We are pleased that you have applied to Jamestown Europe. Transparency and a trustful handling of your personal data is an important basis for a good cooperation. We therefore inform you about how we process your data and how you can exercise your rights under the General Data Protection Regulation. The following information will give you an overview of the collection and processing of your personal data in connection with the application procedure.

Who is responsible for the processing?

The controller is:
Jamestown Europe GmbH
Marienburger Straße 17
50968 Cologne
Germany

How can I contact the data protection officer?

You can reach our data protection officer (DPO) as follows:
Jamestown Europe GmbH
Data Protection Officer
Marienburger Straße 17
50968 Cologne, Germany
E-Mail of the DPO: jteu-privacy@jamestown.de

Which personal data do we use?

We process your personal data, as far as they are necessary for the execution of the application procedure. This includes the following data categories:

Standard information:

• Applicant master data (first name, last name, job position)
• Qualification data (cover letter, CV, previous activities, professional qualification)
• Work certificates and certificates (performance data, assessment data etc.)

Special information required due to the position to be filled 

• Police certificate of good conduct
• Schufa creditworthiness information
• Results of the aptitude test

Other information 

• Voluntary information, such as e.g. an application photo, information on severely disabled persons or other information that you voluntarily provide to us in your application. 

From which sources does the data come?

We process personal data that we receive from you during the application process, and from the following sources:

• Other Group companies (i.e. Jamestown Europe Management B.V., Jamestown US-Immobilien GmbH, Jamestown, LP)
• Recruitment service providers.

For what purposes do we process your data and on what legal basis?

We process your personal data in particular in compliance with the General Data Protection Regulation (GDPR) and all other local applicable laws.

Data processing for the purpose of the application (Art. 6 para. 1 lit. b GDPR)

Personal data of employees may be processed if it is necessary for the performance of the employment contract. Personal data of applicants may be processed for the purposes of the application procedure if this is necessary for the decision to enter into an employment contract.

The necessity and scope of the data collection are judged, among other things, by the position to be filled. If your desired position involves the performance of particularly confidential tasks, increased personnel and/or financial responsibility, or is linked to certain physical and health conditions, more extensive data collection may be necessary. In order to protect data protection, such data processing takes place only after the selection of applicants has been completed and immediately before you are hired.

Data processing on the basis of a consent given by you (Art. 6 para. 1 lit. a GDPR, Section 26 para. 2 BDSG)

If you have given us your voluntary consent to the collection, processing or transfer of certain personal data, then this consent forms the legal basis for the processing of this data.

In the following cases we process your personal data on the basis of your consent:

• Admission to the applicant pool, this means we store the application documents beyond the current application procedure for consideration in later application procedures;
• Share the application with Group companies;
• Forwarding your application documents from the applicant pool to recruitment service providers.

On the basis of a legitimate interest of the controller (Art. 6 para.1 lit. f GDPR)

In certain cases we process your data to protect our legitimate interests or those of third parties:

• To defend legal claims in proceedings under local laws and regulations (e.g. in Germany, the German General Equal Treatment Act (AGG)). In the event of a dispute, we have a legitimate interest in processing the data for evidence purposes.
• Data comparison with EU anti-terrorist lists in accordance with Regulations (EC) No. 2580/2001 and 881/2002: As a company, EU law obliges us to play our part in the fight against terrorism. No funds may be made available to persons and organizations on the terrorist lists (provision prohibition). We are also obliged to carry out this comparison for the AEO certificate as an "authorized economic operator".

To whom will your data be passed on to?

Your data will be processed mainly by our human resources department and the department manager of the position to be filled. In some cases, however, other internal and external bodies are also involved in the processing of your data.

Internal departments:

• Human resources department
• Department manager
• Works council

Companies in the Group:

Jamestown Europe Management B.V.
Pilotenstraat 39A
1059 CH Amsterdam
The Netherlands

Jamestown, LP
675 Ponce de Leon Avenue, 7th Floor
Atlanta, Georgia 30308
United States of America

Jamestown US-Immobilien GmbH
Marienburger Straße 17
50968 Cologne
Germany

External Services Providers:

• Service provider of candidate management systems
• IT service providers (e.g. maintenance service providers, hosting service providers)
• Service Provider for data and file destruction

In case you have further questions regarding our individual recipients, please contact us at careers@jamestowneurope.com

Will your data be transferred to countries outside the European Union (so-called third countries)?

Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently from countries within the European Union. We also use service providers located in third countries outside the European Union to process your data. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection.

We have therefore taken special measures to ensure that your data are processed in third countries as securely as within the European Union. Such measures include, inter alia, concluding the standard data protection clauses provided by the Commission of the European Union with service providers in third countries. These clauses provide appropriate guarantees for the protection of your data with service providers in third countries.

If you wish to review the existing warranties, you can contact us at jteu-privacy@jamestown.de

For how long do we store your data?

We store your personal data for as long as this is necessary for the decision on your application. If an employment relationship between you and us is not concluded, we may also further store data, insofar as this is necessary to defend against possible legal claims. Your data will be regularly deleted within 6 months after the end of the application process.

If an employment relationship is not established, but you have given us your consent for the further storage of your data, we will store your data until your consent is revoked, but for a maximum of further three years. On specific occasions, we may also store your data for a longer period of time for the purpose of defending us against possible legal claims.

What rights do you have in connection with the processing of your data?

Every data subject has the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR.

Right to object

What right do you have in the event of data processing for legitimate or public interest?

Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data on the basis of Art. 6 para.1 lit. e GDPR (data processing in the public interest) or Article 6 para. 1 lit. f GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Revocation of consent

You can revoke your consent to the processing of your personal data at any time. Please note that the revocation is only valid for the future.

Right to information

You may request information as to whether we have stored personal data about you. If you wish, we will inform you of the data concerned, the purposes for which the data is processed, to whom this data is disclosed, how long the data is stored and what further rights you are entitled to with regard to this data.

Further rights

In addition, you have the right to have your data corrected or deleted. If there is no reason for further storage, we will delete your data, otherwise, we will restrict processing. You may also request that we provide all personal information that you have provided to us in a structured, current and machine-readable format either to you or to a person or company of your choice. In addition, there is a right to lodge a complaint to the responsible data protection supervisory authority (Art. 77 GDPR).

Assertion of your rights

To exercise your rights, you can contact the Controller or the Data Protection Officer using the contact details provided or the human resources department at careers@jamestowneurope.com. We will process your enquiries immediately and in accordance with legal requirements and inform you of the measures we have taken.

Is there an obligation to provide your personal data?

There is no legal or contractual obligation for you to provide your personal data. However, providing your personal data is required to carry out the application process. This means, that if you do not provide this data, we will not be able to carry out the application process.

Changes to this information

If the purpose or manner of processing your personal data changes significantly, we will update this information in time and inform you about the changes.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.