Data Privacy Statement for applicants (recruitment)

What does this Statement include?

This Data Privacy Statement explains how Beiersdorf processes your personal data when you apply for a position advertised by us or one of our subsidiaries. It also describes your data protection rights, including the right to object to some of Beiersdorf’s processing operations. For more information on your rights and how you can exercise them, please refer to the section entitled “What rights do I have with regard to my personal data?”.

This Data Privacy Statement supplements our existing General Data Privacy Statement, which gives you specific information on how we process personal data obtained from you visiting our website and related to non-application-specific topics. 

Who is responsible for processing personal data and who is the data protection officer?

The entity responsible for processing your personal data is

Beiersdorf AG
Unnastrasse 48
20253
Hamburg
Tel.: +49 40 4909-0
Email: kontakt[at]beiersdorf.com

If you have any questions about this Data Privacy Statement or wish to contact us for any reason in connection with the processing of your personal data, please contact our recruitment officers at RC[at]Beiersdorf.com or our data protection officer at datenschutzbeauftragter[at]beiersdorf.com.

What personal data do we process?

We collect and store all data that you make available to us through your application. This includes your contact details, your application documents (resumé, cover letter, previous work experience, education/training and certificates, video interview if applicable, as well as our notes from interviews with you), your salary expectations, the type of employment you would like and the date from which you are available, and in exceptional cases your identity documents. In addition, this also applies to all other data you send to us, including all of your correspondence with us during the application process and the results of any online tests. This may also include special categories of personal data such as data concerning health that we collect, store, and process, for example in connection with a pre-employment medical checkup.

We may also obtain the above information about you from other sources, including employment agencies, the references you provide to us, websites, and other publicly available information on the Internet. This includes, for example, data that you have clearly made public in an online profile. We may also receive information that you submit to us through third-party websites, for instance through social media sites such as LinkedIn and job boards such as Stepstone or Monster.

When you apply via our online portal, we may collect access information, such as the IP address of your access device. You can find more information about this in our Data Privacy Statement on our website.

For which purposes is your data processed and on which legal basis?

We collect and process your personal data so that we can offer advertised positions and carry out the selection process. The data you provide will be processed for the processing of your application and, if an employment relationship is established, also for the execution of the employment relationship. It will not be processed for any other purpose. The legal basis for this is Section 26(1) in conjunction with (8) Sentence 2 of the German Federal Data Protection Act (BDSG) (new) and Section 22(1) b) BDSG (new) or, in the case of public profiles, Article 6 f) of the General Data Protection Regulation (GDPR) in conjunction with Article 9(2) e) GDPR; the legitimate interest in this case is to receive a clear brief profile from you, which you, within the meaning of Article 9(2) e) GDPR, have obviously made public.

If consent is required for processing (e.g., for inclusion in our talent pool), Section 26 BDSG (new) in conjunction with Article 7 DSGVO shall provide the legal basis.

Furthermore, we may process personal data about you where this is necessary to defend ourselves against legal claims arising from the application process that are brought against us. The legal basis for this is Article 6(1) b and f) GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG).

If there is an employment relationship between you and us, we can process the personal data already received from you for the purpose of the employment relationship in accordance with Section 26(1) BDSG (new). This is done if this is necessary for the execution or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of employee representation resulting from a law or a collective bargaining agreement, a works or service agreement (collective agreement). 

Participation in the CROSS-COMPANY program

If you apply for the CROSS-COMPANY program run jointly by Beiersdorf AG and Tchibo GmbH, Beiersdorf AG will pass on your application data (resumé, cover letter, certificates and, depending on the stage of the process, your online test, video interview and selection day results) to Tchibo GmbH, Human Resources Talent Management, Überseering 18, 22297 Hamburg, Tel.: +49 (0) 40 63 87 - 0, email: recruiting[at]tchibo.de. Tchibo GmbH will likewise process and use your data to process your application.

Who gets your data?

We may transfer your personal data to companies affiliated with us provided this is permissible within the scope of the purposes and legal bases outlined above. Furthermore, personal data may be processed on our behalf on the basis of contracts pursuant to Article 28 GDPR, especially by providers of systems for applicant management and selection procedures. During execution, personal data may also be processed by service providers outside the EU with which standard contractual clauses have been concluded. More information is available under “Data transfers outside the EU”.

Personal data will also be disclosed to government agencies and/or law enforcement agencies when required for the above purposes, where required by law or if necessary to protect our legitimate interests in accordance with applicable laws.

What rights do I have with regard to my personal data?

You can request information about your personal data stored at the above addresses. In addition, under certain conditions you may request the correction or deletion of your data. You may also have the right to restrict the processing of your data and to have the data you provide disclosed in a structured, conventional, machine-readable format.

Right to object  

If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Where we have asked for your consent, you can revoke this at any time. If you wish to revoke your consent to Beiersdorf processing your personal data, this has no influence on any processing that has already taken place.

You have the option of contacting the data protection officer named above or a data protection supervisory authority to submit a complaint.

How long will your data be stored?

We store your personal data only for the duration of the retention period for application data for six months or as long as we need it for Beiersdorf’s legitimate interest under applicable law, unless you give us permission to use your documents for other positions that become available. Where data storage after the above is no longer necessary, the data will be deleted.

If you accept a job in our Group, we will store your personal information for the entire duration of your employment in accordance with the Data Privacy Statement for employees that we will provide to you on acceptance of the job.

Will your data be transferred to a third country?

Should we transfer personal data to service providers or Group companies outside the European Economic Area (EEA), the transfer will only take place if an appropriate level of data protection in the third country has been confirmed by the European Commission or if other appropriate data protection guarantees (e.g., binding internal company data protection regulations or standard EU contractual clauses) are available. Beiersdorf has reasonable safeguards in place to protect this information, including standard contractual clauses.

Are you obligated to provide your data?

In principle, providing your personal data as part of the application process is voluntary. However, provision of personal data is necessary for the processing of your application or the conclusion of an employment contract with us. This means that if you do not provide us with any personal data in an application, we cannot enter into an employment relationship with you.