Data Privacy Statement for applicants (recruitment)

This Data Privacy Statement explains how Beiersdorf processes your personal data when you apply for a position advertised by us. It also describes the rules and practices regarding the collection, processing, use of your personal data and your data protection rights, including the right to object to some of Beiersdorf’s processing operations. For more information on your rights and how you can exercise them, please refer to the section “Legal rights in relation to personal data and how to exercise them”.

This Data Privacy Statement supplements our existing General Data Privacy Statement, which gives you specific information on how we process personal data obtained from you visiting our website and related to non-application-specific topics.  

1. Data controller and contact details
2. Collection and processing of personal data
3. Use of personal data
4. Legal basis for processing
5. Data Sharing
6. Legal rights in relation to personal data and how to exercise them
   6.1. Right of access
   6.2. Right to rectification and erasure
   6.3. Right to restriction of processing
   6.4. Right to data portability
   6.5. Right to object
   
7. Data retention
8. Objection or Withdrawal of your consent to the Processing of Personal Data
9. Data security and confidentiality

Responsible for the processing of personal data within the meaning of Art. 1 (5) of Law No. 09-08 on personal data protectionis: Beiersdorf AG; Unnastrasse 48; 20245 Hamburg; Germany; Phone: +49 (0) 40 - 4909 0 (see our imprint).

Contact details of the data protection officer: Datenschutz[at]Beiersdorf.com or under the postal address of the controller for the attention of the “data protection officer”.

Alternative:

Responsible for the processing of personal data within the meaning of Art. 1 (5) of the Law No. 09-08 on personal data is the company stated in the job application. You can find the contact details of the Data Protection Officers in the German Beiersdorf affiliates under following link: https://www.beiersdorf.de/meta-pages/datenschutzerklaerung/beiersdorf-datenschutzbeauftragter-webseite.

Within the recruitment process, we collect and store the following categories of personal data about you:

• Data which you have provided to us in your candidate profile, including first and last name, date and place of birth , e-mail, phone number. [It is possible to add: gender, marital status, number of children, nationality, type of driver’s license, signature, identity photo and military situation].
• Data which you have provided to us in your application documents (curriculum vitae CV, cover letter) including work experience, qualifications and language skills, educational and university background (diplomas, certificates, attestations), and hobbies.
• Data which you have provided to us regarding your criminal record (anthropometric record etc.).
• Data which you have provided to us concerning the person to be notified in case of an emergency.

Where your personal data is required to enter into an employment relationship, you will be asked to provide additional personal data. If you choose not to provide this data, Beiersdorf may not be able to enter into an employment relationship with you.

The collection, use and transfer of personal data may be done by automated, electronic and/or paper means.

We collect personal data directly from you or from our external partners, e.g. headhunters. We can also obtain information from professional social networks, such as LinkedIn, job boards such as Monster, and from other publicly accessible sources (only information relevant to your professional life) for the purposes of actively approaching you with job offers or for the purpose of confirming the accuracy of the information presented by you within the course of the application.

Your personal data may be used for following purposes:

• To assess your application for the job offered and to communicate with you within the recruitment process.
• To contact you in case of an alternative career opportunity within the Beiersdorf group (you can restrict the visibility of your candidate profile to the team involved in your current application or grant it to Beiersdorf’s recruiters worldwide).
• Based on your consent to ask you about your experience within the recruitment process.
• To contact you following your unsolicited application. 

Personal data within the recruitment process will be used for recruitment and hiring purposes, from the creation of your candidate profile and/or application for a position to the execution of your employment contract, should your application be successful.

The main legal basis for the processing of your personal data is that the processing is necessary for the purposes of transparent legitimate interests pursued by Beiersdorf as a future or new employer in this recruitment and hiring process. It is also necessary for compliance with a legal obligation to which Beiersdorf is subject, for the performance of pre-contractual measures taken at your request prior to the conclusion of an employment contract, and/or with your consent if you given it.

Personal data within the recruitment process will be used for the assessment of your application and, if an employment relationship is established, also for the execution of the employment relationship in accordance with Law 09-08 on personal data protection and Decision No. 298-AU-2014 dated 11 April 2014 of National Commission for Personal Data (CNDP).

For specific positions this includes your participation in an online cognitive ability or personality test. Providing your personal data as part of the application process is voluntary. However, the provision of personal data is necessary for the processing of your application or the conclusion of an employment contract with us. The legal basis for the cognitive ability or personality test is your consent pursuant to article 4 of Law 09-08 on personal data protection. Participation in the cognitive ability and personality test are voluntary.

When we obtain information from your public profile on professional social networks, such as LinkedIn, we base this processing on our legitimate interest to build a decision base in order to establish an employment relationship with you. The legal basis is Article 4 e) 6 of the Law No. 09-08 on personal data protection.

When we invite you to participate in a survey on your satisfaction with the application process at Beiersdorf the relevant legal basis is Article 4 of the Law No. 09-08 on personal data protection.

Furthermore, we may process personal data about you where this is necessary to defend ourselves against legal claims arising from the application process that are brought against us. The legal basis for this is Article 4 b) and e) of the Law No.09-08 on personal data protection.

Beirsdorf is obliged to inform you of any possible cross-checking of your personal data with external sources and any measures to verify the accuracy of the data provided in the application file.

We may transfer your personal data to companies affiliated with us provided this is permissible within the scope of the purposes and legal bases outlined above. For the processing activities in our online recruiting system Beiersdorf Group companies are jointly responsible. The essence of the arrangement of this joint determination is that Beiersdorf AG, Germany, is predominantly responsible to fulfill information duties according to data protection law and provide information on the joint processing. We might share your candidate profile with other recruiting teams in the Beiersdorf Group. You can manage the visibility options of your profile by selecting whether your profile should be visible to the recruiting team involved in your current application or recruiting teams within the Beiersdorf Group worldwide. If you do not wish to be further considered for relevant job offerings, you can request the deletion of your candidate profile, see section “Data retention”.

Furthermore, personal data may be processed on our behalf on the basis of contracts pursuant to Article23 of the Law n° 09-08 on personal data , especially by providers of systems for applicant management and selection procedures. We do not share data with third parties that have no reference to our application management and application procedures or other use cases we describe in section “Use of personal data”.

Should we transfer personal data to service providers or Group companies outside the territory of the Kingdom of Morocco , the transfer will only take place if the third country ensures an adequate level of protection of privacy and fundamental rights and freedoms of individuals with regard to the processing of such data. 

More information is available under “Data transfers outside the territory of the Kingdom of Morocco”.

6.1. Right of access

You can request information about your personal data without delay and at reasonable intervals (commonly known as data subject access request). You can exercise this right by contacting us under the above-mentioned contact details of the controller. 

6.2. Right to rectification and erasure

If you wish to update, correct, delete or lock the personal data provided to us, you can send us an email to RC@beiersdorf.com or you modify the data yourself in the relevant application within your candidate profile.

The data controller will make the necessary corrections within 10 days as from the request. 

6.3. Right to restriction of processing

Under certain conditions you have the right to restrict the processing of your personal data, e.g. when you want us to verify the accuracy of your personal data. You can adjust the visibility of your profile at any time or opt out of notifications. 

6.4. Right to data portability

Under certain conditions you have the right to receive the personal data concerning you which you provided to us in a structured, commonly used and machine-readable format. 

6.5. Right to object

If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation. For more information see section “Objection or Withdrawal of your consent to the Processing of Personal Data”.

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

We retain your data for a period of 6 months after your last log in date in your profile. This is necessary for the burden of proof in the event of a legal claim based on the Law No. 09-08 on protection data We further retain your personal data in that period in case there is a relevant job offering for which you will be a fitting candidate. You can manage the visibility settings of your candidate profile as described in 5. “Data sharing”. In addition, you can request the deletion of your candidate profile or the withdrawal of your application by contacting our recruitment experts at RC[at]Beiersdorf.com. 

In case your application is successful we may store your personal data within the subsequent employment in compliance withthe applicable legal regulations. More information can be found in the Data Privacy Statement for employees that we willprovide to you on acceptance of the job.

If you have given your consent (Article 4 of Law No. 09-08 on personal data) to the processing of your data (e.g. when we invite you to participate in a survey on your satisfaction with the application process at Beiersdorf), you can withdraw yourconsent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us. 

If we base the processing of your personal data on the weighing of interests (Article 4 e) of the Law No. 09-08 on personal data b), you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the Chapter “Use of data”. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.

The Data Controller undertakes to take all necessary measures to ensure that your personal data is respected and kept confidential and to take all useful precautions to preserve their security, in particular to prevent them from being destroyed, distorted, damaged or accessible to unauthorized third parties.