic Area, does not take place. Only one employee from our location in the USA can see your application documents in d.vinci, if you are a candidate for an occupation at this location.

7. Declaration of consent for applicants who are minors

If you have not yet reached the age of 18, a declaration of consent from your legal guardians is required, which clearly states that your legal guardians agree to your application to Sycor GmbH and, if desired, to your inclusion in our applicant pool. We will provide you with a declaration of consent for this purpose. Please upload the signed consent form together with your application documents via the corresponding function in the online portal. Otherwise, we cannot consider your application. In this case we will delete your data.

Within the scope of the obtained declaration of consent, we process personal data in the form of the first and last name of the respective legal guardian for the purpose of verification. The legal basis for this is Article 6 (1) (f) GDPR. Our legitimate interest here is to be able to provide proof of the age of the respective applicant and thus to fulfill our obligations as a controller within the meaning of the GDPR. The processing of the personal data of the respective legal guardians is based on the information provided in this privacy policy.

8. Your rights as data subject

You have the right of access (Article 15 GDPR), the right to rectification (Article 16 GDPR) and the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR) and the right to object (Article 21 GDPR) as well as a right to data portability (Article 20 GDPR).

In particular, you have the right to withdraw a given consent at any time with effect for the future and without giving reasons, Article 7 (3) GDPR. The withdrawal of the respective consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. Therefore, please send an e-mail to bewerbungen@sycor.de. For further information or submission addresses of a withdrawal, please refer to the contact details from item 1 of this privacy policy. You also have the right to lodge a complaint to a supervisory authority.

The data protection supervisory authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover

Telefon: +49 (0511) 120 45 00
Telefax: +49 (0511) 120 45 99
E-Mail: poststelle@lfd.niedersachsen.de

9. Obligation to provide the personal data and automated decision making

You are not obliged to provide us with your data. However, if you do not provide us with your data, it will not be possible for us to include you in the application process. Automated decision-making does not take place.

10. Other notes

For the revocation of your application you can send us an e-mail to bewerbungen@sycor.de. In addition, our general information on data protection applies, which you can find under https://sycor-group.com/de-en/legallinks/privacy.html.

Please do not hesitate to contact us if you have any questions on the subject of data protection. For this purpose, you can contact the data protection officer of Sycor GmbH by post or e-mail. You can find the contact details in item 1 of this privacy policy.