Privacy Policy – Careers Site

The companies of the BOGNER Group mentioned under point 1 operate an application portal with the possibility of submitting applications online. The companies mentioned attach great importance to the protection of privacy and observe the legal data protection regulations. In the following, we explain how we handle your personal data.

1. Controller within the meaning of data protection law:

Your direct contact:

Email: career@bogner.com

Willy Bogner GmbH
Neumarkter Str. 75

81673 Munich

Germany

Bogner Commerce GmbH

Neumarkter Str. 75

81673 Munich

Germany

Bogner Vertriebsgesellschaft m.b.H.

Foundry Building B, Building 10

Söllheimer Straße 16

5020 Salzburg

Austria

Bogner Sport AG

Grubenstrasse 38

8045 Zurich

Switzerland

In many areas, the data is processed collaboratively. Joint responsibility is regulated by an agreement between the companies. The companies use the same database solution in the course of their activities and access a common database where necessary. The companies are each independently responsible for the lawful processing of personal data and the granting of data subject rights, including the provision of mandatory information. Where necessary, the companies support each other in this regard.

2. As data protection officer, we have appointed

c/o activeMind AG Technologie- und Managementberatung
Potsdamer Straße 3
80802 Munich
dataprotectionofficer@bogner.com

3. Processing activities

3.1. Contact form and applications

Purpose and legal basis

You can submit your application online to the companies of the BOGNER Group on our application portal. The data you provide will be processed exclusively for the purpose of assessing your professional suitability and contacting you.

As part of the application process, we use CV parsing technology. The contents of your uploaded CV are automatically read out and transferred to our applicant management system in a structured manner (e.g. name, contact details, education, professional experience). This serves to make the application process more efficient. There is no automated decision-making within the meaning of Art. 22 GDPR.

The processing is carried out in order to establish an employment relationship in order to carry out pre-contractual measures, which are carried out on request, in accordance with Art. 6 (1) (b) GDPR.

Recipients of the data

Within the companies, access to your data is given to those entities that need it to fulfil pre-/ contractual, legal and regulatory obligations as well as to safeguard legitimate interests.

We use the personnel management software Personio SE & Co.KG for our application process, with the help of which we can manage the application process and the job advertisements. In order to provide the contractually agreed services, Personio uses other sub-processors. These include, in particular, providers of IT and hosting services, infrastructure and cloud services, software and support services, and technical services for the provision and security of the platform. Processing by sub-processors is carried out exclusively in accordance with instructions and in compliance with data protection requirements. For this purpose, we have concluded an order processing agreement with the service provider.

Transfer to third countries

The processing of personal data by Personio takes place on servers within the European Union (Germany, Frankfurt). However, Personio uses Amazon Web Services (AWS) as a cloud infrastructure service provider to provide its services. AWS is operated by Amazon Web Services, Inc., based in the USA, as the parent company, which means that access from a third country cannot be ruled out.

For these transfers, Personio relies on appropriate safeguards in accordance with Art. 46 GDPR, in particular on the Standard Contractual Clauses (SCC) issued by the European Commission.

Storage period

After completion of the application process, your personal data will be stored for a period of 6 months. This is done in order to fulfil legal obligations and to defend against any claims. Your data will then be deleted or anonymized.

If an employment relationship is established, the application documents are filed with the employer for at least the period of employment.

Provision required or required

The provision of personal data is voluntary. However, without providing this data, it is not possible to process the application.

3.2. Accessing our website

Purpose, legal basis and legitimate interest

When you access our website, i.e. even if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

Ensuring that the website can be connected without any problems,
Ensuring a smooth use of our website, and
Evaluation of system security and stability.

We do not use your data to draw conclusions about you. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and misuse detection.

Recipients of the data

We use technical service providers for the operation and maintenance of our website, who act as our processors. For this purpose, we have concluded the corresponding order processing agreements with the providers.

Storage period

The data will be deleted as soon as they are no longer required for the purpose of collection. This is the case for the majority of the data used to provide the website when the session has ended.

Provision required or required

The provision of the aforementioned personal data is voluntary. However, without the IP address, the service and functionality of our website is not guaranteed. In addition, individual services may not be available or restricted.

Contradiction

See the information about your right to object under Art. 21 GDPR below.

4. What privacy rights do you have?

Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR.

The right to information and the right to erasure are subject to the restrictions set out in national legislation.

You can revoke your consent to the processing of personal data at any time vis-à-vis us. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

In addition, there is a right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR). A list of supervisory authorities (for the non-public sector) with addresses can be found at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

5. Data security

We only handle personal data to the extent that this is possible in accordance with data protection regulations. We also endeavour to take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.

Insofar as we store or process personal data, this is done within a secure data center. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) over HTTPS. Our servers are secured by firewall and virus protection. Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.

Our employees are obliged to comply with the regulations of the GDPR and national data protection laws when handling data.

6. Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your return visit.

Information about your right to object according to Art. 21 GDPR

Case-by-case right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Recipient of an objection

The objection can be made in any form with the subject "Objection" stating your name, address or other identification features to: career@bogner.com

Last updated: August 2026

(Senior) Search & Growth Manager (m/f/d)

Join the BOGNER team!

Documents