Data Protection Information in the Job Application Management Process for Bosch Group Austria

Transcription

1 Data Protection Information in the Job Application Management Process for Bosch Group Austria Robert Bosch AG Göllnergasse A-1030 Wien Tel We want you to be part of our team! We would hereby like to inform you about the processing of your personal data in the framework of our job application management process of Bosch Group Austria with the following legal entities: Robert Bosch AG, Bosch Rexroth GmbH, Schoeller Bleckmann Medical Technology GmbH, Bosch Industrial Boilers Austria GmbH, Zeno Track GmbH, ITK Engineering GmbH, Bosch General Aviation Technology GmbH, as well as Robert Bosch Holding Austria GmbH. In addition, we would like to inform you about the data protection rights which apply to you. Personal data includes all information that relates to a specific individual or identifiable physical individual person, for example personal data, address information, or account details that point to the identity of the respective individual. On behalf of the legal entities of the Bosch Group Austria, Robert Bosch AG processes your personal data for the purpose of job application process with the goal of employment in a company of the Bosch Group Austria. Job placement for Bosch Group Austria proceeds in cooperation with the employees of our Human Resources Department and management, along with the implicated employees of the relevant department for the job application process. These employees may belong to various companies of the Bosch Group Austria. As necessary, your personal data may with your permission be shared with one or more parties of the Bosch Group Austria (see above) for the purpose of review for further job opportunities. Registered Office: Robert Bosch Aktiengesellschaft, A-1030 Wien, Göllnergasse 15-17, Registration Court: FN w HG-Wien Chairman of the Supervisory Board: Dr. Uwe Thomas; Managing Directors: Dr. Klaus Peter Fouquet DVR-Nr.: ARA-Lizenz-Nr.: UID-Nr.: ATU Steuernummer 140/4988 BOSCH und die Bildmarke sind registrierte Marken der Robert Bosch GmbH, Deutschland Banking connection: UniCredit Bank Austria AG, IBAN: AT , BIC: BKAUATWW

2 Bosch Respects your Privacy Both the protection of your privacy in the processing of personal data and the security of all of your data are important matters which we duly take into account in our business practices. We process personal data which is transferred onto our online portal when you visit the portal, exclusively in accordance with the legal regulations and obviously treat your data with confidentiality accordingly. Data protection and information security constitute integral parts of our corporate policy. Page 2 of 6 Contact Details of the Responsible Persons for Data Processing and of the Data Protection Commissioners Responsible parties for the processing of your data include the various legal entities of the Bosch Group Austria to which you send your job application (see first paragraph of this document). To have your rights enter into force and to report any data protection incidents, use the following link: Our Corporate Data Protection Commissioner is Mr. Matthias Goebel, of the Headquarters for Data Protection and Information Security, who you can contact as follows: Mr. Matthias Goebel Corporate Data Protection Commissioner Information Security and Data Protection Robert Bosch Corporation (C/ISP) Robert Bosch GmbH Postbox: Stuttgart GERMANY Or by Abteilungsbriefkasten.cisp@de.bosch.com Application for Job Vacancies on our Job Portal The simplest way to apply is to send the application to the published job vacancies directly through one of our job portals. Your application will be evaluated in the framework of our internal processes. In the context of the job application process, you are welcome to indicate the Bosch employee who may have recommended you. Otherwise, we provide the opportunity to have your application remain on file with us for a period of a maximum of 3 years in case of other interesting job vacancies. Throughout the job application process, you have the option of changing your data, or of receiving information about the status of your application, at any time. Your right to withdraw this data can be exercised at any time by means of retracting your application. You can also retract your consent to have your application remain with us on file at any time. For queries about information or withdrawal of one s consent, direct your inquiry to the following address: Ihre.Bewerbung@at.bosch.com.

3 Categories of Data Processed Included among the categories of personal data which are processed, are all kinds of data which are disclosed to us, including, specifically: Page 3 of 6 - Master data (e.g. name, date of birth, citizenship, place of residence) - Documents (e.g. credentials, certificates, curricula vitae) - Travel expense accounting (e.g. bank account details) - Communication data (e.g. , mobile phone, IT-usernames, audio or image recording) - Log data that are used in our IT systems Source of the Personal Data Your personal data are, as a rule, captured in the context of the job application process. Job placement especially of sensitive posts, likewise requires further assessment of your application data and your career trajectory. When this career trajectory evaluation takes place, we will obviously inform you in a transparent way within the statutory period accordingly. The results of the possible assessment are documented in our application management system. Data Processing at the Time of Employment In case of employment or an employment relationship, your data will be further processed as employee data in our job application management system. Processing Purposes and Legal Foundation In accordance with the EU Data Protection Regulation (GDPR), both we and our external service providers process your personal data with due consideration taken of the agreements of the EU Data Protection Regulation (GDPR), national data protection laws, as well as other relevant national legislation. Data processing is intended for the implementation of the job application management process for arranging possible employment with a legal entity of the Bosch Group Austria. The primary legal basis for this is rooted in the GDPR Article 6, Par. 1 lit. b (implementation of pre-contractual procedures). Additional possible legal basis includes: - GDPR Article 6 Par. 1 lit. a (Consent): for forwarding on to Bosch entities and for saving on file - GDPR Article 6 Par. 1 lit. f) f ( legitimate prevailing interests ): for example, human resources evaluations (personnel controlling, analytical reporting)

4 Information Disclosure In the context of the respective legal entity of the Bosch Group Austria to whom the job application proceeds, only the persons and positions (e.g. management and implicated employees of the given department, area of human resources, or employee representatives) implicated in the application process, receive access to your personal data. Beyond that, the disclosure of data from your job application can take place with your consent, for a further suitable job vacancy within the Bosch Group Austria. Page 4 of 6 As a rule, your personal data is only transferred to other Bosch entities in accordance with the appropriate legal foundation. You can find the details about the legal basis in the paragraph Processing purposes and legal foundation. In case of data being transferred to third parties on the basis of legitimate interest, this fact is specifically outlined in the data protection notices. In addition, we meet our own contractual and legal obligations to various processors. You can find a list of the subcontractors and service providers deployed (processors) in the following section subcontractors and service providers. Subcontractors and Service Providers (Processors) We choose our service providers (processors) very meticulously, and conclude a processor agreement in accordance with Article 28 of the GDPR. We regularly monitor our processors, particularly with regards to their handling of personal data. All our processors are obligated to maintain confidentiality and compliance with the legal requirements. Processors can constitute other legal entities of the Bosch Group Austria or be external third parties. We have a long-term partnership with the following service providers: Processor Service Infoniqa HR Solutions GmbH Traunufer Arkade 1 A-4600 Thalheim bei Wels Provision of software and maintenance, as well as CV-parsing Disclosure to Recipients Outside the European Economic Area Disclosure of your personal data to subcontractors, service providers (processors) or group companies outside the European Economic Area (EEA) is authorized exclusively on the basis of an appropriate legal foundation and a legitimate transmission purpose (see Processing purposes and legal foundation ) and takes place only in case the third country in question has been confirmed by an EU Commission to have reached a reasonable data protection level, or other reasonable data protection guarantees (e.g. legally binding corporate data protection requirements or EU-standard contractual clauses) are in place. You will be notified separately about such an event and, as necessary, your consent will be requested accordingly.

5 Duration of Storage: Retention Period We delete your personal data as soon as it is no longer required for the aforementioned purposes (see Processing purposes and legal foundation ) and as soon as no legal basis for the storage of the data remains in force. Your job application data are thus saved for the duration of the job application process, as well as for eight months (for the defense of any claims) after its conclusion. Once you have agreed to have your data saved for review for further job vacancies, we save this data for a duration of three years. Page 5 of 6 Should your application be successful, your data are generally saved for the duration of the period of employment and beyond that, in accordance with the proviso of the applicable legal foundation at hand. You will be informed of this fact this separately. Data Processing Security We take all necessary technical and organizational measures for guaranteeing a reasonable level of protection and for protecting your data specifically from the risk of unintended or unlawful disposal, manipulation, loss, change, or impermissible disclosure, i.e. unauthorized access. Our security measures are constantly improved upon with appropriate technological developments. Your Rights Please take advantage of the exercising of your rights by means of entering data into the Contact Information section. Please take care to ensure that an unequivocal personal identification of you as a person may take place. Right to Information: You may submit a request at any time to find out what personal data of yours we are currently processing. Rights of Correcting and Deleting: You may request correction of incorrect data and to the extent legal preconditions are met, likewise request the proper completion or deletion of your data. The right to have data deleted does not apply to data that is required for invoicing and accounting purposes (e.g. reimbursement of travel costs) or in case of data that falls under the regulatory Record Retention Law. Insofar as access to such data isn t necessary, processing is restricted accordingly (see subsequent sections). Processing Restriction: Insofar as legal preconditions are met, you may request that we restrict the processing of your data.

6 Objection to Data Processing: You furthermore have the right to object to data processing that takes place on the legal basis of legitimate interest on our part (Art. 6, Par. 1 lit f). We will then adjust the processing of your data, unless, in accordance with legal requirements, compelling reasons worthy of protecting for the further processing of said data can be proven, which ultimately override your rights. Page 6 of 6 Withdrawal of Consent: Insofar as you have provided us with the consent to process your data, you may likewise withdraw consent at any time, with effect for the future. The legality of the processing of your data however remains intact up to the point in time when you withdraw consent. Data Portability: You have the right to receive the data which you made available to us, in a structured, standard, and machine-readable format, and insofar as technically possible, the right to request to have the data transferred to a third party. Job Applicants under 14 years of age: A job application is unfortunately only possible from persons who are at least 14 years of age. We find it very regrettable, however, look forward to hearing from you in future. Right to Complaint with the Regulatory Authorities: You have the right to lodge a complaint with the Data Protection Authority. The responsible Data Protection Authority for the Bosch Group Austria is: Austrian Data Protection Authority Wickenburggasse Vienna Telephone: dsb@dsb.gv.at Kind regards, Bosch Group Austria