Data Privacy Statement For Applicants

Data Privacy Statement For Applicants

Last updated: 21, August 2023


Your privacy and the security of your personal information are important to us. ARION is committed to processing your personal data in accordance with the terms of this Data Privacy Statement when you apply for one of our vacancies. Additionally, this policy outlines your privacy rights, which include the option to object to some of ARION’s data processing activities.

This Data Privacy Statement supplements our current General Data Privacy Statement (GDPR), which provides detailed information on how we process personal data obtained from you visiting our website and related to non-application-specific topics.

ARION collects and processes candidates’ personal information as part of the hiring process. ARION is dedicated to upholding its data protection commitments and being open and honest about how it collects and utilizes such data. We hereby provide you with the necessary information regarding the processing of your personal data during our recruitment process in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“GDPR”).

We ask that you carefully review this Data Privacy Statement to obtain information regarding:

  1. Collection of personal data
  2. Use of personal data
  3. Legal basis for processing
  4. Data sharing
  5. Personal data legal rights and how to exercise them
    • 5.1 Access rights
    • 5.2 Right to correction and deletion
    • 5.3 The right to data processing restriction
    • 5.4 Right to object
      1. Data retention
      2. Refusal of your consent to the processing of personal data or withdrawal of your consent


      1 Collection of personal data

      We gather and store the following types of personal information about you during the hiring process:

      • Data which you have provided to us in your candidate profile, including first and last name, country, e-mail, phone number.
      • Data which you have entered on our candidate application form, including desired annual salary, your motivation, information about disabilities (if and to the extent that it is relevant for the job offered).
      • Data which you have provided to us in your application documents (curriculum vitae CV, cover letter) including work experience, qualifications, and language skills.
      • Data from online assessments (e.g., personality tests, cognitive ability tests) and video interviews (if applicable).
      • Data provided to us by your referees (if applicable). These are reference points that you have given us to contact.

      When you apply for a job with us, we obtain personal information either directly from you or from one of our external partners, such as headhunters. To actively approach you with job offers or to verify the accuracy of the information you provided during the application process, we may also obtain information about you from professional social networks like LinkedIn, Indeed, and other publicly accessible sources (only information relevant to your professional life).


      2 Use of personal data

      Your personal data may be used for following purposes:

      • To assess your application for the job offered and to communicate with you within the recruitment process.
      • To contact you if another job opportunity arises within ARION.
      • With your permission, we may inquire about your prior involvement in the hiring process.
      • To get in touch with you following your unsolicited application.
      • With your permission, we will give you individualized information about available job posts right now.


      3 Legal basis for processing

      Personal information collected during the hiring process will be used to evaluate your application and, if an employment relationship is established, also for the execution of the employment relationship. It is optional for you to submit personal information as part of the application process. However, the processing of your application or the signing of an employment contract with us both need the input of personal data.

      When we collect data from your public profile on a business social network, like LinkedIn or Indeed, we do so because it is in our best interests to develop a solid decision-making framework to collaborate with you in the future. The legal foundation is provided by Article 6 f) GDPR and Article 9 (2) e) GDPR.

      Furthermore, we may use personal data about you where this is necessary to defend ourselves against lawsuits that are brought up because of the application process. Article 6 (1) b and f of the GDPR serves as the basis for this.


      4 Data sharing

      We may transfer your personal data to businesses that are connected to us to the extent that this is permitted within the scope of the purposes and legal bases set out above. You can ask for the deletion of your candidate profile if you do not want to continue to be taken into consideration for pertinent job openings.


      5 Personal data legal rights and how to exercise them

      5.1 Access rights

      You can request information about your personal data (commonly known as data subject access request). You can exercise this right by sending an email to 

      5.2 Right to correction and deletion

      You can email us at with any updates to the personal information you have given us, or you can make the changes yourself in the application’s candidate profile. You may request that we delete your personal information if certain criteria are met.

      5.3 The right to data processing restrictions

      You have the right to limit how your personal data is processed in some circumstances, such as when you want us to confirm the accuracy of your personal information. You can turn off notifications at any moment or change how visible your profile is.

      5.4 Right to object

      You may object to the processing of your data if we use it to safeguard legitimate interests for a reason specific to your circumstance. Additionally, you have the right to file a complaint about the processing of your personal data with a supervisory authority.


      6 Data retention

      How long will you use my information for?

      We keep your data for a period of 12 months following the date you last logged in on your profile. During that time, we also retain your personal information on file in case a position becomes available for which you would be a good fit.

      You can request the deletion of your candidate profile or the withdrawal of your application by sending an email to

      If your application is accepted, we may keep your personal information on file for any subsequent employment in accordance with the relevant legal requirements. The Data Privacy Statement for Employees, which we will give you if you accept the job, has more information.

      Your personal information will only be kept by us for as long as it is required to fulfill the reasons for which it was originally obtained, including to meet any legal, accounting, or reporting requirements.

      The amount, nature, and sensitivity of the personal data, the risk of harm from unauthorized use or disclosure, the purposes for which we process the data and whether those purposes can be met by other means, and the relevant legal requirements are all considered when determining the right retention period for personal data.

      When your personal information has been made anonymous so that it can no longer be used to identify you, we may still use it without further informing you. In compliance with any applicable rules and regulations, we shall securely retain and delete your personal information after you are no longer an employee, worker, or contractor of the business.


      7 Refusal of your consent to the processing of personal data or withdrawal of your consent

      You have the right to withdraw your consent at any time if you have already granted it (see Article 6 (1)(a) GDPR) for the processing of your data, such as when we ask you to take part in a survey about how satisfied you are with the ARION application process. The legality of processing your personal data once you have provided it to us is affected by such a withdrawal.

      You may object to the processing of your personal data if we base it on the balance of interests (Article 6(1)f GDPR). This is the case if processing is not necessary to fulfil a contract with you, which is described by us in the Chapter Use of data. When making such an objection, we ask that you provide justification for why we should not process your personal data as we have done. In the event of your valid objection, we shall assess the circumstances and either cease or modify data processing or inform you of our persuasive justifications for doing so, which we will use to justify continuing processing.