Privacy notice for job applications

We take the protection of your personal data very seriously and place particular importance on a high level of data security and compliance with data protection legislation. Under no circumstances will the data collected be sold or disclosed to third parties without the express prior consent of the individuals concerned, unless we are obliged to disclose the specific data by an administrative or court order.

The following privacy notice explains which personal data we process during the application procedure, for what purposes and how you can object to certain processing of your personal data.

We want you to understand when we collect which data and how we use it. For any questions concerning data protection, you can contact the following email address:


As we generally advertise all vacancies publicly, please refrain from submitting unsolicited applications. Unfortunately, we cannot consider unsolicited applications and will delete them immediately upon receipt without storing the applicant's data or sending a response.


What rights do you have in relation to us?


You have the following rights in relation to us regarding your personal data:
  • Right of access
  • Right to correction or deletion
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to complain to the supervisory authority responsible

For what purpose do we process your data?


We process your personal data for the purpose of your application for employment insofar as this is necessary to decide whether to establish an employment relationship with us. The legal basis is Section 26(1) in conjunction with Section 26(8), sentence 2 of the German Federal Data Protection Act (BDSG).

For public profiles, we base processing on Article 6(1)(f) GDPR in conjunction with Article 9(2)(e) GDPR. Our legitimate interest in this case is to obtain a concise profile of you that you have manifestly made public within the meaning of Article 9(2)(e) GDPR.

Where consent is required for processing, for example for inclusion in our talent pool, the legal basis is Section 26 BDSG in conjunction with Article 7 GDPR.

We may also process your personal data insofar as this is necessary to defend against legal claims asserted against us in connection with the application procedure. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest may, for example, be an obligation to provide evidence in proceedings under the German General Act on Equal Treatment (AGG).

If an employment relationship is established, we may further process the personal data already received from you for employment purposes in accordance with Section 26(1) BDSG.

Providing personal data is neither a statutory nor a contractual requirement, and you are not obliged to provide it. However, providing personal data is necessary for concluding an employment contract with us. This means that if you do not provide the data we identify as necessary when applying, we will not enter into an employment relationship with you.


What data do we collect from you?


When you contact us by email

You can send your application directly to us using the email address set up specifically for applications:
 
We process all data you provide to us in connection with your application, such as your cover letter, CV and references. We also process all other data related to your application, such as correspondence or records made during interviews. If you provide them, we may also process special categories of personal data, such as health data.

Where applicable, we also obtain the above data about you from other sources. This may be the case if we involve recruitment agencies or employment agencies in the application process. You will have provided your data to them yourself. We may also draw on other publicly accessible information on the internet. This includes, for example, data that you have manifestly made public as part of an online profile, such as on XING or LinkedIn. We may also receive data you submit to us through third-party websites, such as job boards including Stepstone or Monster.

When you contact us by email, we process the data you provide, including the sender's email address, subject line, email content and attached documents, as well as data associated with the communication process, such as the recipient's email address.

We store the personal data arising in this context for as long as necessary to decide on your application. If no employment relationship is established between you and us, we may retain data beyond this period insofar as this is necessary to defend against possible legal claims. Application documents are deleted three months after notification of the rejection decision, unless longer retention is necessary due to legal disputes.

If you consent to our using your documents for other positions that become available, by joining our talent pool, your data will be deleted after 12 months at the latest.

If you accept employment with us, we store your personal data for the entire duration of your employment in accordance with the employee privacy notice.

Your emails are received on server systems located exclusively in Germany, in the ISO 27001-certified data centres of mpex GmbH and QualityHosting AG. ISO 27001 is an internationally recognised information security standard covering aspects such as data security, data protection and resilience. We do not disclose personal data directly to our service providers as part of this collaboration. However, a service provider may, for example during maintenance, potentially gain access to personal data. As this also constitutes processing on our behalf under Article 28 GDPR, we have concluded a data processing agreement with these service providers in accordance with that provision. This also ensures the protection of your personal data.

To protect your data, please encrypt all messages or their attachments, for example in an encrypted ZIP archive, to prevent access by unauthorised parties. Do not send your application to our general postal or email address!

When you participate in a web meeting

We may offer you an interview by web meeting. When you participate in a web meeting, we process:
  • User's pseudonym/name
  • Live audio and video data shared by the user
  • Comments and media data entered by the user
  • User's telephone number when dialling in by phone
  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the file accessed
  • Website from which access originates
  • Browser used and, where applicable, the computer's operating system
We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.

Our web meetings are provided through web conferencing systems located exclusively in Germany, in a data centre operated by minuskel screen partner GmbH. We do not disclose personal data directly to our service provider as part of this collaboration. However, the service provider may, for example during maintenance, potentially gain access to personal data. As this also constitutes processing on our behalf under Article 28 GDPR, we have concluded a data processing agreement with this service provider in accordance with that provision. This also ensures the protection of your personal data.


Last updated: 1 August 2025
Name and contact details of the controller:
Kernwert GmbH
Esmarchstr. 9, 10407 Berlin
Germany
Tel +49 (0)30-53 01 23-60
Fax +49 (0)30-53 01 23-61
info@kernwert.com

Managing Directors:
Dirk Wieseke, Christoph Gehricke

Commercial register:
Local Court of Berlin-Charlottenburg,
HRB 167811 B

VAT ID DE300354671

Data protection officer:
You can contact our data protection officer at the postal address provided, marked "Data Protection Officer", or by email at