Privacy Notice for Job Candidates

Last updated: August 2026

This notice informs you, in accordance with Art. 13 GDPR, about the processing of your personal data in recruitment procedures at SERBAN DC GmbH.

1. Controller

SERBAN DC GmbH
Bremer Str. 11, 80807 Munich, Germany
Email: info@serbandc.com

2. What data do we process?

We process the personal data you provide to us as part of your application, in particular:

  • master data (surname, first name, date of birth where provided),
  • contact details (address, email address, telephone number),
  • application documents (cover letter, CV, references, certificates and proof of qualifications),
  • the content of our communication with you and, where applicable, interview notes.

Special categories of personal data (Art. 9 GDPR, e.g. health data or a severe disability) are processed only if you provide them of your own accord or where a legal obligation exists.

3. Purposes and legal bases

We process your data to carry out the recruitment procedure, i.e. to decide on the establishment of an employment relationship. The legal bases are:

  • Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Art. 88 GDPR (decision on the establishment of an employment relationship),
  • Art. 6(1)(b) GDPR (pre-contractual measures taken at your request),
  • Art. 6(1)(f) GDPR (our legitimate interest in establishing, exercising or defending legal claims, in particular under the German General Equal Treatment Act, AGG),
  • Art. 6(1)(a) GDPR, Section 26(2) BDSG (your consent, e.g. for extended retention in our talent pool — see our Consent Declaration for Applicants).

4. Recipients of your data

Within our company, only those involved in the decision on your application have access to your data (human resources, the relevant department, management). In addition, IT service providers engaged under data processing agreements (Art. 28 GDPR) may have technical access to the data.

5. Transfers to third countries

Where your application data is transferred to our parent company in Türkiye in the course of intra-group coordination, such transfers are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), as there is no EU adequacy decision for Türkiye. You can request a copy of the appropriate safeguards via the contact details above.

6. Retention period

If you are hired, your application data will be transferred to your personnel file. Otherwise, we generally retain your data for six months after the conclusion of the recruitment procedure in order to be able to defend claims under the AGG; after that it is deleted or destroyed. Longer retention (e.g. in our talent pool for future vacancies) takes place only with your explicit consent.

7. Your rights

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply email info@serbandc.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

8. Necessity of providing your data

Providing your data is necessary for carrying out the recruitment procedure. Without this data we cannot consider your application.

9. No automated decision-making

No automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR takes place in the recruitment procedure.