Skip to content

AMBOSS GmbH is a young company providing a high quality service by physicians for physicians and medical students, as well as study materials. We want you as a customer of our service to understand how we use your data and which options you have to protect it. We are aware of the importance and sensitivity of your data and thank you for your trust. For us the careful handling of your information is a matter of major concern. If you have any individual questions, please do not hesitate to contact us.

This data protection declaration informs applicants about the nature, scope and purpose of the processing of personal data by AMBOSS GmbH. It applies to applications that you send to us via our application portal. In addition, the provisions of our Privacy Policy for our website apply. You can find them here.

How to contact us:

AMBOSS GmbH
Torstrasse 19
10119 Berlin, Deutschland
E-Mail: hallo@amboss.com

Telefon: +49 (0) 30 – 5770221- 0

Managing Directors: Dr. med. Madjid Salimi, Dr. med. Nawid Salimi, Benedikt Hochkirchen

Registered office: Cologne
Commercial Register: AG Cologne, HRB 33282

Data Protection Officer:

AMBOSS GmbH
Datenschutzbeauftragter
Torstrasse 19
10119 Berlin, Deutschland
privacy@amboss.com

1. Basic Information

1.1. With regards to the terminology used in this privacy policy, i.e. ‘personal data’, ‘user’ or ‘processing’ we refer to art. 4 of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter referred to as GDPR).

1.2. We are processing personal data of our users exclusively in accordance with the relevant provisions of data protection regulations. In accordance to art. 13 GDPR we inform you about the legal basis of our data processing. Unless the legal basis is not specified in this privacy policy, the following applies: legal basis for the processing of personal data with separate consent are art. 6 para. 1 lit. a GDPR. Legal basis for the processing of personal data until the satisfaction of all services and legal obligations is art. 6 lit. b GDPR and legal basis for the processing of personal data in order to safeguard our legal interests is art. 6 para. 1 lit. f GDPR.

2. Applications

Datenschutzerklärung Bewerber Englisch AMBOSS-Website

2.1. You have the option of applying directly for a vacant position with us via our application portal. To process your online application and to carry out the application process, we collect, process and use the personal data that you have provided to us via our application portal. The data is used exclusively for the purpose of the application process. This also includes contacting you. The data will not be transferred to third parties without your express consent, except in the context of order processing.

2.2. For our application portal, we use the services of Greenhouse Software Inc, 455 Broad-way, New York NY, 10013 USA. For this purpose, the data that you provide to us as part of the application process is stored and processed on the servers of Greenhouse in the USA. This takes place within the framework of an existing order processing contract with Greenhouse.

2.3. Your data will be stored by us for as long as is necessary to process your application. In the event of rejection, your data will be deleted after 6 months at the latest. If you have agreed to further storage of your data in our talent pool, your data will be stored in our talent pool for a further 12 months and then automatically deleted. In the event that your application leads to an employment relationship with us, your data will be transferred from our application software Greenhouse to our HR management software BambooHR and subsequently deleted from Greenhouse.

2.4. The processing and storage of your data is based on our legitimate interests pursuant to art. 6 para. 1 lit. f GDPR, namely the interest in carrying out the application process and filling vacancies, as well as on the basis of your consent pursuant to art. 6 para. 1 lit. a GDPR, insofar as you have given it, as well as on the basis of pre-contractual measures pursuant to art. 6 para. 1 lit. b GDPR and § 26 of the German Federal Data Protection Act (BDSG).

3. Transfer to a Third Party and Third-Party Providers

3.1. In agreement with the applicable legal regulations we are authorised to assign other companies or legal persons to carry out tasks on our behalf, for which the transfer of personal data is required. These include, for example, companies specializing in i.e. payment processing, the transfer of goods or the delivery of newsletters.

3.2. Personal data shall only be transferred to third parties on the basis of legal allowances and within the framework of legal provisions. We are only transferring personal data to third parties if this is necessary on the basis of art. 6 para. 1 lit. b GDPR for the fulfillment of the contract or when we pursue our legitimate interests in accordance to art. 6 para. 1 lit. f GDPR. If third parties are assigned with the processing of data within the scope of a so-called ‘commissioned-processing contract’ this is done on the basis of art. 28 GDPR.

3.3. Provided we are using services of third parties in order to perform a service, we are taking appropriate legal measures as well as technical and organisational measures in order to ensure the protection of personal data according to the relevant legal provisions.

3.4. These measures may include the transfer of personal data to servers outside of the EU or trustworthy third parties based outside the EU for fulfillment of contract. As far as no decision of the EU Commission concerning an adequate level of data protection within the respective country is available, we conclude contracts in accordance with EU data protection requirements with the aim of ensuring that your rights and legal liberties are adequately protected and guaranteed. You should be aware that some countries might not offer the same lawful protection of personal data as EU member states. While your personal data is stored in another country, courts, law enforcement authorities and national authorities of the respective country may in some circumstances access this data in conformity with the national laws. Subject to legal regulations we promise that every third party processing your personal data outside of the EU must take measures to ensure maximum security of your data according to our instructions as well as EU Datenschutzerklärung Bewerber Englisch AMBOSS-Website legislation. Therefore we only have data processed in a third country if the requirements according to art. 44 ff. GDPR are fulfilled.

4. Rights of the Persons Affected

You have the right:

  • to withdraw your consent at any time for future effect, in accordance with art. 7 para. 3 GDPR
  • to request information concerning the personal data stored about them at any time, free of charge, in accordance with art. 15  GDPR;
  • to request rectification of any incomplete or inaccurate information, in accordance with art. 16  GDPR;
  • to request the deletion of your personal data stored with us unless it opposes the processing for the fulfillment of contract, the right to freedom of expression and information, grounds of public interest or the establishment, exercise or defense of legal claims, in accordance with art. 17  GDPR;
  • to request the restriction of the processing of your personal data, in accordance with art. 18  GDPR;
  • to request your personal data stored with us the personal data stored in a structured, standardized and machine-readable format or request the delivery to another authorized party, in accordance with art. 20  GDPR;
  • to complain to the responsible supervisory authority, in accordance with art. 77  GDPR.

5. Right of Refusal

5.1. In case your personal data is processed based on legitimate interests in accordance to art. 6 para. 1 lit. f GDPR, you have the right to refuse the processing of your personal data, based on art. 21 GDPR, if there are legitimate reasons or the refusal is directed towards direct advertising. In the latter case you have a general right of refusal without being required without having to offer a legitimate reason.

5.2. If you would like to exercise your right of refusal or revocation, please do so via e-mail to the address given above  Last Update: March 2021

In addition, the provisions of our Privacy Policy for the website applies. You can find them here.