Skip to main content

Processing of (personal) data by the entity in charge of the online application process

Data protection provisions on the processing of personal data in the application procedure


1. Description of the processing activity
The following information pursuant to Art. 13 DSGVO is intended to provide you with an overview of the processing of your personal data by Platoon Aviation GmbH & Co. KG in the context of your application for a job vacancy and your rights under the DSGVO.


    2. Name and contact details of the responsible person
The responsible party for the processing of personal data is Platoon Aviation GmbH & Co.  KG - Rathausmarkt 5, 20055 Hamburg, Tel.: +49 40 285 330-247, Email: hello@flyplatoon.com


    3. Contact details of the data protection officer
The external data protection officer of Platoon Aviation GmbH & Co. KG can be reached at the above address.

  • 4. Purpose of the processing  

    Your personal data will be processed in order to carry out the selection procedure by the competent human resources processing department as follows:
  • Acknowledgement of receipt 
  • Preparation of the application list(s)
  • Invitation to interviews and/or selection interviews
  • Carrying out the interviews and selection procedures as well as separate selection procedures (assessment centre)
  • Selection decision
  • Rejection / acceptance

  • For this purpose, we usually process the following information from you, which is stored in the respective data processing systems of Platoon Aviation GmbH & Co. KG. This is the data that arises during the application process, in particular from your application documents and interviews:

  • Personal identification data: First name, last name, title if applicable, date of birth, place of birth, nationality etc.
  • Communication data: Address, telephone number, e-mail address
  • Information on your personal, educational and professional background
  • Information on the fulfilment of the requirement criteria according to the job advertisement
  • Information on other qualifications, if applicable, the following specially protected health data within the meaning of Art. 9 DSGVO (e.g. information on the existence of a severe disability or health data to determine the ability to work).

    In order to carry out the application process, we require the personal data from you that is necessary for the decision on whether to enter into the employment relationship. The absence of relevant personal data in the application documents may result in non-inclusion. Consequently, if you do not provide the required data, your application cannot be fully processed or missing information cannot be considered.

          5.  Legal basis and purposes of processing    

Your personal data will be processed exclusively for the purpose of your application; the legal basis for this is Section 26 (1) BDSG and Article 6 (1) sentence 1 lit. b DSGVO. If you provide health data as defined by Art. 9 DSGVO (e.g. information on the existence of a severe disability or an equalisation) as part of the application process, this data will be processed on the basis of Art. 9 para. 2 lit. b DSGVO in conjunction with. § 164 SGB IX.

        6. Recipients or categories of recipients of personal data    
As a rule, your personal data will be passed on to the relevant specialist department or its management, and if necessary to the companies Interpersonal or Goldblum, which carry out assessments as an order processor.

 7. Duration of storage of personal data    
Your personal data will be stored for the duration of the application process. In the event that your application leads to employment, we will process the documents you have submitted and transfer them to the personnel file. If your application is unsuccessful, your application documents (e.g. references, certificates) will be stored for as long as is necessary in accordance with Art. 17 (3) DSGVO, but generally for no longer than 6 months. Further storage may be necessary, among other things, for the defence of possible legal claims, in which case the data will be stored until the legal conclusion of the proceedings. In the event that you withdraw your application, your application documents will be deleted immediately.


8. Data subject rights
According to the General Data Protection Regulation, you have the following rights:

You have the right to receive information about the data stored about you (Art. 15 DSGVO).
If personal data concerning you is incorrect, you have the right to have it corrected (Art. 16 DSGVO).
If the legal requirements are met, you may request deletion (Art. 17 DSGVO) or restriction of processing (Art. 18 DSGVO).

Right of appeal
You have the right to lodge a complaint with the external data protection officer or the supervisory authority if you believe that your personal data are being processed unlawfully (Art. 77 DSGVO). If you wish to contact the Hamburg Commissioner for Data Protection and Freedom of Information, you can do so as follows: The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, mailbox@datenschutz.hamburg.de, telephone: 040 42854-4040.

If you wish to exercise a right, please contact us or our external data protection officer. We would like to point out that in certain cases we may request additional information from you in order to establish your identity. For example, when exercising the right to information, we can ensure that information is not released to unauthorised persons.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.