picturemaxx Data Protection Policy for Applications
As part of the application process at picturemaxx AG, you will submit your personal data to us per email or by mail. picturemaxx undertakes to always comply with the legal requirements when processing this data, such as name, address, age, etc. The conditions for the protection of personal data under the EU Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”) apply as well as other applicable European and national data protection laws.
Point of Contact
The controller within the meaning of the applicable data protection law and thus the entity responsible for the collection of your personal data as part of the application process and point of contact with regard to data protection is
Stefan-George-Ring 2
81929 Munich
Germany
jobs@picturemaxx.com
(in this Data Protection Policy also referred to as “picturemaxx,” “we,” “us,” “our”).
If you have any questions about data protection in the context of the picturemaxx application process, please contact our data protection officer at any time. You can reach our data protection officer at the aforementioned address and by email at: dataprotection@picturemaxx.com
What is the legal basis for the processing of my data by picturemaxx ?
Insofar as we obtain your consent for the processing of personal data, § 26 para. 2 of the BDSG in conjunction with Article 6 para. 1 sent. 1 a) of the GDPR is the legal basis for the processing of personal data.
The legal basis for the processing of personal data, which is necessary for drawing a conclusion regarding employment or for the implementation of the employment relationship with you, is § 26 para. 1 of the BDSG in conjunction with Article 6 para. 1 sent. 1 b) of the GDPR.
Insofar as the processing of your personal data is required to fulfill one of our legal obligations, § 26 para. 1 of the BDSG or Article 6 para. 1 sent. 1 c) of the GDPR serves as the legal basis.
In the event that the processing is necessary in order to protect the vital interests of the data subject or of another natural person, Article 6 para. 1 sent. 1 d) of the GDPR serves as the legal basis for this processing.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data, then Article 6 para. 1 sent. 1 f) of the GDPR serves as the legal basis for the processing.
What data about me is being collected by picturemaxx ?
picturemaxx processes the personal data that you provide to us as part of your application. This includes, in particular, the following types of data:
​
-
Your name
-
Your Address
-
Your date of birth
-
Your birthplace
-
Your nationality
-
Your phone number
-
Your email address
-
Your application photo (if you sent it to us)
-
Your possible starting date
-
Your salary expectations
-
Your application documents, such as cover letter, certificates, CV
-
Information about your school education, your academic studies, your vocational training, and your further education
-
Your language skills
-
Your computer skills
-
Other qualifications and your motivation
-
Information about your professional career
-
Information about your internships and the nature of your work
In addition, the date and time of your contact will be stored.
We do not require any information from you that is not usable under the General Equal Treatment Act (race, ethnic origin, gender, religion or belief, disability, age or sexual identity). We also do not ask you to provide information about any illness, pregnancy, ethnic origin, political beliefs, philosophical or religious beliefs, trade union membership, physical or mental health or sex life.
Personal data will only be collected, stored, processed, and used for purposes related to your interest in current or future employment at picturemaxx and for the processing of your application. If your application at picturemaxx is successful, picturemaxx is entitled to continue to use the data provided in the context of employment at picturemaxx in order to realize the employment relationship. The legal basis for the processing of your data is § 26 para. 1 of the BDSG in conjunction with Article 6 para. 1 sent. 1 b) of the GDPR.
Which employees can access my application at picturemaxx?
Your personal data will only be made accessible to those picturemaxx employees who are necessarily involved in the application process because of their position and duties at picturemaxx . Your data will be stored in an internal applicant database. All picturemaxx employees who are tasked with data processing have been obligated to maintain confidentiality concerning your information. Third parties will not be given any of your information under any circumstance, unless otherwise stated in this Data Protection Policy.
When will my application be included in a pool of applicants?
If picturemaxx cannot offer you a job as part of the current application process, but you are still interested in employment at picturemaxx , we can deposit your records in a pool of applicants. In this case, we will seek your prior consent. You can revoke your consent at any time with effect for the future. If you want to have your data and documents erased, please send us a corresponding
email at jobs@picturemaxx.com or contact the address above. The legal basis for the storage of your data in the applicant pool is § 26 para. 2 of the BDSG in conjunction with Article 6 para. 1 sent. 1 a) of the GDPR.
How long is my data stored?
Our aim is to process your personal data only to the minimum extent possible. We will only store your personal data for as long as it is necessary to fulfill the purpose for which it was originally collected and – if applicable – for as long as required by law.
If we are unable to provide you employment at picturemaxx, we will retain the information you provided for up to six months after your rejection for the purpose of answering any questions related to your application and rejection, unless longer statutory retention periods apply.
picturemaxx will store your data and documents in the applicant pool for a maximum of three years. After that it will be deleted.
If we accept your application, we will store your personal data for a maximum of three years after the termination of the relevant employment relationship, unless other statutory or contractual retention obligations apply thereafter.
To whom does picturemaxx transfer my data?
HeavenHR
picturemaxx stores and uses the data you provide on the website in systems of HeavenHR GmbH, Mittenwalder Straße 6, 10961 Berlin Germany („HeavenHR“). HeavenHR may only access the data in accordance with our instructions (order processing). HeavenHR also takes strict technical measures to protect your personal information. HeavenHR will not disclose your personal data to third parties unless such disclosure is necessary to complete the agreed services or HeavenHR must do so in order to comply with the law or a valid and binding directive from a government or supervisory authority. The data transmitted for this purpose is limited to the necessary minimum. The legal basis for the processing of your data is Article 6 (1) sentence 1 f) GDPR. The purpose of data processing is for HeavenHR to help us with the application management. The duration of the data storage depends on the legal storage obligations.
For more information about HeavenHR’s privacy practices, please visit: https://www.heavenhr.com/web/EN/en/data-protection
What rights do I have with respect to my personal data?
You have the right to receive information about the personal data stored about you by us at any time. If data about you is incorrect or out-of-date, you have the right to ask for its correction.
​
You also have the right to request the erasure or restriction of the processing of your personal data. If you exercise your right to request erasure, your data will be deleted immediately after receipt of the request for erasure, unless picturemaxx is required to retain it for a longer time period based on mandatory statutory provisions. If the latter is the case, your personal data affected by this will be deleted after expiry of the applicable statutory retention period.
If you exercise your right to erasure or restriction of processing by picturemaxx , we are obligated to notify all recipients to whom your personal data has been disclosed of the correction or erasure of the data or the restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed by picturemaxx about these recipients.
Insofar as you have given us consent to the processing of your personal data, you can revoke it at any time with effect for the future. In regards to this, you can always send an email to hr@picturemaxx.com or contact us at the aforementioned address. The legality of the processing of your personal data by picturemaxx (or by third parties to whom your data has been made legally accessible by picturemaxx ) shall remain unaffected until the date of receipt of your revocation of consent.
​
You also have the right to object at any time to the processing of your personal data for reasons arising from your particular situation pursuant to Article 6 para. 1 sent. 1 f) of the GDPR. The consequence of such objection is that the personal data relating to you will no longer be processed by picturemaxx unless picturemaxx can demonstrate overriding legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing is intended to assert, exercise or defend legal claims. You can always inform us about your objection at the aforementioned contact information.
​
You have the right to receive the personal data which you have provided to us, in a structured, commonly used, and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance from the current controller, which is us and to whom the personal data have been provided (right to data portability).
If you want to exercise your rights or if you have any general questions concerning data protection and privacy during the picturemaxx application process, you can always contact us by mail or email, which can be sent to our data protection officer at the aforementioned contact information.
​
Finally, you have the right to lodge a complaint at the relevant data protection supervisory authority if you believe that the processing of your personal data is in violation of applicable data protection laws. You can exercise this right at a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged breach. In Bavaria, Germany, the competent supervisory authority is: Bavarian State Office for Data Protection Supervision, Promenade 27 (Schloss), 91522 Ansbach, Germany.
Last updated March 2021
The regulations of the General Privacy Policy of the picturemaxx website apply in addition to this Data Protection Policy for Applications at picturemaxx . A link to this General Privacy Policy can be found here:
https://www.picturemaxx.com/datenschutz