Data Protection Declaration (User Account)
Data protection information - Applicants
The protection and security of your personal data is important to us. We would therefore like to inform you in the following about our data protection principles, which we have undertaken to comply with in order to provide you with a trustworthy application process.
1 Who is responsible for data processing and whom can I contact?
Depending on the company to which you wish to apply or have applied, the responsible body is:
KfW
Palmengartenstr. 5-9
60325 Frankfurt
Tel: 069 74 31-0
Fax: 069 74 31-29 44,
E-mail: info@kfw.de
KfW IPEX-Bank
Palmengartenstr. 5-9
60325 Frankfurt
Tel: 069 74 31-33 00
Fax: 069 74 31-85 36,
E-mail: info@kfw-ipex-bank.de
You can also reach your data protection officer depending on the company you are applying to or have applied to at:
KfW
Data Protection Officer
Palmengartenstrasse 5-9
60325 Frankfurt am Main
E-mail: datenschutz@kfw.de
KfW IPEX-Bank
Data Protection Officer
Palmengartenstrasse 5-9
60325 Frankfurt
E-mail: datenschutz-ipex@kfw.de
2 What sources and data do we use?
We process personal data that we receive from you in the course of your application. These are registration data for your user account and all documents uploaded by you for your application (e.g. CVs, references, certificates).
2.1. Type of data
Relevant personal data are, in particular, data for registration in the portal, where every user must create a user account. A user account consists of the following information: First name, last name, user name, e-mail address.
Further types of data result from documents uploaded by you, such as CVs, certificates, proofs, etc., the content of which you voluntarily provide to us when uploading.
In addition, this may also be data from log files for monitoring internet usage.
3.
What do we process your data for (purpose of processing) and on what legal basis?
We process your personal data in accordance with the General Data Protection Regulation (EU-DSGVO), the Data Protection Amendment and Implementation Act EU (DSAnpUG; also called BDSG new) and area-specific data protection standards that may apply to the employment relationships (also applicable to applicants).
3.1 For the fulfilment of contractual obligations
The processing of personal data (Art. 4 No. 2 EU-DSGVO) is carried out for the purpose of deciding on the possible future establishment of an employment relationship, taking into account Art. 88 EU-DSGVO and Section 26 DSAnpUG.
The purpose of the processing is primarily based on the requirements of the possible establishment of an employment relationship (selection, qualification, selected position, etc.).
When your data is transferred, it is automatically encrypted. The precautions for data security correspond to the current state of the art.
3.2 Within the framework of the balancing of interests
Where necessary, we also process your data to protect our legitimate interest or the legitimate interests of third parties. For example:
Statistical documentation in anonymised form
For the detection of criminal offences, your personal data may only be processed if factual indications to be documented justify the suspicion that you have committed a criminal offence in the context of the application, the processing is necessary for the detection and your interest worthy of protection in the exclusion of the processing does not outweigh this, in particular the type and extent are not disproportionate with regard to the cause.
3.3 Based on your consent
Insofar as you have given us consent to process personal data for specific purposes (e.g. to store your data for a longer period of time in order to address future interesting job offers for you), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected by this.
3.4 Due to legal requirements
As a company, we are also subject to various legal obligations, i.e. legal requirements (e.g. German Banking Act, German Money Laundering Act, German Securities Trading Act, tax laws, German Social Security Code) as well as supervisory requirements (e.g. of the European Central Bank, the European Savings Banks Supervisory Authority, the German Bundesbank and the German Federal Financial Supervisory Authority). The purposes of processing include, among others, measures for identity and age verification, fraud and money laundering prevention, the fulfilment of control and reporting obligations under tax law, compliance with the requirements of the German Social Code (SGB) as well as the assessment and management of risks.
4. Who gets my data?
If you have applied for a specific position, your data will only be made available to the responsible department and the responsible HR department. If you take advantage of the opportunity offered by us to apply on your own initiative (e.g. for a specific area in IT), your data will first be viewed by the relevant HR department and then assigned to the relevant job advertisements and responsible managers for these positions.
Milch & Zucker, based in Gießen (Hesse), operates the applicant management system for KfW and KfW IPEX Bank GmbH. Contractual agreements (order processing) and audits (on-site inspections, security checks, penetration tests, etc.) ensure that the relevant data protection provisions and the regulations on data security specified in accordance with the current state of the art are complied with.
Further data recipients may be those bodies for which you have given us your consent to transfer data.
5. How long will my data be stored?
As far as necessary, we process and store your personal data for the duration of the application process.
Your answers and information provided during the application phase will be stored together with your name for six months after the end of the application process. After that, the results are only stored in anonymised form, i.e. without providing personal data, for statistical evaluations. This statistical data record does not allow any conclusions to be drawn about your person.
As soon as the storage of the data is no longer necessary to carry out the application procedure and no legal retention periods exist, your data will be deleted immediately.
6. Will data be transferred to a third country or to an international organisation?
No data is transferred to third countries (countries outside the European Economic Area - EEA).
7. What data protection rights do I have?
Every data subject has the right to information about the processing of his/her personal data, the right to correction, the right to deletion, the right to restriction of processing, the right to object to processing and the right to data portability within the framework of the statutory provisions. In addition, there is a right of appeal to a data protection supervisory authority. 8.
8. Is there an obligation for me to provide data?
As part of your application, you only have to provide the personal data that is required for the application process. Without this data, we will generally not be able to carry out the application process. If you send us your application data by e-mail, we reserve the right to record this data in our applicant management system for reasons of efficient processing of the applications we receive.
9. To what extent is there automated decision-making in individual cases?
We do not use automated processing to make a decision about the establishment and implementation of your employment relationship. For the pre-selection of applicants for internships and student traineeships at our company, we automatically check the basic requirements (existence of a certificate of enrolment, residence and work permit for EU foreigners, duration of studies, grade point average, duration of internship). The result of the automated check can always be changed by the responsible recruiter.
10. Use of video conferences
We use video conferencing to get to know the candidates. The WebEx software from Cisco Systems Inc. is used for this purpose. The videos created here are not recorded.
11. To what extent will my data be used for profiling (scoring)?
Your data will not be used for profiling or scoring as part of the application process.
12. handling of log files and cookies
Detailed information on log files and cookies can be found on our website https://www.kfw.de/KfW-Konzern/Datenschutz.html.
Information about your right to object
Right to object on a case-by-case basis
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of data processing in the public interest and data processing based on a balance of interests.
If you object, we will no longer process your personal data unless we can demonstrate compelling grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.
The objection can be made without formalities and should be addressed to the company to which you wish to apply or have applied, depending on the company:
KfW Bankengruppe
Palmengartenstr. 5-9
60325 Frankfurt
Tel: 069 74 31-0
Fax: 069 74 31-29 44,
E-mail: info@kfw.de
KfW IPEX-Bank
Palmengartenstr. 5-9
60325 Frankfurt
Tel: 069 74 31-33 00
Fax: 069 74 31-85 36,
E-mail: info@kfw-ipex-bank.de