Privacy Policy

We, dm-Gesundheitsservices s.r.o. and dm-Pharmahandel s.r.o., are delighted that you have visited our website and are interested in our company and the dm group of companies. As the responsible party within the meaning of the General Data Protection Regulation (hereinafter referred to as “GDPR”), we take the protection of your personal data very seriously and comply with the legal provisions on data protection.

With this data protection information for email applications, we would like to inform you about which (personal) data we or companies of the dm group of companies process as part of the application process.

1 Responsible for data processing

The operator and controller responsible for data processing in connection with this website is dm–drogerie markt GmbH + Co. KG (Am dm–Platz 1, 76227 Karlsruhe).

If you apply for a position at one of the companies in the dm group, that company is responsible for your data during the application process.

dm-Gesundheitsservices s.r.o.
IČO 22236287
Nová Hospoda 22
348 02 Bor
CTPark, Building B7

dm-Pharmahandel s.r.o.
IČO 22236228
Nová Hospoda 22
348 02 Bor
CTPark, Building B7

2 Data processing within the application process

2.1 Submitting an application and departments involved in the application pro

You can find information about job vacancies on our website. Please send your application by email to:

For dm–Gesundheitsservices s.r.o. recruiting@dm–gesundheitsservices.cz

For dm–Pharmahandel s.r.o. recruiting@dm–pharmahandel.cz

Please note that our email correspondence is unencrypted.

We fill vacancies in cooperation with the relevant employees in our human resources departments and with the employee managers, to whom we forward your application documents internally.

The personal data and documents you provide during the application process will be collected, processed, and used by us exclusively for the purposes of application processing and the recruitment process. If provided by you, this may also include information that falls under the special categories of personal data within the meaning of Art. 9 GDPR. The legal basis for this data processing is Art. 6 (1) b) GDPR. When processing special categories of personal data, this is done in accordance with Art. 9 (2) b) GDPR.

2.2 Deletion of application documents

You can instruct us to delete your data. If you have an open application at this point in time, we will assume that you no longer wish to maintain it and will withdraw it.

Regardless of your deletion request, we will proceed as follows with your submitted application documents:

For your application for employment, apprenticeship, internship, or other service relationship, your data will be transferred to your employee file.
Candidate profiles/application documents submitted via a personnel service provider will be stored by us for up to 12 months in order to fulfill contractual obligations.
In the event of rejection, your application documents will be retained for a further six months in order to resolve any subsequent questions/problems that may arise and to defend against possible legal claims.

2.3 Withdrawal of application

You can withdraw your application at any time, in which case we will no longer consider you in our application process. To do so, please contact recruiting@dm–gesundheitsservices.cz for dm–Gesundheitsservices s.r.o. and recruiting@dm–pharmahandel.cz for dm–Pharmahandel s.r.o. We will retain your data for six months in order to resolve any subsequent questions/problems that may arise and to defend against possible legal claims, after which it will be deleted.

2.4 External recruitment agencies

We have entered into agreements with external recruitment agencies to obtain profiles of potential candidates who may be of interest to us. If you have contacted a recruitment agency, that agency is initially responsible for processing your data (including in accordance with legal requirements), in particular for the proper transfer of your data to us. We are only interested in receiving personal data about you once you have qualified as a candidate for the shortlist. The candidate profiles sent to us are recorded in our application system. If we are interested, we or the respective recruitment agency will contact the referred candidate and, if desired, actively involve them in our application process. The legal basis for this processing is Art. 6 (1) b) GDPR.

If a profile has been sent to us by a recruitment agency, which usually receives a fee upon successful placement, we are obliged under the contractual agreement with the agency to track whether a contract has been concluded between us and the candidate presented within 12 months of the candidate being presented by the recruitment agency. For this reason, candidate profiles submitted via a recruitment agency are stored by us for a maximum of 12 months for this purpose. We have a legitimate interest in this (the legal basis is therefore Art. 6 (1) f) GDPR), as this is the only way we can fulfill our contractual obligation to the recruitment agencies. Since you have chosen to go through the recruitment agency, our interests outweigh yours and it is necessary to store your data for up to 12 months for verification purposes and, if necessary, for the processing of the contractual remuneration.

3 Comparison with employee data (for internal applicants)

In individual cases, internal applicants may be compared with your stored employee master data (title, first and last name, employee number, date of birth, street and house number, postal code, city, country) for identification purposes and to exclude duplicates. In addition, if you have indicated a severe disability or equal status in your current employment relationship, this will also be stored in your application profile and taken into account accordingly in the application process.

Only professional and personal qualifications are decisive for the selection of future employees, which are assessed according to the same criteria for internal and external applicants. This comparison is carried out independently of the type of job advertisement and the chosen communication channel.

The legal basis for this data processing is Art. 6 (1) f) GDPR, based on our legitimate interest in taking appropriate account of existing length of service and any existing severe disability/equality status when selecting applicants. Automated decision-making/profiling does not take place.

4 Categories of recipients, transfer in third countries

We do not transfer your data to third parties unless we are legally obliged to do so (e.g. at the request of law enforcement authorities) or we need it to carry out business processes or use it within the framework of an order processing agreement. These include, for example, web hosting providers, communication agencies, and IT service providers. As explained in more detail above, we also transfer your data to other companies in the dm group if you have given us your consent to do so or if you apply for a position with one of these companies. In all cases, we strictly adhere to the legal requirements.

In this context, data may also be transferred to other countries in which the above–mentioned contractual partners are based or process the data. These are primarily countries within the European Economic Area (EEA) and, in some cases, countries outside the EEA. Such countries may have data protection regulations that differ from and offer less protection than those of the EU. This may mean, for example, that your data may be processed by authorities for control and monitoring purposes, possibly without any legal remedy. In the event that personal data is processed outside the EU and no adequacy decision has been made by the European Commission, we implement appropriate security measures, including the conclusion of EU standard data protection clauses. The text of the EU standard data protection clauses and the adequacy decisions are available on the European Commission’s website, the EU standard data protection clauses at Standard Contractual Clauses (SCC) | European Commission (europa.eu), and the adequacy decisions at Adequacy decisions | EU Commission (europa.eu).

5 Your rights as a data subject

You have the right to obtain information about the processing of your personal data, a right to data portability and, where applicable, rights to erasure, rectification, restriction of processing and/or objection to processing, as well as a right to lodge a complaint with a supervisory authority. Further information can be obtained from our data protection officer.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing to safeguard an overriding legitimate interest). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If you have an active applicant account, you can view your data from the application process yourself and delete or change it if necessary.

6 Contact details data protection

If you have any questions about data protection or your personal data at dm, please contact our data protection team:

by email: datenschutz@dm.de

or our recruiting department, for dm–Gesundheitsservices s.r.o. at recruiting@dm–gesundheitsservices.cz, for dm–Pharmahandel s.r.o. at recruiting@dm–pharmahandel.cz

7 Supplementary provisions

The constant development of the Internet requires us to make adjustments to our data protection principles from time to time. We therefore reserve the right to make appropriate changes at any time.

If you have any questions or suggestions regarding our application process, please contact our colleagues in applicant management at dm–Gesundheitsservices s.r.o. at recruiting@dm–gesundheitsservices.cz or at dm–Pharmahandel s.r.o. at recruiting@dm–pharmahandel.cz. Please note that our email correspondence regarding your request is unencrypted.

If you use these options to contact us, we will use your data to respond to your inquiries and to contact you. The legal basis for the associated data processing is Art. 6 (1) b) GDPR. Based on the statutory retention period, the data entered will be deleted after the final processing of an inquiry, at the latest after 6 years.

For reasons of easier readability, we have opted for the masculine form. However, the content shown is intended for all genders. We do not wish to exclude anyone with this form of address, as everyone is equally welcome here and shapes our working community with their individuality.

As of August 2025