1. Who is responsible for data processing and who can you contact?
Bäderbetriebe Frankfurt GmbH (“BBF” for short), Am Hauptbahnhof 16, 60329 Frankfurt aM
E-mail: info@frankfurter-baeder.de
You can contact our data protection officer by post to the above address with the addition: 'To the data protection officer'.

2. Types and categories of data, purpose and legal basis for processing your personal data
2.1. Data types and data categories
Application data is processed to decide whether to hire a person. For this purpose, the following personal data are usually processed:
– Last name, first name, title if applicable
– Contact details such as address, email, telephone number
– Communication content
– Cover letter
- Curriculum vitae
– Photo if necessary (voluntary)
– Certificates and other proof of qualifications
– If necessary, for travel expenses, travel details (e.g. arrival and departure, travel costs, travel means), bank details
– as well as other data that we voluntarily receive from you as part of the application process

2.2. Special categories of data
If special categories of personal data are voluntarily included in the application process (e.g. health data, severely disabled status or ethnic origin and, if applicable, application photo or age), they may be processed in accordance with Art. 9 Para. 2 lit. a GDPR. If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are actively requested by us from applicants as part of the application process, their processing will also take place in accordance with Art. 9 Para. 2 lit. b GDPR (e.g. health data, if these are for the practice of the profession is required).

2.3. Legal basis and implementation of the application process
We offer you the opportunity to apply to us via our website using our online application form. For these digital applications, your application data will be collected and processed electronically by us to process the application process. The transfer of personal data is encrypted to our server and is secured by IT technology.
Alternatively, you can send us your application by email or post. When sending by email, we would like to point out that the sender may need to encrypt them as a precaution. We process your data to decide and, if necessary, establish an employment relationship with you as the data subject in accordance with Article 6 Paragraph 1 Sentence 1 Letter b) GDPR in conjunction with. V. with Art. 88 GDPR and § 26 BDSG.

2.4. Data may be used as part of the application process to assert, exercise or defend potential legal claims
Your personal data, which we received as part of the application process, may be used by us to assert, exercise or defend potential legal claims. The legal basis for processing is Article 6 Paragraph 1 Letter f GDPR.

2.5. Inclusion in our 'talent pool'
If no suitable position can be offered for individual applicants at the time of application, it is possible that their personal data from the application can be processed and used in our talent pool even after completion. This is also possible for temporary seasonal employees who we have hired seasonally, for example, when the outdoor pool is open and the seasonal job with us has ended. The 'Talent Pool' is used to make contact for professional purposes and for possible consideration in future job placements. In this case, you will give us separate consent upon request and agree to this use separately.

3. Categories of recipients to whom the personal data have been or will be disclosed
3.1. The recipients of your personal data are those employees within BBF who need to receive data as necessary to carry out the application process, such as pool management, specialist departments, and human resources departments

3.2. If we have involved service providers for application management who process personal data on our behalf (e.g. applicant platform software, web host), we have entered into order processing agreements with them in accordance with Art. 28 GDPR to ensure the protection of your personal data at all times. Other recipients may be authorities for possible criminal investigations.

4. No transfer to a third country or to an international organization
A transfer of your personal data to a third country or an international organization does not take place and is not intended. If we use external service providers who may transfer personal data to a third country, such as the USA, this will only be done with the inclusion of suitable guarantees such as the EU's adequacy decision such as the EU-US Data Privacy Framework or the conclusion of EU standard data protection clauses .

5. Deletion periods or criteria for retention
In principle, your personal data will be deleted after the purpose of data processing no longer applies, at the latest after the application process has ended (storage limitation), unless statutory retention periods or statutory limitation periods conflict with this. If you have not been hired at BBF after completing the application process, your data will be deleted 6 months after your application was rejected. The storage period is based on our legitimate interest in accordance with Art. 6 Para. 1 lit. b) GDPR in order to be able to reject claims of the rejected applicants according to the AGG if necessary after the rejection has been made. If claims are asserted against us, we reserve the right to store the data for a longer period of time.

6. Origin of data
6.1. Affected person himself
As part of the application process, we process data that you have provided to us.
6.2. Professional social networks
After receiving your application documents, we reserve the right to view your publicly disclosed information (e.g. XING or LinkedIn profile) via the relevant professional social networks (including XING, LinkedIN, Stepstone) or to communicate with you via these professional networks Get in touch with.

7. Necessity to provide the data
The provision of your personal data is neither legally nor contractually required. However, the provision of your personal data is necessary to carry out the application process. If you do not want to provide your personal data, we cannot consider you for an application process at BBF.

8. No automated decision making or profiling
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place as part of the application process.

09. What data protection rights do you have?
As a data subject, you have the following rights with regard to your personal data:

- Right to information (Art. 15 GDPR)
- Right to correction (Art. 16 GDPR)
- Right to deletion (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
– Right to notification obligation (Art. 19 GDPR)
– Right to object (Art. 21 GDPR)
- Right to data portability (Art. 20 GDPR)

To exercise the above-mentioned rights of those affected, you can contact us using the contact details provided in point 1 or by email at datenschutz@frankfurter-baeder.de.

9.1. Right to complain
Those affected have the right to lodge a complaint with a data protection supervisory authority.

10. Further information on data protection
If you have any questions about data processing or data protection at BBF, please contact our data protection team (data protection coordinator and data protection officer) in writing by email: datenschutz@frankfurter-baeder.de