Data protection for job applicants

Dear Applicant

We would like to inform you about the processing of your personal data by our company and the rights to which you are entitled under the European Data Protection Regulation 2016/679 (DSGVO) and the German Federal Data Protection Act of June 30, 2017 (BDSG).

Who is responsible for data processing and who is the data protection officer?
This data protection information applies to data processing by:
Responsible party: Roth Industries GmbH & Co. KG, Am Seerain 2, 35232 Dautphetal-Buchenau, phone: +49 6466 - 9220, e-mail:
The company data protection officer of Roth Industries GmbH & Co. KG can be reached at the above address, for the attention of the data protection officer, or at
What categories of data do we use as an employer and where do they come from?
The categories of personal data processed include in particular your

  • Master data (first name, last name, name affixes, nationality),
  • Contact details (such as private address, (mobile) phone number, e-mail address),
  • your previous curriculum vitae and work history
  • Application documents such as certificates, documents on education, training or further education as well as internship periods.
  • This may also include special categories of personal data (e.g. health data).
  • Your personal data is collected directly from you. In addition, we may have received data from third parties (e.g. job placement agencies). In addition, we process personal data that we have permissibly obtained from publicly accessible sources (e.g. professional networks).

For what purposes and on what legal basis is data processed?
We process your personal data in compliance with the provisions of the DSGVO, the BDSG and, if applicable, other relevant laws.
Primarily, the data processing serves to process your application and, if applicable, to establish an employment relationship. The primary legal basis for this is Art. 6 (1) b DSGVO in conjunction with Section 26 (1) BDSG.
Where necessary, we also process your data on the basis of Art. 6 (1) f DSGVO in order to protect legitimate interests of us or of third parties (e.g. authorities). This applies in particular to the investigation of criminal offences (legal basis § 26 para. 1 p. 2 BDSG) or if this is necessary for the assertion, exercise or defense of legal claims.
Insofar as special categories of personal data are processed pursuant to Art. 9 (1) DSGVO, this may serve the purpose of initiating an employment relationship and may be carried out on the basis of Art. 9 (2) b DSGVO in conjunction with Section 26 (3) BDSG. In addition, the processing of health data may be necessary for the assessment of your fitness for work pursuant to Art. 9 (2) h in conjunction with Section 22 (1) b BDSG. In addition, the processing of special categories of personal data may be based on consent pursuant to Art. 9 (2) a DSGVO in conjunction with Section 26 (2) BDSG (e.g. storage of your data in the applicant pool of our group of companies, voluntary transmission of supplementary information in your application).
If we want to process your personal data for a purpose not mentioned above, we will inform you in advance and obtain your consent.

Who receives your data?
Within our company, only those persons and departments will receive your personal data that need it to process your application. These are the HR manager (m/f) and/or the responsible administrator (m/f) in the Human Resources department, employees (m/f) from relevant departments, external service providers (e.g. IT or shredding service providers).

What data protection rights can you assert as a data subject?
You can request information about the data stored about you at the above address. In addition, under certain conditions, you can demand the correction or deletion of your data. Furthermore, you may have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, common and machine-readable format.

Right of objection
You have the right to object to the processing of your personal data on grounds relating to your particular situation.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

Where can you file a complaint?
You have the possibility to address a complaint to the data protection officer mentioned above or to a data protection supervisory authority. The data protection supervisory authority responsible for us is:

The Hessian Data Protection Commissioner
Gustav-Stresemann-Ring 1
65189 Wiesbaden

How long will your data be stored?
We delete your personal data as soon as it is no longer required for the above-mentioned purposes.
After processing your application and if we enter into an employment relationship with you, you will receive the data protection information for employees (m/f), which provides information about data processing that we carry out as part of an employment relationship.
After processing your application and in the event of rejection, your personal data will be stored for as long as we need them to assert, exercise or defend legal claims. Afterwards, your applicant data will be deleted automatically. The storage periods are usually up to 6 months. If you give us your consent, we will include your applicant data in our applicant pool and store it there so that we can contact you again in the event that we have a vacant position for you in the future. We will send you additional information on this (along with a form for the required consent) separately in the event of a rejection.

Will your data be transferred to a third country?
If, by way of exception, we transfer personal data to service providers or group companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding internal company data protection regulations or EU standard contractual clauses) are in place. You can also request the information using the contact information above.

What data should you provide to us?
As part of your application, you should provide those personal data that are necessary for processing the application (see page 1 of this statement in particular). Without this data, we will not be able to process your application properly. In this case, we will delete your application together with your personal data without processing your application. Further information is voluntary and serves to complete your applicant profile.

If you have any further questions regarding the processing of your personal data, please contact us.