Information of for job applicants on processing of their personal data
(" SE" - hereinafter also referred to as "we" or "us") undertakes to protect the privacy of job applicants1 when processing personal data. The EU General Data Protection Regulation ("GDPR") and the Federal Data Protection Act ("BDSG”) set the standards for data protection within the Federal Republic of Germany and the European Union.
The purpose of this information is to inform applicants of SE about the processing of their personal data by SE. SE is obliged to provide this information under the GDPR.
I. Responsibilities and contact information
The Controller of the processing of personal data according to Art. 4 no. 7 GDPR is:
platz 1
70435 Stuttgart
Phone: +49 711 911 2440 20
E-mail: investorrelations@porsche-se.com
You can contact the Data Protection Officer of SE at any time with questions, comments or suggestions regarding this information or our handling of data protection at the following contact details:
The Data Protection Officer
platz 1
70435 Stuttgart
E-mail: datenschutzbeauftragter@porsche-se.com
II. Purpose and legal basis for processing your personal data
The personal data that you voluntarily communicate to us as part of the application process - such as, in particular, first and last name, address, e-mail address, date of birth, place of birth, profession, curriculum vitae, certificates and special categories of personal data (e.g. information on your religious beliefs or health data) - are processed by us. During the application process, additional data relevant to the application may arise which are also processed. Your personal data will only be processed for the purpose of carrying out the application procedure. In this respect, the legal basis for data processing is § 26 para. 1 sentence 1 BDSG or Art. 6 para. 1 sentence 1 lit. b GDPR.
If we do not receive personal data directly from you as the data subject, the data originated from the job boards where we publish our job advertisements (e.g. Stepstone, LinkedIn, Xing).
In the event that your application is not successful, your personal data will be deleted no later than six months after the end of the application procedure, unless the processing of your data is necessary for the assertion, exercise or defence of legal claims (Art. 17 para. 3 lit. e GDPR).
In the event of a successful application, the data will be transferred to your personnel file for the purpose of establishing the employment relationship (§ 26 para. 1 sentence 1 BDSG or Art. 6 para. 1 sentence 1 lit. b GDPR).
Your data will only be processed beyond the specific application procedure if you have expressly consented to your data being stored in our database even after the respective application procedure has been completed, so that you can be contacted by us at a later date if there are any vacancies. If you no longer wish us to contact you, you can withdraw your consent at any time with effect for the future in writing, by e-mail or by telephone. Otherwise we will delete your data after two years. If we contact you within this period regarding new positions, this period starts anew.
Furthermore, we process your personal data for statistical purposes. For this, applicant data is anonymised and then evaluated. We have a legitimate interest in anonymising applicant data for statistical evaluation to optimise our HR processes, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
III. Recipients or Categories of Recipients
Your personal data is generally only disclosed to those persons within our company who are involved in processing your application.
For certain technical and organisational processes, we use the services of external service providers who, in order to provide these services, have access to personal data. These are service providers bound by instructions, who are obliged under data protection law and may not use the data for any other purpose. Specifically, these service providers include:
- For applicant management, we use services from software companies (in particular, we use the services of softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, Germany).
- For virtual meetings, we use Microsoft Teams and thus rely on the services of Microsoft. Microsoft Corporation, USA, is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).
- For the disposal and destruction of confidential documents, we use the services of waste disposal companies.
IV. Your rights
Subject to the statutory requirements, you have the right request information about your personal data and to request the rectification or erasure or correction of your personal data or the restriction of processing and to receive your personal data in a structured, common and machine-readable format (data portability).
In cases where data processing is based on your consent, you have the right to withdraw your consent at any time by contacting us.
You also have the right to lodge a complaint with a regulatory authority.
V. Confidentiality/Security
All our employees who have access to and/or process personal data are obliged to treat such data confidentially.
SE also uses suitable technical and organizational measures in order to protect stored personal data against manipulation, partial or complete loss, as well as against unauthorized access by third parties. The security measures of SE are continuously improved in line with developments in technology.
VI. Contact
This lit. is for your information only. Should you have any questions, comments or suggestions regarding this information or our handling of data protection, please contact the data protection officer under the contact details stated above.
1 For reasons of better legibility, the simultaneous use of masculine and feminine language forms has been waived. All references to persons are nevertheless valid for all genders.