Skip to main content

Processing of (personal) data by the entity in charge of the online application process

Privacy Policy

In the following, you can find information about the collection of personal data when using our website

1. Data Controller and Data Protection Officer

The controller within the meaning of the EU General Data Protection Regulation (GDPR), is: Menzell & Döhle GmbH & Co. KG, Alter Wall 55, 20457 Hamburg.
You can reach our data protection officer at: datenschutz@menzelldoehle.de

2. Your data subject rights

You have the following rights regarding your personal data :
  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to data portability
  • In the case of processing of personal data for the performance of tasks in the public interest (Art. 6(1)(e) GDPR) or for the performance of legitimate interests (Art. 6(1)(f) GDPR), you may object to the processing of personal data relating to you at any time with effect for the future if there is no reason for further processing.
If you have given us consent, you can withdraw this at any time with future effect.
You also have the right to lodge a complaint with the responsible supervisory authority. We do not intend to use any personal data collected from you for any automated decision-making process (including profiling).

3. No obligation to provide personal data

There is no general legal or contractual obligation for you to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the data required for this.

4. Collection of general information when visiting our website

When you access our website, some information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used and the domain name of your Internet service provider. This is information that does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet. In particular, they are processed for the following purposes:,
  • ensuring a smooth connection setup of the website,
  • ensuring the smooth use of our website,
  • evaluating system security and stability, and
  • for other administrative purposes
The processing of your personal data is based on our legitimate interest (Article 6(1)(f) GDPR) from the aforementioned data collection purposes. We do not use your data to draw conclusions about your person. Recipients of the data are only the controller and, if applicable, our processors.
Anonymous information of this kind is statistically evaluated by us, if necessary, in order to optimize our Internet presence and the technology behind it.

5. Contact requests

If you contact us by e-mail, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored in order to answer your questions. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR), namely our legitimate interest in responding to your requests.

6. Use of Google Maps

This website uses Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about visitors' use of the map functions. You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Center.
Detailed instructions on how to manage your own data in connection with Google products can be found here.

7. Use of cookies

a) General
We use cookies on our websites. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive by means of a string of characters, through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offer as a whole more user-friendly and effective, i.e. more streamlined for you.
Cookies can contain data that make it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that cannot be related to a specific person. However, cookies cannot directly identify a user.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. With regard to their function, a distinction is made between cookies:
(b) Classification and legal basis
This page distinguishes between (i) necessary cookies, which are mandatory for the technical functions of a website, (ii) functional cookies, which allow the analysis of website usage, and (iii) marketing cookies, which are required by advertising companies to display interest-based advertising.
(i) Necessary Cookies
Necessary cookies are needed for the core functions of a website. These cookies are used to ensure that you can log in securely, that the website remembers your login data, that you can place purchases in the shopping cart, that the language settings are selected correctly and that an optimal appearance of the website can be ensured. Legal basis is § 25 TDDDG (German Act on Data Protection and the Protection of Privacy in Telecommunications and Digital Services).
Provider/DomainCookie namePurposeRecipientStorage periodmenzelldoehle.dePHPSESSIDStorage of the respective PHP-SessionFirst-PartySessionmenzelldoehle.dedlh_googlemapsStorage of the necessary consent to display the mapFirst-Party1 year
(ii) Functional Cookies
Functional cookies allow us to analyze the usage patterns of website visitors in order to improve performance. These cookies collect information about how a website is used - for example, which pages are accessed most frequently or whether error messages appear. No information is stored that would allow the user to be identified. The information collected is aggregated and analyzed anonymously only. These cookies are used solely for the purpose of improving the performance of the website. This data is only processed if the user has given his consent in the cookie banner, Article 6(1)(a) GDPR.
No functional cookies are used when visiting this site.
(iii) Marketing Cookies
Marketing cookies are used by advertising companies to display interest-based advertising. By means of such cookies, information can be shared with social networks and advertising providers. They are also used to display interest-based advertising to you. This data is also only processed if the user has given their consent within the cookie banner, Article 6(1)(a) GDPR in connection with § 25 (2) Nr. 2 TDDDG.
No marketing cookies are used when visiting this site.

c) Management of cookies

The management of cookies depends on the respective legal basis for the processing. As a rule, you cannot turn off the use of technically necessary cookies; in exceptional cases, we ask you to clarify for us reasons from your situation that should prevent such processing. Without the technically necessary cookies, some of the functions of the website will not be available.
You can also delete cookies already stored on your terminal device at any time. If you wish to prevent the use of cookies, you can refuse the acceptance of cookies in your browser. Please refer to the information of the browser you are using to find out how this works in detail

8. Applicant management

You can submit both a proactive application or an application for one of the advertised positions in our group of companies. The data entered there is required for the initiation of an employment relationship, and furthermore, to enable the related communication and to process your request. These processing operations are based on Art. 6(1)(b) GDPR in conjunction with § Section 26 (1) BDSG. Data of rejected applicants will be deleted after six months.

9. Duration of data processing

Your data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes; the legal bases stated in the context of the processing purposes apply accordingly.

10. Recipients

The following categories of recipients may receive access to your personal data:
  • Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security).
  • Government agencies / authorities, insofar as this is necessary for the fulfillment of a legal obligation. The legal basis for the transfer is Article 6(1)(c) or Article 6(1)(f) GDPR;
  • Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the disclosure is Article 6(1)(b) or Article 6(1)(f) GDPR.

11. Disclosure to recipients outside the EEA

We do not share personal data with recipients located outside the EEA or in third countries, unless this is explicitly stated. In this case, we ensure before the transfer that either an adequate level of data protection exists by the recipient (e.g. based on an adequacy decision of the EU Commission for the respective country or the conclusion of standard contractual clauses of the European Union) or your consent to the transfer has been obtained.
Further information on this, in particular on the measures taken, can be obtained from our Data Protection Officer.

12. Change of our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.