Privacy policy statement

Privacy Notice for Applicants

As of: 19.06.2025

With the following information, we inform you about the nature and scope of the processing of your personal data, the purposes of processing, legal bases, and your rights under the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Who is responsible for data processing and whom can I contact?

a) Controller pursuant to Art. 4 No. 7 GDPR:

Work in Progress Textilhandels GmbH
Hegenheimer Straße 16, DE 79576 Weil am Rhein

Phone: +49 (0)7621 966 6
Email: info@carhartt-wip.com
Website: www.carhartt-wip.com

Hereinafter referred to as “WIP,” “we,” or “us.” Further details about the provider can be found in our website’s legal notice (Impressum).

b) Data Protection Officer

You can contact our Data Protection Officer via email: dpo@carhartt-wip.com or by mail to the above address, adding “Attn. Data Protection Officer.”

2. Processing of Personal Data in the Employment Relationship

a) Types of personal data

We process the following categories of personal data for

applicants (m/f/d):

  • Master and contact data: e.g., name, address, email, telephone/mobile number
  • Employment-related data: e.g., job roles, performance data, positions held (this may be derived from your cover letter, CV, or attached references)
  • Other application-related details: e.g., earliest start date, regional mobility, desired working hours and duration, previous employment, additional qualifications, references, or how you became aware of the job
  • Voluntary information: hobbies, volunteer work, etc.
  • Any other data voluntarily provided in your application, such as in your cover letter, CV, certificates, photo

b) Source of the data
As a rule, your personal data is collected directly from you during the hiring process. In specific cases, it may also be collected from other sources due to legal requirements, or obtained from third parties (e.g., job placement services) who submit your data to us as a potential employer.

c) Purposes and legal basis for processing

The primary purpose of processing is to initiate and establish an employment relationship, based on Art. 6(1)(b) GDPR.
We may also process personal data to defend against legal claims arising from the application process (Art. 6(1)(f) GDPR — legitimate interest such as the burden of proof under the General Equal Treatment Act (AGG)).
We also process data for potential reimbursement of applicant expenses.

d) Are you required to provide data?

You must provide personal data necessary for the initiation, execution, and termination of the employment relationship and legal obligations. Without this data, we cannot enter into or execute the employment contract. Additional data is processed only with consent, based on legitimate interest under Art. 6(1)(f) GDPR, or within legal frameworks.

3. Who receives my data?

Only those individuals or departments who need your data to fulfill contractual, legal, or legitimate interests will have access.
We may also share data with service providers or processors (e.g., cloud services, IT support) under strict confidentiality and data protection agreements.


Recipients may include:

  • Processors, especially cloud services
  • External IT support
  • Data destruction providers (e.g., shredding services)
  • Payment service providers and banks
  • Telecommunications providers

4. Will data be transferred to a third country or international organization?

A transfer outside the EU/EEA (“third countries”) may occur:

  • To external service providers (processors)
  • To affiliated companies, provided you have given consent for job placement or search purposes

Recipients in third countries (e.g., cloud providers) are obligated to adhere to EU data protection standards via EU Standard Contractual Clauses or equivalent safeguards (Art. 44 ff. GDPR). Data transfers to Switzerland are based on Art. 45(3) GDPR (EU Commission adequacy decision).

5. How long will my data be stored?

We process and store your data as long as necessary for the employment relationship’s initiation or execution. Applicant data is automatically deleted 6 months after rejection, unless you consent to further storage for future contact.

6. Is there automated decision-making (including profiling)?

We do not use automated decision-making or profiling per Article 22 GDPR for establishing or carrying out employment relationships.

7. What data protection rights do I have?

You have the following rights. To exercise them or to request more information, contact us or our Data Protection Officer:

Rights under Art. 15 ff. GDPR

  • Right to confirmation and access to your personal data (Art. 15)
  • Right to rectification (Art. 16), restriction of processing (Art. 18), and erasure (Art. 17, “right to be forgotten”)
  • Right to data portability (Art. 20), provided the processing is based on consent or contract and conducted by automated means

b) Withdrawal of consent (Art. 7(3) GDPR)

You may withdraw your consent at any time without affecting the lawfulness of processing prior to the withdrawal.

c) Right to lodge a complaint
You can lodge a complaint with us or a supervisory authority, particularly in your country of residence or where the alleged violation occurred (Art. 77 GDPR in conjunction with §19 BDSG).

d) Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR.

If you object, we will stop processing your data unless we demonstrate compelling legitimate grounds or the processing is necessary for legal claims.