General Information
We provide this privacy policy, which exclusively refers to the data collected during the online application process, to inform you about how we handle your personal data collected during the application procedure.

Responsible Entity
The responsible entity under data protection law is:

Biofidus AG
Gütersloher Straße 54
33649 Bielefeld
Phone: +49 521 32936340
Email: datenschutz@biofidus.de

Commercial Register Entry
Registration Number: HRB 41852
Register Court: Bielefeld

Personal Data in the Application Process
Personal data refers to information about the personal or factual circumstances of a specific or identifiable natural person. This includes details such as your name, address, phone number, and date of birth, as well as information about your career path that can be attributed to a specific person with reasonable effort. Information that cannot be directly linked to your real identity is not considered personal data.

Legal Basis and Purpose of Processing Personal Data in Applications
If you apply to us electronically, i.e., via email or our web form, we collect and process your personal data for the purpose of handling the application process and conducting pre-contractual measures.
By submitting an application via our recruiting page, you express your interest in employment with us. You provide personal data that we use and store exclusively for the purpose of your job search/application.
The following data is typically collected:

First and last name
Email address
Phone number
Date of birth
Gender
Availability
Salary expectations
LinkedIn/XING profile (optional)
Source of how you found us

You also have the option to upload relevant documents such as a cover letter, CV, and certificates. These may contain additional personal data, such as qualifications (certificates, language skills, etc.), soft skills (e.g., revealed during interviews), and information from your CV (e.g., interests, hobbies, leisure activities). If you send us a photo, it is also considered personal data. Access to your data is restricted to authorized HR staff or employees involved in the application process. Your personal data is stored solely for the purpose of filling the position you applied for.

Retention Period
Your data will be stored for 150 days beyond the conclusion of the application process. This is typically done to fulfill legal obligations or defend against potential claims. After this period, we are required to delete or anonymize your data. In this case, the data will only be available as metadata without direct personal reference for statistical evaluations (e.g., gender ratio of applicants, number of applications per time period).

Talent Pool
Application documents from rejected candidates may be of interest to us, especially if the rejection was due to a lack of suitable vacancies at the time. If a suitable position arises later, your application might be a good fit. Therefore, we may retain some application documents with your explicit written consent.
If your application is rejected, we will contact you via your preferred communication method to request your consent to include your data in our talent pool and provide a consent form. Only if you give us your explicit consent will we retain your data and potentially contact you later. Data in our talent pool will be deleted after a maximum of 2 years. You may revoke your consent at any time in writing or electronically.

Please contact:
Biofidus AG
– Data Protection Officer –
Gütersloher Straße 54
D-33649 Bielefeld
Email: datenschutz@biofidus.de

Employment
If you receive and accept a job offer from us, the personal data collected during the application process will be stored for at least the duration of your employment.

Data Transfer to Third Parties
The data you submit during your application is transmitted via TLS encryption and stored in a database. This database is operated by Personio GmbH, which provides HR and applicant management software (https://www.personio.de/impressum/).
Personio acts as our data processor under Art. 28 GDPR. The processing is based on a data processing agreement between us as the controller and Personio.

Rights of Data Subjects
If we process your personal data, you have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing. These may include:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

If the processing is based on your consent, you have the right to withdraw your consent at any time under Art. 7(3) GDPR.
To exercise your rights regarding the data processed in this online application procedure, please contact our Data Protection Officer (see above).

Final Provisions
We reserve the right to update this privacy policy at any time to comply with current legal requirements or to reflect changes in the application process. The updated privacy policy will apply to any future visits to this recruiting page or future applications.

Processing of (Personal) Data by the Operator of the Recruiting Page

General Information
This recruiting page is operated by Personio GmbH & Co. KG, a company based in Germany that offers HR and applicant management software (https://www.personio.de/impressum/).
The data you submit as part of your application is transmitted via TLS encryption and stored in a database. The company conducting the online application process is solely responsible for this data within the meaning of Art. 24 GDPR. Personio merely operates the software and this recruiting page and acts as a data processor pursuant to Art. 28 GDPR.
The basis for Personio’s processing is a data processing agreement between the responsible entity and Personio. Additionally, Personio GmbH & Co. KG processes further data to provide its services, particularly for operating this recruiting page, which may also include personal data. These aspects are explained in more detail below.

Responsible Entity
The responsible entity under data protection law is:

Personio GmbH & Co. KG
Rundfunkplatz 4
80335 Munich
Germany
Phone: +49 (89) 1250 1005

Commercial Register Entry:
Registration Number: HRB 213189
Register Court: Local Court Munich
Data Protection Officer: datenschutz@personio.de

Access Logs (“Server Logs”)
Each time this recruiting page is accessed, general log data—so-called server logs—is automatically recorded. These data are typically pseudonymized and do not allow conclusions about a natural person.
Without these data, it would be technically impossible to deliver and display the content of the software. Moreover, processing these data is essential for security purposes, particularly for access, input, transfer, and storage control.
Anonymous information may also be used for statistical purposes and to optimize the offering and technology. Log files may also be reviewed and analyzed retrospectively if unlawful use of the software is suspected.
The legal basis for this is § 15 (1) of the German Telemedia Act (TMG) and Art. 6 (1) f GDPR.
The data collected generally includes the domain name of the website, web browser and version, operating system, IP address, and timestamp of access. The scope of this logging does not exceed that of any standard website.
Retention period: up to 7 days.
Right to object: not applicable.

Error Logs
To identify and resolve errors, so-called error logs are created. This is essential to respond promptly to potential issues in displaying or implementing content (legitimate interest).
These data are typically pseudonymized and do not allow conclusions about a natural person.
The legal basis is § 15 (1) TMG and Art. 6 (1) f GDPR.
In the event of an error, general data such as the domain name of the website, web browser and version, operating system, IP address, and timestamp of the error occurrence/specification are recorded.
Retention period: up to 7 days.
Right to object: not applicable.

Use of Cookies
This recruiting page uses cookies—small text files stored on the device you use to access the page.
Cookies generally serve to ensure website security (“strictly necessary”), implement functionalities like default language settings (“functional”), improve user experience or website performance (“performance”), or deliver targeted advertising (“marketing”).
This recruiting page uses only strictly necessary, functional, and performance cookies, particularly to implement settings such as language preferences, identify the application channel, or analyze the performance of a job posting that led a user to the page.
The use of cookies is essential for providing our services and thus for fulfilling the contract (Art. 6 (1) b GDPR).
Retention period: up to 1 month or until the end of the browser session.
Right to object: You can manage cookie preferences via your browser settings. Please note that disabling cookies may limit or completely prevent the functionality of this recruiting page.

Rights of Data Subjects
If Personio GmbH & Co. KG processes personal data as the responsible entity, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing. These may include:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

If the processing is based on your consent, you have the right to withdraw it at any time under Art. 7 (3) GDPR.
To exercise your rights regarding data processed for operating this recruiting page, please contact the Data Protection Officer of Personio GmbH & Co. KG (see above).

Final Provisions
Personio reserves the right to update this privacy policy at any time to comply with current legal requirements or to reflect changes in services, such as the introduction of new features. The updated privacy policy will apply to any future visits to this recruiting page or future applications.

Unsolicited application (all genders)