Privacy Notice Regarding Inclusion in the 3con Talent Pool
1. data protection at a glance
The following information provides an overview of what happens to your personal data when you give your consent to be added to our talent pool. Personal data refers to any information that can be used to identify you personally.
Detailed information on the subject of data protection can be found in the following explanations.
2. responsible person
The controller responsible for data processing for this application is:
3con Management Consultants GmbH
Friedrich-Ebert-Str. 17
53177 Bonn
Phone: +49228748860
Email: privacy@3con-consultants.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
3. data protection officer
We have appointed a data protection officer for our company:
Dr. Marcus Heinrich
3con Management Consultants GmbH
Friedrich-Ebert-Str. 17
53177 Bonn
Phone: +49228748860
E-mail: datenschutz@3con-consultants.de
4. general information on data processing
We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR).
If you agree to be added to the talent pool, various types of personal data will be collected. This privacy notice explains what data we collect and how we use it.
5. Data Collection as Part of the Talent Pool Onboarding Process
a) Type and scope of data processing
As part of the process of adding you to our talent pool, we collect the data you provide during the application process or upon request, specifically:
- Surname, first name
- Contact information (e.g., email address, phone number)
- Application materials (e.g., resume, transcripts, credentials)
- Additional voluntary information
Providing the information required for inclusion in the talent pool is necessary so that we can consider you for future job openings.
b) Purpose of the processing
Processing is carried out for the following purposes:
- Enrollment and Management in the Talent Pool
- Assessing Your Suitability for Future Job Openings
- Inquiries about suitable career opportunities
- Information about relevant updates from the company
c) Legal bases
The processing takes place on the basis of:
- Art. 6 para. 1 lit. b GDPR (contract/pre-contractual measures – registration for the event)
- if applicable, Article 6(1)(a) of the GDPR (consent to inclusion in the talent pool)
6. recipient of the data
Within our company, your data will be processed only by those departments responsible for managing the talent pool.
In addition, we use external service providers (data processors), in particular: Microsoft Ireland Operations Ltd. (provision of Microsoft Forms / Office 365 / Microsoft Teams).
7. data transfer to third countries
When using Microsoft Forms and Microsoft Teams, personal data (e.g. name, e-mail address, IP address and communication content) may be transferred to a third country (in particular the USA).
The transfer takes place on the basis of suitable guarantees in accordance with Art. 46 GDPR, in particular through the conclusion of EU standard contractual clauses. Microsoft is within the scope of the EU -USData Privacy Framework and we have concluded standard contractual clauses.
8. storage period
Your personal data will be stored in the talent pool for a period of 24 months and then deleted, unless you provide renewed consent. Your data will be deleted earlier if you withdraw your consent.
9. your rights as a data subject
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. To exercise your rights, simply send a message to the contact details above.
10. right of appeal to the supervisory authority
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
11. obligation to provide the data
The provision of your personal data is voluntary. To the extent that certain information is required for inclusion in the talent pool, those fields are marked as required. Without this information, inclusion is not possible.