Data Privacy Statement for applicants (recruitment)

This Data Privacy Statement explains how Beiersdorf processes your personal data when you apply for a position advertised by us. It also describes your data protection rights, including the right to object to some of Beiersdorf’s processing operations. For more information on your rights and how you can exercise them, please refer to the section “Legal rights in relation to personal data and how to exercise them”.

This Data Privacy Statement supplements our existing General Data Privacy Statement, which gives you specific information on how we process personal data obtained from you visiting our website and related to non-application-specific topics. 

GDPR- For EU Citizens only

1. Data controller and contact details

Responsible for the processing of personal data within the meaning of Art. 4 (7) GDPR is: Beiersdorf Inc.; 45 Danbury Road, Wilton, CT; United States; Phone: 1-800-227-4703

Contact details of the data protection officer: LegalUS@Beiersdorf.com; or under the postal address of the controller for the attention of the “data protection officer”.

Alternative (if applicable):
Responsible for the processing of personal data within the meaning of Art. 4 (7) GDPR is the company stated in the job application. You can find the contact details of the Data Protection Officers in the German Beiersdorf affiliates under following link:https://www.beiersdorf.de/meta-pages/datenschutzerklaerung/beiersdorf-datenschutzbeauftragter-webseite   

2. Collection of personal data

Within the recruitment process, we collect and store the following categories of personal data about you:

  • Data which you have provided to us in your candidate profile, including first and last name, country, e-mail, phone number.
  • Data which you have entered on our candidate application form, including desired annual salary andyour motivation, (if and to the extent that it is relevant for the job offered).
  • Data which you have provided to us in your application documents (curriculum vitae CV, cover letter) including work experience, qualifications and language skills.
  • Data from online assessments (e.g. personality tests) and video interviews (if applicable).
  • Data provided to us by your referees (if applicable). These are reference points that you have given us to contact. 

We collect personal data directly from you or from our external partners, e.g. headhunters. We can also obtain information from professional social networks, such as LinkedIn, job boards such as Monster, and from other publicly accessible sources (only information relevant to your professional life) for the purposes of actively approaching you with job offers or for the purpose of confirming the accuracy of the information presented by you within the course of the application.

3. Use of personal data

Your personal data may be used for following purposes:

  • To assess your application for the job offered and to communicate with you within the recruitment process.
  • To contact you in case of an alternative career opportunity within the Beiersdorf group (you can restrict the visibility of your candidate profile to the team involved in your current application or grant it to Beiersdorf’s recruiters worldwide).
  • With your consent to ask you about your experience within the recruitment process.
  • To contact you following your unsolicited application.

4. Legal basis for processing

Personal data within the recruitment process will be used for the assessment of your application and, if an employment relationship is established, also for the execution of the employment relationship. For specific positions this includes your participation in an online personality test.. Providing your personal data as part of the application process is voluntary. However, the provision of personal data is necessary for the processing of your application or the conclusion of an employment contract with us. The legal basis for the personality test is your consent pursuant to Section 26 (2) BDSG. Participation in the personality test is voluntary.

When we obtain information from your public profile on professional social networks, such as LinkedIn, we base this processing on our legitimate interest to build a decision base in order to establish an employment relationship with you. The legal basis is Article 6 f) GDPR in conjunction with Article 9 (2) e) GDPR.

When we invite you to participate in a survey on your satisfaction with the application process at Beiersdorf the relevant legal basis is Section 26 BDSG in conjunction with Article 7 GDPR.

Furthermore, we may process personal data about you where this is necessary to defend ourselves against legal claims arising from the application process that are brought against us. The legal basis for this is Article 6 (1) b and f) GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG).

5. Data sharing

For the processing activities in our online recruiting system Beiersdorf Group companies are jointly responsible. The essence of the arrangement of this joint determination is that Beiersdorf AG, Germany, is predominantly responsible to fulfill information duties according to data protection law and provide information on the joint processing. We might share your candidate profile with other recruiting teams in the Beiersdorf Group. You can manage the visibility options of your profile by selecting whether your profile should be visible to the recruiting team involved in your current application or recruiting teams within the Beiersdorf Group worldwide. If you do not wish to be further considered for relevant job offerings, you can request the deletion of your candidate profile, see section “Data retention”.

Furthermore, personal data may be processed on our behalf on the basis of contracts pursuant to Article 28 GDPR, especially by providers of systems for applicant management and selection procedures. We do not share data with third parties that have no reference to our application management and application procedures or other use cases we describe in section “Use of personal data".

Should we transfer personal data to service providers or Group companies outside the European Economic Area (EEA), the transfer will only take place if an appropriate level of data protection in the third country has been confirmed by the European Commission or if other appropriate data protection guarantees (e.g., binding internal company data protection regulations or standard EU contractual clauses) are available. Beiersdorf has reasonable safeguards in place to protect this information, including standard contractual clauses.

More information is available under “Data transfers outside the EU”.

In the event of a legal obligation, we reserve the right to disclose information about you if we are required to surrender it to competent authorities or law enforcement bodies. The legal basis is Article 6 (1) c) GDPR.

6. Legal rights in relation to personal data and how to exercise them

6.1. Right of access

You can request information about your personal data (commonly known as data subject access request). You can exercise this right by contacting us under the above mentioned contact details of the controller.

6.2. Right to rectification and erasure

If you wish to update the personal data provided to us, you can send us an email to RC@beiersdorf.com or you modify the data yourself in the relevant application within your candidate profile. Under certain conditions, you can ask us to erase your personal data.

6.3. Right to restriction of processing

Under certain conditions you have the right to restrict the processing of your personal data, e.g. when you want us to verify the accuracy of your personal data. You can adjust the visibility of your profile at any time or opt out of notifications.

6.4. Right to data portability

Under certain conditions you have the right to receive the personal data concerning you which you provided to us in a structured, commonly used and machine-readable format.

6.5. Right to object

If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation. For more information see section “Objection or Withdrawal of your consent to the Processing of Personal Data”.

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

7. Data retention

We retain your data for a period of 7 years. This is necessary for the burden of proof in the event of a legal claim. We further retain your personal data in that period in case there is a relevant job offering for which you will be a fitting candidate. You can manage the visibility settings of your candidate profile as described in 5 Data sharing. In addition, you can request the deletion of your candidate profile or the withdrawal of your application by contacting our recruitment experts at RC[at]Beiersdorf.com. 

In case your application is successful we may store your personal data within the subsequent employment in compliance with the applicable legal regulations. More information can be found in the Data Privacy Statement for employees that we will provide to you on acceptance of the job.  

8. Objection or Withdrawal of your consent to the Processing of Personal Data

If you have given your consent (Article 6 (1) a GDPR) to the processing of your data (e.g. when we invite you to participate in a survey on your satisfaction with the application process at Beiersdorf), you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us.

If we base the processing of your personal data on the weighing of interests (Article 6 (1) f GDPR), you may object to the processing. This is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in the Chapter Use of data. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.

California Consumer Protection Act (CCPA)- California-based Employees only

Collection of Personal Information

Specifically, we have collected the following categories of personal information:

Category Examples  Collected 
A. Identifiers.  A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.  Yes
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).  A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.  Yes
C. Protected classification characteristics under California or federal law.  Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).  Yes
D. Commercial information.  Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.  Yes
E. Biometric information.  Genetic, physiological, biological, behavioral characteristics, including DNA that can be used on its own or in combination with each other, or other identifying data, to establish an individual’s identity. Also includes faceprint, voiceprint, keystroke patters or rhythms, gait patters or rhythms, and sleep, health, or exercise data.  No
F. Internet or other similar network activity.  Including, but not limited to browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.  Yes
G. Geolocation data.  Physical location  Yes
H. Sensory data.  Audio, electronic, visual, thermal, olfactory, or similar information.  No
I. Professional or employment-related information.  Current or past job history  No
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).  Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.  No
K. Inferences drawn from other personal information.  Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.  Yes

Consumer Rights

The CCPA provides California Residents with specific rights regarding accessing and deleting personal information. The below describes your rights and how you can exercise them, as well as Beiersdorf’s responsibility in providing you a response.

Right to Access

You have the right to request that we disclose how we collect and use your personal information. After we receive and verify your request, we will disclose:

  • Categories of Personal Information Beiersdorf collects about you.
  • Categories of sources for your Personal Information Beiersdorf collects.
  • Beiersdorf’s business/commercial purpose for collecting or selling your Personal Information.
  • Categories of third parties with whom Beiersdorf shares your Personal Information
  • Specific pieces of your Personal Information collected.

Right to Delete

You have the right to request the deletion of your Personal Information that Beiersdorf has collected. This right, however, does not apply if Beiersdorf has a business need to retain your Personal Information to perform any of the following actions:

  • Provide goods or services to you.
  • Detect or resolve security issues or functionality-related issues.
  • Comply with the law or legal obligation.
  • Protect against malicious, deceptive, fraudulent activity.
  • Conduct research in the public interest.
  • Safeguard the right to free speech.
  • Carry out any actions for internal purposes you may reasonably expect Beiersdorf to carry out

Data Portability and Beiersdorf Response

Upon receiving your request to access and verifying your request, Beiersdorf will do our best to provide the necessary information collected in the immediately preceding 12 months to you within 45 days of Beiersdorf’s receipt of such request.

If we require additional time (up to 90 days), Beiersdorf will inform you the extension and the reason for such extension in writing. 

We will deliver the necessary information to you either by mail or electronically.

If Beiersdorf is unable to respond to your request, we will provide a reason as to why we cannot comply with your request. 

Exercising Access, Data Portability, and Deletion Rights

To exercise your rights to access, data portability, and deletion rights described directly above, please submit a consumer request that can be verifiable to Beiersdorf by:

Call: 1-800-227-4703

Email: LegalUS@beiersdorf.com

Mail:     
Consumer Relations
Beiersdorf, Inc.
45 Danbury Rd 
Wilton, CT 06897 

A verifiable consumer request must consist of:

  • Sufficient information that allows Beiersdorf to reasonably verify you are the person whom we collected Personal Information about, or an authorized representative.
  • Sufficient detail that will allow Beiersdorf to property understand, evaluate, and respond to your request.

Only you, or a representative registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability two times within a twelve month period.

Beiersdorf cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make such request regarding Personal Information as it relates to you.

Any Personal Information we may collect to verify a consumer request will only be used to verify the requesting party’s identity or authority to make such request.