Information on the Processing of Your Personal Data During the Application Process
We are pleased that you have applied for a position at Saverto.
Transparency and the trustworthy handling of your personal data are essential foundations for successful cooperation. We would therefore like to inform you about how we process your data and how you can exercise your rights under the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable laws.
The following information provides an overview of the collection and processing of your personal data in connection with the recruitment process.
1. Who is responsible for data processing?
The data controller is:
Saverto Holding GmbH
Glüsinger Straße 86, 21217 Seevetal Germany
Email: info@saverto.com
2. How can you contact the Data Protection Officer?
You can contact our Data Protection Officer at:
Christopher Schewior intersoft consulting services AG Beim Strohhause 17 20097 Hamburg Germany datenschutz@saverto.com
3. What personal data do we process?
We process your personal data to the extent necessary to carry out the recruitment process.
This includes the following categories of data:
Standard information:
Applicant master data (first name, last name, address, position applied for)
Qualification data (cover letter, CV, previous employment, professional qualifications)
Employment references and certificates (performance data, assessment data, etc.)
Other information:
Publicly available professional information, such as profiles on professional social media networks
Voluntary information, such as an application photograph, information about severe disability status, or any other information you voluntarily provide as part of your application
4. Where does the data come from?
We process personal data that we receive directly from you during the recruitment process.
5. For what purposes do we process your data, and on what legal basis?
We process your personal data in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable laws.
5.1 Data processing for recruitment purposes (Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG)
Applicants' personal data may be processed for recruitment purposes where this is necessary to decide whether to establish an employment relationship with us.
The necessity and scope of data collection depend, among other things, on the position to be filled.
If the position you are applying for involves particularly confidential duties, increased personnel and/or financial responsibility, or specific physical and health requirements, more extensive data collection may be necessary.
To protect your personal data, such processing will only take place after the applicant selection process has been completed and immediately before your employment begins.
5.2 Data processing based on your consent (Art. 6(1)(a) GDPR, Section 26(2) BDSG)
If you have voluntarily consented to the collection, processing, or transfer of certain personal data, this consent forms the legal basis for processing such data.
We process your personal data based on your consent in the following case:
Inclusion in our applicant pool, meaning that we retain your application documents beyond the current recruitment process so that you may be considered for future job opportunities.
5.3 Data processing based on the legitimate interests of the controller (Art. 6(1)(f) GDPR)
In certain cases, we process your data to protect our legitimate interests or those of third parties.
This includes defending against legal claims in proceedings under the German General Equal Treatment Act (AGG).
In the event of a legal dispute, we have a legitimate interest in processing the data for evidentiary purposes.
6. Who will your data be shared with?
Your data will primarily be processed by our Human Resources department and the head of the department responsible for filling the position for which you have applied.
However, other internal and external parties may also be involved in processing your data.
Your data may also be shared with affiliated companies within the meaning of Sections 15 et seq. of the German Stock Corporation Act (AktG), including the operating companies.
Internal recipients:
Human Resources department
Team leaders and, in individual cases, team members
IT administrators of the applicant management system
External service providers:
Provider of our application platform (d.vinci HR-Systems GmbH)
IT service providers, including but not limited to d.vinci HR-Systems GmbH (Hamburg) and its subprocessors: pop-interactive GmbH (Hamburg), Textkernel BV (Amsterdam, Netherlands), and Mr. net Group GmbH & Co (Hamburg)
Service providers for the destruction of physical records and electronic data
Various recruitment agencies and HR consultancies, including Feedbackpeople Managementberatung GmbH (Greven)
Where necessary and applicable, we have concluded the required data processing agreements with external service providers in accordance with Art. 28 GDPR.
If you have any further questions regarding individual recipients, please contact us at:
datenschutz@saverto.com
7. Will your data be transferred to countries outside the European Union (so-called third countries)?
No transfer of your personal data to a third country is intended.
8. How long will your data be stored?
We store your personal data for as long as necessary to make a decision regarding your application.
If no employment relationship is established between you and us, we may continue to retain your data to the extent necessary to defend against potential legal claims.
As a general rule, your data will be deleted no later than six months after the recruitment process has ended.
If no employment relationship is established but you have consented to the continued storage of your data, we will retain your data until you withdraw your consent, but for no longer than one additional year.
Where specific circumstances justify doing so, we may retain your data for a longer period to defend against potential legal claims.
9. What rights do you have regarding the processing of your data?
Every data subject has the following rights:
Right of access under Art. 15 GDPR
Right to rectification under Art. 16 GDPR
Right to erasure under Art. 17 GDPR
Right to restriction of processing under Art. 18 GDPR
Right to object under Art. 21 GDPR
Right to data portability under Art. 20 GDPR
The restrictions set out in Sections 34 and 35 BDSG apply to the rights of access and erasure.
9.1 Right to object
What rights do you have if your data is processed on the basis of legitimate or public interests?
Under Art. 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you where such processing is based on Art. 6(1)(e) GDPR (processing in the public interest) or Art. 6(1)(f) GDPR (processing for the purposes of legitimate interests).
This also applies to profiling based on these provisions.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
9.2 Withdrawal of consent
You may withdraw your consent to the processing of your personal data at any time.
Please note that withdrawal of consent only takes effect for the future.
9.3 Right of access
You may request information about whether we store personal data relating to you.
Upon request, we will inform you about the personal data concerned, the purposes for which it is processed, the recipients to whom it is disclosed, how long it is stored, and what additional rights you have regarding this data.
9.4 Additional rights
You also have the right to request the correction of inaccurate data or the deletion of your personal data.
If there is no legal basis for continued storage, we will delete your data. Otherwise, we will restrict its processing.
You may also request that we provide all personal data you have supplied to us in a structured, commonly used, and machine-readable format, either to you or to a person or company of your choice.
Furthermore, you have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).
9.5 Exercising your rights
To exercise your rights, you may contact the data controller or the Data Protection Officer using the contact details provided above, or contact our Human Resources department at:
jobs@saverto.com
We will process your requests promptly and in accordance with the applicable legal requirements and inform you of the measures we have taken.
10. Are you obliged to provide your personal data?
The provision of personal data is neither required by law nor by contract, nor are you otherwise obliged to provide such data.
However, providing personal data is necessary for us to carry out the recruitment process.
This means that we cannot process your application if you do not provide us with personal data as part of your application.
11. Changes to this information
If the purpose or manner of processing your personal data changes significantly, we will update this information in a timely manner and inform you of the changes accordingly.
Last updated: October 2027
