Logo
 

Data protection policy

Data protection information for applicants
The present notes pursuant to Art. 13 et seq. GDPR, § 32 BDSG on data protection serve the obligation to provide information when collecting personal data from data subjects as part of the application process of Fortlane Partners GmbH and/or its affiliated companies.
 
All of the following personal designations refer to members of all genders.
1. Name and contact details of the controller:
Fortlane Partners GmbH
Prinzregentenstr. 56
80538 Munich
Germany
 
(hereinafter "Fortlane Partners", "we", "us").
2. Contact details of the data protection officer:
Holzhofer Consulting GmbH
Martin Holzhofer
Lochhamer Str. 31
82152 Planegg
Germany
Phone: + 49 89 1 25 01 56 00
E-mail: datenschutzbeauftragter@holzhofer-consulting.de
3. Purposes for which the personal data are to be processed and the legal basis for the processing
In order to be able to carry out the application process, we, as well as third parties or order processors commissioned by us, process the following data from you, insofar as you have provided us with this during the application process or in the course of the contractual relationship:
  • desired position
  • professional degree
  • personal data (first name, last name, address, telephone, date of birth, place of birth, e-mail address, mobile phone number)
  • nationality
  • possibly details of the driver's license and/or vehicle
  • details of the desired working time
  • desired start date
  • details of the desired salary
  • other data: curriculum vitae, employment references, certificates assessing qualifications.
The legal basis is Art. 88 GDPR and further § 26 para. 1 BDSG.
Insofar as you agree to the storage of your application in an applicant pool, the purpose of the data processing is to contact you in order to propose comparable positions. The legal basis for this is Art. 6 para. 1 lit. a GDPR. Consent is voluntary and can be revoked at any time by contacting the HR department.
To reduce face-to-face contact, we may conduct interviews via a video conferencing system. Recordings of the conversations are not made in the process. The legal basis for interviews by video is Art. 6 para. 1 lit. f GDPR.
A balancing of interests was carried out and came to the conclusion that the interests of the applicants concerned, among other things due to the technical and organizational measures taken, do not outweigh the interests of the person responsible for reducing contacts in order to avoid infections and that the person concerned himself has an interest in reducing personal contacts.
A number of your data (e.g. name, business e-mail address, business phone number, user ID (e.g. M365 user name and passwort), IP-address, metadata of the documents) is processed for the administration and security of the IT system. This includes created and archived text documents (e.g. correspondence). This also includes data collected in the course of the use of the internal WLAN. This processing is critical for ensuring the safe operation of our system and, consequently, for the processing of your application. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. A balancing of interests was carried out and it was concluded that the interests of the applicants concerned, among other things due to the technical and organizational measures we have taken, do not outweigh our interests in the proper and trouble-free functioning of the IT system.
4. Obligation to provide personal data
The provision of the personal data listed under item 3 is necessary for the implementation of the application procedure or required for inclusion in the applicant pool at goetzpartners. Failure to provide would result in the inability to conduct the application process or to be included in an applicant pool.
 
5. Automated decision making including profiling
Your personal data will not be used by goetzpartners to make automated individual decisions, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR processed.
6. Data transfer outside the EU/EEA
Data transfers to countries outside the EU and the European Economic Area ("Third Countries") occur in the context of the administration, development and operation of IT systems. The transfer is made only on the following basis:
  • on an adequacy decision of the European Commission according to Art. 45 GDPR.
  • on an approved certification mechanism pursuant to Art. 42 GDPR together with legally binding and enforceable obligations of the controller or processor in the Third Country.
  • on standard data protection clauses adopted by the Commission pursuant to the the examination procedure referred to in Art. 93 para. 2 GDPR.
Currently, in connection with the performance of the employment relationship, data transfer to countries outside the EU and the European Economic Area ("Third Countries") takes place in the following cases:
  • Transfer of data to Microsoft Corporation, 1 Microsoft Way, Redmond, Washington 98052-8300, USA (e.g. in connection with the use of our video conferencing system)
For the USA, the European Commission has issued an adequacy decision according to Art. 46 para. 3 GDPR, which applies to the EU-US Data Privacy Framework (DPF). For data exports to recipients in the USA that are certified according to the DPF, the level of data protection is thus considered adequate. Microsoft is certified under the DPF and thus committing to comply with European data protection principles. 
7. Recipients of data and data sources
7.1 Categories of recipients of data
To the extent permitted by law, we disclose personal data to external parties as part of an application process:
  • Lawyers in case of (labor) legal advice
  • Courts
For the processing of personal data for the purposes mentioned herein, we use the following categories of recipients as processors pursuant to Art. 28 GDPR:
  • Hosting and operation online video conferencing system
  • Operation e-mail server
  • Telecommunications service provider to operate our telephone systemServiceprovider for AI-based cybersecurity software

All personal data collected by us will be processed and used only for the purpose of carrying out the application process. Otherwise, your personal data will only be disclosed or transmitted to third parties if this is necessary for the purposes described here or if you have given your express prior consent. You have the right to revoke your consent at any time with effect for the future.
 
Your data will also be passed on if we are legally obliged to do so.
 
7.2 Data sources
We only process personal data that we have received from you as part of the application process.
8. Storage period and criteria for determining the duration
In the case of an application, personal data is generally stored for the duration of the application process. Personal data may also be stored for the performance of a task that is in the public interest or in the exercise of official authority. In addition, personal data may also be stored for the duration of the exercise or defense of legal claims.
Documents of rejected applicants are kept for up to six months on the basis of the General Equal Treatment Act (AGG) and the Code of Civil Procedure (ZPO).
In the event of consent to participate in the applicant pool, personal data will be stored for the duration of the consent to the extent permitted by law, unless revocation is received beforehand.
9. Information on your data subject rights
Unless otherwise indicated, Fortlane is responsible for the processing of your data.
You have the right to request from us access to personal data (Art. 15 GDPR) and the rectification of inaccurate personal data (Art. 16 GDPR). Furthermore, you have the right to obtain the erasure of personal data (Art. 17 GDPR) concerning your person, the right to restriction of processing (Art. 18 GDPR) and the right to receive (Art. 20 GDPR) the personal data provided to us by you, in a structured, commonly used and machine-readable format.
In addition, you have the right to object at any time to the use of your data based on public or legitimate interests (Art. 21 GDPR).
Where the processing is based on your given consent you can withdraw the consent (Art. 7 Sec. 3 GDPR) at any time. Upon receipt of your withdrawal of consent, we will no longer use or process the data concerned for purposes mentioned in your consent.
If you wish to exercise your rights, please send your request by e-mail to datenschutzbeauftragter@holzhofer-consulting.de or by letter post to the above address. 
 
10. Right of complaint to a supervisory authority
In addition, pursuant to Art. 77 para. 1 GDPR you have a right to complain to a supervisory authority. For further information, please contact your local supervisory authority. For Fortlane Partners GmbH, this is the
The Bayerische Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision),
PO-box 1349
91504 Ansbach
Germany
Phone: +49 981 180093-0
E-Mail: poststelle@lda.bayern.de
 
Status:  January 2025