Recruitment Privacy Notice Template for Germany

The Recruitment Privacy Notice is a mandatory document required under Article 13 and 14 of the GDPR and corresponding provisions of the German Federal Data Protection Act (BDSG) for organizations engaging in recruitment activities in Germany. This document must be provided to job applicants at the time their personal data is collected, typically at the start of the application process. It covers essential information about data processing activities, including the types of data collected, purposes of processing, recipients of data, retention periods, and data subject rights. The notice must reflect specific German legal requirements, such as works council involvement and local data protection standards, while maintaining GDPR compliance. Organizations should implement this document before beginning any recruitment activities and update it whenever their data processing practices change.

1. Introduction: Overview of the document's purpose and the identity of the data controller

2. Types of Personal Data We Collect: Detailed list of personal data categories collected during recruitment

3. How We Collect Your Personal Data: Sources of personal data including direct collection, third parties, and public sources

4. Legal Basis for Processing: GDPR and BDSG legal grounds for processing personal data during recruitment

5. How We Use Your Personal Data: Purposes of processing personal data during recruitment

6. Data Sharing and Recipients: Information about third parties who receive or process the personal data

7. International Data Transfers: Information about any transfers outside the EU/EEA and safeguards

8. Data Retention: How long personal data is kept and criteria for retention periods

9. Data Security: Measures taken to protect personal data during processing

10. Your Rights: Description of data subject rights under GDPR and BDSG

11. Contact Information: Details of data controller and Data Protection Officer