Data Privacy Information for Applicants
Thank you for your interest in working for Salzgitter AG and its subsidiaries. Ensuring that we handle your personal data in a responsible and lawful manner is very important to us.
In the following information, and in accordance with Articles 12-14 of the EU General Data Protection Regulation (GDPR), we would like to give you an overview of how we process your personal data, your rights under data privacy law and details of how we handle the applications we receive online, via email and by mail.
Who is responsible for processing my personal data and who can I contact in this regard?
As a basic rule, the responsible body is the Salzgitter Group company to which you are applying.
The contact details of the company’s Data Protection Officer can be found in the “Data protection” section of the respective company’s website.
What purpose does data processing?
We need your personal data in order to process your application.
The data you provide as part of your application is processed and used exclusively for the purpose of applicant selection. In processing your application, we restrict ourselves to information you have directly provided. This could also include information that you have provided in online professional networks or job forums.
We only disclose your application – including to other companies in the Group or personnel consultants – if you have issued your corresponding consent to this disclosure. In the online application portal you can choose whether your candidate profile will be included in the applicant pool for all recruiters of the Group or only visible to the decision-makers of the company to which you have specifically applied.
What data do we process, why do we collect it, and what is the legal basis for doing so?
We process your personal data, if necessary, to examine the basis for establishing an employment relationship. The legal basis for this is, in principle, Article 6 Para. 1b of the GDPR within the meaning of Section 26 of the German Federal Data Protection Act (BDSG).
We only collect the personal data (more specifically your forename, surname, address, email address, the job you are applying for, and details from your application) that we require for the application procedure. In order to examine your application in full, we also need you to provide information on your professional experience to date.
In an online application, you enter this information yourself in the online form; for other application methods, we capture the relevant information from your application and scan in application documents where necessary. In addition, you will receive access data to your applicant profile by e-mail for further use.
In the context of your application we committ ourselves to only use the data provided directly by you or a person you have authorized to do so. In the course of the application procedure, further personal data relating to you may be collected from generally accessible sources or from former employers, teachers or trainers. This could also include data you make available online in the context of professional profiles (e.g. in business networks). We do not conduct further research into you as a person, e.g. using online search engines. When filling certain posts, in particular management positions – and subject to the condition that you give us your express consent to do so – we engage personnel consultants to hold assessment centers or conduct potential analyses.
If, in the course of the application procedure, we ask your gender by requesting your desired form of address, this is justifiable: we simply want to address you and write to you in the correct manner. Asking you to state your age or enter your date of birth is also justifiable as our activities are subject to statutory minimum age requirements.
Who will find out about your application?
Your data will, of course, be treated confidentially and only made accessible to people in the company involved in the appointment decision process (e.g. the HR department, the specialist area, the Works Council).
If, in the course of your application, you give your consent to the disclosure of your documents to other Group companies, your application data may be included in a corresponding Group-wide applicant pool if it is appropriate to do so.
How can you edit or delete your data in the career portal?
You can view, edit or delete your data as well as the added attachments (such as your resume) at any time in the course of the application procedure in the career portal.
If you want to delete your data, log in as an applicant in your candidate profile with your access data, select the menu item "Settings" under options and there the function "Delete profile.
How long will my data be stored?
If your application is unsuccessful, we will delete your data within 6 months, providing there are no legal grounds to oppose this deletion.
If an application procedure results in a job offer, we will retain your application documents in your personnel file on the basis of Art. 6 para. 1 sentence 2 letter b) of the GDPR and Section 26 para. 1 of the Federal Data Protection Act (BDSG) for the purpose of performing the employment relationship. In this case, we will provide specific data privacy information relating to the processing of this data in the context of the employment relationship. In case you have chosen that your candidate profile is visible to recruiters throughout the group, your data will be deleted from the candidate pool after 24 months at the latest, unless you have registered again in the meantime. After each registration, the 24-month period starts again.
How can I revoke my consent to disclosure of my application?
If you have given your consent to your application being disclosed in order to check other possible applications in the Salzgitter Group and would like to revoke this consent, please send an email to this effect to the contact person at the company to which you applied.
In the carer portal you can set this yourself online in your candidate profile under the menu item "Search options and data protection".
As a matter of precaution, we would like to make you aware that revoking your consent to disclosure of your application will prevent your application being considered again for other positions.
Reminder list (in the online application tool)
How is your data transferred?
Our Internet servers comply with the highest security standards and thereby ensure the best possible protection for your data against loss, misuse as well as unwarranted and unauthorized access, publication, amendment and deletion. Your data is transferred to our Internet server with appropriate encryption by means of the SSL procedure, which offers a high standard of security.
How is data processing carried out in connection with the subscription of notifications?
In the course of creating your applicant account, you have the possibility to subscribe to notifications about new job offers and career events. As a registered applicant you also have the option entering the frequency and a keyword with which you would like to receive information on new jobs under the menu item “Options / Job Notifications”.
In connection with the data processing for sending the notifications, the data will not be passed on to third parties. The data will be used exclusively for sending the notifications. You can stop receiving the e-mails at any time. You will find the corresponding link to unsubscribe or end the subscription in every notification we send.
What does data security mean to us?
It is important to us that we protect our data and your data as best we can, in accordance with data protection provisions currently in force and using state-of-the-art technology (e.g. virus scanners, firewalls). Unfortunately, it is not possible to exclude the inherent risk of data misuse. For this reason, we recommend that you make backup copies of documents that are important to you.
Are the websites accessible at all times?
The Salzgitter Group cannot offer any guarantee that its webpages will be available at all times. Naturally, we strive to prevent malfunctions and remedy them quickly if they occur.
What are my rights under data protection law?
Each data subject has the right of access in accordance with Article 15 of the GDPR, the right to rectification in accordance with Article 16 of the GDPR, the right to erasure in accordance with Article 17 of the GDPR, the right to restriction of processing in accordance with Article 18 of the GDPR, the right to object in accordance with Article 21 of the GDPR, and the right to data portability as set down in Article 20 of the GDPR. Restrictions apply to the right of access and right to erasure pursuant to Sections 34 and 35 of the German Federal Data Protection Act (BDSG). Furthermore, the data subject has the right to lodge a complaint with a supervisory authority (Article 77 of the GDPR within the meaning of Section 19 of the German Federal Data Protection Act (BDSG)).
If you have given us consent to process your personal data, you can also revoke this consent at any time. Any processing that occurred prior to revocation of consent would not be affected.
Am I obligated to provide personal data?
In the course of the application procedure, you must provide the personal data required to establish, implement and terminate an employment relationship and to fulfill the associated contractual obligations.
* For reasons of legibility, this text may not make explicit reference to both masculine and feminine pronouns. However, all content applies equally to people of all genders.