The confidential and responsible handling of personal data is a central component of the corporate culture of 4TEEN4 Pharmaceuticals GmbH. This applies in particular to the personal data of our applicants. This information sheet for the processing of applicant data serves to inform applicants of 4TEEN4 Pharmaceuticals GmbH of the processing of their personal data as well as their respective rights according to the EU General Data Protection Regulation (GDPR).

As part of the application process, 4TEEN4 Pharmaceuticals GmbH processes personal data of its applicants. This involves in particular information provided by applicants themselves. Other information is automatically generated by applicants when using and communicating with the systems of 4TEEN4 Pharmaceuticals GmbH, e.g. through system logins or the sending of emails. Moreover, personal data of applicants can also be generated or made available by third parties.

In particular, the following applicant data will be processed:

• Personal particulars such as name, gender, date of birth, nationality, country of residence, language skills, current and desired position, primary interest, how the applicant heard about 4TEEN4 Pharmaceuticals GmbH, curriculum vitae, professional experience and training, competences, letter of motivation, letter of reference etc.
• Professional and private contact details, in particular address, telephone numbers, email address, etc.
• Credentials and authentication data, in particular ID card copies, ID card data, driver’s license, certificate of good conduct, application photo, etc.

4TEEN4 Pharmaceuticals GmbH needs the requested information from applicants to carry out the application process. For this purpose, applicants are encouraged to provide the information.

If the requested information is not required to complete the application process, applicants will be informed that the information is provided on a voluntary basis and can therefore be refused.

Applicant data will be processed by 4TEEN4 Pharmaceuticals GmbH in accordance with applicable data protection laws for the purpose of carrying out the application process.

In particular, applicant data are processed for the following purpose:

• Implementation of the application process

4TEEN4 Pharmaceuticals GmbH processes applicant data in compliance with the provisions of the GDPR and the national data protection regulations in the respective applicable versions:

a) For Fulfilling (Pre-)Contractual Obligations Art. 6(1)(b) GDPR:

The processing of applicant data is primarily carried out for evaluation purposes and communication with applicants in the course of the application process as pre-contractual measures in accordance with Art. 6(1)(b) GDPR.

b) For Complying with Legal Obligations Art. 6(1)(c) GDPR:

The processing of applicant data is necessary for the compliance with legal obligations. These include for example notifications to tax authorities in case of employment.

c) For Protecting Legitimate Interests Art. 6(1)(f) GDPR:

Due to a balancing of interests, data processing may take place beyond the actual fulfillment of the contract in order to protect our legitimate interests or those of third parties. Such legitimate interest exists, for example, in the exercise and pursuit of rights.

d) As Part of the Applicants’ Consent Art. 6(1)(a) GDPR:

If applicants give their consent to process their data, e.g. for keeping their data for future use (e.g. applicant pool), the data are processed on this basis. They can revoke their declaration of consent at any time without giving reasons.

e) Local Law

If the applicable local law provides individual regulations in addition to the GDPR, processing can also be based on the local regulations. In Germany, this would apply to § 26 BDSG.

At 4TEEN4 Pharmaceuticals GmbH, only those bodies or employees receive personal data who require them to carry out their functions within the scope of contractual and legal obligations or to safeguard a legitimate interest, i.e. Human Resources department; superiors and employees of the departments involved in the application process for the position to be filled. Other than the foregoing, no applicant data will be disclosed or transmitted within 4TEEN4 Pharmaceuticals GmbH.

Data processors commissioned by 4TEEN4 Pharmaceuticals GmbH (especially IT and back-office service providers) receive candidate data when these are needed to perform their functions. All processors are contractually obligated to treat transmitted data confidentially and to process them only as part of their service role.

4TEEN4 Pharmaceuticals GmbH processes applicant data, as far as necessary, for the duration of the entire employment relationship (from application to the end of employment) as well as in accordance with statutory archiving and record-keeping requirements. If no employment contract is concluded with 4TEEN4 Pharmaceuticals GmbH, applicant data will be deleted at the latest after 6 months except in the presence of a legitimate interest or the consent of the applicant to continued storage. The duration of data storage is max. 18 months, if consent is given to keep the documents in the applicant pool.

In addition, the storage period takes into account the statutory limitation periods, in particular under the German Civil Code (BGB) which in certain cases may be up to 30 years (the general limitation period is 3 years).

For details on the storage period of personal data at 4TEEN4 Pharmaceuticals GmbH, applicants may contact the data protection officer for further information.

7. What Rights Do Applicants Have with Regard to Their Personal Data?

In accordance with the provisions of Arts. 15 to 22 GDPR and the terms laid down therein, applicants have the right:

• to obtain information on their personal data processed and to the issue of a copy of the stored data (“Right to Information”, Art. 15 GDPR)
• to request the correction or completion of incorrect or incomplete personal data (“Right to Rectification”, Art. 16 GDPR)
• to request the deletion of the personal data concerning them if the processing is carried out in breach of the GDPR, in particular when the consent of the applicant was revoked or a legitimate objection raised (“Right to Deletion”, Art. 17 GDPR)
• to demand a restriction on the processing of their data and to object to certain processing operations (“Right to Restrict Processing” and “Right to Object, Art. 18 GDPR); and
• to obtain their data in a structured, common and machine-readable format, and transfer the data to another data controller (“Right to Data Portability”, Art. 20 GDPR).

If we process your data on the basis of legitimate interests Art. 6(1)(f) GDPR, you have the right to object to the processing of your data at any time on grounds relating to your particular situation. If it is a matter of objecting to data processing for direct marketing purposes, you have a general right of objection, which will also be implemented by us without giving reasons.

If you wish to exercise your right of objection, it is sufficient to send an informal message to the contact details given in this document.

Applicants are not subject to any decision that results solely from automated processing, including profiling, which has a legal effect on them or significantly affects them in a similar manner.

Every applicant is free to lodge a complaint to the Brandenburg State Commissioner for Data Protection and Freedom of Information at:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht
Stahnsdorfer Damm 77
14532 Kleinmachnow
Tel.: +49 33203 356 - 0
Fax: + +49 33203 356 - 49
E-Mail: Poststelle@LDA.Brandenburg.de

8. Who is the Data Controller and Point of Contact for Questions/Concerns?

Contact – Controller

4TEEN4 Pharmaceuticals GmbH

Neuendorfstraße 15a
16761 Hennigsdorf
Tel.: +49 3302 - 866 885 0
E-Mail: datenschutz@4teen4.de

Based on the GDPR, other applicable data protection laws in EU member states and other data protection regulations, the data controller is the legal entity to which you are applying or have applied.

For all questions on the subject of data protection in connection with our products/services or the use of our website, you can also contact our data protection officer at any time. She can be reached at the above postal address and at the e-mail address given above (keyword: "attn. data protection officer"). We expressly point out that if you use this e-mail address, the contents will not be exclusively noted by our data protection officer. If you wish to exchange confidential information, we therefore request that you first contact us directly via this e-mail address.