Thank you for your interest in working for our company. In the following, we inform you about the processing of your personal data in the context of the application process in accordance with Art. 13 GDPR.

1. Name and contact details of the controller

VX Instruments GmbH
Roedersteinstraße 10
84034 Landshut
Germany
Tel. +49 (0)871 93 15 55-0
Email: datenschutz@vxinstruments.com
Authorized representative: Dipl.-Ing. Christian Degenhart

2. Questions about data protection

If you have any questions about data protection, please contact our data protection officer:

Alfred Gode
Intrasys GmbH
Ludwig-Erhard-Straße 9
84034 Landshut
Tel. +49 (0)871 96 28 41-0
Email: alfred.gode@intrasys-gmbh.de

3. Purpose and legal basis of data processing

If you apply to us (e.g. by e-mail, post or via our online application form), we process your personal data (e.g. contact, communication and application data, interview notes) to the extent necessary to decide on the establishment of an employment relationship.

4. Application via our website / redirection to factorialhr

For the collection, management and processing of applications, we use the application management system factorialhr of

EVERYDAY SOFTWARE S.L
Carrer de Llacuna, 56
Sant Marti, 08005
Barcelona – Spain

In this context, the latter is a processor within the meaning of Art. 28 GDPR. A corresponding order processing agreement exists with EVERYDAY SOFTWARE S.L., which ensures the processing of your personal data in compliance with data protection regulations.
The processing takes place exclusively on servers within the European Union.
You can find more information about data protection at factorialhr at: Privacy and cookies at Factorial

5. Categories of personal data

In the context of the application process, we process the following categories of personal data in particular, insofar as they are provided by you or collected during the application process:

• Master data and identification data (e.g. first name, last name, date of birth)
• Contact details (e.g. address, e-mail address, telephone number)
• Application data (e.g. cover letter, CV, certificates, qualifications, education and professional data)
• Content data from job interviews and correspondence
• Information on knowledge, skills and professional experience
• Salary expectations and earliest possible starting date, if specified
• Photo, if voluntarily included in the application documents
• Audio and video data when conducting video interviews
• References, insofar as you have consented to this or these are lawfully communicated to us
• Information on the work permit / residence permit, if required
• Technically collected usage data when using the application platform (e.g. IP address, time stamp, log data, device data)

We only process special categories of personal data within the meaning of Art. 9 GDPR (e.g. health data, data on severe disability, religious affiliation) if:

• you voluntarily provide us with this data,
• the processing is necessary for the exercise of rights or for the fulfilment of legal obligations under labour law,
• or any other legal basis.

6. Origin of the data

We generally process personal data that we receive directly from you as part of your application.
To the extent permitted and necessary for the implementation of the application process, we may also receive personal data from the following sources:

• publicly available professional sources (e.g. professional networks such as LinkedIn),
• Recruiters or recruiting service providers, if you have applied through them,
• Referee, but only with your prior consent or as otherwise permitted by law.

No unauthorized research in social networks is carried out for purely private purposes

7. International Data Transfers

Your personal data will generally be processed within the European Union (EU) or the European Economic Area (EEA).
Insofar as individual service providers or sub-processors transfer data to countries outside the EU or the EEA or access data from there, this will only take place if:

• an adequacy decision by the European Commission has been issued,
• appropriate safeguards exist in accordance with Art. 46 GDPR (e.g. standard contractual clauses),
• or any other legally permissible exception applies.

If your applicant data is stored in data centers within Germany or the EU, the processing will take place there.

8. Automated decision-making / profiling

There is no exclusively automated decision-making within the meaning of Art. 22 GDPR.
Insofar as software-supported functions are used, they are only used for technical support, structuring and administration of applications and, if necessary, for pre-selection on the basis of objective, job-related criteria. The actual decision about the invitation to interviews and hiring is always made by employees of our company.

9. Obligation to provide the data

The provision of your personal data is necessary for the implementation of the application process, insofar as this data is required for the decision on the establishment of an employment relationship.
Without providing the necessary data, we will not be able to consider your application or not in full.
Insofar as information is voluntary, this is indicated in each case or results from the nature of the information.

10. Storage period and deletion

We only store your personal data for as long as is necessary to carry out the application process and to comply with legal obligations.

11.1 Successful application

If your application is successful, your application documents will be transferred to your personnel file – if required for the employment relationship.

11.2 Unsuccessful application

If your application is not successful, we will generally store your personal data for a period of six months after completion of the application process.
This is done to protect our legitimate interests, in particular to document the selection process and to examine or defend against any claims under the General Equal Treatment Act (AGG).
Legal basis: Art. 6 para. 1 lit. f GDPR

11.3 Applicant pool

If you have consented to be included in our applicant pool, we will store your data for future vacancies for the duration of your consent, but no later than 12 months after the consent has been granted, unless you revoke your consent beforehand.
After expiry of the respective periods, the data will be deleted, unless there are statutory retention obligations or other justified reasons for further storage.

12. Technical and organizational security measures

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, unauthorised disclosure, alteration or other unlawful processing.
Access to your data is limited to those persons who need it to perform their tasks. All persons involved in the processing are obliged to maintain confidentiality.
In addition, we maintain processes for detecting, evaluating and processing possible data protection violations. Where required by law, we inform data subjects and competent supervisory authorities.

13. Your rights as a data subject

In accordance with the statutory provisions, you have the following rights in particular:

• Right to information pursuant to Art. 15 GDPR about the personal data processed by us
• Right to rectification of incorrect or incomplete data in accordance with Art. 16 GDPR
• Right to erasure in accordance with Art. 17 GDPR , provided that the legal requirements are met
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability according to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation
• Right to revoke consent pursuant to Art. 7 (3) GDPR with effect for the future
• This applies in particular to consent to be included in a pool of applicants. The revocation does not affect the lawfulness of the processing carried out up to the revocation.
• Right not to be subject to an exclusively automated decision pursuant to Art. 22 GDPR To exercise your rights, simply send an email to: datenschutz@vxinstruments.com

14. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint was lodged informs the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
Competent supervisory authority:

BayLDA
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Phone: +49 (0)981 18 00 93-0
E-Mail: poststelle@lda.byern.de
Web: lda.bayern.de

A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

15. Information on the application platform / technical data protection information

When using the external application platform, technical information may be processed that is necessary for the provision, security and functionality of the platform. This may include, in particular, server log files, access times, browser information and technical identification data.
Insofar as the platform operator’s independent technical data protection information is provided on the application platform, these shall apply in addition to the purely technical provision of the platform.

16. Status and Changes to the Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your return visit.

Status of this privacy policy: May 2026