Privacy statement for applicants


We are pleased about your interest in our company as a potential employer.

In accordance with the EU General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG), this page informs you about the processing of your personal data.

Controller and exchange of application documents within DF Deutsche Forfait Group
If you apply in response to a job advertisement, the DF company that would be the employing company is responsible for the processing of your personal data. If you send us an unsolicited application, DF Deutsche Forfait GmbH, Kattenbug 18–24, 50667 Cologne, has the main responsibility for data processing.

Because of our corporate structure, we closely cooperate and share labor and resources within DF Group as described above. It therefore is our legitimate interest (Art. 6 para. 1 lit. f GDPR) to make the application documents also available to DF AG and the other subsidiaries that may consider employing you.


Personal data
Personal data is all information that refers to your person. In the context of your application, we will process the personal data you have stated and transmitted to us, which usually include:

  • first and last name and title;
  • your contact details: contact information such as address, phone number, fax number, e-mail address and current job, if applicable;
  • your application documents, which comprise your application letter, CV as well as the usual references and certificates.

We collect these personal data from you as the data subject.

Should we invite you to a job interview, we will additionally check whether you are listed on sanctions lists pursuant to Counter-terrorism Regulations EC No. 2580/2001 and EC No. 881/2002.


Purpose for and basis of the processing
To allow you to participate in application procedures for a specific job, we need standard and meaningful application documents that inform us about your personal profile and your qualifications. We will process your personal data to carry out the application procedure (Art. 6 para. 1 s. 1 b) GDPR, Sec. 26 BDSG).

As a general rule, we will use your application documents only to decide on the candidate for the position for which you have applied. For this purpose, your application documents will be passed on to the employees tasked with carrying out the application procedure.

If you send us an unsolicited application without referring to a specific position, we may use your application documents to decide on the filling of all potentially suitable positions. For this purpose, we will pass your application documents on to colleagues from the department(s) in which you may potentially be employed.

Because of the organizational structure of DF Group, your application may be passed on to different DF companies and be processed there, as described above.

Due to Counter-terrorism Regulations EC No. 2580/2001 and EC No. 881/2002, DF Deutsche Forfait AG and its subsidiaries are not allowed to enter into economic relationships with organizations and persons suspected of terrorism. To comply with the Regulation, we are obliged to screen every applicant we invite against sanctions lists of persons suspected of terrorism (Art. 6 (1) lit. c GDPR).


Data transmission to third parties and transfer to third countries
We will not transmit your application data to persons outside DF Group. Nor will your application data be transmitted to a third country outside the EU or an international organization.


Erasure of personal data
Should the application procedure for which you have sent your application not result in your employment, we will erase and destroy your application data after six months from your or our company’s final rejection.

If you send us an unsolicited application, the following applies: We will erase and destroy your application data after one year from the receipt of your application but not before a period of six months has elapsed following your or our company’s final rejection for all application procedures in which your application documents have been used.

Should an application procedure result in your employment, your application documents will be included in your employee file to provide information on your personal profile and your qualifications for the employment relationship. In this case, your application documents will be deleted and destroyed after your employment relationship has been terminated and another three years have passed since the end of the year of termination.

Other – longer – retention periods shall apply only if you have separately consented to such extended retention or if we exceptionally have legitimate interests in archiving and this interest is not overridden by your interest in erasure.


Your rights
If we process your personal data, you have several rights under data protection legislation. You have the right

  • to obtain information about the personal data stored, their origin, the purpose of the processing as well as the recipients or categories of recipients of the data (Art. 15 GDPR, Sec. 34 BDSG);
  • to obtain from us the rectification, blocking (restriction of processing) or erasure of your personal data (Art. 16–18 GDPR, Sec. 35 BDSG);
  • to request us to transmit your data to another controller (Art. 20 GDPR);
  • to lodge a complaint with us or with a competent authority about the processing of your data (Art. 77 GDPR).

You may also object to the further processing of your data if we process your date because of legitimate interests (Art. 6 para. 1 s. 1 f) GDPR). Unless we process your data for marketing purposes, this requires grounds relating to your particular situation. In case of an objection, we will no longer process your personal data to which the objection refers from the time we receive your objection during the subsequent examination and delete it after completion of the examination provided that the objection is justified (Sec. 36 BDSG, Art. 21 GDPR).

If you have given us consent to the processing of your data (Art 6 para. 1 s. 1 a) GDPR, such consent may be withdrawn at any time; we will then no longer process your personal data unless we are legally entitled to do so.

A lawful objection and a withdrawal of consent have no impact on past data processing processes.

For this and any other questions, please contact our Data Protection Officer.


Data Protection Officer of DF Deutsche Forfait Group

DF Deutsche Forfait GmbH
Ms Souad Koumbaz
Kattenbug 18-24
50667 Köln
Phone: +49 221 973760