Privacy Notice for Applicants at Finnegan Munich

Introduction

This Privacy notice describes our policies and procedures on the collection, use, and disclosure of your information upon your job application to us, Finnegan, Henderson, Farabow, Garrett & Dunner LLP, Munich office, and tells you about your privacy rights under the GDPR.

This Privacy notice applies exclusively to the application process. The processing of personal data in the context of a subsequent employment relationship is subject to separate privacy notices.

Our Role

Our company

Finnegan, Henderson, Farabow, Garrett & Dunner LLP
Thierschplatz 6
80538 Munich
Telephone: +49 89 83931 1230
E-mail: recruiting-munich@finnegan.com

owns responsibility for the following.

Information We Collect

We collect information in multiple ways, including when you provide information directly to us as part of your application:

• Contact details, e.g. name, address, telephone number, e-mail address
• Application documents, e.g. cover letter, CV, references, certificates
• Correspondence, e.g. for queries or arranging an interview
• Further data that you voluntarily provide to us as part of your application (e.g. in the context of job interviews)

How We Use Your Information

For the purposes of the selection process for the vacancy you are applying for, we will use the information you provide during the application process.

In the event of recruitment, applicant data will be used for the establishment and further implementation of the employment relationship. This data will be processed in accordance with a separate Privacy notice.

In exceptional cases, we may also use applicant data to defend against legal claims, e.g. in anonymized form in the event of complaints from other applicants due to alleged discrimination.

Who Will See Your Data

In-house, your data will be passed on to the persons involved in the selection decision (e.g. partners, office management, lawyers in the respective field).

We would like to confirm that, as part of the selection process, your applicant data will not be transferred outside the EU, including to our office in Washington, DC, USA. However, we would like to point out to you that, in the event of your subsequent employment, certain data will have to be transferred to the USA for the purpose of carrying out the employment relationship. This is due to the fact that we are a US law firm with our headquarters in Washington, DC, USA, and a number of functions are performed in the USA or coordinated and managed from there. You will receive further details in a separate Privacy notice.

Occasionally, we engage the services of external providers to process personal data on our behalf and in accordance with our instructions (e.g. IT service providers for the maintenance and support of our IT systems). We enter order processing contracts with these service providers to ensure that your data is only processed in accordance with our specifications and purposes.

How Long Your Data Will Be Stored

Once the application process has been completed, your data will be blocked and deleted no later than six months after completion. If you are hired, your data will be stored for a further period, for which separate data protection notices apply.

Legal Framework

The legal basis for the processing of your applicant data is Art. 6 para. 1 lit. b) GDPR (contract initiation and implementation of pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interests) in the event of the enforcement or defense of legal claims.

Automated Decision-Making and Profiling

We are committed to transparency and respect your personal data. As such, we do not use automated decision-making, including profiling, as part of the application process in accordance with Art. 22 GDPR. Decisions about your application are always made by natural persons.

Your Rights under the GDPR

In accordance with the GDPR, we are obligated to inform you of your rights. Please refer to the list below for details. These rights are granted under the conditions specified in the respective data protection regulations. Please note that the following description does not grant you any additional rights.

Notice

You have the right to request confirmation from us as to whether we process your personal data. If we process your personal data, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

Correction of Data

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data, as outlined in Article 16 of the General Data Protection Regulation (GDPR).

Extinction of Data

You have the right to demand the immediate deletion of your personal data if one of the reasons listed in Art. 17 of the GDPR applies. For example, you can request the deletion of your data if it is no longer required for the purposes, it was originally collected for.

Limitation of Processing

You have the right to request that we restrict processing if one of the conditions listed in Art. 18 GDPR is met. For example, if you have objected to processing, we will restrict it for the duration of our review.

Data Transferability

As a data subject, you have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to third parties, and to have it transmitted to the extent technically feasible, as outlined in Article 20 of the General Data Protection Regulation (GDPR).

Objection

Irrespective of any other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data by us violates the GDPR, Art. 77 GDPR. You may exercise this right before a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. The contact details of the supervisory authorities in Germany can be found at https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html.

Revocation (of Consent)

If you have previously provided us with your data protection consent, you have the right to withdraw it at any time with effect for the future. This also applies to data protection consents that you provided us prior to the GDPR's implementation.

Contradiction

You also have the right to object, which we will inform you of separately below: