Information according to Art. 13 and 14 General Data Protection Regulation (GDPR) [KvPuT1] [TA/B2] for applicants
Please note the following information, which you accept by submitting your personal data via our application management system:
1. The applicant‘s personal data and legal basis of processing
tesa[KvPuT3] Europe takes the protection of your personal data very seriously and processes your personal data in accordance with national and European data protection provisions.
As part of the application process, we process data from you that we need to decide whether to establish the employment relationship. In particular, this includes your contact details, such as your name and address, as well as all data related to the application, such as your CV, certificates, qualifications, answers to questions.
Your online application is transferred in encrypted form according to the current state of the art. In the following, we would like to inform you about the most important aspects of the processing of your personal data (data collection, use and retention):
tesa Europe [KvPuT4] processes your personal information in connection with the online application via our application management system and also to assess your potential work-related applicability. In doing so, we process the information you provide based on Art. 6 para. 1 sent. 1 lit. b GDPR for the purpose of making a sound personnel decision. In addition, objective, non-discriminatory criteria are added to your application in our system; if permissible on a case-by-case basis, publicly accessible personal data about your person are also added to your application and stored in our application system. [KvPuT5] The data provided by you is necessary for concluding the application process. We cannot consider your application without these data.[KvPuT6]
If you also voluntarily provide us with personal data, we process this on the basis of your revocable consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a, Art. 7 GDPR. [KvPuT7] [TA/B8]
2. For how long are your personal data retained?
Your data is deleted after the conclusion of the application process and after the expiration of legal retention periods, unless you consented to the retention of your application for further prospective vacancies.
If your application relates to a specific position, your personal application data will be retained after the conclusion of the application process if this is necessary to protect our legitimate interests in accordance with Art. 6 Para. 1 Sentence. 1 lit. f DSGVO in the legitimate interest of warding off any legal claims, but no later than 6 months after the position has been filled, or on the basis of your consent (see Section 4).
If your application is successful, tesa will further process your personal data and will inform you appropriately in accordance with Art. 13-14 GDPR.
3. How long are written applications and applications that are sent to us by other means (e.g. via email) retained?
In case of written applications, your application data will be stored in our application management system and used by our HR departments. Your documents will be scanned and we will then - possibly even before completion of the application process – return your original documents to you, without this being a rejection or statement of any kind regarding your application. We save your written applications in our application management system just like the online applications we receive. The same applies to applications that we receive by e-mail.[KvPuT9] [TA/B10]
4. Is it possible to save your application data for future job postings in your application management system?
If we are unable to offer you any of the vacant positions, but if we believe, based on your job profile, that your application might be of interest for future job advertisements of other divisions or affiliates of the tesa Group, we will save your application data in our application management system for a maximum of 2 years, if you have expressly consented to such retention and use of your application in our application management system. In addition to the tesa company you have applied at, other affiliates of the tesa Group also have access to the application management system (see Sections 6 and 7). We recommend that you agree to the retention and use of your application data in our application management system beyond the actual application process, as this means that your application can also be considered for future job postings.[KvPuT11] [TA/B12]
5. How are your personal data used and what is the purpose of the processing?
Your application data is processed solely for the purpose of completing the application process and for anonymised internal statistics. [KvPuT13] [TA/B14] Your application data is not processed for any other purposes than those described in this privacy policy.
6. Is your personal data transferred to third parties?
Yes, your personal data may be passed on for processing, or access to these data may be granted to defined third parties/affiliated companies (see Section 7) in the context of your application process. We transfer your personal data to third parties only as far as described in this section and section 5 above. In particular, we do not sell, let or exchange your personal data. If you consent to the retention of your application in our application management system beyond your application for a specific vacancy, you consent at the same time to the access and use of your application data by other companies within the tesa Group, which might consider your job profile for further vacancies in our Group.[KvPuT15]
For our application management system, we use the service provider Recruitee, with whom we also signed a Data Processing Agreement.
You may access the privacy policy of Recruitee here:
[KvPuT16] https://recruitee.com/privacy-policy
If necessary, we may also disclose data to further trusted third party service providers who support us, for example, in the areas of IT or archiving and destruction and with whom separate contracts for data processing have been concluded.
In all of the cases we make sure that appropriate data protection agreements and transfer mechanisms (such as EU Standard Contractual Clauses), if applicable, are in place with the third parties.
7. Affiliates of tesa SE
The following affiliates of tesa have access to the application management system:
- tesa Western Europe BV
- tesa BV
- tesa SA NV
- tesa s.a.s
- tesa UK Ltd.
- tesa A/S
- tesa AB
- tesa AS
- tesa OY
- tesa tape S.A.
- tesa Portugal Lda.
- tesa SpA
- tesa SE
- tesa GmbH
- tesa tape Schweiz AG
- tesa tape Kft.
- tesa tape kft. Podruznica Slovenija
- tesa tape kft., Greek Branch
- tesa tape sp.o.o.
- tesa tape s.r.o.
- tesa tape s.r.o. – organizacna zlozka Slovensko
- tesa Romania
- tesa tape UAB Estonia
- UAB tesa tape pastaviga
- tesa tape UAB Representative office
8. Can you find out which personal data we have stored about you?
Yes. If you wish, you can always ask us which personal data we retain regarding your person.[KvPuT17]
9. What rights do you have as the data subject?
We hereby inform you that in accordance with Art. 15 et seqq. GDPR, under the conditions defined therein, you have the right to information about the personal data concerned, the right to rectification or erasure or to restriction of processing, a right of objection to processing and the right to data portability. In addition, under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is in breach of this Regulation. A complaint may be lodged with any supervisory authority in the member state of residence or employment of the data subject or at the place of the alleged infringement. If the processing is based on Art. 6 para. 1 lit. a GDPR (consent), you also have the right to revoke the consent at any time without affecting the legality of the processing on the basis of the consent up to the time of revocation.
Should you have any questions or complaints related to data protection, please contact us at: […]. [A18] [TA/B19]
12. Questions
Are you experiencing technical issues sending us your online application via the application management system, or do you have questions concerning a specific vacancy, or general questions or suggestions regarding your online application? You can contact us at: [ … ]. We will contact you to resolve your request as quickly as possible.[KvPuT20]
13. Controller of data processing and Data Protection Officer
Responsible entity for the processing of your personal data:
tesa SE
You may contact our Group Data protection Officer. For any type of request or question related to your personal data, please include “tesa” in the subject line of your request if you are writing an email to the DPO.
Contact details of our Group Data Protection Officer
Jennifer Jähn-Nguyen
Sechslingspforte 2
22087 Hamburg
datenschutzbeauftragter@tesa.com
[KvPuT21]
[KvPuT1]If desired we could use an Art. 13-Information that is covering the EU and also the UK.
Please let us know.
[TA/B2]yes
[KvPuT3]Please specify
[KvPuT4]Please adjust if necessary
[KvPuT5]Is this being done? If yes, please describe more closely.
If not, this section can be deleted.
[KvPuT6]Please check critically whether this corresponds to the data processing.
[KvPuT7]Please let us know if sensitive data according to Art. 9 GDPR such as data revealing racial or ethnic origins, religious beliefs or health data is being processed.
[TA/B8]no
[KvPuT9]As far as I have understood, all applications for EU HR will in future only be received via the ATS Recruitee. If this is the case, this paragraph can and should be deleted.
[TA/B10]ok
[KvPuT11]Please review if this accurately describes the process.
Even with consent, data should be kept for a maximum of 2 years and then repeat consent if necessary.
[TA/B12]we do not create any talent pool, therefore can be deleted
[KvPuT13]Please describe in more detail if this is done.
If possible, this paragraph can be deleted or integrated into paragraph 1.
[TA/B14]we do reporting, what exact data should be included here?
[KvPuT15]Please adjust if necessary
[KvPuT16]Please include the link to the privacy policy.
[KvPuT17]It is advisable to enter an e-mail address here.
In my view, this information can be integrated into section 9 and this paragraph deleted.
[A18]FP: please include a contact detail.
[TA/B19]can it be my mail address?
[KvPuT20]Please adjust. If this data processing is not desired or does not take place, this paragraph can also be deleted.
[KvPuT21]We only need this if the data processing is based on consent. Then a checkbox should also be added here to obtain explicit consent for data processing.
Preferably such a checkbox should be present in Recruitee in a suitable place.
I have read the privacy policy and hereby consent that my personal data that I have provided above may be stored and processed.