DATA PROTECTION NOTES
Protecting your personal data is a top priority for us. The data protection notes below provide you with a detailed overview of how your personal data is processed. "Personal data" means all information that relates to a natural person who has been or can be identified. These data protection notes explain the type and scope of collection as well as the purposes for which your personal data is collected and how we process your data. We would also like to inform you about the rights to which you are entitled as they relate to the processing of your personal data.
To whom do these data protection notes apply?
These data protection notes apply to you as an applicant, recommending employees and recommended persons.
Who is responsible for processing my data?
The controller of the personal data processing as described below is:
The Mercedes-Benz company that posted the vacant position is responsible for this data processing. You can find more details in the job listing. If you have submitted an application for multiple group companies, they are also responsible as part of each application process. You can find a list of our Mercedes-Benz Group AG group companies here. You can contact the relevant Mercedes-Benz Group AG company by e-mail here.
Who can I contact about data protection?
Contact information for the Data Protection Officer:
Mercedes-Benz Group AG
Group Data Protection Officer
HPC W079
70546 Stuttgart
Germany
e-mail: data.protection@mercedes-benz.com
Where does my data come from, and what data is processed?
We process the following personal data that we have received from you:
The categories of personal data processed include, but are not limited to, your name, your contact details including your private e-mail address, your qualification data, your references and certificates, health data (e.g. severe disability) and login data. We can also process personal data in the application process that we have obtained lawfully from publicly accessible sources (such as career networks). In the case of an employee referral, your e-mail address will be provided by the employee.
For what purpose is my data used and on what legal basis?
Data processing as part of the application process
As part of your application process (including onboarding), we process your personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Your data is processed on the basis of various legal foundations that ensure that your rights and freedoms are protected.
Legal basis for data processing
For the implementation of the application procedure, we rely on Art. 6 (1) lit. b) GDPR (contract fulfillment and pre-contractual measures) to process your application and to take pre-contractual measures with regard to possible employment. If your application is successful and leads to employment, we will continue to process your data on the basis of Sec. 26 BDSG in conjunction with Art. 88 GDPR (employee data protection), insofar as this is necessary for the performance or termination of the employment relationship.
In the event of a recommendation by our employees, we process your e-mail address to send the recommendation e-mail on the basis of your consent in accordance with Art. 6 (1) lit. a) GDPR, which you have given to the recommending employee.
We also process your personal data on the basis of our legitimate interest or the interest of a third party in accordance with Art. 6 (1) lit. f) GDPR, provided that your legitimate interests do not prevail. This includes the further development of our recruitment, performance management, personnel development, personnel planning, remuneration, organizational development, organizational and work culture, innovation management and operational personnel management. Your data can be processed regularly by statistical means and in combination with data from other internal sources for further development.
Special categories of personal data and your rights
In the context of personnel selection, it may be necessary to process special categories of personal data in accordance with Art. 9 (2) lit. b) GDPR in conjunction with Sec. 26 (3) BDSG, including the indication of a severe disability in particular. In order to meet the legal requirements, we will be able to use data analytics methods to determine the status of severely disabled persons in the future.
How long will my data be stored?
We only store your personal data if and for as long as there is a legal basis for this and this is necessary to achieve the respective purposes or you have not withdrawn your consent.
If you object to the processing, your personal data will be deleted, provided that no legal regulations permit further processing. Data will also be deleted if we are obliged to do so for other legal reasons.
As a matter of principle, we delete your personal data immediately as soon as the legal basis no longer applies and there are no other statutory retention obligations (for example under commercial or tax law).
If such retention obligations exist, the data will only be deleted after these periods have expired. If your personal data is no longer required for the intended purposes and there is no other legal basis, it will also be deleted.
Will my data be shared?
Your data will be shared with group companies of Mercedes-Benz Group AG. Group companies of Mercedes-Benz Group AG may also be engaged as processors. Your data will be shared with them in strict compliance with the requirements of the GDPR. Personal data will likewise be transmitted to other group companies only where a corresponding legal basis exists and where doing so is necessary for any of the purposes specified above.
The managers of the specialist unit in charge of filling the vacancy, the employees involved in personnel selection, and the HR division in charge are the recipients of your personal data within our company. Data analysts may also process your data for the aforementioned statistical purposes.
If you have applied for training positions / work-study programs in different group companies, these companies also receive your personal data that we collect as part of the online assessment and in the event that you make it to the next stage of selection, any on-site test and any selection day. You can find the companies concerned in each job listing. We will provide you with additional information regarding this as part of our online assessment.
We use external data processors for the provision of our services.
Your data will be passed on to external data processors (such as Oracle) in order to achieve the purpose of processing (e.g. IT maintenance and hosting). Your data will be shared with them in strict compliance with the requirements of the GDPR. The data processors commissioned by us, who may only process the data for us and not for their own purposes, are obligated to comply with the strict standards of the Mercedes-Benz Group.
Will my data be transferred to a third-party country?
We are part of the international Mercedes-Benz Group. As part of the application process, we also transfer or grant access to data to recipients outside the European Union (EU) or the European Economic Area (EEA) (in particular the USA and India).
From the standpoint of the EU, the following countries outside the EEA provide an appropriate level of protection meeting EU standards for the processing of personal information ("adequacy decision"): https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de
When working with recipients in other countries, we require them to sign an agreement stipulating the application of standard EU contractual clauses, binding corporate regulations or other lawful mechanisms.
What rights do you have as a data subject?
The Mercedes-Benz Group Privacy Policy applies to transmissions within the Mercedes-Benz Group.
As a data subject affected by this data processing, you are entitled to the following rights:
Article 15 GDPR: Right of access to the data stored by us.
Article 16 GDPR: Right to have inaccurate data rectified.
Article 17 GDPR: Right to have your data erased if there is no legal basis for further storage.
Article 18 GDPR: Right to request restriction of processing of your data. This means that your data will still be saved but may only be processed with certain restrictions (e.g. with your consent or for the assertion of legal claims).
Article 21 GDPR: RIGHT OF OBJECTION: If we process your data on the basis of legitimate interests (Art. 6 (1) f) GDPR) or for the performance of a public task (Art. 6 (1) e) GDPR) and if reasons against this processing arise from your particular situation, you have the right to object to this processing in accordance with Art. 21 (1) GDPR.
You can assert your rights at any time via the following point of contact: data.protection@mercedes-benz.com.
As a general rule, no fully automated decision-making as defined under Art. 22 GDPR will take place for purposes of the establishment, performance or fulfillment of the business relationship or for pre-contractual measures.
You have the right to lodge a complaint with the data protection controller or a data protection supervisory authority if you feel that the processing of the personal data relating to you infringes the GDPR or other laws (Art. 77 GDPR).
