Data protection information

Responsible Data Controller for the processing of your personal data for the purposes listed here is the HR department of one of the companies affiliated with Riverty within the meaning of Section 15 of the German Stock Corporation Act (AktG). For more information, please refer to the list of the Riverty Companies involved in the process in Appendix 1.

Whenever "we" or "us" is mentioned below, this always refers to one of the companies listed in Appendix 1. Our employees will provide you with more detailed information on the legal entity in question when addressing you.

The responsible data protection officer for each company can be addressed at the address shown in the appendix for each and every legal entity, with the addition "To the data protection officer" or at the e-mail address given there.

The company's HR department is always on the lookout for potential employees for Riverty. For this purpose, it uses professionally oriented social networks to find potential candidates for a vacancy. Taking into account the applicable terms and conditions of the respective website, there is a regular exchange of information between our employees and potential applicants. Our employees for example process the profile information voluntarily provided by users in order to obtain an initial assessment of them as a potential employee of Riverty. Furthermore, in the course of this research, our employees may contact you via the message function implemented on the platform. In this case, the contents of the correspondence conducted with you will be processed and documented via the platform's own storage function as well as internally (e.g. note taking). If you agree, the data and the information you provide to us for the purpose of your application (including CV, references and salary requirements) can then be transferred by yourself to the company's digital application process. Alternatively, you can also send the information via e-mail to the respective employee responsible for the vacancy. If you agree and provide us with your data via e-mail, our employees will either transfer it to the applicant portal or forward it directly to the relevant department for the purpose of the application. For more information on what takes place in the applicant portal, please click on the following link: Click

The legal basis for the described processing in the context of active sourcing is Art. 6 (1) lit. (b) GDPR. The processing of your data is necessary to establish an employment relationship envisaged between you and the company. In this respect, the inspection of profile information is based on Art. 6 para. 1 lit. (f) DS-GVO. Our legitimate interest is based on filling our vacancies in the best possible way. The voluntary use of the professionally oriented social network, taking into account your selected profile setting with regard to the visibility of your data, suggests that you also have an interest to be contacted. It is therefore within the bounds of what can be expected to be addressed by us (cf. recital 47 of the GDPR).

You are not obligated to disclose your data to us when our employees contact you. You may object to the access to your user profile in accordance with Art. 21 DS-GVO. In this context, however, we draw your attention to the general terms of use of the job-related social network and recommend that you change your profile settings accordingly for the future, as otherwise it will not be possible to prevent such processing by us or third parties.

Within the company, those departments will receive access to your data that need it to fulfill the purposes outlined. Service providers used by the company may also have access to your data (so-called  “Processors", e.g. data centers, hosting, IT infrastructure support or web design). Corresponding data processing agreements ensure that your data will be processed in accordance with all applicable national and european data protection provisions. If personal data is transferred to third parties, this is done - as described - within the framework of applicable law and agreed contractual agreements to maintain confidentiality with regard to your data between the company and the respective acting service provider.

Your personal data will be deleted immediately if the purposes for which they were collected no longer apply or the data required for processing are no longer necessary to achieve the purposes described. This does not apply if the company is subject to statutory retention periods (e.g. § 147 of the German Tax Code, § 257 of the German Commercial Code) or if retention is necessary for the assertion, exercise or defense of legal claims (e.g. § 195 of the German Civil Code).

If we do not collect your data directly from you, your data will come from your social media user profile.

You have the right to obtain information about the personal data we have stored about you at any time. If data about your person is incorrect or no longer up to date, you have the right to request its correction. You also have the right to request the deletion or restriction of the processing of your data in accordance with Article 17 or 18 GDPR. If you have provided us with data and the processing by means of automated procedures is based on your consent or on a contract with you, you have the right to receive this data provided by you in a structured, common and machine-readable format (right for data portability).

You may object to the processing of your data in accordance with Art. 21 DSGVO. In this case, we will no longer process your data, unless we can demonstrate compelling legitimate grounds for processing that override your interests.

Should you wish to exercise your rights or have general questions about data protection or your data subject rights, please feel free to contact the relevant contact person in the appendix at any time.

In addition, you have the option of contacting the data protection authority responsible for you and filing a complaint there. However, you can also contact the data protection authority responsible for your place of residence, which will then forward your concern to the competent authority.

Automated decision-making and profiling based on your data does not take place.