Privacy Notice for Applicants

    PRIVACY NOTICE FOR APPLICANTS PURSUANT TO ART. 13 AND 14 OF THE GENERAL DATA PROTECTION REGULATION (GDPR)

    Version 05.11.2024

    Dear applicant,

    due to the legal regulations of the European General Data Protection Regulation (hereinafter referred to as “GDPR”) we are obliged to provide you with comprehensive information about the processing of your personal data within the scope of your application, which we are very happy to do.

    Data protection and the handling of your personal data is very important to us, so that we always ensure that your personal data is processed properly.

    If you have any questions about your applicant data and its processing, our data protection officer will be happy to answer them at any time. She is not subject to any instructions, is independent in her position and legally obliged to maintain secrecy and confidentiality, so that you can contact her in confidence.

    With regard to the processing of your personal data within the scope of your application process, we would like to inform you of the following:

    I. Identity and contact details of the controller

    Your contact point as controller within the meaning of the GDPR and other national data protection regulations of the EU member states as well as other provisions of data protection law is:

    Eurofighter Jagdflugzeug GmbH
    Am Söldnermoos 17
    85399 Hallbergmoos
    Germany
    Email: datenschutz(at)eurofighter.com

    or

    Panavia Aircraft GmbH
    Am Söldnermoos 17
    85399 Hallbergmoos
    Germany
    Email: datenschutz(at)panavia.de

    (here after "we", "us" or "our")

    If you have submitted your application for a position with Eurofighter Jagdflugzeug GmbH the controller is Eurofighter Jagdflugzeug GmbH.

    Respectively, if you have submitted your application for a position with Panavia Aircraft GmbH, the controller is Panavia Aircraft GmbH.

    Panavia Aircraft GmbH employs Eurofighter Jagdflugzeug GmbH as a data processor.

    II. Contact details of the data protection officer

    Our external data protection officer can be contacted at the following address:

    c/o activeMind.legal Rechtsanwaltsgesellschaft mbH
    Potsdamer Straße 3
    80802 Munich

    Phone: +49 (0) 89 / 919294-900
    Email: eurofighter(at)activemind.legal or panavia(at)activemind.legal

    ​​​​​​​III. Sources of data and personal data processed

    For the purposes of the application process and establishing the employment relationship we process the data listed below which you have provided to us (either directly, or through a recruiting agency or one of our partner companies /your employer).

    Personal data may include in particular:

    • Personal details (e.g., name, (former) addresses, date and place of birth, (former)
    • nationality, gender)
    • Family status (e.g., marital status and details of children)
    • ID card data (number, issuing authority, issue date)
    • Information on qualifications and staff development (e.g., education, work experience,
    • language skills, training)
    • Bank details
    • Tax identification number
    • Information on health insurance (insurance number, type of insurance)

    Other relevant personal data may include:

    • Employment details (e.g., personnel number, start date, partner company, start date
    • partner company, position, organisational unit)
    • Data relevant to payroll tax from the fulfilment of contractual obligations (e.g., salary
    • payment)
    • Information on the financial situation of employees (e.g., credit liabilities and salary
    • garnishments)
    • Social security data
    • Data on the pension scheme or pension fund
    • Authorisation data (e.g., access and access rights)
    • Image and sound data (e.g., ID photo and video and telephone recordings)
    • Employee evaluation data

    as well as other data comparable to the above categories.

    ​​​​​​​IV. Purposes and legal bases for data processing within the application process

    We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes:

    a) Processing is carried out for the establishment of the implementation of pre-contractual measures (Art. 6(1)(b) GDPR)

    When you submit your application to Eurofighter Jagdflugzeug GmbH or Panavia Aircraft GmbH, we will process the data you provide exclusively for the purpose of evaluating your professional suitability and contacting you.

    b) Consent (Art. 6(1)(a) GDPR)

    If you have provided us with the required consent we will keep your application longer in order to consider you for future positions which may become available.

    ​​​​​​​V. Categories of recipients

    Within the companies, access to your data is granted only to those internal departments that need it.

    Your data will only be forwarded to service providers acting as data processors (e.g., support, EDP maintenance, IT applications, accounting, data erasure). All service providers are obliged to handle your data confidentially pursuant to a data processing contract.

    ​​​​​​​VI. Data transfer to a third country or to an international organization

    Data is transferred to bodies in countries outside the European Economic Area (so-called third countries) if:

    • it is required by law (e.g., tax reporting obligations),
    • required for fulfilment of the contract with you,
    • you have given us your consent, or
    • we have concluded a contract for commissioned processing with our service provider.

    For certain tasks, we use service providers who may use sub-service providers that may have their registered office, parent company or data centers in a third country.

    A transfer is permitted if the European Commission has decided that an adequate level of protection exists in a third country (Art. 45 GDPR). If the Commission has not made such a decision, the companies or the service provider may only transfer personal data to service providers in a third country if appropriate safeguards are provided (standard contractual clauses adopted by the EU Commission or the supervisory authority in a specific procedure) and enforceable rights and effective remedies are available.

    We have contractually agreed with our service providers that data protection guarantees must always be in place. This also applies to their contractual partners as well. We will provide you with a copy of these guarantees upon request.

    Currently, your data (e.g., start date, end date, job title, family status) may be transferred to our partner company in the UK, as an affiliated company, if an employment contract is concluded.

    VII. Duration of storage

    In the event that your application is rejected, it will be deleted 6 months after notification of the decision.

    If an employment relationship is established, the application documents will be stored for at least the period of employment.

    If you have given your consent to be included in the respective talent pool for Eurofighter Jagdflugzeug GmbH or Panavia Aircraft GmbH, we will store your application documents for a maximum of 1 year.

    VIII. Your rights

    Every data subject has the right to access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR.

    With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply.

    You may withdraw your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent given to us before the applicability of the General Data Protection Regulation, i.e. before May 25, 2018. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.

    In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of supervisory authorities (for the non-public sector) with address can be found at:

    https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

    IX. Provision mandatory or required

    The provision of the aforementioned personal data is neither legally nor contractually required. However, it is not possible to process the application without this information.