Processing of (personal) data by the entity in charge of the online application process
Recruitment Privacy Notice
Last updated 3.7.2026
General
We are committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner. This privacy notice explains how we collect, use, disclose, and otherwise process your personal data in connection with the recruitment process, as well as the rights available to you under applicable data protection laws.
Data Controller
Name: INDICAL BIOSCIENCE GmbH
Address: Deutscher Platz 5b, 04103 Leipzig, Germany
Commercial Register: Leipzig, HRB 12760
Data Protection Officer: dpo@indical.com
Collection of Personal Data
We generally collect personal data directly from you when you submit an application, provide information during the recruitment process, or otherwise communicate with us. We may also receive personal data from references you provide, recruitment agencies, publicly available professional sources, or other third parties where permitted by applicable law.
We process the personal data of job applicants. In particular, we process the following types of data:
You also have the option to upload supporting documents such as a cover letter, CV, and references/certificates. These may contain further personal data such as date of birth, address, etc.
Providing personal data is generally necessary for us to assess your application and manage the recruitment process. If you do not provide the information requested, we may be unable to consider your application, evaluate your suitability for a position, communicate with you regarding recruitment opportunities, or complete other recruitment-related activities.
Purpose and Legal Basis of Processing Personal Data
We collect and process your personal data for the purpose of carrying out the recruitment process and pre-contractual measures.
Our processing is based on the following legal bases:
Disclosure of Data to Third Parties
Data collected as part of your application is transferred to Personio GmbH, a provider of HR management and applicant tracking software (https://www.personio.de/impressum/). In this context, Personio acts as a data processor for Indical.
As part of the recruitment process, certain members of our recruitment team may be located outside the European Economic Area (EEA) and may have access to your personal data for recruitment-related purposes. As a result, your personal data may be transferred to or accessed from countries outside the EEA.
Where such transfers occur, we ensure that appropriate safeguards are implemented in accordance with applicable data protection laws, including the use of adequacy decisions issued by the European Commission or the European Commission's Standard Contractual Clauses where required.
Rights of Data Subjects
To the extent that we, as data controller, process personal data, you, as the data subject, have certain rights under the GDPR, depending on the legal basis and purpose of the processing:
To exercise your rights as a data subject in relation to data processed in this online application process, please contact our data protection officer at dpo@indical.com.
Retention of Data
Your data will be stored for a period of 6 months beyond the end of the recruitment process. This is generally done to fulfill legal obligations or to defend against potential claims arising from statutory provisions.
If you consent to having your data retained in our talent pool, the data will be retained for 24 months or until you withdraw your consent, whichever is the earliest.
After the retention time, we will delete or anonymize your data. In that case, the data will only be available to us as anonymized metadata without direct personal reference for statistical purposes (e.g. proportion of female/male applicants, number of applications per period, etc.).
If you receive and accept a job offer from us, personal data collected during the recruitment process may be transferred to your personnel file and processed for employment-related purposes. Such data will be retained for the duration of the employment relationship and thereafter in accordance with applicable legal requirements and our retention policies.
Automated Decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Any recruitment decisions are made with human involvement and review.
Changes to This Notice
We reserve the right to amend this privacy notice at any time to ensure it continues to meet current legal requirements or to reflect changes to the recruitment process or similar.
Last updated 3.7.2026
General
We are committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner. This privacy notice explains how we collect, use, disclose, and otherwise process your personal data in connection with the recruitment process, as well as the rights available to you under applicable data protection laws.
Data Controller
Name: INDICAL BIOSCIENCE GmbH
Address: Deutscher Platz 5b, 04103 Leipzig, Germany
Commercial Register: Leipzig, HRB 12760
Data Protection Officer: dpo@indical.com
Collection of Personal Data
We generally collect personal data directly from you when you submit an application, provide information during the recruitment process, or otherwise communicate with us. We may also receive personal data from references you provide, recruitment agencies, publicly available professional sources, or other third parties where permitted by applicable law.
We process the personal data of job applicants. In particular, we process the following types of data:
- Name (first and last name)
- Email address
- Phone number
- LinkedIn profile (if you provide us with it)
- How you became aware of us
You also have the option to upload supporting documents such as a cover letter, CV, and references/certificates. These may contain further personal data such as date of birth, address, etc.
Providing personal data is generally necessary for us to assess your application and manage the recruitment process. If you do not provide the information requested, we may be unable to consider your application, evaluate your suitability for a position, communicate with you regarding recruitment opportunities, or complete other recruitment-related activities.
Purpose and Legal Basis of Processing Personal Data
We collect and process your personal data for the purpose of carrying out the recruitment process and pre-contractual measures.
Our processing is based on the following legal bases:
- Legitimate interest: We process your personal data for our legitimate interest in evaluating your suitability for the position you have applied for.
- Contract: We may process your personal data to perform contractual and precontractual measures relating to potentially entering into an employment relationship with you.
- Consent: We may ask for your consent to retain your application documents for up to 24 months in our talent pool so that we may contact you regarding future employment opportunities. You may withdraw your consent at any time.
Disclosure of Data to Third Parties
Data collected as part of your application is transferred to Personio GmbH, a provider of HR management and applicant tracking software (https://www.personio.de/impressum/). In this context, Personio acts as a data processor for Indical.
As part of the recruitment process, certain members of our recruitment team may be located outside the European Economic Area (EEA) and may have access to your personal data for recruitment-related purposes. As a result, your personal data may be transferred to or accessed from countries outside the EEA.
Where such transfers occur, we ensure that appropriate safeguards are implemented in accordance with applicable data protection laws, including the use of adequacy decisions issued by the European Commission or the European Commission's Standard Contractual Clauses where required.
Rights of Data Subjects
To the extent that we, as data controller, process personal data, you, as the data subject, have certain rights under the GDPR, depending on the legal basis and purpose of the processing:
- Right of access: You have the right to obtain confirmation as to whether we process your personal data and, if so, to receive information about the processing and a copy of your personal data.
- Right to rectification: You have the right to request that inaccurate personal data concerning you be corrected and that incomplete personal data be completed.
- Right to erasure: You have the right to request the deletion of your personal data in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw your consent.
- Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to the processing.
- Right to data portability: Where applicable, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit that data to another controller.
- Right to object: You have the right to object to the processing of your personal data where the processing is based on our legitimate interests. We will stop the processing unless we can demonstrate compelling legitimate grounds to continue it.
- Right to withdraw consent: Where processing of personal data is based on your consent, you have the right to withdraw that consent at any time.
- Right to lodge a complaint: If you believe that the processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.
To exercise your rights as a data subject in relation to data processed in this online application process, please contact our data protection officer at dpo@indical.com.
Retention of Data
Your data will be stored for a period of 6 months beyond the end of the recruitment process. This is generally done to fulfill legal obligations or to defend against potential claims arising from statutory provisions.
If you consent to having your data retained in our talent pool, the data will be retained for 24 months or until you withdraw your consent, whichever is the earliest.
After the retention time, we will delete or anonymize your data. In that case, the data will only be available to us as anonymized metadata without direct personal reference for statistical purposes (e.g. proportion of female/male applicants, number of applications per period, etc.).
If you receive and accept a job offer from us, personal data collected during the recruitment process may be transferred to your personnel file and processed for employment-related purposes. Such data will be retained for the duration of the employment relationship and thereafter in accordance with applicable legal requirements and our retention policies.
Automated Decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Any recruitment decisions are made with human involvement and review.
Changes to This Notice
We reserve the right to amend this privacy notice at any time to ensure it continues to meet current legal requirements or to reflect changes to the recruitment process or similar.