Privacy Notice for Job Applicants

Information pursuant to Article 13 of the GDPR · Last updated: August 2026

We are delighted that you are interested in working at LESERGmbH. Below, we explain how we process your personal data when you apply for a job with us. This information supplements our general privacy policy and applies to the application process.

1. Data controller and contact person for applications

The data controller responsible for processing your application data within the meaning of the GDPR is:

For any enquiries regarding your application and the protection of applicants’ data, please contact exclusively:

2. Data Protection Officer

You can contact the Data Protection Officer appointed by LESERGmbH at:

3. Purpose and legal basis of processing

We process your application data solely for the purpose of processing your application and assessing your suitability for the advertised position. The legal basis is Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG, as going through the application process is regarded as the initiation of an employment contract.

Where we process special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g. information regarding severe disability status) as part of the application process, this is done in accordance with Article 9(2)(b) of the GDPR, so that we may exercise the rights arising from labour law and the law on social security and social protection, and fulfil our obligations in this regard.

Insofar as we determine the approximate distance between your place of residence and our premises and retain your data until the expiry of the time limits specified in point 8, we rely on Article 6(1)(f) of the GDPR. Our legitimate interest lies in assessing the commute and in fulfilling our obligations to provide evidence.

If you voluntarily join our candidate pool beyond the application process, we will also process your data on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

4. What data we process

• Name and contact details (email, telephone number and, depending on the application method, address or postcode and town/city)
• Application documents: CV, certificates and, where applicable, a covering letter
• Details of qualifications, professional experience, salary expectations and earliest start date
• If applying via our form, please also include: your chosen area of work, your preferred employment type (e.g. full-time, part-time, apprenticeship) and your answer to the open-ended question
• Answers to job-specific questions, as well as the source and channel of your application
• If you consent to being included in our candidate pool: the date of your consent and the version of the consent text that was displayed to you at the time. We store this information because we must be able to demonstrate that consent was given (Article 7(1) of the GDPR)

We deliberately do not collect any information regarding age, gender, marital status, religion, ethnic origin, political views or health. Please refrain from sending us such information unsolicited. We do not require a photograph with your application.

You are not required to inform us of any severe disability or equivalent status. If you choose to disclose this information voluntarily, we will process it solely for the purpose of fulfilling the rights and obligations under the Ninth Book of the Social Code. You will not suffer any disadvantage as a result of not providing this information.

For applications received by email or via the portals mentioned in point 5, we calculate the approximate distance from your place of residence to our site in Lahr. This serves solely to estimate the commute and is not, in itself, a ground for exclusion. For applications submitted via our form, we do not calculate any distance; the postcode is used there only for a rough geographical classification.

The preferred form of employment is used solely to categorise your application and is not used for pre-selection.

Information regarding the source of your application, for example the website via which you found us, is used exclusively internally to understand the pathways that lead applicants to us. No feedback is provided to advertising networks.

Providing your data is not required by law or by contract. However, without the information marked as mandatory fields and without your application documents, we cannot consider your application. All other information is voluntary; you will not suffer any disadvantage if you choose not to provide it.

5. Application channels and methods

You can apply to us via the following channels:

• Via the application form on our careers page
• By email to personal(at)leser.de
• Via our careers portal on Workwise (leser.workwise.io)
• Via the job portals Indeed and Join, as well as the Federal Employment Agency’s job board

Applications received via external portals are automatically forwarded to our internal application inbox, where they are processed. Your data on the respective portals is also subject to the data protection provisions of the relevant provider.

6. No use of artificial intelligence

7. Recipients of your data

Internally, only those involved in the recruitment process have access to your application (senior management, our HR department and the relevant specialist department). In addition, we use the following carefully selected service providers with whom we have data processing agreements in accordance with Article 28 of the GDPR:

Your application data is processed on servers in Germany and the European Union. Neither we nor the service providers commissioned by us transfer data to any country outside the EU or the EEA. Notification of received applications is carried out via our own systems; the mailing service provided by our form provider has been deliberately deactivated.

If you apply via one of the job portals mentioned in point 5, the data protection provisions of the respective provider also apply to the data you have submitted there. Depending on the portal, this may involve processing outside the EU over which we have no control . This information applies to the processing of your data from the moment we receive your application.

8. Retention period and deletion

• In the event of a rejection or withdrawal of your application: We will delete your application data as soon as the process is complete for you, at the latest six months after the rejection. As a rule, we delete the data immediately after sending the rejection. The six-month period is the maximum limit and is based on our legitimate interest (Article 6(1)(f) of the GDPR) in being able to answer follow-up questions and fulfil our obligations to provide evidence under the General Equal Treatment Act.
• In the case of a speculative application without a specific vacancy: We will delete your documents no later than six months after receipt, unless you have consented to being included in our candidate pool.
• Candidate pool: Inclusion in the pool is subject to your express consent and is valid for six months from the date your application is submitted. If you receive a rejection before then, your data will remain stored until the end of this six-month period and will be deleted thereafter. You may withdraw your consent at any time with future effect by sending an informal email to personal(at)leser.de.
• Applications via our form: Your details and uploaded files are deleted by the form provider immediately after they have been transferred to our application system. For technical reasons, they remain in the recycle bin there for up to 90 days before being permanently removed.
• Technical logs: Application data remains in the logs of our processing steps for up to 30 days, after which it is automatically deleted.
• In the event of a successful application: The data provided will be further processed on the basis of Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purpose of implementing the employment relationship and will be transferred to the personnel file . The statutory retention periods apply there.

9. Your rights

You are entitled to the following data subject rights:

• Right of access pursuant to Article 15 of the GDPR
• Right to rectification pursuant to Article 16 of the GDPR
• Right to erasure pursuant to Article 17 of the GDPR
• Right to restriction of processing pursuant to Article 18 of the GDPR
• Right to be informed pursuant to Article 19 of the GDPR
• Right to data portability under Article 20 of the GDPR
• Right to withdraw consent pursuant to Article 7(3) of the GDPR
• Right to object under Article 21 of the GDPR to processing based on a legitimate interest. This applies in particular to the assessment of your commute and any processing to which you do not consent. An informal notification to personal(at)leser.de is sufficient.
• Right to lodge a complaint with a data protection supervisory authority in accordance with Article 77 of the GDPR

The supervisory authority responsible for LESERGmbH is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (baden-wuerttemberg.datenschutz.de).

10. Contact

For further information, to exercise your rights or if you have any questions regarding the protection of applicants’ data, please contact us at personal(at)leser.de.