Data Protection Information for Applicants

July 2026

1. INTRODUCTION

We take the protection of your personal data and your privacy very seriously. This privacy notice is applicable when you apply to work with us as an employee, worker or contractor. The following information explains how we process your personal data in connection with your application for a role at BayWa r.e. AG and its subsidiaries, and which rights you have in this regard.

2. RESPONSIBLE PERSON AND DATA PROTECTION OFFICER

The controller responsible for data processing is BayWa r.e. AG, Arabellastraße 4, 81925 Munich and/or the BayWa r.e. subsidiary ("BayWa r.e." or "we"/"us"). You can also contact our data protection officer at any time at the above address or by e-mail to: dataprotection@baywa-re.com

If you have any questions about this Data Protection Information, please address them to our Data Protection Officer.

3. PROCESSING OF PERSONAL DATA

Your personal data are processed only when necessary, and in compliance with GDPR, local data protection laws, and other relevant legal requirements.

For more information about the processing of your data, the legal basis and purpose of the processing, the retention or deletion periods and your rights as data subject, please read the following information.

3.1 Personal data

We process following personal data:

  • Identification data: e.g. name, surname, ID-Card number, citizenship, date and place of birth

  • Contact data: e.g. address, E-Mail, phone number

  • Candidate data: e.g. CV, education history, certificates

  • Assessment and test data: e.g. test results and scores

  • Financial data: e.g. bank account details

  • Insurancerelated data: e.g. Health insurance data, Social Security Number, Pensionrelated data

  • Online data: e.g. login info, IP address, logs

  • Communication data: e.g. E-Mails

  • Tax and payroll data: e.g. tax number, salary

  • Special personal data categories: e.g. biometrical data (image, audio, and video)

  • Employment data: e.g. contract type, position, entry date

We may process also other personal data that are shared with us in the application process.

3.2 Legal bases of the processing

Your personal data are processed, when it is necessary, on the following legal basis:

  • Consent (Art. 6 para. 1 lit. a GDPR) This provision requires your voluntary consent for the processing of your personal data. You can refuse consent that we ask you and this does not entail any disadvantages for you. For example, this includes storing your application data on file so we can consider you for the future roles at BayWa r.e., which we think will be suitable for you.

  • Contract (Art. 6 para. 1 lit. b GDPR, Art. 26 BDSG) Your personal data are processed to ensure we can enter into employment contract or arrangement with you, e.g. by assessing your skills and qualifications for the role.

  • Compliance with legal obligation (Art. 6 para. 1 lit. c GDPR) Your personal data is processed to comply with legal requirements, e.g. to liaise with tax authorities.

  • Legitimate interest (Art. 6 para. 1 lit. f GDPR) We process your personal data based on legitimate interest, when we compare this interest with your interests and your fundamental rights and freedoms, e.g. quality assurance of our recruitment processes.

4. YOUR DATA PROTECTION-RIGHTS

4.1 Right to be informed

You have the right to ask for confirmation about your personal data being processed.

4.2 Rectification

You have the right to ask for rectification of your personal data, which are inaccurate or incomplete.

4.3 Right to erasure

You have the right to ask for erasure of your personal data, which will be complied with, if this is in accordance with the law.

4.4 Right to object

You have the right to object to the processing of your personal data at any time, based on the grounds relating to your particular situation, where such processing is based on legitimate interests. We will no longer process the personal data unless we have legitimate grounds for the processing, that override the interests, rights, and freedoms of the data subject, or the processing safeguards enforcement, exercise, or defending of legal claims.

4.5 Right to object against direct marketing and automated decisions

You have the right to object to the processing of your personal data which are being processed for direct marketing purposes at any time.

You have the right to object against automated data processing, including Profiling. In any case, you can challenge such decision and ask for a review.

4.6 Restriction of processing

You have the right to ask for the restriction of processing, when the accuracy of the processed personal data has been challenged or we have received an objection against the processing of your personal data.

4.7 Consent withdrawal

When you have given consent to process your personal data, you have the right to withdraw it at all times, with the effect for the future. The withdrawal has no impact on the lawfulness of the processing before the withdrawal has been received.

4.8 Data portability

You have the right to ask for a copy of your personal data, that are being processed by us, in a structured, commonly used and machine-readable format. If this is technically possible, you can ask that we transfer those data to the third party.

4.9 Lodging a complaint

You have a right to lodge a complaint to the data protection authority, when you consider that the processing of your personal data by us breach GDPR.

You can exercise your rights or share your concerns by contacting us via: dataprotection@baywa-re.com

5. PERSONAL DATA COLLECTION

Generally, we collect your personal data directly from you throughout the hiring process, which you share with us by filling in forms online, communicating with us by phone, email, in person, or otherwise. Alternatively, we collect personal data from third parties:

  • Recruitment agency or other similar third party (e.g. employment websites)

  • Public authorities (Tax, Pension, Social Security, Health insurance, other authorities)

  • Social media networking sites (LinkedIn)

6. PERSONAL DATA RECIPIENTS

As part of the Group, we work closely with other companies within our Group. Therefore, we can transfer your personal data within the BayWa r.e. AG Group when this is necessary to:

  • ensure compliance with regulatory and legal requirements

  • process your application

  • fulfill our legitimate interests, e.g. Information Security Management, Compliance Management

In addition to that, personal data are shared with the departments responsible within our company, which need them to fulfill the contractual or legal obligations or in order to follow our legitimate interests. Furthermore, personal data are transferred to other recipients in case it is necessary to ensure legal or contractual requirements:

  • Data processors, who carry out activities on our behalf and according to our instructions. Here belongs e.g. Printing service, or Software and Cloud provider as e.g. Workday Limited, The King's Building, 152-155 Church Street, Dublin 7, D07 A0TN, Ireland, from who we acquire our HR- Management software.

  • Lawyers, Accountants, Tax advisors

  • Tax Authority, Health Insurance Authority, Pension fund, Criminal or Justice authorities, public authorities, to whom we must provide the data

  • Other bodies, for which you have given us your consent to transfer the data.

7. INTERNATIONAL TRANSFER OF PERSONAL DATA

When your personal data are transferred to third country (state outside of the European Union or European Economic Area), it happens only when adequate protection in this country is ensured. If European Commission had determined that a

third country ensures adequate level of data protection, your personal data may be transferred on this basis.

The personal data can be transferred, when adequate guaranties can be provided by the organization receiving the data.

8. AUTOMATED DECISION MAKING

The automated decisions, including Profiling, are not taking place. If we undertake such procedure on a case-by-case basis, you will be informed about it in compliance with regulatory requirements.

9. RETENTION PERIODS

We will keep your personal data for as long as necessary to fulfil the purposes described in this notice, especially for the duration prescribed in relevant laws and legal acts. If your application does not lead to the conclusion of an employment contract, we will delete your data in accordance with our data retention policy and applicable laws and regulations, at the latest till 6 months after we have communicated our decision to you. If you agree that we can store your application documents in our HR management software, we will store your data for a period of 12 months.

10. UPDATE OF THE DATA PROTECTION INFORMATION

This Data Protection Information will be regularly reviewed and updated, as required. The latest version can be always found on our website.