Data protection in the application process

Information about the processing of your personal data in the application procedure

We are pleased that you have applied to the Bahnprojekt Stuttgart-Ulm e.V.. Transparency and trustworthy handling of your personal data is an important basis for good cooperation. Therefore, we inform you about how we process your data and how you can exercise your rights, which you are entitled to under the General Data Protection Regulation. The following information provides you with an overview of the collection and processing of your personal data in connection with the implementation of the application process.

1 Who is responsible for data processing?

Person responsible is:

Bahnprojekt Stuttgart-Ulm e.V.
Legally represented by the chairman of the association: Bernhard Bauer
Am Schlossplatz 15/1
70173 Stuttgart
Tel. 0711 184 217 0 or by e-mail to

2 How can I contact the data protection officer?

Privacy Officer:

Bahnprojekt Stuttgart-Ulm e.V.
Am Schlossplatz 15/1
70173 Stuttgart
Email to

3 Which of your personal data do we use?

We process your personal data insofar as this is necessary to carry out the application process. This includes the following categories of data:

Standard specifications:

  • Applicant master data (first name, last name, address, job position)
  • Qualification data (cover letter, curriculum vitae, previous activities, professional qualifications)
  • (Work) references and certificates (performance data, appraisal data, etc.)

Other data:

  • Publicly accessible, job-related data, such as a profile on professional social media networks
  • Voluntary information, such as an application photo, information on severely disabled status or other information that you voluntarily provide to us in your application.

4 What are the sources of the data?

We process personal data that we receive from you as part of the application process.

5 For what purposes do we process your data and on what legal basis?

We process your personal data in particular in compliance with the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) as well as all other applicable laws.

5.1 Data processing for the purpose of the application relationship (Section 26 (1) BDSG)

Personal data of applicants may be processed for purposes of the application process if this is necessary for the decision on the establishment of an employment relationship with us.

5.2 Data processing based on your consent (Art. 6 para.1 lit. a DS-GVO, § 26 para. 2 BDSG)

If you have given us your voluntary consent to the collection, processing or transmission of certain personal data, then this consent forms the legal basis for the processing of this data.

5.3 Based on the legitimate interest of the controller (Art. 6 para.1 lit. f DSGVO)

In certain cases, we process your data to protect a legitimate interest of us or a third party:

  • For the defense of legal claims in proceedings under the General Equal Treatment Act (AGG). In the event of a legal dispute, we have a legitimate interest in processing the data for evidentiary purposes.
  • Data comparison with EU anti-terror lists in accordance with Regulations (EC) No. 2580/2001 and 881/2002: As a company, we are obliged under EU law to cooperate in the fight against terrorism. No funds may be made available to persons and organizations on the terror lists (ban on making funds available). For this reason, we are obliged to carry out a name check against the terror lists.

6 Who will your data be shared with?

Your data will mainly be processed by our HR department and the department manager who fills your position.

Internal positions:

  • Human Resources
  • Department Manager

7 Is your data transferred to countries outside the European Union (so-called third countries)?

A transfer to a third country is not intended.

8 How long will your data be stored?

We store your personal data for as long as is necessary for the decision on your application. Insofar as an employment relationship between you and us does not come about, we may continue to store data beyond this, insofar as this is necessary for the defense against possible legal claims. As a rule, your data will be deleted within 6 months after the end of the application process.

Insofar as an employment relationship comes about, but you have given us your consent for the further storage of your data, we will store your data until your consent is revoked, but for a maximum of three further years. If there is a specific reason, we may also store your data for a longer period for the purpose of defending against possible legal claims.

9 What rights do you have in connection with the processing of your data?

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions according to §§ 34 and 35 BDSG apply.

9.1 Right of objection

What right do you have in case of data processing based on your legitimate or public interest?

Pursuant to Art. 21 (1) DSGVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) DSGVO (data processing in the public interest) or on the basis of Article 6 (1) (f) DSGVO (data processing for the purposes of safeguarding a legitimate interest); this also applies to profiling based on this provision.

In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

9.2 Revocation of consent

You can revoke your consent to the processing of personal data at any time. Please note that the revocation is only effective for the future.

9.3 Right to information

You can request information about whether we have stored personal data about you. If you wish, we will tell you what data is involved, for what purposes the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have in relation to this data.

9.4 Further rights

In addition, you have the right to correct incorrect data or to have your data deleted. If there is no reason for further storage, we will delete your data, otherwise we will restrict the processing. You may also request that we provide any personal data you have provided to us in a structured, commonly used and machine-readable format either to you or to a person or company of your choice.

In addition, there is a right of appeal to the competent data protection supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG).

9.5 Exercising your rights

To exercise your rights, you can contact the person responsible or the data protection officer using the contact details provided.We will process your requests promptly as well as in accordance with the legal requirements and inform you of the measures we have taken.

10 Is there an obligation to provide your personal data?

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the implementation of the application process. This means that if you do not provide us with personal data when applying, we will not be able to carry out the application process.

11 Changes to this information

 If there is a significant change in the purpose or manner of processing your personal data, we will update this information in a timely manner and provide timely notice of the changes.