Privacy Policy for the Career Portal

1. Data Protection at a Glance

The protection of your personal data is very important to us. Below, we explain what personal data is processed when you use our career portal and as part of a job application, and for what purposes this is done.

Personal data refers to any information relating to an identified or identifiable natural person.

2. Data Controllers

The career portal is jointly operated by the following companies:

FormiChem GmbH

Anna-von-Philipp-Straße B 33

86633 Neuburg an der Donau

Germany

Phone: +49 (0) 8431 6294-0

Email: info@formichem.de

and

FormiChem pro GmbH

Dieselstraße 8

85107 Baar-Ebenhausen

Germany

Phone: +49 (0) 8453 3490-0

Email: info@formichempro.de

For questions regarding job openings and applications, please contact the Human Resources Department at:

FormiChem GmbH

Human Resources Department

Phone: +49 (0) 8431 6294-035

Email: personalwesen@formichem.de

To the extent that FormiChem GmbH and FormiChem pro GmbH jointly determine the purposes and means of processing personal data in connection with this career portal, the processing is carried out under joint control in accordance with Article 26 of the GDPR.

The company to which you are applying, or for whose position your application is being considered, is generally responsible for the specific processing of your application data.

3. Data Protection Officer

You can contact the Data Protection Officer of FormiChem GmbH or FormiChem pro GmbH at:

Mr. Gerald Lill

Projekt 29 GmbH & Co. KG

Ostengasse 14

93047 Regensburg

Phone: 0941 2986930

Fax: 0941 29869316

Email: anfragen@projekt29.de

Website: http://www.projekt29.de/

You may contact the Data Protection Officer at any time with questions regarding data protection or the processing of your personal data.

4. Provision of the Career Portal and Server Log Files

When you visit our career portal, the web server automatically processes information that your browser transmits to our server. This may include, in particular:

IP address of the accessing device,Date and time of access,Page or file accessed,Referrer URL,Browser used and browser version,Operating system used,Hostname of the accessing computer,HTTP status code.

The processing of this data is technically necessary to provide the career portal, ensure the stability and security of the system, and detect and investigate technical errors or unauthorized access.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and functional provision of our career portal.

As a general rule, server log files are stored only for as long as is necessary for the purposes stated above. Longer storage may occur in individual cases if this is necessary to investigate or defend against a specific security incident.

5. Hosting

We use hosting and IT service providers to operate our career portal. In this context, the respective service provider may process the personal data collected when you visit the career portal.

To the extent that the service provider processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR.

6. Technically Necessary Cookies

Our career portal uses only cookies that are necessary for the technical operation and provision of the website.

Technically necessary cookies may, for example, be used to provide basic website functions, save language settings or technical session information, or ensure the security of the website.

Cookies are not used for analytical, marketing, or tracking purposes.

To the extent that information is stored on or retrieved from your device by technically necessary cookies, this is done pursuant to § 25(2)(2) TDDDG, provided that the storage or access is absolutely necessary to provide the telemedia service you have expressly requested.

To the extent that personal data is processed in connection with technically necessary cookies, such processing is carried out, depending on the specific purpose, in particular on the basis of Article 6(1)(f) of the GDPR.

7. Job Applications

Through our career portal, you can learn about current job openings and submit an application or a speculative application.

As part of the application process, we process the personal data that you provide to us in connection with your application.

This may include, in particular:

First and last name,Address and contact information,Phone number and email address,Date of birth, if provided,Information on education and professional history,qualifications and skills,diplomas and certificates,application photo, if submitted voluntarily,information from your cover letter and resume,information regarding internships and previous employment,other information and documents you submit as part of your application.

Processing is carried out exclusively for the purpose of conducting the application process and deciding whether to establish an employment relationship.

The legal basis for this is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) of the General Data Protection Regulation (GDPR).

If you voluntarily provide us with special categories of personal data within the meaning of Article 9(1) of the GDPR as part of your application, such data will be processed only to the extent that there is a corresponding legal basis for doing so. This may include, in particular, Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG.

As a general rule, please provide us only with the personal data required for the application process as part of your application.

8. Recipients of Applicant Data

Within the respective responsible company, access to your application data is generally limited to those individuals who require it for the conduct of the application process.

This may include, in particular:

Human Resources,the responsible management,the relevant department or managers,where applicable, employee representatives, to the extent necessary.

Your application data will generally not be disclosed to other third parties unless there is a legal obligation or other legal basis for doing so.

9. Application to the Other Company

If, during the course of the application process, it becomes apparent that your applicant profile is also a good fit for a position at the other company—FormiChem GmbH or FormiChem pro GmbH—your application will only be forwarded or considered to that extent if there is a legal basis for doing so under data protection law.

If such a transfer is not already covered by the original purpose of your application, we will obtain your prior consent, if necessary.

10. Retention Period for Applicant Data

If an employment relationship is established, the application data necessary for the employment relationship will be transferred to the personnel file and processed and stored in accordance with the applicable legal requirements.

If an employment relationship is not established, the application documents will generally be deleted upon completion of the application process as soon as their storage is no longer necessary for the application process or to safeguard legitimate interests.

Storage for a period of up to six months following the conclusion of the application process may be necessary, in particular, to defend against or assert potential legal claims.

The legal basis for this temporary extended storage is Article 6(1)(f) of the GDPR. The legitimate interest consists, in particular, of legal defense and the provision of evidence.

Storage beyond this period—for example, to consider you for future job openings—will only occur if there is a corresponding legal basis for doing so, in particular if you have given your consent.

You may revoke any consent you have given at any time with effect for the future.

11. Contacting Us

If you contact us by email or phone, we will process the personal data you provide in order to handle your inquiry.

If your inquiry relates to a job application or a potential employment relationship, processing is generally based on Section 26(1) of the German Federal Data Protection Act (BDSG) or Article 6(1)(b) of the GDPR.

For other inquiries, processing is based on Article 6(1)(b) or Article 6(1)(f) of the GDPR, depending on the content of the inquiry.

The data will be deleted as soon as it is no longer necessary for processing your inquiry and there are no legal retention obligations or other legitimate reasons for further storage.

12. No Automated Decision-Making

Decision-making based exclusively on automated processing, including profiling as defined in Article 22 of the GDPR, does not generally take place as part of the application process.

The decision regarding whether to consider an application and to establish an employment relationship is not made exclusively by automated means.

13. Data Transfer to Third Countries

A transfer of personal data to countries outside the European Union or the European Economic Area is not currently planned in connection with the website features we use.

Should a transfer to a third country take place in the future, it will be carried out only in compliance with the requirements of Articles 44 et seq. of the GDPR, and this Privacy Policy will be amended accordingly.

14. Your Rights

Subject to the statutory requirements, you have the following rights in particular:

Right of access pursuant to Article 15 of the GDPR,Right to rectification pursuant to Article 16 of the GDPR,Right to erasure pursuant to Article 17 of the GDPR,Right to restriction of processing pursuant to Article 18 of the GDPR,Right to data portability pursuant to Article 20 of the GDPR,Right to object pursuant to Article 21 of the GDPR.

If processing is based on your consent, you have the right under Article 7(3) of the GDPR to withdraw your consent at any time with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

Right to Object

To the extent that we process your personal data on the basis of Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to such processing at any time on grounds relating to your particular situation.

15. Right to File a Complaint with a Supervisory Authority

Pursuant to Article 77 of the GDPR, you have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data.

The data protection supervisory authority responsible for the companies is generally:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

16. Security

We implement appropriate technical and organizational measures in accordance with Article 32 of the GDPR to protect your personal data against loss, tampering, unauthorized access, and other unlawful processing.

These security measures are regularly reviewed in light of technological developments and existing risks and adjusted as necessary.

17. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if the technical procedures used, the career portal, or legal or regulatory requirements change.

As of: August 2026