Privacy Policy

We value your privacy and want to inform you about how we handle your personal data when you use our services.

Dear applicant, below we inform you about the processing of your personal data (Art. 4 No. 2 GDPR) in connection with your application on our online applicant platform (accessible at https://www.careers.mis-munich.de ). Data protection is a top priority for the Munich International school. We want you to know when we store which data and how we use it. Data processing is subject to applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Bavarian Data Protection Act (BayDSG), and the Digital Services Act (DDG)

Name and contact details of the data controller

Munich International School e.V.
Schloss Buchhof
82319 Starnberg, GERMANY
info@mis-munich.de
+49 (0) 8151 3660

DPO

MIS Data Protection Officer
Schloss Buchhof
82319 Starnberg, GERMANY
dpo@mis-munich.de

Your rights

Here you will find information about your rights regarding your personal data. Details can be found in Articles 7, 15-22 and 77 of the GDPR. You can contact the data controller or the data protection officer regarding these matters.

Right to withdraw your consent under data protection law pursuant to Art. 7 para. 3 sentence 1 GDPR
Right of access pursuant to Article 15 GDPR
Right to rectification and completion pursuant to Article 16 GDPR
Right to erasure (“right to be forgotten”) pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to object pursuant to Article 21 GDPR
Automated decision-making in individual cases, including profiling, pursuant to Article 22 GDPR
Complaint to a data protection supervisory authority pursuant to Article 77 GDPR

General information

The data submitted with your application is transmitted using TLS encryption and stored in a secure database. This database is operated by perbit Software GmbH, which provides a human resources and applicant management software solution (https://perbit.com/datenschutz/ ). In this context, perbit Software GmbH acts as our data processor in accordance with Article 28 of the GDPR. The processing is carried out based on a data processing agreement between us, as the data controller, and perbit Software GmbH.

Processing of Personal Data by the Operator of the Recruitment Platform, perbit Software GmbH

What data do we process and from which sources does it come?

During the application process, we collect and process the following personal data from you:

Applicant master data (first name, last name, title, email address, telephone number, address, date of birth, nationality)
Qualification data (cover letter, letter of motivation, CV, previous activities, professional qualifications and skills)
Voluntary information, such as an application photo, information about severe disability, extracurricular interests or other information that you voluntarily provide or upload to us in your application
Additional questions depending on the specific job posting (e.g., driver's license, nationality, reason for an internship)
The communication between you and us, as well as comments and reviews written about you during your application process.
Information on how you became aware of the job offer

If you wish to use the profile data import feature from Xing or LinkedIn, you must first register with Xing or LinkedIn. The data will only be imported into the application form after you have given your consent.

For what purposes do we process your data and on what legal basis?

The legal basis for data processing is Section 26 Paragraph 1 of the Federal Data Protection Act (BDSG). The processing serves the purpose of preparing, concluding, and executing an employment contract, for which a review and evaluation of the application documents by our responsible internal departments is necessary.

Who receives your data?

Within this creer portal, your data is only accessible to those departments involved in preparing and conducting the application process. These include employees in the HR department, the departments where a position is to be filled, the managers, and potential supervisors.

How long will your data be stored?

The data you enter in the application form will be processed and stored for the duration of the application process. The data will be deleted no later than six months after the applicant is informed of the outcome of the process. This does not apply if the processing and storage of your personal data is necessary in a specific case for the establishment, exercise, or defense of legal claims (duration of legal proceedings).

If you consent to the storage of your application data beyond the end of the specific application process in a so-called "talent pool," your application data will be stored for a maximum of two years from the date you give your consent. Your data may be used at a later date to contact you and continue the application process if you are being considered for another position.

The legal basis for data processing in this case is your consent (Art. 6 para. 1 lit. a) GDPR), which also includes any special categories of personal data that you have provided in your application documents (Art. 9 para. 2 lit. a) GDPR). You can withdraw your consent to the inclusion of your application documents in our applicant pool at any time with effect for the future.

Will data be transferred to a third country or an international organization?

No data is transferred to third countries.

Who receives your data?

We only share your personal data with third parties if:

You have given your explicit consent in accordance with Art. 6 para. 1 lit. a) GDPR.
This is legally permissible and necessary for the performance of a contract with you or for taking steps prior to entering into a contract, in accordance with Article 6(1)(b) GDPR.
There is a legal obligation to disclose the data pursuant to Art. 6 para. 1 lit. c) GDPR. We are legally obligated to transmit data to government authorities, e.g. tax authorities, social security institutions, health insurance funds, regulatory authorities and law enforcement agencies.
The transfer is necessary pursuant to Art. 6 para. 1 lit. f) GDPR for the purposes of the legitimate interests pursued by the company, as well as for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred.
In accordance with Article 28 GDPR, we use external service providers, so-called data processors, for processing your data, who are obligated to handle your data carefully.

We use such service providers in the following areas:

Telecommunications, web hosting and hosting of the online application portal.

We do not transfer your personal data to external parties in third countries, meaning countries outside the European Union (EU) or the European Economic Area (EEA).

Munich International School e.V. reserves the right to update this Data Privacy Statement at any time to ensure ongoing compliance with applicable legal requirements or to reflect changes in the services we provide, such as the introduction of new offerings. The updated Data Privacy Statement will apply to any subsequent visits to this recruitment website or to any future job applications.
If you have any questions regarding this privacy policy, contact us at dpo@mis-munich.de.

For further information on how MIS processes applicant and staff data, please visit mis-munich.de/privacy-policy