As part of the application process, our company processes the personal data you submit for the purpose of processing and handling your application.
The provision of your personal data is necessary for the application process. No automated decision-making, including profiling, takes place.
We take appropriate technical and organizational measures to protect your data from loss, manipulation, and unauthorized access.
Who is responsible for data processing?
The following is responsible for data processing:
enervis energy advisors GmbH
Schlesische Straße 29-30
10997 Berlin
You can find further information about our company, details of authorized representatives, and additional contact options in the legal notice section of our website: https://enervis.de/impressum/
If you have any questions about data protection, please contact our data protection officer:
Dana Engelhardt
enervis energy advisors GmbH
Schlesische Straße 29-30
10997 Berlin, Deutschland
Tel.: +49 (0)30 695 175 355
E-Mail: datenschutz@enervis.de
Purposes and legal basis of data processing
Your personal data is processed in accordance with Article 6(1)(b) GDPR and Section 26 BDSG (Federal Data Protection Act) and exclusively for the purpose of reviewing your application, assessing your suitability for the advertised position, and making a decision on whether to establish an employment relationship. The legal basis for this is primarily the implementation of pre-contractual measures in connection with the application process.
The data processed includes your name, address, telephone and mobile numbers, e-mail address(es), the channel through which you found us, your salary expectations and availability, as well as personal data resulting from your application documents (e.g., cover letter, resume, references) and, if applicable, other information provided during the application process or publicly available information (e.g., LinkedIn/Xing profile).
If the storage of data is necessary for legal purposes after completion of the application process, data processing may be carried out on the basis of the requirements of Article 6 GDPR, in particular for the purpose of pursuing legitimate interests pursuant to Article 6(1)(f) GDPR. Our interest then lies in asserting or defending claims.
If you provide us with special categories of personal data within the meaning of Article 9 GDPR as part of your application, such as information on severe disability or health data, this data will only be processed if this is permitted by law or if you have provided it voluntarily. The legal basis for this is Section 26(3) BDSG or Article 9(2)(b) GDPR in conjunction with Article 6(1)(b) GDPR.
Recipients of the data
Within our group of companies, only those persons involved in the application process have access to your data. Your data will only be passed on to third parties if we are legally obliged to do so or if you have expressly consented to such disclosure.
We use a software service provider for the application process, with whom we have concluded a contract for order processing in accordance with Article 28 GDPR. This service provider may gain knowledge of your personal data in the course of maintenance and operation.
Your application data will be reviewed by the Human Resources department after we receive your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The next steps will then be coordinated. Within the company, only those persons who need your data for the proper execution of our application process have access to it.
Location of data storage
Data processing is generally carried out in data centers in Germany. The data center operator uses Amazon Web Services (AWS) infrastructure with servers in Dublin, Ireland. This means that the data remains within the EU. No data is transferred to third countries outside the EU/EEA.
Our provider has also concluded a contract with AWS, the content of which complies with the requirements for an adequate level of data protection in accordance with Article 28 GDPR and the EU standard contractual clauses.
Duration of storage and deletion of data
Your data will be stored for the duration of the application process and, in the event of rejection, will generally be deleted within six months, unless there are longer retention obligations or legitimate interests (e.g., defense against legal claims).
If the application process results in an employment relationship, the data will be transferred to our HRworks personnel information system in accordance with Section 26 of the German Federal Data Protection Act (BDSG) and processed in accordance with Article 6(1)(b) of the GDPR.
Talent pool
If you give your express consent, we will add your data to our applicant pool so that we can consider you for future positions. If you have consented to the further storage of your personal data, we will store your data there until you revoke your consent, but for a maximum of one year. You can revoke your consent at any time with effect for the future without incurring any disadvantages.
Your rights
In connection with the processing of your personal data, you have various rights under Article 15 et seq. GDPR. Within the framework of the statutory provisions, you have the right to request information about the data we have stored about you at any time.
If it turns out that your data is incorrect or incomplete, you can request that it be corrected. Under the conditions of Article 17 GDPR, you also have the right to have your data deleted, unless legal retention obligations or our legitimate interests prevent deletion. In addition, you can request the restriction of the processing of your data and have the right to the portability of your personal data in a commonly used electronic format. If we process your data on the basis of Article 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future.
In principle, you have the right to complain to the relevant data protection supervisory authority if you believe that the processing of your personal data violates the General Data Protection Regulation.