Information from SHL AG Regarding the Processing of Your

Data Collected During Your Application


1.The responsible party for the data processing is


Spaichinger Weg 14

78583 Böttingen, Germany

represented by the Executive Board 

Mr. Winfried Häring and Mr. Gerd Lehr 

Telephone: +49 (0) 7429 9304 0

Fax: +49 (0) 7429 9304 50



Personal Data

The categories of personal data (i.e. data that can be directly traced back to you) that are processed during the application process particularly include the core data that is necessary for the application procedure, such as first name, last name, address, and telecommunication information. 


We have received or collected this data from you in a proper manner as part of the application process. We may also, however, have received this data from third parties (e.g. employment agency) if you have provided your data for further communication.


Purpose of the Processing of Personal Data / Legal Basis

We process your personal data on the basis of the provisions of the General Data Protection Regulation (GDPR), the German Data Protection Act (BDSG), and all other applicable laws (e.g. BGB, AGG). 


The data collection and processing serves the execution of the application process, as well as the assessment of the extent to which applicants are suitable for the respective advertised position. The data processing is necessary in order to be able to make a decision regarding the establishment of an employment relationship. The legal basis for this is Art. 6 Para. 1 b GDPR in conjunction with Section 26 Para. 1 BDSG. Consent in accordance with Art. 6 Para. 1 a, Art. 7 GDPR in conjunction with Section 26 Para. 2 BDSG can also be considered a legal basis for data processing. 


Provided that special categories of personal data in accordance with Art. 9 Para. 1 GDPR are processed (in particular, health information), this is only done with your consent in accordance with Art. 9 Para. 2 a GDPR, to the extent that legal authorizations such as Art. 9 Para. 2 in conjunction Section 26 Para. 3 BDSG are not relevant.


If we wish to process your personal data for a purpose that is not mentioned above, we will inform you of this in due time beforehand.


Categories of Recipients of Personal Data

Your personal data will only be communicated to the people and units that require it as part of the application process (e.g. Human Resources department, Executive Board, Department Management) or that ensure compliance with legal or (pre)contractual obligations (e.g. Accounting, tax consultant if needed, tax authorities). 


Duration of Data Storage

We will delete your personal data as soon as it is no longer needed for the aforementioned purposes. This is usually done six months after the completion of the application process. This does not apply if legal provisions prevent the deletion or if continued storage is necessary for the purposes of documentation and record-keeping. In the event that an employment relationship has been established, we will transfer your data over to our human resources management systems. At your request or with your consent, we will also store your data if you were not chosen for the specific position opening, but could be a candidate for a potential later opening. 


No Automatic Decision-Making / Profiling

We do not carry out automated decision-making in individual cases or profiling (Art. 22 GDPR). 


Your Data Protection Rights:

In accordance with Art. 15 GDPR, you can request information on the data stored about you. Furthermore, you can, in accordance with Art. 16, Art. 17, and Art. 18 GDPR and under certain circumstances, request the rectification, the erasure, and the restriction of processing of your data. You have a right to receive the data you have provided in a structured, commonly used, and machine-readable format (Art. 20 GDPR). If your data is processed pursuant to Art. 6 Abs. 1 e and f GDPR (including processing in the public interest, to preserve legitimate interests), you can object to this processing in accordance with Art. 21 GDPR (for instance, sending an email to with the subject "Data Protection" is sufficient).


We will then cease to process your personal data unless there are compelling legitimate grounds for the processing that prevail over your interests, rights, and freedom, or if the processing serves to assert, exercise, or defend any and all legal rights and claims.


You have the right, in accordance with Art. 7 Para. 3 GDPR, to revoke any consent granted pursuant to Art. 6 Para. 1 a or Art. 9 Para. 2 for the processing of personal data at any time without providing a reason, in which case the legality of the processing done based on the consent until the revocation remains unaffected.


In accordance with Art. 77 GDPR, you have the right to file a complaint with a supervisory authority. The responsible data protection supervisory authority in Baden-Württemberg is:

State Officer for Data Protection and Freedom of Information in Baden‑Württemberg

Königstraße 10a

70173 Stuttgart, Germany

Tel.: 0711 / 61 55 41 -0

Fax: 0711 / 61 55 41 -15



Böttingen, May 2018