V2 (022024)
recucare Gruppe uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by recucare Gruppe.
With regard to interaction within the company account of recucare Gruppe, recucare Gruppe and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with recucare Gruppe, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of recucare Gruppe in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to recucare Gruppe only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
In the following, you will receive information from recucare GmbH, recusana GmbH and WZ WundZentren GmbH (hereinafter "recucare group") regarding data processing for which the respective recucare Group company is solely responsible or responsible within the scope of joint responsibility with New Work SE.
Transparency and trustworthy handling of your personal data is an important basis for good cooperation. We therefore inform you about how we process your data and how you can exercise the rights to which you are entitled under the General Data Protection Regulation (GDPR). The information below provides you with an overview of the collection and processing of your personal data in connection with the application process. Please read this privacy notice carefully before applying to us.
For general questions regarding the application process and your application, you can reach the respective recucare group company at:
recucare GmbH
Löwentorstraße 78, 70376 Stuttgart
Phone: +49 711 90007110-31
Fax: +49 711 90007110-99
E-mail: info@recucare.de
recusana GmbH
Löwentorstraße 78, 70376 Stuttgart
Phone: +49 711 633519-25
Fax: +49 711 633519-27
E-mail: info@recusana.de
WZ WundZentren GmbH
Reichstraße 59, 40217 Düsseldorf
Phone: +49 211 513621-16
Fax: +49 211 513621-17
E-mail: info@wundzentren.de
Our data protection officer will be happy to assist you with any concerns regarding data protection. You can reach him for the respective recucare group company under the following contact details:
recucare GmbH
Data Protection Officer
Löwentorstraße 78, 70376 Stuttgart
E-mail: datenschutz@recucare.de
recusana GmbH
Data Protection Officer
Löwentorstraße 78, 70376 Stuttgart
E-mail: datenschutz@recusana.de
WZ WundZentren GmbH
Data Protection Officer
Reichstraße 59, 40217 Düsseldorf
E-mail: datenschutz@wundzentren.de
According to Art. 4 para. 1 GDPR, personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The following data or categories of data are processed in order to carry out the application procedure:
Data processing for the decision on the establishment of an employment relationship Art. 88 para. 1 GDPR in conjunction with. § 26 para. 1 Federal Data Protection Act (BDSG)
Your personal data will be processed for the purpose of personnel selection to fill open positions, i.e. to initiate an employment contract. The necessity and scope of the data collection are assessed, among other things, according to the position to be filled. If your intended position involves the performance of particularly confidential tasks, increased personnel and/or financial responsibility, or is linked to certain physical and health requirements, more extensive data collection may be necessary. Your data may also be used to remind you to complete your application. The legal basis is Art. 88 para. 1 GDPR in conjunction with. § 26 para. 1 BDSG.
Data processing based on your consent according to Art. 88 para. 1 GDPR in conjunction with. § 26 para. 2 BDSG
If you give us your consent for data processing, we process your data in accordance with Art. 88 para. 1 GDPR in conjunction with. § 26 para. 2 BDSG.
Consent is obtained in each specific case as part of the application process. For example, you can decide whether we may store your data for a longer period of time in order to contact you directly in the future when a suitable vacancy arises.
Data processing of special categories of personal data according to Art. 9 para. 1 GDPR based on your consent according to Art. 88 para. 1 GDPR in conjunction with § 26 para. 3 sentence 2 BDSG
If you voluntarily provide us with special categories of personal data pursuant to Art. 9 para. 1 GDPR as part of your application documents (e.g. your photo or information on your religious affiliation/denomination), we store this on the basis of your consent pursuant to Art. 88 para. 1 GDPR in conjunction with Art. 26 para. 3 sentence 2 BDSG. This also applies if you provide us with further special personal data in the further course of the application process.
By voluntarily submitting this data and by accepting this privacy notice, you consent to the storage of this particular personal data as part of the application process.
As a rule, we do not take these special personal data into account when making a selection decision, unless it is necessary to take these special personal data into account due to legal obligations. For example, in some job advertisements it is possible that people with disabilities are given preferential treatment in accordance with applicable laws.
The information provided in these cases is always voluntary and is done with your express consent, which you express by voluntarily submitting this data and accepting this privacy notice.
Data processing based on legitimate interest - Art. 6 para.1 lit. f GDPR
In certain cases, we process your data to protect a legitimate interest of us or of third parties. A legitimate interest exists, for example, if your data is required for the assertion, exercise or defense of legal claims in the context of the application process (e.g. claims under the General Equal Treatment Act). In the event of a legal dispute, we have a legitimate interest in processing the data for evidence purposes.
Feedback-questionnaire
In order to optimize our application processes and improve us as an employer, we offer you the opportunity to provide your personal feedback. If you have consented, we will send you a feedback questionnaire for this purpose to the e-mail address you provided. For the implementation of the feedback form, we use the Microsoft 365 integrated survey tool from Microsoft (see section "To whom will your data be disclosed?"). In the survey we record the feedback,, the age range, position title and location of the position as well as job category and, if applicable, type of employment for which you have applied. In addition to using this information to optimize the application process we may also subsequently transmit it to kununu and possibly other verified review platforms, where it is published without your name being mentioned. Please note, however, that others, e.g. your employer, may be able to identify you based on the information you provide in the published feedback.
The persons within our company who are required to fill vacancies have access to the personal data collected during the application process, depending on the position(s) for which you have applied. Your personal data is accessible to the respective personnel managers within the company and is made available to selected managers in individual cases.
If the position to be filled is located in an area that is organized in a matrix, your personal data may also be made available to HR managers, line managers or relevant managers in affiliated companies, insofar as this is necessary for the proper processing of your application.
Your data will only be passed on to external recipients if we are obliged to provide information, report or pass on data in order to comply with legal requirements, if you have given us permission to pass on data to third parties or to external service providers who act as data processors on our behalf or perform functions for us. We use New Work SE, Strandkai 1, 20457 Hamburg, Germany as an external service provider. New Work SE operates onlyfy one, the online platform we use to bring talents and companies together. You can find out more about onlyfy one above.
If you apply via onlyfy one, your personal data will be recorded directly in onlyfy one. In the case of a postal or e-mail application, we can also transfer your data to onlyfy one.
In addition, the administration of the applicant process in our group of companies is carried out centrally by our parent company, recucare GmbH, Stockholmer Platz 1, 70173 Stuttgart. For this purpose, a corresponding data processing agreement has been concluded between the group companies and recucare GmbH.
If you have consented to the feedback questionnaire, we use the survey tool integrated in Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (parent company: Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA) as a data processor.
In principle, recucare does not transfer your personal data to countries outside the European Union (EU) or the European Economic Area (EEA) or to international organizations. If such a transfer should become necessary in individual cases, it will either take place in accordance with an adequacy decision of the European Commission (Art. 45 GDPR), on the basis of standard data protection clauses in accordance with the requirements of the European Commission (Art. 46 para. 2 lit. c, para. 5 sentence 2 GDPR), or in fulfillment of an exceptional circumstance of Art. 49 GDPR.
We store your personal data as long as this is necessary for the decision on your application. Insofar as an employment relationship between you and us does not come about, we may continue to store data beyond this, insofar as this is necessary for the defense against possible legal claims. As a rule, your data will be deleted within four months after the end of the application process.
Insofar as no employment relationship is established, but you have given us your consent for the further storage of your data ("applicant pool"), we will store your data until you revoke your consent, but for no longer than one year. If there is a specific reason, we may also store your data for a longer period for the purpose of defending against possible legal claims.
If you withdraw your application before the end of the application process, i.e. delete your data and your account, the stored data will be blocked for the period of the application process that is still ongoing and deleted after four months after the end of the application process for our company.
Provided you do not make any further changes in your candidate profile, for example, complete a current application, start a new application or change the data of an existing application, your data will be deleted within four months of the end of the last active application process for our company.
If you no longer use your candidate profile and have not given your consent to longer data storage in our applicant pool, the data will be deleted within four months after the end of the application process for our company.
You can request deletion of your candidate profile and application documents at any time. After the deletion request has been made, you will be informed about the exact deletion date and your data will be automatically deleted according to the specified conditions of this privacy notice.
You may exercise your rights listed below at any time against the entity named in the section "Contact details of recucare group".
Right to information
You are entitled at any time to request information free of charge within the scope of Art. 15 GDPR about, among other things, your data processed by us, the processing purposes, the categories of recipients, the planned storage period or, in the case of third country transfers, the appropriate safeguards. You are also entitled to receive a copy of your data.
Right to rectification, erasure, restriction of processing
If your data processed by us is incorrect, incomplete or its processing is unlawful, you may request us to correct, supplement or restrict the processing of your data or to delete the data to the extent permitted by law, Art. 16, 17 and 18 GDPR.
The right to erasure does not exist, among other things, if the processing of the personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) compliance with a legal obligation to which we are subject (e.g. legal obligations to retain records) or (iii) the assertion, exercise or defense of legal claims.
Right to data portability
If you have provided us with your data on the basis of your consent or within the framework of a contractual relationship existing with us, we will make this data available to you in a structured, common and machine-readable format at your request or - insofar as this is technically possible - transfer it to a third party designated by you.
Widerspruchsrechte
If we process your data on the basis of a legitimate interest, you may object to this processing on grounds arising from your particular situation, Art. 21 GDPR. The right to object exists only within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of the processing, so that we are entitled to process your personal data despite your objection.
Right of appeal
If you have any questions, suggestions or criticism, please feel free to contact our data protection officer named in the section "Contact details of the data protection officer of recucare group".
You are also entitled to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, under the conditions of Art. 77 GDPR, if you are of the opinion that the processing of the data concerning you violates the GDPR. The right of appeal is without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for recucare GmbH and recusana GmbH is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32, 70025 Stuttgart, Germany
Phone: 0711/615541-0
Fax: 0711/615541-15
E-mail: poststelle@lfdi.bwl.de
The supervisory authority responsible for WZ WundZentren GmbH is:
Die Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de
The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary to conduct the application process. This means that if you do not provide us with personal data when applying, we will not be able to carry out the application process.
Automated decision making does not take place.
In the event that you give or have given us consent to collect, process or use your data, you can revoke this consent at any time with future effect by contacting us via the contact named above in the section "Contact details of recucare group". An e-mail is sufficient.
You also have the right to object at any time, on grounds relating to your particular situation, to the processing of data relating to you by us which is carried out on the basis of Article 6 para. 1 sentence 1 lit. e) GDPR (performance of a task in the public interest) or Article 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest of the controller); this also applies to profiling based on these provisions. In this case, we will no longer process the data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of this data for the purpose of such marketing. If you object to processing for direct marketing purposes, this data will no longer be processed for these purposes.
Please address any revocations to the address given above in the section " Contact details of recucare group ".
We reserve the right to change this privacy notice at any time. Any changes will be announced by publishing the amended privacy notice on our website. Unless otherwise specified, such changes will take effect immediately. Therefore, please check this privacy notice regularly to view the most current version.
Last updated October 2023
