Data Security

Information about the collection and processing of your personal data during the application process
Accuracy and transparency are fundamental to a working partnership based on trust. For this reason, we inform you about how we process your personal data in the context of an application and how you can exercise your rights, to which you are entitled pursuant to the General Data Protection Regulation (GDPR) and the new Federal Law for Data Protection (BDSG).
1 Who is responsible for data processing?

MorphoSys AG
Semmelweisstrasse 7
82152 Planegg
2. How can you contact the data protection officer?

You can contact our data protection officer at:
Felix Hudy
3. For what purposes and on what legal basis do we process your data?

We process personal data about you for the purpose of your application for an employment contract, insofar as this is necessary for the decision to establish an employment relationship with us. In doing so, the legal basis is § 26 para. 1 of the BDSG. Furthermore, we may process personal data about you to the extent necessary in order to defend ourselves against legal claims asserted against us arising from the application process. Art. 6 para. 1(f) of the GDPR is the legal basis; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
Should we wish to store your personal data in order to consider you for future positions that may be suitable for you, we will obtain your consent for this in accordance with Art. 6 para. 1(a) of the GDPR.
Insofar as we will enter into an employment relationship between you and us, we can process the personal data already received from you for the purposes of the employment relationship, in accordance with § 26 para. 1 of the BDSG, if this is necessary for the execution or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of a representative of the interests of the employees resulting from a law or a collective agreement, a company or service agreement (collective agreement).
4. With whom will your data be shared?

We may transfer your personal data to companies affiliated with us, insofar as this is permissible within the framework of the purposes and legal basis set out in Section 3. Furthermore, personal data is processed on our behalf on the basis of contracts pursuant to Art. 28 of the GDPR, specifically by host providers or providers of applicant management systems.
5. Will your data be transferred to countries outside the European Union (known as "third countries")?

Countries outside the European Union (and the European Economic Area, or EEA) handle the protection of personal data differently from countries within the European Union. To process your data, we do not use service providers located in countries outside the European Union and we do not transfer data to group companies outside the EU.
6. How long will my data be stored?

We store your personal data for as long as it is necessary to make a decision about your application. If an employment relationship between you and us does not materialize, we may also continue to store data to the extent which is necessary for defending against possible legal claims. The application documents will be deleted nine months after notification of the decision not to hire, unless a longer period of storage is required due to legal disputes. If the storage is contingent on your consent, we will store your personal data until you withdraw your consent.
7. What rights do you have in connection with the processing of your data?

You have a right to information, correction, erasure, and restriction of processing. The restrictions under §§ 34 and 35 of the BDSG apply to the right to information and the right to cancellation. In addition, there is a right of appeal to the competent data protection supervisory authority.
If processing is carried out on the basis of a legitimate interest, you have the right to object to the processing for reasons arising from your particular situation. In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing it that outweigh your interests, rights, and freedoms, or if the processing is for the purpose of asserting, exercising, or defending legal claims.
If processing is based on your consent, you have the right to withdraw this consent, effective for the future.
To exercise your rights, please contact us or our data protection officer.
8. Is there an obligation for you to disclose your personal data?

The provision of personal data is neither required by law nor by contract, nor are you obliged to provide any personal data. However, the provision of personal data is required for a contract of employment with us. This means that if you do not provide us with any personal data in an application, we will not enter into a contractual employment relationship with you.
9. Changes to this information

If the purpose or manner of processing your personal data changes significantly, we will update this information in a timely manner and inform you about the changes in a timely manner.

Further information about data protection at MorphoSys AG is available at http://www.morphosys.com/privacy-policy.