Data protection notice for applicants

Mandatory information according to Art. 12 ff. GDPR for applicants


Dear applicant,


With this data information declaration we inform you about the collection and processing of your personal data in the context of the application procedure in accordance with the General Data Protection Regulation (GDPR) in force as of 25.05.2018.


In detail:


1.           Who is responsible for data processing?


We, Muth & Partner mbB, Rangstraße 5, 36037 Fulda, are responsible for data processing.


Contact person at Muth & Partner Wirtschaftsprüfer Steuerberater Rechtsanwälte mbB:

Ralf Kammer, Rangstraße 5, 36037 Fulda, Phone: 0661 97 36-153, E-Mail:


Our data protection officer:

Peter Lindner, BerIsDa GmbH, Justus-Liebig-Straße 4, 36093 Künzell, Phone: 0661 29 69 80 91, E-Mail:


2.           To what extent do we process your data?


During the application process, only the data provided by you (e.g. application, curriculum vitae, and photo if applicable) will be processed.


3.           What is the purpose of the data processing?             


The collection of your personal data is the basis for participation in the application process. In addition, the data provided should make it possible to assess the applicant's suitability for the position to be filled.


Without this information, we cannot consider your application in the application process.                                                                                                                             


The permission of data processing to carry out pre-contractual measures is based on Art. 6 para. 1 lit. b GDPR.



4.           Who receives the data during processing?


Within our company, only those partners and employees who are involved in the application process receive your personal data.


Furthermore, the relevant data may be transferred to third parties based on statutory provisions or contractual agreements in each individual case. These can be processors, such as DATEV eG, IT service providers.


5.           How long is the data stored?


The storage period of your data is at least the period for the application procedure. Nevertheless, in the event of a cancellation, we will delete your data no later than 6 months after the cancellation was sent.


If the application is successful, we store the data in the personnel file for further processing.


6.           Do you have an obligation to provide the data or is the provision necessary for other reasons?


In the application process, you only need to provide the data necessary to assess the suitability of the position to be filled. You cannot participate in the application process without this data. The provision of this information is therefore imperative.


7.           Is your data transferred to a third country or an international organisation?


We do not transfer your data to third countries or international organisations.


8.           Is there automated decision making including profiling?


No automated decision making, including profiling, is used.


9.           What rights do you have?


You have the following rights:


  • Right of access, Art. 15 GDPR

=     the right to know whether personal data are being processed and, if so, for what purpose they were collected, which category of personal data is concerned, the recipients' details or the planned storage period, etc.


  • Right of rectification, Art. 16 GDPR

=     the right to immediate correction of inaccurate personal data


  • Right of erasure, Art. 17 GDPR

=     the right to delete personal data immediately if, for example, the purpose for which the data was collected no longer applies, consent is revoked or an objection is lodged against processing (subject to review of legal exceptions or compliance with legal retention obligations)


  • Right of restriction, Art. 18 GDPR

=     the right that data (during the verification period) will not be processed if the data subject disputes the accuracy of the data or has lodged an objection


  • Right of data transferability, Art. 20 GDPR

=     the right to receive the personal data concerned in a structured, commonly used and machine-readable format and, if necessary, to transmit this data to another person responsible


  • Right of objection, Art. 21 GDPR

=     the right to object to the processing of personal data:


You have the right to object to the lawful data processing in certain cases, Art. 21 GDPR, §36 BDSG. The legal consequence of a justified objection is that a balance of interests must first be weighed up. We may avert the prohibition to process personal data if we can prove compelling reasons for processing that outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.

The legal consequence of a successful objection is that we no longer process your data.

Please address your objection to the Data Protection Officer indicated under point 1). 


For all other requests for information, please also contact our Data Protection Officer.


10.        Where can you complain?


If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to the Data Protection Authority.