This Privacy Notice provides information about the processing of personal data in connection with the use of SAP SuccessFactors Recruiting (“Tool”) by Bertrandt AG, as well as the protection of the privacy of all individuals whose personal data is processed and stored in the tool. It supplements the Privacy Notice of Bertrandt AG available at bertrandt.com. In the event of any deviations or contradictions between this Privacy Notice and the Privacy Notice on bertrandt.com, the provisions of this Privacy Notice shall take precedence. Please read this Privacy Notice carefully.
A – Privacy Notice pursuant to Article 13(1) of the General Data Protection Regulation (GDPR)
B – Information pursuant to Article 14 of the General Data Protection Regulation (GDPR)
A – Privacy Notice
A1. Data Sharing within the Bertrandt Group and with Potentially Interested Customers
Protection of your personal data is very important to us. Therefore, we would like to inform you transparently about our data protection principles and the procedures for the use of your information in connection with your application submitted through our erecruiting system. By applying to Bertrandt AG, you are applying to an innovative company that works with modern IT and HR processes and systems.
By submitting your application, you agree to:
You may object to the processing of your personal data at any time; however, further consideration in the selection process will then no longer be possible. You can find details on this in the Privacy Notice.
You also confirm that you have taken note of the Privacy Notice.
A2. Privacy Notice with Information on the Handling of Applicant Data
Protection of your personal data is very important to us. Therefore, we would like to inform you about our data protection principles and the procedures governing the use of your information as part of your application through our erecruiting system.
Bertrandt implements both technical and organizational security measures to protect your data from manipulation, loss, destruction, or unauthorized access and reviews these measures in line with technological developments.
The controller responsible for the processing of personal data within the scope of the application procedure in accordance with the General Data Protection Regulation (GDPR) is:
Name of the controller:
Bertrandt AG
Birkensee 1
71139 Ehningen
Address of the controller:
Bertrandt AG
Birkensee 1
71139 Ehningen
Phone: +49 7034 6560
Fax: +49 7034 65610001
Email: info@bertrandt.com
1. Data Protection Officer
The Data Protection Officer is available to answer any questions regarding the processing of your personal data at: Michael Walther datenschutz@bertrandt.com
2. Categories of Data, Purpose of Data Processing, and Legal Basis
We store the personal data that you provide as part of the application process. This applies both to applications for specific job postings and to unsolicited applications.
By completing the application, you are either applying for a specific job posting or expressing general interest in employment with our company. The data requested from you is used by Bertrandt AG across the entire corporate group as well as by existing and potentially interested customers exclusively for the purpose of filling positions.
The data you provide is classified into the following categories for processing:
In addition, we generate data regarding assessments and evaluations during the application process and document the course of the application as a history.
The legal bases for the collection and processing of data within the application process are Article 6(1)(b) and (f) GDPR as well as Section 26(1) of the German Federal Data Protection Act (BDSG).
We continue to process your data for similar recruitment procedures, regardless of whether you applied proactively or directly in response to a specific job posting.
You may view, update, and delete your data at any time via your applicant cockpit. Please note that you are responsible for ensuring the accuracy of your data.
Furthermore, we process and use your data for consulting, advertising, and market research purposes only with your separately obtained explicit consent.
3. Data Sharing within the Group, Data Transfer to Third Countries, Service Providers
In detail, Bertrandt AG as well as its subsidiaries and affiliated companies within the meaning of Section 18 AktG grant access to your data to:
Potentially interested customers may include:
may also be included.
The transfer of data takes place exclusively for the purpose of assessing your qualifications and for processing current and future application and recruitment procedures, insofar as this is necessary for handling the applications received.
Only those departments that are responsible for preparing and carrying out the application and recruitment process, and for which access is required, receive your data.
There is therefore no restriction limiting your application data only to the specific position for which you applied.
A list of the companies affiliated under Section 18 AktG can be found at:
https://www.bertrandt.com/unternehmen/konzern/standorte/
To technically implement the erecruiting process, we use a service provider acting as a processor within the meaning of Article 28 GDPR. This provider processes personal data on our behalf and in accordance with our instructions for the purposes described above.
We also transfer personal data to external service providers who support us in internal support and administrative processes. These include IT service providers who provide, operate, or maintain our IT infrastructure (e.g., identity management, hosting, data backup, security and cloud storage services), as well as service providers responsible for storing and securely destroying paper documents in compliance with data protection requirements.
These service providers may also include subsidiaries or affiliated companies. They are engaged solely based on contractual agreements that ensure an adequate level of data protection, data security, and confidentiality.
Where a transfer of data to third countries is required, such transfer may take place only if an adequate level of protection or appropriate safeguards are in place.
Application via WhatsApp
When using the “Application via WhatsApp” function, the processing of personal data is carried out based on your consent, which you may withdraw at any time, in accordance with Article 6(1)(a) GDPR. The applicant data collected in the WhatsApp chat is transferred by a service provider into our erecruiting application and processed there exclusively for the purpose of conducting the application procedure.
Please note that you are using your private WhatsApp account. A transfer of personal data—particularly to the United States—cannot be ruled out. Further information on how WhatsApp processes data can be found at:
www.whatsapp.com/legal/privacy-policy-eea
4. Storage of Data
Your profile is reactivated with each interaction, such as contacting us or making changes by you or the recruiter and is stored for a period of 180 days. Where no statutory retention period applies, data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage ceases to exist. If no employment relationship is established, this is generally the case no later than six months after the conclusion of the application process or after six months of inactivity by you or the recruiter.
In individual cases, certain data may be stored for a longer period (e.g., travel expense reimbursement). The duration of storage in such cases is based on statutory retention obligations, for example under the German Fiscal Code (6 years) or the German Commercial Code (10 years).
No notification will be sent before the profile is deleted, and no confirmation of deletion will be provided. If you are still awaiting feedback regarding the position, please contact the responsible recruiter.
5. Your Rights as a Data Subject (Applicant)
You may view, update, and delete your data at any time via your applicant cockpit. Please note that you are responsible for ensuring the accuracy of your data.
As a subject of data, you have the following rights:
The restrictions under Sections 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the rights of access and erasure.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR in conjunction with Section 19 BDSG if you believe that your personal data is being processed unlawfully.
The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information BadenWürttemberg
P.O. Box 10 29 32
70025 Stuttgart
Phone: 0711 / 61 55 41 – 0
6. Information on Your Right to Object under Article 21 General Data Protection Regulation (GDPR)
You have the right to object at any time to the processing of your personal data that is carried out based on Article 6(1)(f) GDPR (data processing based on a balancing of interests). You may object to the processing of your data at any time with effect for the future. An objection will result in the termination of your application process.
For objections, please send us a message at Personal-Bewerbung@bertrandt.com..
This email address is protected against spambots; JavaScript must be enabled for it to be displayed.
You also have the option to contact us by post:
Bertrandt AG
Talent Acquisition Management
Birkensee 1
71139 Ehningen
7. No Automated Decision-Making
No automated decision-making in individual cases within the meaning of Article 22 GDPR takes place.
8. Cookies
When using the online recruiting website, “cookies” are used in various places. These serve to make the recruiting application more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer. Session cookies are discarded when you leave our website. Permanent cookies (e.g., for functions such as “remember password”) remain stored on your computer’s hard drive until deleted by your browser.
You can prevent the installation of cookies by adjusting the settings of your browser software accordingly. However, please note that in this case you may not be able to fully use all functions of this website.
Some cookies are necessary to maintain the basic functionality of the website. The use of such cookies does not require consent and therefore cannot be deactivated. Cookies used for the analysis of your behavior on our website are only set with your consent. If we use cookies that require consent, a cookie banner will appear when you first visit our website, allowing you to agree to their use.
If you wish to change your cookie settings later, you can do so on the website under the “Cookies” section.
B – Information pursuant to Article 14 of the General Data Protection Regulation (GDPR)
1. Responsibility
The controller responsible for data processing is Bertrandt AG. If you have any questions, feel free to contact Bertrandt AG, Data Protection, Birkensee 1, 71139 Ehningen, or via email at Datenschutz@Bertrandt.com,, Telephone: +49 7034 6560.
2. Contact Details of the Data Protection Officer
Mr. Michael Walther
Email: Datenschutz@Bertrandt.com
3. For What Purpose and on What Legal Basis Is the Processing Carried Out? – Right to Object
Your data is collected to:
Your data is processed based on Article 6(1)(f) GDPR (legitimate interest).
The controller processes the data for the purpose of optimal process management.
The interests, fundamental rights, and freedoms of the data subjects are not affected.
Personal data is obtained from publicly accessible sources and processed by the controller.
The controller provides transparent information about data processing.
Processing of personal data by the controller based on legitimate interests is permissible.
You have the right to object to the processing of your personal data at any time, in accordance with Article 21 GDPR. You may exercise your right to object directly by contacting the controller using the contact details provided above.
4. Which Data Do We Process About You?
We process the following personal data about you:
5. Who Are the Recipients of the Data?
Bertrandt AG, including Bertrandt AG and the companies affiliated in accordance with Section 18 AktG (a list is available at: https://www.bertrandt.com/unternehmen/konzern/standorte/),
The following categories of data are processed:
6. Data Transfer Outside the EU / European Economic Area
A transfer of data outside the EU / EEA only takes place if an adequate level of protection is ensured.
7. How Long Is the Data Stored?
The data retention period is unlimited until the purpose of data processing ceases or until you object.
8. What Rights Do You Have?
Under the GDPR, you have various rights. Details can be found in Articles 15 to 18 and 21 GDPR.
Right of access:
You may request information about the personal data we process.
Your request should be as specific as possible to help us compile the required data.
Right to erasure:
You may request the deletion of your personal data.
Right to restriction of processing:
You have the right to request the restriction of processing of your personal data.
Right to data portability:
You have the right to receive the personal data we process in a commonly used, machinereadable format.
Right to object:
You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
Right to lodge a complaint:
If you believe that we have not complied with your request or have not fully done so, you may lodge a complaint with the competent data protection supervisory authority.
9. Data Sources
We use publicly accessible sources on social media platforms (e.g., LinkedIn, XING) to collect personal data.
10. Mandatory or Voluntary Provision of Personal Data
You are under no obligation to provide personal data.
You may object to the processing of your personal data at any time by contacting the controller.
11. Automated Decision-Making and Profiling under Article 22 GDPR
No automated decision making, including profiling, takes place.