Skip to main content

Processing of (personal) data by the entity in charge of the online application process

Privacy Policy – Careers Site 


The companies of the BOGNER Group mentioned under point 1 operate an application portal with the possibility of submitting applications online. The companies mentioned attach great importance to the protection of privacy and observe the legal data protection regulations. In the following, we explain how we handle your personal data.


1. Controller within the meaning of data protection law:

Your direct contact:

Email: career@bogner.com

 

Willy Bogner GmbH 
Neumarkter Str. 75

81673 Munich

Germany
 

Bogner Commerce GmbH

Neumarkter Str. 75

81673 Munich

Germany


Bogner Vertriebsgesellschaft m.b.H.

Foundry Building B, Building 10

Söllheimer Straße 16

5020 Salzburg

Austria


Bogner Sport AG

Grubenstrasse 38

8045 Zurich

Switzerland


In many areas, the data is processed collaboratively. Joint responsibility is regulated by an agreement between the companies. The companies use the same database solution in the course of their activities and access a common database where necessary. The companies are each independently responsible for the lawful processing of personal data and the granting of data subject rights, including the provision of mandatory information. Where necessary, the companies support each other in this regard.


2. As data protection officer, we have appointed

c/o activeMind AG Technologie- und Managementberatung
Potsdamer Straße 3
80802 Munich
dataprotectionofficer@bogner.com


3. Processing activities

3.1. Contact form and applications

Purpose and legal basis 


You can submit your application online to the companies of the BOGNER Group on our application portal. The data you provide will be processed exclusively for the purpose of assessing your professional suitability and contacting you.

As part of the application process, we use CV parsing technology. The contents of your uploaded CV are automatically read out and transferred to our applicant management system in a structured manner (e.g. name, contact details, education, professional experience). This serves to make the application process more efficient. There is no automated decision-making within the meaning of Art. 22 GDPR.

The processing is carried out in order to establish an employment relationship in order to carry out pre-contractual measures, which are carried out on request, in accordance with Art. 6 (1) (b) GDPR.


Recipients of the data


Within the companies, access to your data is given to those entities that need it to fulfil pre-/ contractual, legal and regulatory obligations as well as to safeguard legitimate interests.

We use the personnel management software Personio SE & Co.KG for our application process, with the help of which we can manage the application process and the job advertisements. In order to provide the contractually agreed services, Personio uses other sub-processors. These include, in particular, providers of IT and hosting services, infrastructure and cloud services, software and support services, and technical services for the provision and security of the platform. Processing by sub-processors is carried out exclusively in accordance with instructions and in compliance with data protection requirements. For this purpose, we have concluded an order processing agreement with the service provider.


Transfer to third countries


The processing of personal data by Personio takes place on servers within the European Union (Germany, Frankfurt). However, Personio uses Amazon Web Services (AWS) as a cloud infrastructure service provider to provide its services. AWS is operated by Amazon Web Services, Inc., based in the USA, as the parent company, which means that access from a third country cannot be ruled out.

For these transfers, Personio relies on appropriate safeguards in accordance with Art. 46 GDPR, in particular on the Standard Contractual Clauses (SCC) issued by the European Commission.


Storage period


After completion of the application process, your personal data will be stored for a period of 6 months. This is done in order to fulfil legal obligations and to defend against any claims. Your data will then be deleted or anonymized.

If an employment relationship is established, the application documents are filed with the employer for at least the period of employment.


Provision required or required


The provision of personal data is voluntary. However, without providing this data, it is not possible to process the application.


3.2. Accessing our website


Purpose, legal basis and legitimate interest


When you access our website, i.e. even if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

  • Ensuring that the website can be connected without any problems,
  • Ensuring a smooth use of our website, and
  • Evaluation of system security and stability.

We do not use your data to draw conclusions about you. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and misuse detection.


Recipients of the data


We use technical service providers for the operation and maintenance of our website, who act as our processors. For this purpose, we have concluded the corresponding order processing agreements with the providers.


Storage period


The data will be deleted as soon as they are no longer required for the purpose of collection. This is the case for the majority of the data used to provide the website when the session has ended.


Provision required or required


The provision of the aforementioned personal data is voluntary. However, without the IP address, the service and functionality of our website is not guaranteed. In addition, individual services may not be available or restricted. 


Contradiction


See the information about your right to object under Art. 21 GDPR below.


4. What privacy rights do you have?

Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR.

The right to information and the right to erasure are subject to the restrictions set out in national legislation.

You can revoke your consent to the processing of personal data at any time vis-à-vis us. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

In addition, there is a right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR). A list of supervisory authorities (for the non-public sector) with addresses can be found at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

 

5. Data security

We only handle personal data to the extent that this is possible in accordance with data protection regulations. We also endeavour to take all necessary technical and organisational security measures to adequately protect your personal data from unauthorised access and misuse at all times.

Insofar as we store or process personal data, this is done within a secure data center. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) over HTTPS. Our servers are secured by firewall and virus protection. Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.

Our employees are obliged to comply with the regulations of the GDPR and national data protection laws when handling data.

 
6. Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your return visit.


Information about your right to object according to Art. 21 GDPR


Case-by-case right of objection


You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.


Recipient of an objection


The objection can be made in any form with the subject "Objection" stating your name, address or other identification features to: career@bogner.com



Last updated: August 2026


Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.