Data protection information on the application
Information on the processing of your personal data in the context of your application in accordance with Article 13 of the EU General Data Protection Regulation (EU GDPR) and country-specific features
1. What information does this document contain for you?
In the context of your application to a company of the "thyssenkrupp Group", we process your personal data. We ensure that we comply with the applicable requirements of the General Data Protection Regulation (EU GDPR) and other applicable data protection laws.
In the following we would like to give you a detailed overview of our handling of your data and your rights.
2. Who is responsible for data processing and who is the data protection officer?
The company to which you have applied is responsible for data processing. You can find out the company from the job advertisement.
You can reach the data protection officer of our group of companies at:
thyssenkrupp AG
Data Protection Officer
ThyssenKrupp Allee 1
45143 Essen
datenschutzbeauftragter@thyssenkrupp.com
3. What categories of data do we use and where do they come from?
We process personal data that you provide to us as part of your application. This involves the following data:
3.1 Application documents
First and last name, email address, address, contact details, professional history, references, etc.
3.2 Video interview
If we conduct a video interview with you, further data about you will be processed:
• Video data (your moving image and the corresponding sound)
• Any other information/disclosures you may provide or show during the video interview.
The video interviews are neither recorded nor stored.
3.3 Upload application video
If you upload a video of yourself as part of your application, further data will be processed:
• Video data (your moving image and the corresponding sound)
• Any other information/disclosures you may provide or show as part of the application video.
4. For what purposes and on what legal basis is your data processed?
We process the data that you sent us in connection with your application in order to check your suitability for the position or, if applicable, for other open positions in our companies (insofar as your consent is required here in accordance with the legal basis) we will obtain this beforehand) and to carry out the application procedure.
If further data is processed as part of the ongoing application process, we will inform you of this separately.
4.1 Application
The legal basis for the processing of your personal data, for the recruitment decision, is your declaration of consent in accordance with Art. 6 (1) lit. a) EU GDPR. If the thyssenkrupp controller is based outside the EU/EEA, the relevant country-specific law applies.
4.2 Video interview
The legal basis for conducting video interviews is Art. 6 (1) lit. a) EU GDPR or the standard from the national Employee Data Protection Act. The performance of a video interview is in no way obligatory. If you do not wish to have a video interview, this will not have any adverse consequences for your application; we will then conduct a telephone interview or personal interview with you. The video interview will not be recorded (neither image nor sound).
4.3 Upload application video
In the event that you have decided to record a video as part of your application, you do so absolutely voluntarily. The video recording is in no way obligatory. If you do not wish to upload a video of yourself, this will not have any adverse consequences for your application. The legal basis for the processing of your personal data, for the recruitment decision, is your consent in accordance with Art. 6 (1) lit. a) EU GDPR. If the thyssenkrupp controller is based outside the EU/EEA, the relevant country-specific law applies.
If you have any questions about the country-specific legal basis, please contact the data protection officer of our group of companies.
5. Who gets your data?
Depending on the position(s) and the company(ies) to which you have applied, the persons within the company(ies) concerned who are necessary to fill vacancies, such as recruiters, will have access to your applicant profile.
If special categories of personal data are processed within the EU/EEA as defined by Art. 9 (1) EU GDPR, this is done with your consent Art. 9 (2) lit. a) EU GDPR.
If the thyssenkrupp-responsible party is based outside the EU/EEA, the corresponding country-specific law applies.
Within the company, only those persons and offices that require it (e.g. personnel department, specialist department, works council, representation of the severely handicapped) receive your personal data to carry out the application procedure or to fulfil legal obligations.
In addition, employees of service providers, internal and external, have access to your personal data in order to perform and fulfill their contractual administrative and support tasks. Personal data is only passed on for specific purposes within the framework of order processing in accordance with data protection regulations to bodies which, for example, operate the servers or provide certain services.
For the aforementioned purposes, we have individual services carried out by carefully selected and commissioned service providers (such as IT service providers, communication service providers). In individual cases, these service providers are based outside the EU/European Economic Area ("third country"). In these cases, a third country transfer of personal data takes place. The third country transfer takes place in compliance with the data protection requirements of the EU and the applicable national law. In order to ensure an adequate level of protection for your data, the thyssenkrupp group of companies implements safeguards to ensure an adequate level of data protection in accordance with legal requirements, including EU standard contractual clauses. You have the option of requesting a sample of these guarantees from the thyssenkrupp group of companies.
Please note that your data will not be stored anonymously, but will be accessible to the relevant departments of the thyssenkrupp company to which you are applying. If you have given your consent for us to include your application in our thyssenkrupp applicant pool, your data may also be processed by other companies in the group for other positions worldwide.
6. How long will your data be stored?
Your application will be deleted after completion of the application process, provided that there is no legal or country-specific retention period. The period begins with the receipt of the rejection of your application. If you have any questions about country-specific retention periods, please contact our data protection officer.
7. Data security
We protect your data with data security measures that comply with current legal regulations on data protection and are state of the art (including firewalls, virus scanners, intrusion detection software).
8. Are you obliged to provide your data?
The provision of your application documents, the provision of your application video and the execution of the video interview are based on your consent. Without the provision of the necessary minimum information (marked as "Required"), a review of the recruitment requirements can not reasonably be made.
If you do not wish to have a video interview, this will not have any negative consequences for your application; we will then conduct a telephone interview or a personal interview with you. A video interview cannot be carried out without processing your data listed under point 2.
You have the possibility to exercise your rights as described under point 9.
9. What data protection rights can you assert as a data subject?
You have the right to request information about the data stored about you, Art. 15 EU GDPR. In addition, you can request the correction or deletion of your data, Art. 16, 17 EU GDPR. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, standard and machine-readable format, provided that this does not affect the rights and freedoms of other persons, Art. 18, 20 EU GDPR.
If you have given us your consent to data processing, you can revoke this consent at any time without any formalities and without any adverse effects on your employment relationship. Please note that the revocation has no effect on the lawfulness of the data processing that took place prior to the revocation and that it does not extend to such data processing for which another permissible circumstance exists and which may therefore also be carried out without your consent.
To exercise these rights, please contact the data controller or data protection officer mentioned in section 2.
You also have a right to object, which is explained in more detail at the end of this privacy notice.
You also have the possibility to lodge a complaint with a data protection supervisory authority, Art. 77 EU GDPR. The right of appeal is without prejudice to any other administrative or judicial remedy.
Information about your right to object according to Art. 21 of the General Data Protection Regulation (EU GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) lit. f) of the EU GDPR (processing of data on the basis of a balance of interests); this also applies to any profiling based on this provision within the meaning of Article 4 (4) of the EU GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
The objection can be made form-free and should, if possible, be addressed to the responsible body or data protection officer named in the data protection declaration under point 2.
If the thyssenkrupp controller is located outside the EU/EEA and you wish to protect your data protection rights, please contact the data protection officer of our group of companies.