Data privacy

Table of contents
Would you like to change your cookie settings?

Responsible entity

cbs Corporate Business Solutions Unternehmensberatung GmbH
Geschäftsführer: Rainer Wittwen
Rudolf-Diesel-Straße 9
69115 Heidelberg

Contact of the data protection officer

If you have any questions, suggestions or wish to exercise your rights, please contact our data protection officer at: datenschutz@cbs-consulting.de cbs Corporate Business Solutions (hereinafter referred to as “cbs”) attaches great importance to the protection of personal data of applicants, employees and all associated third parties. For the sake of simplicity, only applicants or employees are referred to below; this is to be regarded as a gender-neutral formulation. As an employer, cbs stands for equal opportunities and welcomes applications from all sections of society. We do not discriminate against anyone on the basis of race, creed, origin, disability, age, nationality, marital status, partnership status, sexual orientation, gender or any other legally protected grounds.

cbs processes personal data in accordance with the data protection and data security laws of the European Union, the Federal Republic of Germany and other countries in which we operate and in which we recruit candidates for localized positions. This privacy policy provides you with information on how cbs handles information collected during your visit to our career pages.

The following information provides you with an overview of the collection and processing of your personal data in connection with the application process.

1. Subject of the processing

The subject of processing is personal data that is transmitted by you as part of the application process and recorded in our applicant management system. Personal data is information that relates to an identified or identifiable natural person.

1.1  Personal Data

The following personal data is generally collected as part of the application process:

  • Name, address, e-mail, telephone number
  • Your electronic application documents
  • Details of your qualifications, e.g. CV, skills, competencies and, if applicable, further information on your professional career
  • References, certificates and, if applicable, further proof of qualifications
  • Photo, if applicable, as well as special categories of personal data such as religious affiliation, severely disabled status (if submitted)

1.2  Data Sources

In general, we only process personal data that we have received directly from you as part of the application process.

In addition to the data initially provided by you, cbs may collect further data about you as part of the application process, such as data from interviews, assessment tests, responsibilities in your current or previous employment, certificates, development interests, willingness to travel, salary expectations, language skills, job-related memberships or references.

We also collect personal data that you have made available to us via profiles on professional social media networks such as XING, LinkedIn or CV databases (or similar) or that we have permissibly obtained and may process from other sources that you have made publicly available (e.g. website with CV).

We collect your personal data in order to process your application. General information on data protection can be found on the cbs website at: www.cbs-consulting.com/de/datenschutzerklaerung.

You can apply directly for advertised positions or send an unsolicited application to cbs. The data you enter during registration and the following steps will be processed and used for the purpose of selecting applicants. Your contact details, in particular your e-mail address, will be used for proper registration and contact in the context of the application or recruitment process. The legal basis for processing is, in particular, Section 26 (1) BDSG.

In certain cases, we process your data to protect our legitimate interests or those of third parties:

  • Defense against legal claims asserted in the application process
  • Duty of proof in proceedings under the General Equal Treatment Act (AGG)
  • Comparison with the so-called EU terror lists in accordance with the European Anti-Terror Regulation 2580/2001 and 881/2002
  • Own statistical purposes with anonymized data

The legal basis for this is Article 6(1) lit. f GDPR.

If you have given us your voluntary consent to the collection, processing or transfer of certain personal data, this consent forms the legal basis for the processing of this data (Art. 6 (1) lit. a GDPR)

In the following cases, we process your personal data on the basis of your consent:

  • So that we may consider you for future positions beyond the duration of the application process, you will be given the opportunity to be included in our talent pool. However, you are free to do so. When registering, you can choose whether you only want to be considered for the specific application process or whether you also want to be included in the talent pool.
  • Forwarding of the application to Group companies.

3. Recipients of personal data

Affiliated companies: cbs may transfer your personal data to companies affiliated with us, insofar as this is permitted within the scope of the purposes and legal bases set out in section 2. These affiliated companies are:

3.1  Categories of recipients of data

Affiliated companies: cbs may transfer your personal data to companies affiliated with us, insofar as this is permitted within the scope of the purposes and legal bases set out in section 2. These affiliated companies are:

  • cbs Schweiz AG, Dorfplatz 3 (Postfach 281), 8132 Egg b. Zürich – Schweiz
  • cbs Corporate Business Solutions Asia Pacific Pte Ltd, 63 Chulia Street, #15-01 OCBC Centre East, Singapore 049514
  • cbs Corporate Business Solutions Malaysia Sdn. Bhd., Unit 29-12, Q Sentral, 2A Jalan Stesen Sentral 2, 50470 Kuala Lumpur, Malaysia
  • cbs Corporate Business Solutions America Inc., 15 N Devon Blvd., Suite 200, Devon, PA 19333, USA
  • cbs Transformation Consulting Spain, Carrer de Pujades, 51-55, 08005 Barcelona
  • cbs Unternehmensberatung Austria GmbH Seestadtstraße 27 TZ1, TOP10+11 1220 Wien, Österreich
  • leogistics GmbH Ein Unternehmen der cbs Group Borselstraße 26 22765 Hamburg
  • Trebing & Himstedt Prozeßautomation GmbH & Co. KG, Wilhelm-Hennemann-Straße 13, 19061 Schwerin

Processors: cbs uses contractually obligated external service providers who have a processing contract with us in accordance with the European Data Protection Directive. They also have access to your personal data. This applies in particular to the service provider that hosts our applicant management system (HCM4All GmbH, Trogerstraße 48, 81675 Munich).

3.2  Transfer to a third country

cbs does not intend to transfer your personal data to a third country unless your application is for a position in one of our affiliated companies. If personal data is transferred to one of our affiliated companies abroad, the data protection regulations of the respective country to which the data is transferred apply. If we transfer your data to group companies outside the European Economic Area, the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection or if other appropriate data protection guarantees (e.g. binding company-wide data protection principles or EU standard contractual clauses) are in place.

4. Deletion periods and data storage

If you have applied for a position, no employment relationship is established and you have not explicitly agreed to be included in the talent pool, cbs will store your personal data for 6 months and delete it no later than 7 months after completion of the application process.

If you decide not to be included in the talent pool when you apply or during the application process, you will of course not suffer any disadvantages for the ongoing application process.

If you agree to be included in the talent pool, we will store your personal data that you have provided to us during the entire application process (e.g. in cover letters, CVs, references, interviews) for 24 months from the date of registration in the talent pool. We use this data to be able to contact you. The purpose of the talent pool is to draw your attention to potentially interesting positions that match your qualifications profile. Shortly before the 24 months expire, you will be reminded of the impending expiry of the retention period and given the opportunity to explicitly agree to a further extension. If we do not receive any feedback on this, your personal data will be deleted after the retention period has expired.

5. Information on the rights of data subjects

As we process your personal data, we would like to draw your attention to the following rights:

Right to information: Upon written request (with proof of identity), cbs will inform you in accordance with Art. 15 GDPR which data cbs has stored about you. If you are applying for a specific position, please contact the relevant contact person from the job advertisement directly. If you have submitted an unsolicited application, please contact the data protection officer at cbs.

Right to rectification: You have the right to obtain from cbs without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

Right to erasure: Personal data concerning you must be erased immediately at your request, provided that one of the reasons listed in Art. 17 GDPR applies in detail and there is no overriding right to the contrary.

Restriction of processing: You can request cbs to restrict the processing of your data if one of the conditions listed in Art. 18 GDPR applies.

Right to data portability: In accordance with Art. 20 GDPR, you have the right to receive your personal data stored by cbs in a structured, commonly used and machine-readable format.

Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. cbs will then no longer process the personal data unless cbs can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims (Art. 21 GDPR).

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR). You can assert this right with the competent supervisory authority of your place of residence, your place of work or the place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is the State Data Protection Officer of Baden-Württemberg. You can find more information on the service portal of the state of Baden-Württemberg at the following link: http://www.service-bw.de/leistung/-/sbw/Datenschutzkontrolle++Datenschutzbeschwerde+einreichen+personenbezogen-713-leistung-0

To exercise your rights, please contact our data protection officer at datenschutz@cbs-consulting.com.

6. Modification of the privacy policy

If we should decide to change the content of this privacy policy, you will be asked to accept the amended privacy policy as soon as you log into our applicant management system again..

7. Provision of your data    

In order to be able to process your application, you must provide cbs with the personal data required to carry out the application process and the suitability assessment. If you do not provide this data, we cannot include you in the application process and therefore cannot consider you for open positions within cbs.