1. Overview
The following privacy notices provides you with an overview of the nature and extent of personal data processing carried out within the scope of the Douglas Career offer.
Personal data is information that is or can be attributed directly or indirectly to your person.
Every time you visit this website/application, different kinds of information are exchanged between your end device and our server. This can also include personal data. The information collected in this way is used, for example, to make the contents of the website available to you and to prevent unauthorised access.
2. Name and contact details of the controller and of the company data protection officer.
This privacy notice applies to data processing performed by
DOUGLAS GmbH
(“Data Controller” or “we”, “us” etc.)
Luise-Rainer-Straße 7-11
40235 Düsseldorf
Email: [email protected]
Telefon: +49 211 16847-9
and for the website: behindbeauty.douglas.de
For the DOUGLAS career offer, Douglas GmbH and Parfümerie DOUGLAS GmbH are jointly responsible for the data generated. In this respect, we have stipulated in an agreement which company fulfills which data protection obligations. We are pleased to provide you with the essential content of this agreement.
The addresses of Douglas GmbH and Parfümerie Douglas GmbH are identical.
The data protection officer of DOUGLAS GmbH and of Parfümerie DOUGLAS GmbH can be contacted under the above address, c/o Data Protection Department, or by sending an email to datenschutz[at]douglas.de.
3. Purposes of data processing, legal basis, legitimate interests pursued by us or a third party, categories of recipients
3.1 Visiting our website
Whenever you visit our website/application, the browser used on your end device automatically sends information to our website server. The information is then temporarily stored in a log file. The following information is collected without further action on your part and is stored for seven days before being automatically deleted:
The legal basis for processing the IP address is Article 6(1)(f) GDPR. Our legitimate interest is based on the purposes listed below:
3.2 Online applications
You can apply for a vacancy by uploading your application documents via behindbeauty.douglas.de/en/jobs. The application takes place without registration to an applicant portal and is always linked to a specific job posting. After successful transmission of your application, you will automatically receive a confirmation of receipt by e-mail. Further correspondence will take place, among other things – unencrypted – by e-mail as well as by telephone. Unless you expressly request encrypted communication, in which case please let us know.
Personal data such as name, contact details, training data and information on work experience (“applicant data”) that you provide to us as part of your application will be treated confidentially and stored and used electronically solely for the purpose of processing the application and, if applicable, for implementing the subsequent employment relationship.
We require the data processed as part of the application process for the possible conclusion of an employment relationship or the decision on your employment. We process this personal data in order to check your suitability for the relevant position, for the purpose of processing applications and for contacting you.
Your applicant data can only be submitted using the form in the applicant portal of Douglas GmbH or another company belonging to the Douglas Group. Within your confirmation of receipt, which you will receive after a successful application, you will find access to your data and can revoke your privacy policy at any time and thus withdraw your application.
The processing of your applicant data is based on Art. 6 para. 1 lit. b DSGVO (initiation or execution of a contract) as well as national regulations on employee data protection (§ 26 para. 1 sentence 1 BDSG). In principle, you are not obliged to provide special categories of personal data as part of your application. If such data is processed in individual cases, this is done on the basis of Art. 9 (1) DSGVO.
The collection of your personal data in the application documents for the purposes of the application process is carried out for the initiation of a contract and therefore does not require consent.
3.3 ApplicantPool
You can apply for a vacancy by uploading your application documents via behindbeauty.de/code/jobs. The application takes place without registration to an applicant portal and is always linked to a specific job posting. After successful transmission of your application, you will automatically receive a confirmation of receipt by e-mail. Further correspondence will take place, among other things – unencrypted – by e-mail as well as by telephone. Unless you expressly request encrypted communication, in which case please let us know.
Personal data such as name, contact details, training data and information on work experience (“applicant data”) that you provide to us as part of your application will be treated confidentially and stored and used electronically solely for the purpose of processing the application and, if applicable, for implementing the subsequent employment relationship.
We require the data processed as part of the application process for the possible conclusion of an employment relationship or the decision on your employment. We process this personal data in order to check your suitability for the relevant position, for the purpose of processing applications and for contacting you.
Your applicant data can only be submitted using the form in the applicant portal of Douglas GmbH or another company belonging to the Douglas Group. Within your confirmation of receipt, which you will receive after a successful application, you will find access to your data and can revoke your privacy policy at any time and thus withdraw your application.
The processing of your applicant data is based on Art. 6 para. 1 lit. b DSGVO (initiation or execution of a contract) as well as national regulations on employee data protection (§ 26 para. 1 sentence 1 BDSG). In principle, you are not obliged to provide special categories of personal data as part of your application. If such data is processed in individual cases, this is done on the basis of Art. 9 (1) DSGVO.
The collection of your personal data in the application documents for the purposes of the application process is carried out for the initiation of a contract and therefore does not require consent.
3.4 Consent in the application process
We may also process your applicant data beyond the actual purpose of the application in order to approach you again if an employment contract is not concluded (“applicant pool”). However, this is only possible if you have given us your consent. If you do not consent to being included in our applicant pool, we will only consider your application for the specific position.
Insofar as we process your data beyond the application purpose, this is done on the basis of your consent within the meaning of Art. 6 Ab. 1 lit. a DSGVO.
3.5 Consent to inclusion in the ApplicantPool
By checking the box, I also consent to Douglas processing my following data:
Cover letter, curriculum vitae, references as well as information contained therein such as former employer and qualifications achieved, certificates, achievements and other proof of school, (extra) university and training-related achievements
for a further 6 months, also for future suitable positions, in the Douglas applicant pool, in compliance with the Data Protection Regulation (GDPR) and the BDSG.
I am aware that the provision of my personal data in the Douglas BewerberPool is expressly on a voluntary basis. If I do not give my consent, I am aware that my application cannot be searched for by other responsible persons from different companies of the Douglas Group for filling other vacancies and that I cannot be offered any other vacancies matching my profile.
I am aware that I can revoke my consent at any time with effect for the future and that in this case I will no longer be registered in the Douglas BewerberPool. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The revocation can either be sent by post to the above-mentioned company address or by e-mail to [email protected]. There will be no costs other than the postage or transmission costs.
The collection of personal data in the application documents (e.g. contact details, address, date and place of birth) for the purposes of the application process is for the purpose of initiating a contract and therefore does not require consent. I am aware that I am not obliged to consent to the use of my data for these purposes. Withholding my consent will not have any adverse consequences for me.
3.6 Is there an obligation to provide your data?
Please note that you are not obliged to provide your data as part of the application process. However, it is not possible to process the application and establish an employment relationship without processing your data, so unfortunately your application cannot be considered without providing the data.
In accordance with the legal requirements, we process your applicant data for the above-mentioned purposes only to the extent that this is actually necessary for the application process. Conversely, this means that we reserve the right not to consider an application if you do not provide data that we have specified as mandatory fields in the application portal or if you do not answer questions that we ask you during the application process. We will inform you if this is different in individual cases.
3.7 Storage period
If you apply for a job with us via our website, you give us your consent during the application process to include your application data in our applicant database so that we can contact you as part of the application process. For this purpose, your application data will be stored for a period of 6 months and then automatically deleted. This period is automatically reset within the 6 months if you apply again for another position with us. However, you can also request that we delete your applicant data at any time if you do not agree to the data being stored for this period.
If you register for the Applicant Pool, you agree that we may store your documents for a further 6 months so that we can contact you proactively with suitable job offers. Before the 6 months expire, you will receive an automatically generated e-mail from us in which you can agree again to an extension of the storage period. You can revoke this, as well as the initial declaration to store the data, at any time.
3.8 automated individual decision-making on a case-by-case basis
For positions at our headquarters and for regular positions in our stores, our decision on whether to accept your application is generally not based on an automated decision; instead, each application is reviewed and evaluated by the relevant employees at our company.
However, in the case of applications from trainees, an automated pre-selection is made based on specific qualification characteristics (including the qualified school-leaving certificate, the number of hours missed and the language level).
In the case of applications for dual study places at headquarters, pre-selection is based on school grades.
In the event of such a (partially) automated individual case decision, you have a right to obtain the intervention of a person on the part of Douglas as the person responsible, to express your own point of view and to contest the decision.
3.9 Contacting
In the event of such a (partially) automated individual case decision, you have a right to obtain the intervention of a person on the part of Douglas as the person responsible, to express your own point of view and to contest the decision.
3.10 Use of cookies
We use so-called cookies on our website. Cookies are small text files with configuration information that are sent from our web servers to your browser when you visit our website and are stored on your computer for later retrieval.
Cookies allow our website to retrieve or store information from your browser. This may be information about you, your preferences or your device. In most cases, they are used to ensure that the website functions as expected. Usually, this information does not identify you directly. However, they can provide you with a more personalized web experience.
Session cookies (transient cookies)
We use so-called session cookies (also called temporary or transient cookies) on our website. These session cookies are stored exclusively for the duration of your use of our website. The session cookies we use are only used to identify you as long as you are logged in to our website. After the end of each session, the session cookies are deleted. Any use of the session cookies beyond this does not take place.
These cookies are absolutely necessary for the function of our website and cannot be deactivated in our systems. Generally, these cookies are only set in response to actions you take that correspond to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you of these cookies. However, some areas of the website may not function if you do so.
The use of these session cookies is based on Art. 6(1)(f) GDPR. Without the use of these cookies, the website offer as well as calling up and using the website by you are technically not possible.
3.11. Social Media Buttons
Our website contains social media buttons for the social networks Facebook, Instagram, YouTube, Pinterest, LinkedIn, XING and Twitter. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the DSGVO, in order to make our company better known via this.
These social media buttons only establish links to the respective providers. As long as these buttons are not clicked, no transmission to these providers takes place. If you click on these buttons, you will be redirected to the website of the respective provider. Depending on whether you were logged in to the respective providers at the time of clicking, your data will be processed in accordance with the data usage guidelines of these providers and may be used for profiling purposes.When you click on a link to an external site, you are moving outside of our career offerings. To this extent, DOUGLAS is not responsible for the content, services or products offered on the linked website, nor for the data protection and technical security on these linked external sites.
3.12 Categories of recipients
We can commission external service providers (e.g. data centres, consultants) to perform the data processing for certain tasks. When we cooperates with such service providers, they are bound by contractual agreements to observe data protection to the same extent as we are.
4. Data security measures
All data transmitted by you personally will be transferred using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, in online banking. You can recognize a secure SSL connection by the appended s at the http (i.e. https://…) in the address bar of your browser or by the lock symbol in the lower area of your browser, among other things.
We also use appropriate technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties.
5. Your rights
5.1 Overview
Under the provisions of the GDPR you have various rights that you can assert against us. They include, for example, the right to appeal against specific data processing, in particular data processing for advertising purposes. Along with the right to revoke the declaration of consent you made to us, you are entitled to the following further rights if the relevant legal prerequisites are fulfilled:
5.2 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR, including profiling based on this provision. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to such processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. When you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
6. Updating the privacy notices
We adapt this privacy notices to changed functionalities or changed legal situations. Therefore, we recommend that you take note of the privacy notices at regular intervals.
Updated: 04.03.2024