home icon

Privacy policy

Privacy policy for the Reiser career portal

(as of March 09, 2023)

THIS PRIVACY POLICY FOR THE REISER CAREER PORTAL CONTAINS INFORMATION ON HOW REISER SIMULATION AND TRAINING GMBH, A GERMAN LIMITED LIABILITY COMPANY WITH REGISTERED OFFICE AT OBERER LUESSBACH 29-31, 82335 BERG, GERMANY (“REISER” OR “WE”), AS DATA CONTROLLER, PROCESSES DATA IN RELATION TO
A – THE PROVISION OF ONLINE SERVICES ON THE REISER CAREER PORTAL (https://karriere.reiser-st.com/),
B – THE USE OF THE REISER COMPANY PAGES IN SOCIAL MEDIA OFFERINGS AND
C – THE PROCESSING OF JOB APPLICATIONS AT REISER

PROCESSES PERSONAL DATA OF NATURAL PERSONS WHO VISIT AND USE THE REISER CAREER PORTAL OR THE REISER COMPANY PAGEES IN SOCIAL MEDIA OFFERINGS AND/OR SUBMIT A JOB APPLICATION TO REISER (“YOU”).
THERE MAY BE OTHER SITUATIONS IN WHICH WE PROCESS YOU PERSONAL DATA, E.G. IF YOU ARE A CUSTOMER OF REISER, OR IF YOU WORK FOR ONE OF OUR CUSTOMERS, PARTNERS, OR SUPPLIERS, OR IF YOU VISIT OUR WEBSITE (https://www.reiser-st.com/). PLEASE USE THE CONTACT INFORMATION PROVIDED HERE IF YOU WOULD LIKE INFORMATION ABOUT PROCESSING OF YOUR PERSONAL DATA THAT IS NOT COVERED BY THIS PRIVACY POLICY FOR THE REISER CAREER PORTAL.

GENERAL INFORMATION

  • Scope of this privacy policy. This privacy policy for the Reiser Career Portal contains information on how we, as the controller, collect, process and delete your personal data in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (“GDPR”). “Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”) in accordance with Art. 4 No. 1 GDPR; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Structure of this privacy policy. This privacy policy for the Reiser Career Portal initially contains some general information in the first section “General information”. This includes information on the rights you have in relation to our use of your personal data and the steps you can take to access your personal data and ask us to correct or delete it. In the further sections A, B and C you will find specific information on the processing of your personal data by us in the context of providing the online services on the Reiser career portal (https://karriere.reiser-st.com/) - section A, the use of the Reiser company pages in social media offers - section B, as well as the processing of job applications at Reiser - section C.
  • Principles for processing. The collection, processing and deletion of personal data is carried out exclusively in accordance with the applicable law and in compliance with the following principles for the processing of personal data. Personal data:
  • will be processed by us lawfully, fairly and in a manner that is transparent to the data subject;
  • collected by us for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
  • are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
  • is accurate and, where necessary, kept up to date;
  • kept by us in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
  • processed by us in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and organizational measures.
  • Change of processing purposes. If we intend to process personal data for purposes other than those set out in this Privacy Policy for the Reiser Career Portal, we will inform you of such changes and tell you for what other purposes your personal data will be used and who the recipients of your personal data are, if any.
  • Data transmission. Unless otherwise stated in this Privacy Policy for the Reiser Career Portal, we will only transfer your personal data to third parties if (a) these recipients act as service providers who provide services on our behalf within the meaning of Art. 28 GDPR (e.g. hosting and web services), or
    (b) these data transfers are necessary for the following legitimate interests: (i) compliance with applicable laws and regulatory or court orders; or (ii) detection and resolution of IT and data security issues. These processing operations are based on the legitimate interests described above (Art. 6 para. 1 lit. f GDPR), and there may even be a legal obligation on our part to process your personal data for these purposes (Art. 6 para. 1 lit. c GDPR). Unless we are prohibited from doing so by the applicable statutory provisions, we will inform you about processing within the meaning of point (b) above on a case-by-case basis.
  • Data transfers to third countries. As a rule, and unless otherwise stated in this Privacy Policy for the Reiser Career Portal, we do not transfer any of your personal data to countries outside the European Union or the member states of the European Economic Area. Notwithstanding our obligation to expressly inform you if we intend to transfer your personal data to such a third country, we will only transfer your personal data to recipients in third countries if the requirements of Art. 44 et seq. GDPR are met. In order to adequately protect your personal data, we therefore ensure that additional measures are taken to protect your data, in particular by relying on EU adequacy decisions or EU standard contractual clauses when transferring personal data to countries outside the EU/EEA, in addition to any necessary data protection and security measures required by applicable law.
  • Obligation to provide personal data. The provision of personal data is neither legally nor contractually required, nor are you obliged to provide us with your personal data. However, the provision of personal data is necessary for the conclusion of an employment contract with us. This means that if you do not provide us with personal data when applying for a job, we cannot and will not enter into an employment relationship with you. Such an application would be pointless.
  • Your rights as a data subject. You have certain rights in relation to the personal data that we process about you. You may (a) obtain access to the information we hold about you (Art. 15 GDPR); we will usually provide you with this information no later than one month after your request; (b) have your personal data rectified (Art. 16 GDPR) or erased (Art. 17 GDPR); (c) obtain from us restriction of processing under the conditions of Art. 18 GDPR; (d) request the transfer of the data you have provided to us to you or to another organization, provided that you have provided us with this data and we have stored this data with your consent or for the performance of a contract with you (Art. 20 GDPR); and
    (e) lodge a complaint with the competent data protection supervisory authority.
  • Your right to object to the processing of personal data. If the legal basis for the processing of your personal data is our legitimate interest or that of a third party in accordance with Art. 6 para. 1 lit. f GDPR, you can object to the processing at any time on the basis of Art. 21 GDPR.
  • No automated decision-making process. We do not use automated decision-making processes within the meaning of Art. 22 GDPR, including profiling, which produces legal effects concerning you as a data subject or similarly significantly affects you. This means that we evaluate your application personally and the decision on your application is not based solely on automated processing of your personal data.
  • Duration of storage and routine deletion. Unless expressly stated otherwise in this Privacy Policy for the Reiser Career Portal, we process and store personal data only for the period necessary to achieve the purpose of processing or as long as this is provided for in laws or regulations to which we are subject. If the storage purpose no longer applies or if a legally prescribed storage period expires, we will routinely restrict or delete the processing of personal data in accordance with the statutory provisions.
  • Contacting us. You can contact us in our capacity as data controller at the address provided herein. You can also contact us by phone: +49(0)8178 86 810; or by email at This email address is being protected from spambots. You need JavaScript enabled to view it..
  • If you have any questions or concerns regarding the processing of your personal data or wish to exercise any of your rights, you may also contact our Data Protection Officer directly by sending a letter to the address provided herein (for the attention of the Data Protection Officer). You can also contact our Data Protection Officer by telephone: +49(0)8178 86 810; or by email at This email address is being protected from spambots. You need JavaScript enabled to view it..
  • Updates to this Privacy Policy. We may change this Privacy Policy for the Reiser Career Portal from time to time. The latest version will always be published on the Reiser Career Portal. If we change this Privacy Policy for the Reiser Career Portal, we will either inform you by changing the date at the beginning of this information, or we will give you an additional notice, e.g. in the form of a pop-up window or an additional statement on the homepage of our Career Portal. Section (4) applies without restriction.

A. Processing activities in the context of the provision of online services on the Reiser Career Portal

  • Contacting us. We offer you the opportunity to contact us by e-mail or via special contact forms. In this case, the information you provide will be stored for the purpose of processing your request. The legal basis for the processing of your personal data is your consent at the time of sending your inquiry (Art. 6 para. 1 lit. a GDPR) or, in the case of (pre-)contractual inquiries, Art. 6 para. 1 lit. b GDPR. The personal data that we collect and process in response to your inquiry will be deleted after the inquiry has been dealt with and, if applicable, after the statutory retention periods have expired. Statutory retention obligations arise if you send us a pre-contractual message by email and we subsequently establish a contractual relationship or if your message relates to existing contractual relationships.
  • Each time you access the Reiser Career Portal, a range of general information is collected. This general data and information is stored in the log files of our web server. The log files contain the following information
  • abbreviated IP address
  • Browser type/browser version
  • Your operating system
  • Referrer URL (or the previously visited website)
  • Date and time of the server request
  • Amount of data transmitted
  • Your internet service provider


When using this general data and information, we generally do not draw any conclusions about a specific person. Rather, this information is required to correctly deliver the content of the Reiser Career Portal and to carry out basic statistical studies on the number of visitors to our website. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest arises from the above-mentioned purposes of data collection. The aforementioned log files are regularly deleted after one week.

  • Use of cookies and other technologies. If we use cookies and/or other technologies on the Reiser Career Portal by means of which information is stored on the end devices you use or via which information already stored on these end devices is accessed, you will be informed accordingly when you first access the Reiser Career Portal and then at regular intervals via a Cookie Consent Management System (“CCM-S”). Without your express consent, cookies and other technologies will only be used if the legal requirements for this are met, i.e. if their use is absolutely necessary so that we can provide you with a service that you have expressly requested. You can view and change the settings you have made in CCM-S at any time as follows: At the bottom left of the career portal you will find a clickable field “Cookie consent” at any time. You can access and edit your previous settings by clicking on this field.
  • Google Maps. Our career portal contains links to Google Maps. If you call up these links, you can view our location and call up directions in the interactive maps of Google Maps. In the European Economic Area (EEA) and Switzerland, Google Maps is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By accessing the links, Google receives the information that you have visited the corresponding subpage of our career portal. In addition, Google receives further information about your visit to our career portal website (including your IP address) and stores it on its own servers. Please note that this transmission and storage of data takes place regardless of whether you are logged into a Google account or not. However, if you are logged into your Google account, Google may link the information it has received from your visit to our careers portal to your user account. Further information about the purpose and scope of the collection and processing of personal data by Google can be found in Google's privacy policy, as well as further information about your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. In addition, the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=en and the Terms of Use for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html apply to the use of Google Maps and the information obtained via Google Maps.
  • Links to other websites. Our career portal may contain links to websites of other providers. We would like to point out that this data protection declaration for the Reiser career portal applies exclusively to the websites and other offers of Reiser. When accessing the linked websites of other providers, please check the data protection information provided there. We have no influence on and cannot control whether such other providers comply with the applicable data protection regulations at all times and in full. Please also note in particular the information in section B: This contains further information on the Reiser company pages linked in the career portal on LinkedIn, XING and kununu.


B. Processing activities in the context of the use of Reiser company pages in social media offerings

  • We have set up our own page on the social network LinkedIn. We have a legitimate interest in presenting ourselves on the world's largest platform for professional exchange and using our page to draw the attention of potential interested parties to us and our services, to get in touch with them or other multipliers and to build and maintain a network of professional contacts. The legal basis for the data processing described below is therefore Art. 6 para. 1 lit. f GDPR.


We have included links at various points in our career portal that lead to our company page on LinkedIn. In order to access these pages on LinkedIn and interact with us, you must have your own profile on LinkedIn. Please therefore refer to the LinkedIn user agreement (https://de.linkedin.com/legal/user-agreement) and the LinkedIn privacy policy (https://de.linkedin.com/legal/privacy-policy). In particular, these documents explain that and how LinkedIn collects, processes and discloses your personal data to us as a separate data controller (especially if you respond to a job advertisement that we have posted on LinkedIn). In the European Economic Area (EEA) and Switzerland, LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

When you visit our company page on LinkedIn, follow our company page, leave comments or likes, write us a message or otherwise use a LinkedIn feature on our company page, we receive information about your name, your current position in a company, your place of work and other company information. We also learn how you have interacted with our company page via LinkedIn. We may use this information to respond to your interaction, e.g. to reply to a comment.

Outside of LinkedIn, we do not store your data unless you submit a job application to us via LinkedIn or this is explicitly communicated on LinkedIn (e.g. if we agree to continue the conversation by email as part of an exchange via LinkedIn messages).

Responding to job advertisements posted by us on LinkedIn or sending applications also requires that you have or set up your own profile on LinkedIn (see above). Once we have received your personal data, we will process it in the same way as described in section C in the case of an application sent directly to us.

If you write us messages via LinkedIn, the information in Section A (“Contacting us”) applies accordingly.

As the operator of the company page, LinkedIn also provides us with so-called Page Insights reports. This is aggregated statistical information that LinkedIn creates based on the personal data of visitors to our company page. For example, we learn which regions visitors to our page come from, how often our page is accessed, which industries visitors to our page work in and similar information. LinkedIn does not provide us with any information that would allow us to draw conclusions about individual members of the network. With regard to the Page Insights reports, there is joint responsibility between us and LinkedIn within the meaning of Art. 26 GDPR or other relevant data protection laws (e.g. in Switzerland or the United Kingdom). We have concluded a special agreement with LinkedIn in this regard. As part of this Page Insights Joint Controller Addendum (https://legal.linkedin.com/pages-joint-controller-addendum), LinkedIn has assumed the obligation to inform users about the processing of their personal data. LinkedIn is also responsible for processing requests from data subjects (see the General Information: “Your rights as a data subject”). However, you can also send us requests in this regard (Art. 26 (3) GDPR).

  • We have set up our own page on the XING social network. We have a legitimate interest in presenting ourselves on this renowned platform for talent scouting and using our company page to draw the attention of potentially interested applicants to us and our services, to get in touch with them or other multipliers and to build and maintain a network of professional contacts. The legal basis for the data processing described below is therefore Art. 6 para. 1 lit. f GDPR.

We have included links at various points in our career portal that lead to our company page on XING. In order to access these pages on XING and interact with us, you must have your own profile on XING. Therefore, please note the XING Terms of Use (https://www.xing.com/terms/xing) and the Privacy Policy (https://privacy.xing.com/de/datenschutzerklaerung). XING is operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

  • We have also linked our company page on kununu on our career portal. kununu is operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Please therefore note the XING terms of use (https://www.xing.com/terms/xing) and the data protection provisions (https://privacy.xing.com/de/datenschutzerklaerung). Our company page at kununu contains information about Reiser as an employer. In addition, kununu contains reviews that (former) employees have left about us. Even if we (can) respond to such reviews on kununu with our own posts: Who leaves which review about us there remains anonymous to us. XING does not share any personal data with us about the people who leave reviews about us on kununu.

C. Processing activities in the context of processing job applications at Reiser

  • Submission of a job application. In order to be able to decide on the prospects of success of an application, the provision of personal data is desired and necessary. We require
  • Name and contact details,
  • Date of birth,
  • place of birth,
  • details of professional circumstances,
  • professional qualifications,
  • professional experience,
  • Certificates and information on other special qualifications in accordance with the specific job advertisement (e.g. language skills or programming skills).

You can provide further information voluntarily, but this is not a prerequisite for your application to be considered. If you do not provide this information, you will not suffer any disadvantages as a result. This voluntary information also includes application photos.

We store and process your application documents digitally; this applies regardless of how you send us your application documents, i.e. in particular also for applications that we receive by post.

The legal basis for the processing of your personal data is Section 26 (1) sentence 1 of the Federal Data Protection Act (BDSG), insofar as it concerns information that we request from you as part of the application process for the establishment of an employment relationship with us. If you voluntarily provide us with further information in your application documents, we will process this on the basis of your consent, Art. 6 para. 1 lit. a GDPR in conjunction with Section 26 para. 2 BDSG.

Please note that CVs, cover letters or other data provided by you may also contain information on “special categories of personal data” within the meaning of Art. 9 para. 1 GDPR (e.g. a photo showing ethnic origin, information on severe disability, etc.). If you provide us with such information, you agree that we may store this information as part of your application documents, Art. 9 para. 2 lit. a GDPR in conjunction with § 26 para. 2 BDSG. Insofar as health-related information results in special legal obligations for us, e.g. with regard to a severely disabled status, we process this data on the basis of Art. 9 para. 2 lit. b GDPR in conjunction with § 26 para. 3 BDSG in order to comply with these legal obligations.

  • Sources of your personal data. We may have received and analyzed certain of your personal data from the following third parties before contacting you. Due to our contractual agreements with the personnel service providers and applicant platforms, we assume that you, as a potentially interested employee, have also entered into agreements with them regarding the provision of your personal data to us or have initiated the transfer of your data to us yourself. In this context, please also note the data protection notices of the respective personnel service providers or applicant platforms. Depending on the structure of this data protection information, the personnel service providers or applicant platforms may provide us with further profile information in addition to your application documents.

The legal basis for the transfer of your personal data to us is, without prejudice to other legal bases for the transfer mentioned below, our legitimate interest in the broadest possible selection of qualified applicants in accordance with Art. 6 para. 1 lit. f GDPR.

We will process data that we receive in this way from sources other than directly from you in the same way as applications that you send us directly and without the involvement of recruitment service providers or applicant platforms. However, where available, we will use direct communication channels, e.g. from applicant platforms, to exchange messages with you. After receiving your personal data, we will process it in the same way as described here in the case of an application sent directly to us.

Please note that we will not inform you again in detail about the origin of your application once we have received your application via a recruitment agency or applicant platform. As you have initiated this application yourself via a specific personnel service provider or applicant platform or have at least been in contact with this personnel service provider or applicant platform in advance, you already have the information as to where we received your data from; renewed information is therefore not necessary for legal reasons alone, Art. 14 para. 5 lit. a GDPR. However, we will of course be happy to inform you at any time on request about who exactly we have received your personal data from.

The above information about third-party sources of your personal data applies in particular to LinkedIn and XING (see section B for more information).

  • Online application via the career portal. You can submit your application to us directly online on our career portal. We have integrated a form with an upload function on our site for this purpose. The form is provided and operated by PWG Professional-Werbe-Gesellschaft mbH, Schwanseestraße 89, 81549 Munich, Germany. For technical reasons, log files are therefore created again when the form is called up (see section A under “Log files”). We also count how often job advertisements are clicked on the Reiser career portal and how often the “Apply now” button is clicked; this is due to our legitimate interest in measuring the reach of our job advertisements.
  • Contacting you and internal notes. Insofar as it is necessary for the application process and the decision on filling the position, we also process data on the basis of Section 26 (1) sentence 1 BDSG in the context of correspondence with you in written or electronic form. In addition, we make internal notes for the purpose of internal coordination and, if necessary, to prove proper, in particular non-discriminatory decision-making, e.g. after reviewing your application documents or after a personnel selection interview.
  • If you do not apply for a specific position with us or if we decide to use someone else for a specific position but would still like to consider your application for future job advertisements, we may include you in our talent pool and continue to store your application for future contact with you. However, this requires that you give us your express consent within the meaning of Art. 6 para. 1 lit. a, 9 para. 2 lit. a GDPR in conjunction with Section 26 para. 2 BDSG. We will obtain your consent separately and specify the intended storage period in our talent pool (which may vary depending on the job profile and current business needs). The general information provided here on the processing of personal data in the context of recruitment applies accordingly to all applications from our talent pool that we use to fill an advertised position.
  • Reimbursement of travel expenses. If you have traveled to a personnel selection interview, we will generally reimburse you for the travel expenses incurred and proven to us. For this purpose, we process the necessary additional information on the basis of Section 26 (1) sentence 1 BDSG, namely your bank details, details of travel expense reimbursement claims including receipts (cab, fuel receipt, train ticket, etc.).
  • Defense against legal claims arising from the application process. In addition, we may process personal data about you insofar as this is necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Art. 6 para. 1 lit. f GDPR; the legitimate interest is, for example, a burden of proof in proceedings due to an alleged violation of the General Equal Treatment Act (AGG).
  • Retention periods. We process the data collected as part of an application process for the duration of the application process and for a period of six months after the position has been filled, unless otherwise specified here. If an employment relationship is not established between you and us, we may continue to store the data to the extent and for as long as this is necessary to defend against any legal claims. We may store personal data that we process as part of the reimbursement of travel expenses until the end of the tenth calendar year after the date of reimbursement due to retention obligations under commercial and tax law. We are legally obliged to do so, and data processing for this purpose is based on Art. 6 para. 1 lit. c GDPR.

Please note that the German version of the Privacy policy is authoritative.