Privacy Policy

We, AURELIUS Beteiligungsberatungs AG, provide the AURELIUS career website under the web address [career.aurelius-group.com]. In context with our career website and our application process, we process personal data.

The protection of personal data is important to us. We process personal data only in accordance with the applicable data protection requirements, in particular the General Data Protection Regulation (GDPR).

In Section A of this Data Protection Information we provide you with information about the controller responsible for the processing of your personal data and the controller’s data protection officer.

In Section B you find information about the processing of your personal data in the context of our career website.

In Section C you find information about the processing of your personal data as our applicant.

In Section D you find more detailed information on the use of cookies or similar technologies.

In Section E you further find information on your rights regarding the processing of your personal data.

The technical terms relating to data protection used in this Data Protection Information have the meaning used in the General Data Protection Regulation. You will find more detailed information about this in Section F.

TABLE OF CONTENTS

A……. Information on the controller. 3

I.        Identity and contact details of the controller. 3

II.       Contact details of the controller’s data protection officer. 3

B……. Information on the processing of personal data on our career website. 4

I.        Informational use of our career website. 4

II.       Use of web analysis technologies (Matomo). 9

III.       Use of our online contact forms. 12

IV.       Use of our online application forms in order to apply for our own job offerings. 16

V.       Our email newsletter. 20

C……. Information on the processing of personal data of our applicants. 25

I.        Details on the personal data which are processed. 25

II.       Details on the processing of the personal data. 28

III.       Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations. 29

D……. Information on the use of cookies or similar technologies. 31

I.        General information on cookies. 32

II.       Management of the cookies used on our website. 33

III.       Cookies used on our website. 34

E……. Information on the rights of data subjects. 36

I.        Right of access. 37

II.       Right to rectification. 37

III.       Right to erasure (”right to be forgotten”) 37

IV.       Right to restriction of processing. 37

V.       Right to data portability. 38

VI.       Right to object. 38

VII.      Right to withdraw consent. 38

VIII.     Right to lodge a complaint with a supervisory authority. 39

F……. Information about the technical terms of the General Data Protection Regulation used in this Data Protection Information. 40

G……. Effective date of and changes to this Data Protection Information. 41

A. Information on the controller

I. Identity and contact details of the controller

AURELIUS Beteiligungsberatungs AG

Unterer Anger 3, 80331 Munich, Germany

info@aureliusinvest.de

+49 89 5447990

II. Contact details of the controller’s data protection officer

AURELIUS Beteiligungsberatungs AG

– Datenschutzbeauftragter –

Unterer Anger 3, 80331 Munich, Germany

datenschutz@aureliusinvest.de

B. Information on the processing of personal data on our career website

I. Informational use of our career website

When the use of our website is purely informational, certain information is sent to the web server of our website from your device for technical reasons, for example your IP address. We process this information in order to provide our website content requested by you and to ensure the security of the IT infrastructure used to provide our website. Information necessary for the correct provision of the requested website content is stored in cookies (Section C) on your device. The cookies and the information stored in them can be read during your visit to our website in order to ensure correct display of the website content you accessed.

In order to provide the language selection function of our website, information about your language selection is stored in cookies (Section D) on your device. The cookies and the information stored in them can be read during your visit to our website in order to provide you with the content of our website in the language you have selected.

In order to provide the search functions of our website, we process data that you enter into search forms on our website in order to provide you with search results for the search terms that you have entered.

In order to provide the data protection setting functions for our website (e.g. for granting or withdrawing consent for the use of certain cookie-based technologies), information about your data protection settings is stored in cookies (Section D) on your device. The cookies and the information stored in them can be read during your visit to our website in order to take account of your data protection settings when using our website.

You receive more detailed information on this below:

1. Details on the personal data which are processed

Categories of personal data processed Personal data included in the categories Sources of the dataObligation of the data subject to provide the data Storage duration
HTTP DataProtocol data which accrue when visiting our website via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons: These include IP address, type and version of your internet browser, operating system used, site accessed, last site accessed before visiting the site (referrer URL), date and time of visit.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot provide the content of our website requested by you.The data are stored in server log files for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.
Content Provision DataData used to correctly display the website content accessed by the user: This includes information on which contents have already been displayed and do no longer need to be displayed upon the access of further pages on our website. This data is stored in cookies on your device (Section D) and can be read during your visit to our website.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, certain content will be displayed too often and may interrupt your browsing experience.We process the data only temporarily for the period of the visit of our website. (You can find information on the validity period of the cookies stored on your device in Section D.III.)
Search Function DataData that accrue by using the search functions of our website: These include all information that you enter as search terms in the respective search form on our website.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, you cannot use the search functions of our website.The data are stored in server log files for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.
Language Selection DataData that accrue when the language selection function of our website is used: These include the language you have selected. This data is stored in cookies on your device (Section D) and can be read during your visit to our website.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot provide the language selection function of our website. This means that we cannot provide the requested contents of our website in the language of your choice.We process the data only temporarily for the period of the visit of our website. (You can find more information on the validity period of the cookies stored on your device in Section D.III.)
Data Protection Setting DataData on data protection settings you have made for our website: This includes information on whether you have given your consent and, if so, what consent you have given at what time. This data is stored in cookies on your device (Section D) and can be read during your visit to our website.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot take your consents for our website into account. This means that we may not be able to provide you with certain functions of our website that require consent.We process the data only temporarily for the period of the visit of our website. (You can find more information on the validity period of the cookies stored on your device in Section D.III.)

2. Details on the processing of the personal data

Purpose of processing the personal data Categories of personal data processedAutomated decision-makingLegal basis and, where applicable, legitimate interestsRecipient
Provision of content of our website requested by the user: For this purpose, data are temporarily processed on our web server. For this purpose, information necessary to ensure the correct display of the website content is also stored in cookies (Section D) on your device. The cookies and the information stored in them can be read during your visit to our website in order to ensure correct display of the website content you accessed.HTTP Data Content Provision DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the provision of the content of our website requested by the user.Hosting Provider
Ensuring the security of the IT infrastructure used for the provision of our website, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks): For this purpose, data are temporarily stored in log files on our web server and automatically evaluated.HTTP Data Search Function DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is ensuring the security of the IT infrastructure used for the provision of our website, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks).Hosting Provider
Provision of the language selection function of our website: When you visit our website, we determine whether you have already selected a particular language version of our website in order to provide you with the content of our website requested by you in the language which you have selected, if applicable. For this purpose, information about your language selection is stored in cookies (Section D) on your device. The cookies and the information stored in them can be read during your visit to our website to determine which language you have selected.HTTP Data Language Selection DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the provision of the contents of our website accessed by the user in the language selected by the user.Hosting Provider
Providing the search functions of our website: For this purpose, data are temporarily processed on our web server.HTTP Data Search Function DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the provision of the search functions of our website requested by the user.Hosting Provider
Provision of data protection setting functions for our website: Certain features of our website (e.g. the use of certain cookie-based technologies) require your consent. We provide data protection setting functions for our website to enable you to give and, if necessary, withdraw your consent. For this purpose, information about your consent is stored in cookies (Section D) on your device. The cookies and the information stored in them can be read during your visit to our website in order to determine whether you have given your consent and, if so, what consents you have given.HTTP Data Data Protection Setting DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the provision of data protection setting functions for our website.Hosting Provider Data Protection Setting Function Provider

3. Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations

RecipientRecipient’s roleTransfers to third countries and/or international organisationsAdequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Hosting Provider: WPEngine, Inc. 504 Lavaca St #1000, Austin, TX 78701, USAProcessorUSAThere is an adequacy decision by the European Commission within the meaning of Art. 45 GDPR for transfers of personal data to the USA. The adequacy decision is available here: https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj As WPEngine, Inc. is self-certified under the Data Privacy Framework, this adequacy decision applies to the transfer to this recipient. Detail on the self-certification can be obtained here: https://www.dataprivacyframework.gov/list
Data Protection Setting Function Provider: CookieYes Limited 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United KingdomProcessorUnited KingdomThere is an adequacy decision by the European Commission within the meaning of Art. 45 GDPR for transfers of personal data to the United Kingdom. The adequacy decision is available here: https://eur-lex.europa.eu/eli/dec_impl/2021/1772/oj

II. Use of web analysis technologies (Matomo)

Upon your consent, we use so-called ”web analysis technologies“ on our website.

Web analysis enables the collection and evaluation of information about the activities of users of our website. The information obtained serves us to improve our website and to better achieve the goals of our website (e.g. increase in page views).

When you visit our website, the web analysis tool used (Matomo) collects information about your use of our website and stores it in a device-related profile. In order to be able to assign this information to your device, your device is assigned a unique ID which is linked to the device-related profile. This ID is stored in cookies (Section D ) on your device. During your visit to our website, your device can be recognised there on the basis of the ID assigned to it.

You will find more detailed information on this in the following:

1. Details on personal information which are processed

Categories of personal data processed Personal data included in the categoriesSources of dataObligation of the data subject to provide the data Storage duration
Web Analysis HTTP DataProtocol data which accrue via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when using the web analysis tool used on our website: These include IP address, type and version of your internet browser, operating system used, site accessed, site accessed before visiting the site (referrer URL), date and time of the visit.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot carry out a web analysis.IP anonymisation is activated on our website for the use of the web analysis tool. This means that the IP address transmitted via the browser for technical reasons is anonymised before being stored by shortening the IP address (by deleting the last octet of the IP address). Moreover we only process the protocol data temporarily for the duration of the visit to our website.
Web Analysis Device DataData that is assigned to your device by the web analysis tool used on our website: This includes a unique ID to (re)identify your device. It also includes certain parameters relevant for web analysis. This data is stored in cookies on your device (Section D) and can be read when visiting our website.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot carry out a web analysis.We store the unique ID for the duration of your consent. We only process parameters relevant for web analysis temporarily for the period of your visit to our website. We delete this data when you withdraw your consent. (For information on the period of validity of the cookies stored on your device, please refer to Section D.III.)
Web Analysis Profile DataData generated by the web analysis tool used on our website and stored in a device-related profile: This includes data about the use of our website, in particular page visits, frequency of visits and time spent on the pages visited. This is also included the unique ID assigned to your device.Generated by usWe store the unique ID for the duration of your consent. We store information about the use of our website for a period of 24 from collection. We delete this data when you withdraw your consent.

2. Details on the processing of personal data

Purpose of the processing of personal data Categories of personal data processedAutomated decision-making Legal basis and, where applicable, legitimate interestsRecipient
Web Analysis: Web analysis enables the collection and evaluation of information about the activities of users of our website. When you visit our website, the web analysis tool used by us collects information about your use of our website and stores it in a device-related profile. In order to be able to assign this information to your device, a unique ID is assigned to your device, which is linked to the device-related profile. This ID is stored in cookies (Section C) on your device. During your visit of our website, your device can be recognised there on the basis of the ID assigned to it. The aim of the analysis is to examine where the users of our website come from, which areas of our website are visited and how often and for how long which page and categories are viewed. The information obtained is used to improve our website and to better achieve the goals of our website (e.g. increase in page views).Web Analysis HTTP Data Web Analysis Device Data Web Analysis Profile DataNo automated decision-making takes place.Art. 6 (1) (a) GDPR (consent)Hosting Provider

3. Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations

RecipientRecipient’s roleTransfers to third countries and/or international organisationsAdequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Hosting Provider: WPEngine, Inc. 504 Lavaca St #1000, Austin, TX 78701, USAProcessorUSAThere is an adequacy decision by the European Commission within the meaning of Art. 45 GDPR for transfers of personal data to the USA. The adequacy decision is available here: https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj As WPEngine, Inc. is self-certified under the Data Privacy Framework, this adequacy decision applies to the transfer to this recipient. Detail on the self-certification can be obtained here: https://www.dataprivacyframework.gov/list

III. Use of our online contact forms

You can contact us using contact forms on our website. We process the information provided by you in the contact forms to process your request. Where applicable, we also store and use the information for evidence purposes for any assertion, exercise or defence of legal claims or in order to meet statutory document retention obligations, in particular commercial and tax law document retention obligations.

When the contact forms on our website are used certain information is sent from your device to the web server of our website for technical reasons, for example your IP address. We process this information in order to provide the contact forms on our website and to ensure the security of the IT infrastructure used to provide the contact forms.

You will find more detailed information on this below:

1. Details on personal data which are processed

Categories of personal data processed Personal data included in the categoriesSources of the dataObligation of the data subject to provide the dataStorage duration
Contact Form HTTP DataProtocol data which accrue via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when the contact forms on our website are accessed: These include IP address, type and version of your internet browser, operating system used, site accessed, site accessed before visiting the site (referrer URL), date and time of the visit.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot provide the requested website content.The data are stored in server log files in a form allowing the identification of the data subject for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.
Contact Form DataData you provide us with in contact forms on our website: These include the information you provide to us in the relevant contact form. In particular this could include your name, telephone number, email address and the content of your request.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot process your request.The data are stored until your request has been dealt with. We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded. We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist. Depending on the document type, commercial and tax law document retention obligations of six or ten years can exist (Sec. 147 German Fiscal Code (Abgabenordnung – (AO), Sec. 257 German Commerical Code – (HGB)) (HGB).

2. Details on the processing of the personal data

Purpose of the processing of personal data Categories of personal data processed Automated decision-making Legal basis and, where applicable, legitimate interestsRecipient
Provision of the contact forms on our website: For this purpose data are processed temporarily on our web server.Contact Form HTTP DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the provision of the contact forms on our website requested by the user.Hosting Provider
Ensuring the security of the IT infrastructure used for the provision of the contact forms, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks): For this purpose, data are temporarily stored and evaluated in log files on our web server.Contact Form HTTP DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is ensuring the security of the IT infrastructure used to provide the contact forms, in particular to identify, eliminate and preserve evidence of disruptions (e.g. DDoS attacks).Hosting Provider
Processing of your requestContact Form DataNo automated decision-making takes place.If your request concerns a contract to which you are party or the performance of pre-contractual measures: Art. 6 (1) (b) GDPR (performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract). Otherwise: Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): In this case, our legitimate interest is the processing of your request.
Storage and processing for evidence purposes for any assertion, exercise or defence of legal claimsContact Form DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is assertion, exercise or defence of legal claims.
Assertion, exercise or defence of legal claims, including cooperation with external lawyersContact Form DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is assertion, exercise or defence of legal claims.Courts Lawyers
Storage of data in order to meet statutory document retention obligations, in particular commercial and tax law document retention obligations: Depending on the document type, commercial and tax law document retention obligations of six or ten years can exist (Sec. 147 German Fiscal Code (Abgabenordnung – AO), Sec. 257 German Commerical Code (Handelsgesetzbuch– HGB)).Contact Form DataNo automated decision-making takes place.Art. 6 (1) (c) GDPR (compliance with a legal obligation).

3. Details on the recipients of persona data and the transfer of personal data to third countries and/or international organisations

RecipientRecipient’s roleTransfers to third countries and/or international organisationsAdequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Hosting Provider: WPEngine, Inc. 504 Lavaca St #1000, Austin, TX 78701, USAProcessorUSAThere is an adequacy decision by the European Commission within the meaning of Art. 45 GDPR for transfers of personal data to the USA. The adequacy decision is available here: https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj As WPEngine, Inc. is self-certified under the Data Privacy Framework, this adequacy decision applies to the transfer to this recipient. Detail on the self-certification can be obtained here: https://www.dataprivacyframework.gov/list
LawyersControllerThere is no transfer to third countries and/or international organisations
CourtsControllerThere is no transfer to third countries and/or international organisations

IV. Use of our online application forms in order to apply for our own job offerings

On our career website, we offer you the opportunity to find out more about us and AURELIS as an employer and about our vacancies as well as vacancies at other AURELIUS entities. You also have the opportunity to submit your application for our own job offerings via our application forms.

We process the information you provide in the application forms to receive your application so that we can process it further in the next step. Information on the processing of your personal data in our application process can be found in Section C.

When the application forms on our website are used, certain information is sent from your device to the web server of our website for technical reasons, for example your IP address. We process this information in order to provide the application forms and to ensure the security of the IT infrastructure used to provide the application forms.

For job offerings of other AURELIUS entities, our website also links to the relevant application forms. In so far we process personal data on behalf of the relevant other AURELIUS entity as their processor. You will find a link to the data protection information of the relevant AURELIUS entity in the respective application form.

You will find more detailed information on this below:

1. Details on personal data which are processed

Categories of personal data processed Personal data included in the categoriesSources of the dataObligation of the data subject to provide the dataStorage duration
Application Form HTTP DataProtocol data which accrue via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when the application forms on our website are accessed: These include IP address, type and version of your internet browser, operating system used, site accessed, site accessed before visiting the site (referrer URL), date and time of the visit.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot provide the requested website content.The data are stored in server log files in a form allowing the identification of the data subject for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.
Application Form Device DataData that is assigned to your device when using the application forms: This includes a unique ID for the application form session (so-called ”session ID“) and the expiry date of the respective session. This also includes information on the language you have chosen for displaying the application form. This data is stored in cookies on your device (Section D) and can be read during the use of the application forms.User of our websiteThe provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot provide the application forms on our website.We process the data only temporarily for the period the application form on our website is used. (You can find more information on the validity period of the cookies stored on your device in Section D.III.)
Application Form DataData you provide us with in application forms on our website: This may include the following data in particular: Gender, first name, surname, date of birth, address, telephone number, e-mail address, earliest starting date, salary expectations, current notice period, contact preferences (by telephone or e-mail), information on how you became aware of us, CV, cover letter for the application and, if applicable, the content of other documents that you provide to us via the application form. This may also include a password provided by you that allows you to login and complete your application at a later point in time.User of our websiteThe provision of the data is not a statutory or contractual requirement. There is no obligation of the data subject to provide the data. However, the provision is generally a requirement necessary to enter into a contract. If the data is not provided, we may not be able to perform the application processes and to hire you.Information on the storage of your personal data as our applicant can be found in Section C.

2. Details on the processing of the personal data

Purpose of the processing of personal data Categories of personal data processed Automated decision-making Legal basis and, where applicable, legitimate interestsRecipient
Provision of the application forms for our own job offerings on our website: For this purpose data are processed temporarily on our web server. For this purpose, in addition, information on the respective application form session and the language you have chosen is stored in cookies (Section D) on your device. The cookies and the information stored in them can be read during the use of the application form in order to maintain the respective application form session and in order to display the application forms in the correct language version.Application Form HTTP Data Application Form Device Data Application Form DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the provision of the application forms on our website requested by the user.Application Tool Service Provider
Ensuring the security of the IT infrastructure used for the provision of the application forms, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks): For this purpose, data are temporarily stored and evaluated in log files on our web server.Application Form HTTP Data Application Form Device DataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is ensuring the security of the IT infrastructure used to provide the application forms, in particular to identify, eliminate and preserve evidence of disruptions (e.g. DDoS attacks).Application Tool Service Provider
Receipt of your application for a position with us for further processing in our application process: Further information on the processing of your personal data as our applicant can be found in Section D. (For job offerings of other AURELIUS entities, our website also provides links to the relevant application forms. In so far we process personal data on behalf of the relevant other AURELIUS entity as their processor. You will find a link to the data protection information of the relevant AURELIUS entity in the respective application form.)Application Form DataNo automated decision-making takes place.Art. 6 (1) (b) GDPR (performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract).Application Tool Service Provider

3. Details on the recipients of persona data and the transfer of personal data to third countries and/or international organisations

RecipientRecipient’s roleTransfers to third countries and/or international organisationsAdequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Application Tool Service Provider: Haufe-Lexware Services GmbH & Co. KG Fraunhoferstraße 5, 82152 Planegg, GermanyProcessorThere is no transfer to third countries and/or international organisations
Application Tool Service Provider: Deutschland Noris Network AG Thomas-Mann-Straße 16, 90471 Nürnberg, GermanyProcessorThere is no transfer to third countries and/or international organisations

V. Email newsletter of AURELIUS Investments Limited

On our career website we do not offer a dedicated career newsletter. The newsletter subscription link in the footer of our career website leads you to the newsletter subscription form of the main AURELIUS website where you can subscribe to the regular AURELIUS newsletter. This newsletter is provided by Aurelius Investments Limited. For information on the processing of personal data in this context, please view the data protection information of Aurelius Investments Limited on the main AURELIUS website at: www.aurelius-group.com/privacy-policy

C. Information on the processing of personal data of our applicants

In connection with our business activities, we process personal data of persons applying for jobs with us via our online application forms (Section B.IV) or via other means (e.g. via email or post).

We process data of our job applicants for the following purposes:

  • Conducting the application process, in particular reviewing applications, contacting the applicant and conducting interviews to evaluate and select suitable applicants
  • Reimbursement of application costs
  • In the event that the applicant is not hired: Considering the applicant for future job offers, in particular storing data collected in the course of the application process, evaluating suitability for future job offers and contacting the applicant to initiate an application process
  • Storage for a transitional period for evidence purposes for the possible establishment, exercise or defence of legal claims
  • Establishment, exercise or defence of legal claims, including cooperation with external lawyers
  • Cooperation with supervisory authorities, courts and other public bodies in order to comply with statutory obligations
  • Retention of data for the fulfilment of legal, in particular commercial and tax law, retention obligations

For job offerings of other AURELIUS entities, we process personal data on behalf of the relevant other AURELIUS entity as their processor. You will find a link to the data protection information of the relevant AURELIUS entity in the respective application form.

You receive more detailed information on this below:

I. Details on the personal data which are processed

Categories of personal data processed Personal data included in the categories Sources of the dataObligation of the data subject to provide the data Storage duration
Master dataName Date of birth Nationality Place of birth Country of birth Marital statusApplicants or recruitment agencies instructed to act on behalf of applicantsProvision is not a statutory or contractual requirement. There is no obligation of the data subject to provide the data. The provision is generally necessary to enter into a contract. If the data is not provided, it will not be possible to conduct the application process and, if applicable, to hire an applicant.If an applicant is hired, the data will be entered in the personnel file. Information on the storage duration is provided in the information on the processing of the personal data of our employees. If the relevant applicant consents to this, in the event that the applicant is not hired, the data will be stored for a period of 24 months (or until a possible prior withdrawal of consent) after completion of the application process for considering the applicant for future job offers. Otherwise the data will be stored only for evidence purposes for the possible establishment, exercise and defence of legal claims for a period of six months after completion of the application process. We also store these data to the extent statutory, in particular commercial and tax law, retention obligations exist. Depending on the document type, document retention requirements under commercial or tax law can be between six and ten years (sec. 147 German Tax Code (Abgabenordnung – AO), sec. § 257 German Commercial Code (Handelsgesetzbuch – HGB)).
Contact dataPrivate address E-mail address Telephone numberApplicants or recruitment agencies instructed to act on behalf of applicantsProvision is not a statutory or contractual requirement. There is no obligation of the data subject to provide the data. The provision is generally necessary to enter into a contract. If the data is not provided, it will not be possible to conduct the application process and, if applicable, to hire an applicant.If an applicant is hired, the data will be entered in the personnel file. Information on the storage duration is provided in the information on the processing of the personal data of our employees. If the relevant applicant consents to this, in the event that the applicant is not hired, the data will be stored for a period of 24 months (or until a possible prior withdrawal of consent) after completion of the application process for considering the applicant for future job offers. Otherwise the data will be stored only for evidence purposes for the possible establishment, exercise and defence of legal claims for a period of six months after completion of the application process. We also store these data to the extent statutory, in particular commercial and tax law, retention obligations exist. Depending on the document type, document retention requirements under commercial or tax law can be between six and ten years (sec. 147 German Tax Code (Abgabenordnung – AO), sec. § 257 German Commercial Code (Handelsgesetzbuch – HGB)).
Application dataContent of application documents: in particular photo, CV and certificates Contents of written correspondence (including electronic correspondence) relating to the applicationApplicants or recruitment agencies instructed to act on behalf of applicantsProvision is not a statutory or contractual requirement. There is no obligation of the data subject to provide the data. The provision is generally necessary to enter into a contract. If the data is not provided, it will not be possible to conduct the application process and, if applicable, to hire an applicant.If an applicant is hired, the data will be entered in the personnel file. Information on the storage duration is provided in the information on the processing of the personal data of our employees. If the relevant applicant consents to this, in the event that the applicant is not hired, the data will be stored for a period of 24 months (or until a possible prior revocation of consent) after completion of the application procedure for considering the applicant for future job offers. Otherwise the data will be stored only for evidence purposes for the possible establishment, exercise and defence of legal claims for a period of six months after completion of the application process.
Consent to the storage of personal data collected during the application process for the purpose of considering the applicant for future job offers in the event that the applicant is not hiredApplicantsProvision is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we may consider your application only for the position for which you have applied and, in the event that you are not hired, not for any future positions.
Contents of evaluation notes, perceptions from interviews, feedback and evaluations Documentation of any consents given by the applicant to the storage of personal data collected during the application process for the consideration of the applicant for future job offers in the event that the applicant is not hired, in particular the time of consent and any withdrawalGenerated by us
Billing DataData provided by applicants for the reimbursement of application costs: This includes bank details and information on the nature and amount of the application costsApplicantsProvision is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data. If the data is not provided, we cannot reimburse any application costs.We store these data to the extent statutory, in particular commercial and tax law, retention obligations exist. Depending on the document type, document retention requirements under commercial or tax law can be between six and ten years (sec. 147 German Tax Code (Abgabenordnung – AO), sec. § 257 German Commercial Code (Handelsgesetzbuch – HGB)).
Data we create in connection with any reimbursement of application costs: This includes the documentation of the payment and the documentation of any agreement on the waiver of the reimbursement of application costsGenerated by us

II. Details on the processing of the personal data

Purpose of processing the personal data Categories of personal data processedAutomated decision-makingLegal basis and, where applicable, legitimate interestsRecipient
Conducting the application process for our own vacancies, in particular reviewing applications, contacting the applicant and conducting interviews to evaluate and select suitable applicants (For job offerings of other AURELIUS entities, we process personal data on behalf of the relevant other AURELIUS entity as their processor. You will find a link to the data protection information of the relevant AURELIUS entity in the respective application form.)Master data Contact data Application dataNo automated decision-making takes place.Art. 88 (1) GDPR, sec. 26 (1) BDSG (Decision on the establishment of an employment relationship) Art. 6 (1) (b) GDPR (performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract)Application Tool Service Provider
Reimbursement of application costsMaster data Contact data Billing dataNo automated decision-making takes place.Art. 6 (1) (c) GDPR (Compliance with a legal obligation)Banks
In the event that the applicant is not hired: Considering the applicant for future job offers, in particular storing data collected in the course of the application process, evaluating suitability for future job offers and contacting the applicant to initiate an application processMaster data Contact data Application dataNo automated decision-making takes place.Art. 6 (1) (a) GDPR (Consent)Application Tool Service Provider
Storage for evidence purposes for the possible establishment, exercise or defence of legal claimsMaster data Contact data Application dataNo automated decision-making takes place.Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the establishment, exercise and defence of legal claimsApplication Tool Service Provider
Establishment, exercise or defence of legal claims, including cooperation with external lawyersMaster data Contact data Application dataNo automated decision-making takes place.Art 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests): Our legitimate interest is the establishment, exercise or defence of legal claimsCourts Lawyers
Cooperation with supervisory authorities, courts and other public bodies for the fulfilment of legal obligationsMaster data Contact data Application dataNo automated decision-making takes place.Art. 6 (1) (c) GDPR (Compliance with a legal obligation)Supervisory authorities, courts and other public bodies
Retention of data for the fulfilment of legal, in particular commercial and tax law, retention obligations: Depending on the document type, document retention requirements under commercial or tax law can be between six and ten years (sec. 147 German Tax Code (Abgabenordnung – AO), sec. § 257 German Commercial Code (Handelsgesetzbuch – HGB)).Master data Contact data Billing dataNo automated decision-making takes place.Art. 6 (1) (c) GDPR (Compliance with a legal obligation)

III. Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations

RecipientRecipient’s roleTransfers to third countries and/or international organisationsAdequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations
Application Tool Service Provider: Haufe-Lexware Services GmbH & Co. KG Fraunhoferstraße 5, 82152 Planegg, GermanyProcessorThere is no transfer to third countries and/or international organisations
Application Tool Service Provider: Deutschland Noris Network AG Thomas-Mann-Straße 16, 90471 Nürnberg, GermanyProcessorThere is no transfer to third countries and/or international organisations
BanksControllerThere is no transfer to third countries and/or international organisations
LawyersControllerThere is no transfer to third countries and/or international organisations
Supervisory authorities, courts and other public bodiesControllerThere is no transfer to third countries and/or international organisations


IV.           

D. Information on the use of cookies or similar technologies

We use cookies in connection on our website. In doing so, we use the processing and storage functions of your device’s browser and collect information from the memory of your device’s browser.

You will find more detailed information on this in the following.

I. General information on cookies

Cookies are small text files with information that can be placed on a user’s device through its browser when a website is visited. When the relevant website is visited again with the same device, the cookie and the information it contains can be retrieved.

1. First-party and third-party cookies

Depending on where a cookie comes from, a distinction can be made between first-party cookies and third-party cookies:

First-party cookiesCookies that are placed and accessed by the operator of the website as the controller or by a processor engaged by the controller
Third-party cookiesCookies that are placed and accessed by controllers other than the operator of the website that are not processors engaged by the operator of the website

2. Transient and persistent cookies

A distinction can be made between transient and persistent cookies depending on how long they remain active:

Transient cookies (Session cookies)Cookies that are automatically deleted when you close your browser
Persistent cookiesCookies that remain stored on your device for a certain period of time after the browser is closed

3. Consent-free cookies and cookies requiring consent

Users’ consent is required for some cookies depending on their function and purpose of use. Thus, a distinction can be made between cookies that require users’ consent and those that do not:

Consent-free cookiesCookies that have as their sole purpose to transmit a message using an electronic communication network
Cookies that are necessary so that the party offering a service that has been expressly requested by a participant or user can provide this service (”strictly necessary cookies”)
Cookies requiring consentCookies for all purposes of use other than the aforementioned

II. Management of the cookies used on our website

1. Granting and withdrawing consents to the use of cookies in the data protection settings of our website

If consent is necessary for the use of certain cookies, we only use these cookies if you have previously granted your consent to this. You can find information as to whether the use of a particular cookie requires consent in the information on the cookies used on our website in Section C.III. of this Data Protection Information.

When you first visit our website, we display a pop-up for data protection settings. In the data protection settings, you can give consent for the use of cookies that require consent and the processing of your personal data enabled thereby. However, you can also continue to use our website without consent. In this case, we will only use cookies for which consent is not required.

You can access the data protection settings of our website at any time via the link contained in this Data Protection Information and in the footer of our website. In the data protection settings, you can withdraw or re-grant the consents you have given at any time.

We store whether and, if applicable, which consents you have given in the form of a (strictly necessary) cookie (so-called ”data protection settings cookie“) on your device. The data protection setting cookie has a limited validity period of 12 months. After the expiration of the validity period, or if you delete the data protection settings cookie manually beforehand, we will display the banner for data protection settings for our website again the next time you visit our website.

You cannot deactivate cookies that are strictly necessary in the data protection settings of our website. However, you can generally deactivate these cookies in your browser at any time.

2. Managing cookies using browser settings

You can also manage the use of cookies in your browser’s settings. Different browsers have different ways to configure cookie settings. You can find more extensive information on this, for example at http://www.allaboutcookies.org/manage-cookies/.

However, we would like to point out that some functions of our website may not work properly or at all if you deactivate cookies in general in your browser.

III. Cookies used on our website

The following cookies may be used on our website:

NameFirst-party / third-partyPurpose of use and contentEffective termConsent necessary?
Language selection Cookies
wp-wpml_current_languageFirst partyThis cookie is strictly necessary to provide the language selection function of our website (Section B.I). This cookie saves information on your language selection (e.g. ”de” for the German language version) in order to provide you with the content of our website accessed by you in the language which you have selected for the entire browser session.TransientNo
Data Protection Settings Cookies
cookieyes-consentFirst-partyThis cookie is strictly necessary to provide the data protection settings function for our website (Section B.I). This cookie stores information about whether and, if so, which consents you have given and when, in order to possibly activate the respective processing activities and cookies requiring consent in accordance with your consent and in order to be able to determine whether we require renewed consent from you in the event of changes to processing activities and cookies requiring consent.Persistent:
12 months
No
Content Provision Cookies
aureliusCareers_home_visitedFirst partyThis cookie is strictly necessary to ensure the correct display of the website content accessed by the user (Section B.I). The cookie is set and contains the value “true” once the so called “pre loader” of the website has been displayed to the user (i.e. a loading screen that is displayed upon the first visit while the website content is downloaded). This cookie is used to ensure that the pre loader is only displayed once and does not interrupt the user’s use of our website.Persistent: 7 daysNo
Application Form Cookies
CGISESSIDFirst partyThis cookie is strictly necessary to provide the application forms on our website (Section B.IV). This cookie stores a unique ID for the application form session (so-called ”session ID“) as well as the expiry date of the respective session in order to maintain the respective application form session until the expiry date.TransientNo
languageFirst partyThis cookie is strictly necessary to provide the application forms on our website (Section B.IV) in the chosen language. This cookie saves information on your language selection (e.g. ”ger” for the German language version) in order to provide you with the content of our website accessed by you in the language which you have selected for the entire browser session.TransientNo
Web Analysis cookies (for the web analysis tool Matomo) These cookies are used by the web analysis tool Matomo to record and analyse the usage behaviour on our website, in order to improve our website (Section B.II).
MATOMO_SESSIDFirst partyThis cookie contains a unique visitor ID and is used to recognise visitors within their relevant browser session.TransientYes

E. Information on the rights of data subjects

As a data subject, you have the following rights with regard to the processing of your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (”right to be forgotten”) (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR)

You may contact us for the purpose of exercising these rights using the contact information in Section A.

Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section B and Section C of this Data Protection Information.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Below you find more detailed information on your rights with regard to the processing of your personal data:

I. Right of access

As a data subject, you have a right to obtain access and information under the conditions provided in Art. 15 GDPR.

This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Art. 15 (1) GDPR. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 (1) (a), (b) and (c) GDPR).

You can find the full extent of your right to access and information in Art. 15 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

II. Right to rectification

As a data subject, you have the right to rectification under the conditions provided in Art. 16 GDPR.

This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.

You can find the full extent of your right to rectification in Art. 16 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

III. Right to erasure (”right to be forgotten”)

As a data subject, you have a right to erasure (”right to be forgotten”) under the conditions provided in Art. 17 GDPR.

This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Art. 17 (1) GDPR applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (Art. 17 (1) (a) GDPR).

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Art. 17 (2) GDPR).

The right to erasure (”right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Art. 17 (3) GDPR. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (Art. 17 (3) (b) and (e) GDPR).

You can find the full extent of your right to erasure (”right to be forgotten”) in Art. 17 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

IV. Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions provided in Art. 18 GDPR.

This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Art. 18 (1) GDPR applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (Art. 18 (1) (a) GDPR).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Art. 4 (3) GDPR).

You can find the full extent of your right to restriction of processing in Art. 18 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

V. Right to data portability

As a data subject, you have a right to data portability under the conditions provided in Art. 20 GDPR.

This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means (Art. 20 (1) GDPR).

You can find information as to whether an instance of processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR in the information regarding the legal basis of processing in Section B and Section C of this Data Protection Information.

In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Art. 20 (2) GDPR).

You can find the full extent of your right to data portability in Art. 20 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VI. Right to object

As a data subject, you have a right to object under the conditions provided in Art. 21 GDPR.

At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.

More detailed information on this is given below:

1. Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 (1) (e) or (f), including profiling based on those provisions.

You can find information as to whether an instance of processing is based on Art. 6 (1) (e) or (f) GDPR in the information regarding the legal basis of processing in Section B and Section C of this Data Protection Information.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You can find the full extent of your right to objection in Art. 21 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

2. Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section B and Section C of this Data Protection Information.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

You can find the full extent of your right to objection in Art. 21 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VII. Right to withdraw consent

Where an instance of processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, as a data subject you have the right to withdraw your consent at any time pursuant to Art. 7 (3) GDPR,. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal. We inform you of this before you grant your consent.

You can find information as to whether an instance of processing is based on Art. 6 (1) (a) or Art. 9 (2) (a) GDPR in the information regarding the legal basis of processing in Section B and Section C of this Data Protection Information.

VIII. Right to lodge a complaint with a supervisory authority

As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in Art. 77 GDPR.

The contact details of the supervisory authorities in the EU/EEA are available here: https://edpb.europa.eu/about-edpb/about-edpb/members_en

F. Information about the technical terms of the General Data Protection Regulation used in this Data Protection Information

The technical terms relating to data protection used in this Data Protection Information have the meaning used in the General Data Protection Regulation.

The full scope of the definitions of the General Data Protection Regulation can be found in Art. 4 GDPR, which can be downloaded from the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

You will find more detailed information on the most important technical terms of the General Data Protection Regulation used in this Data Protection Information below:

”Personal data” means any information relating to an identified or identifiable natural person (”data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

”Data Subject” means the respective identified or identifiable natural person, to which the personal Data refers to;

”Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

”Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

”Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

”Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

”Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

”Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

”International organisation” means an organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries;

”Third country” means a country which is not a member state of the European Union (”EU”) or the European Economic Area (”EEA”);

”Special categories of personal data” means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

G. Effective date of and changes to this Data Protection Information

The effective date of this Data Protection Information is February 13, 2024.

It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.

An up-to-date version of this Data Protection Information can be retrieved at any time at [career.aurelius-group.com/privacy-policy].