Processing of (personal) data by the entity in charge of the online application process

A. Information on Data Protection regarding our Processing of Applicant Data in accordance with Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR) by Sportec Solutions AG

Thank you for your interest in Sportec Solutions AG.

Before you send us your application, we would like to inform you in accordance with Art. 13, 14 and 21 GDPR about the processing of your personal data in the application process and your rights in this regard.

This privacy policy also applies mutatis mutandis to applications submitted by recruitment agencies and obliges them to pass on the information to applicants. To ensure that you are fully informed, please read the following information on data processing and your rights with regard to the data collected.
 

1. Data Controller 

Email: info@sportec-solutions.com

Internet: www.sportec-solutions.com

LS Sport GmbH

Widenmayerstrasse 28

80538 Munich

E-mail: datenschutz@lssport.eu

3. Purposes and Legal Basis of the Processing

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us or another legal basis exists for the purposes stated below.

• The legal basis for the processing of your personal data in connection with your application is Art. 6 para. 1 sentence 1 lit. b GDPR, if this is necessary for the decision on the establishment of an employment relationship.
• If you contact us in advance of an application out of interest, the legal basis for the processing of the data transmitted in the course of this contact is our legitimate interest in communicating with interested persons in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
• Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defence or assertion of legal claims (Art. 6 para. 1 sentence 1 lit. f GDPR). The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). 
  If there is an employment relationship between you and us, we may process the personal data already received from you for the purposes of the employment relationship 
  in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).
• If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future (see section 8 of this privacy policy).
• Furthermore, we may process your anonymised applicant data for statistical purposes (e.g. evaluations). It is not possible to draw conclusions about individual persons.

• Title, first name, surname,
• a valid email address,
• Address,
• Telephone number (landline and/or mobile),
• the information provided by you with the application documents (in particular CV, cover letter, references, certificates, other information on school education, information on professional career and further training, etc.).

If we contact you directly or communicate with you in connection with your application, we may also process other content data (e.g. text entries, audio and video data), usage data (e.g. date and time of participation), meta/communication data (e.g. IP address, device information, location data, if authorised), depending on the communication channel.

We only pass on your personal data within Sportec Solutions AG to the specialist departments and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.

We may transfer your personal data to companies affiliated with us in accordance with Section 15 German Stock Act (AktG) (in particular Deltatre S.p.A., Via Millio, 41, 10141 Torino (TO), Italia; Sportec Solutions Inc, 1701 E Lamar Blvd #270, Arlington, TX 76006, United States or vieww GmbH, Marienbongard 10, 52062 Aachen, Germany) insofar as this is permissible within the scope of the purposes and legal bases set out in Section 2 of this privacy policy. In the same context, your applicant data may also be transferred to DFL e.V. or DFL Deutsche Fußball Liga GmbH, Guiollettstr. 44-46, 60325 Frankfurt am Main, Germany.

Furthermore, your personal data is processed by external service providers on our behalf on the basis of order processing contracts in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are providers of internet services or communication services and providers of applicant management software.

In particular, we use, as already partially described above:

Microsoft Corporation (One Microsoft Way Redmond, WA 98052-6399, USA) in relation to the use of Microsoft Office 365 applications;

Calendly LLC (271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA) for booking appointments;

Personio SE & Co KG (Seidlstraße 3 80335 Munich, Germany) for hosting our careers page and as an applicant management system.

Further information on data processing by Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement, by Calendly at https://calendly.com/legal/privacy-notice, and by Personio SE & Co. KG below in this privacy policy.

Outside the hosting of our career site and the provision of the applicant management system in connection with our commissioning, Personio SE & Co. KG acts as an independent controller in accordance with Art. 4 No. 7 GDPR for its general recruiting site in accordance with its own data protection information attached to this privacy policy below.

Otherwise, data will only be passed on to other recipients outside Sportec Solutions AG if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if we have your consent.

5. Data Protection and Confidentiality

Together with our contract processors, in particular with regard to the hosting of the careers page and the applicant management system, we have taken the necessary organisational and technical measures to ensure the confidentiality of your application. All employees of Sportec Solutions AG and our software partner are obliged to maintain confidentiality regarding all personal data as part of their employment contract or contractual relationship.

6. Transfer to a Third Country

It is possible that your personal data may be processed outside the EU and therefore in a third country with a level of data protection that deviates from the GDPR if one of the recipients mentioned under point 4. is based outside the EU or uses subcontractors outside the EU.

In accordance with Art. 44 GDPR, the transfer of personal data to a third country is only permitted if an adequacy decision has been issued by the EU Commission for this third country in accordance with Art. 45 GDPR or if suitable guarantees are complied with in accordance with Art. 46 GDPR and the data subjects have enforceable rights and effective legal remedies at their disposal, or if the data subject has given their voluntary consent.

Adequacy decisions of the EU Commission pursuant to Art. 45 GDPR currently exist in particular with regard to Switzerland and companies in the USA that have submitted to the so-called Data Privacy Framework. Suitable guarantees in accordance with Art. 46 GDPR with regard to other third countries, on the other hand, can be provided in particular by standard data protection clauses (EU model clauses) without the need for special authorisation from a supervisory authority, Art. 46 para. 2 lit. c GDPR. The EU standard data protection clauses are agreed with all recipients from third countries for which there is not already an adequacy decision in accordance with Art. 45 GDPR in the event of corresponding processing before the first transfer of personal data, either by the controller itself or by an involved sub-processor as part of order processing, which must comply with the requirements of the order data processing agreement between the controller and itself to its sub-processor, which is in turn involved. Consequently, it is ensured that suitable guarantees, enforceable rights and effective legal remedies resulting from the EU standard data protection clauses are guaranteed for all processing of personal data.

7. Duration of data storage

We store your personal data for as long as this is necessary 
for the above-mentioned purposes and the decision on your application. 
If you apply for a job at Sportec Solutions AG, your personal data, or at most an extract thereof, will be placed in your personnel file. The data will be anonymised in the applicant system and will only be available for evaluation purposes. It is not possible to draw any conclusions about your person.
If no employment contract is concluded with you, your personal data will be automatically deleted or anonymised after a period of six months at the latest. This is usually done to fulfil legal requirements and/or to defend against legal claims.

However, with your separate consent, we will store your personal data for up to twelve months if we are currently unable to offer you a position but would like to keep your application pending in our talent pool for any future vacancies. If the application process is followed by an employment relationship, training relationship or internship relationship, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file.

8. Your rights

As part of your online application via the careers page, you can generally decide for yourself what information you provide to us. Fields marked with an * are mandatory fields that we require for the application process. Fields not marked with an * can be filled in voluntarily.

You also have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
 

In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The supervisory authority responsible for the registered office of Sportec Solutions AG is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), P.O. box 1349, 91504 Ansbach, Tel.: +49 981 180093-0, Fax: +49 981 180093-800, Email: poststelle@lda.bayern.de. The right of appeal exists without prejudice to any other administrative or judicial remedy.

Right of cancellation 

If the processing of personal data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements (see section 7 of this privacy policy).

Right to object
Insofar as your personal data is processed in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR to protect legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
 

To exercise your rights, you can contact us using the contact details provided in section 1 or by e-mail to: datenschutz@lssport.eu.

The decision on your application is not based exclusively on automated processing. There is no automated decision in individual cases within the meaning of Art. 22 GDPR.

10. Version of the Privacy Policy

The privacy policy is current and dated 2024. We reserve the right to amend the privacy policy at any time with effect for the future if necessary, in particular to adapt it to changes in application management practices or to the implementation of new technologies.

The general recruiting site is operated by Personio SE & Co KG, a company based in Germany that offers personnel administration and application management software (https://www.personio.com/legal-notice/). The data transmitted as part of your application is transferred using TLS encryption and stored in a database. The company that carries out this online application process is solely responsible for this data within the meaning of Art. 24 GDPR. Personio is merely the operator of the software and this recruiting page and, in this context, a processor in accordance with Art. 28 GDPR. The basis for the processing by Personio is an order processing contract between the controller and Personio. In addition, Personio SE & Co KG processes further data, some of which may also be personal data, in order to provide its services, in particular for the operation of this recruiting site. This is discussed in more detail below.

Every time this recruiting page is accessed, general log data, so-called server logs, are automatically recorded. These data are generally pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. Without this data, it would not be technically possible in some cases to deliver and display the content of the software. In addition, the processing of this data is absolutely necessary for security reasons, in particular for access, input, transfer and storage control. The anonymous information can also be used for statistical purposes and to optimise the service and technology. In addition, the log files can be subsequently checked and analysed in the event of suspected illegal use of the software. The legal basis for this can be found in Section 15 (1) of the German Telemedia Act (TMG) and Art. 6 (1) f GDPR. Data such as the domain name of the website, the web browser and web browser version, the operating system, the IP address and the timestamp of access to the software are generally recorded. The scope of this logging does not exceed the usual scope of any other website on the Internet. The storage period of these access logs is up to 7 days. There is no right of objection.

Error logs are created for the purpose of identifying and rectifying errors. This is absolutely necessary in order to be able to react as promptly as possible to possible problems in the presentation and implementation of content (legitimate interest). These data are generally pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. The legal basis for this can be found in Section 15 (1) TMG and Art. 6 (1) f GDPR. If an error message occurs, general data such as the domain name of the website, the web browser and web browser version, the operating system, the IP address and the timestamp when the corresponding error message/specification occurs are recorded. These error logs are stored for up to 7 days. There is no right of objection.

In some cases, so-called cookies are used on this recruiting page. These are small text files that are stored on the device you use to access this recruiting site. Cookies are generally used to ensure security when visiting a website ("strictly necessary"), to implement certain functionalities such as standard language settings ("functional"), to improve the user experience or performance on the website ("performance") or to display target group-based advertising ("marketing"). On this recruiting page, only strictly necessary, functional and performance cookies are used, in particular to implement certain default settings such as the language, to identify the application channel or to analyse the performance of a job advertisement through which a user has reached this recruiting page. The use of cookies is absolutely necessary for the provision of our services and thus for the fulfilment of the contract (Art. 6 (1) b) GDPR). Storage duration: Up to 1 month or until the end of the browser session Right to object: You can use your browser settings to determine whether you want to allow cookies or object to the use of cookies. Please note that deactivating cookies may result in limited or completely disabled functionality of this recruiting site.

If personal data is processed by Personio SE & Co KG as the controller, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing, in particular the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), the right to data portability (Art. 20 GDPR) and the right to data portability (Art. 20 GDPR). GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR) If the processing of personal data is based on your consent, you have the right to withdraw this data protection consent in accordance with Art. 7 III GDPR. To assert your rights as a data subject with regard to the data processed for the operation of this recruiting site, please contact the data protection officer of Personio SE & Co KG (see section B.).

Final provisions

Personio reserves the right to amend this privacy policy at any time to ensure that it always complies with current legal requirements or to implement changes to the services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply when you visit this recruiting page again or submit a new application.

Processing of (personal) data by the operator of the recruitment website

General information

The controller

Access logs (“server logs”)

Error logs

Use of cookies

Rights of data subjects

Concluding provisions