1. Name and Contact Details of the Controller

The controller responsible for the collection and processing of your personal data within the application process is:

Adon Health UG (haftungsbeschränkt)

Falkenstraße 11F

81541 Munich

Phone: 089-54195545

E-mail: support@adon-health.de

2. Contact Details of the Data Protection Officer

For questions regarding data protection and to exercise your rights, you can contact our data protection officer:

DATENDO GmbH

Hohenzollernring 55

50672 Cologne

E-mail: dsgvo@datendo.de

Web: www.datendo.de

3. Purposes of Processing and Legal Basis

Your personal data is processed for the purpose of carrying out the application process and deciding on the establishment of an employment relationship. This includes applications for specific job advertisements as well as unsolicited applications submitted via our web forms and applications by e-mail.

The legal basis for this is Art. 6 para. 1 lit. b GDPR (performance of pre-contractual measures) and Section 26 para. 1 BDSG (processing for employment purposes).

Insofar as we additionally process personal data from publicly accessible sources (e.g., professional networks) within the application process, this is done on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the comprehensive assessment of your suitability for the advertised position.

If you have given us your consent to process your data beyond the application process (e.g., for inclusion in an applicant pool), the processing is additionally based on Art. 6 para. 1 lit. a GDPR. Any given consent can be revoked at any time with effect for the future.

4. Categories of Personal Data

Within the application process, we process in particular the following personal data that you submit to us as part of your application:

• Master data such as name, address, and date of birth
• Contact details such as email address and phone number
• Information about the desired position
• Information about your academic background
• Information about your previous professional experience and activities
• Information about personal achievements and qualifications
• Your individual motivation for the application
• Your earliest possible availability and your place of residence

In addition, the application documents you submit, in particular your resume, as well as other voluntarily provided documents and information, such as certificates, references, or cover letters, are processed.

During the application process, communication data, such as emails or notes from job interviews, may also arise and be processed.

In individual cases, we may also receive data from third parties, such as recruitment agencies, or process data that we have legitimately obtained from publicly accessible sources such as professional networks.

5. Recipients of Personal Data

Within our company, your personal data will only be passed on to those persons who are entrusted with conducting the application process and making personnel decisions.

Furthermore, the data is stored and processed in our applicant management system, which we operate with the software service provider Notion Labs, Inc. based on a data processing agreement pursuant to Art. 28 GDPR.

Any further disclosure to third parties will only take place if legally required or if you have expressly consented to it.

6. Storage Period

Your personal data will be stored for the duration of the application process.

If no employment relationship is established, the data will generally be deleted no later than six months after the conclusion of the application process, unless longer storage is required for the assertion, exercise, or defense of legal claims.

If you have given us your consent to be included in an applicant pool, we will store your data for the period specified therein, but for a maximum of two years, unless a shorter or longer period has been individually agreed upon.

If you are hired, your application documents will be transferred to your personnel file and stored there in accordance with statutory retention periods.

7. Your Rights as a Data Subject

You have the following rights:

• Information about your stored data (Art. 15 GDPR)
• Correction of inaccurate or incomplete data (Art. 16 GDPR)
• Deletion of your data (Art. 17 GDPR)
• Restriction of the processing of your data (Art. 18 GDPR)
• Objection to the processing (Art. 21 GDPR)
• Data portability, where applicable (Art. 20 GDPR)

8. Withdrawal of Consent

If processing is based on your consent, you can withdraw this at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.

9. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht

Promenade 18

91522 Ansbach

Phone: 0981/180093-0

E-mail: poststelle@lda.bayern.de

Website: https://www.lda.bayern.de

10. Provision of Data and Necessity

The provision of your personal data is required to participate in the application process. Without this data, we cannot consider your application.

11. Transfer to Third Countries

Your personal data will not be transferred to a third country outside the European Union or the European Economic Area.

12. Automated Decision-Making

No automated decision-making or profiling takes place.

Status: 17.06.2025

Note: For better readability, this document refrains from using gender-neutral language. All personal designations are to be understood as gender-neutral and refer equally to all genders.