Privacy Policy – Create Your Own Career

Privacy Policy

  • Privacy Policy — Websites

    • 1. Who is accountable for processing my personal data?

      Bertelsmann SE & Co. KGaA

      Carl-Bertelsmann-Strasse 270

      33311 Gütersloh, Germany

      Phone: +49 (0) 5241-80-0

      Fax: +49 (0) 5241-80-62321

      Email: createyourowncareer@bertelsmann.de

      is responsible for processing your personal data on this website (referred to below as “we” or “Bertelsmann”). We process personally identifiable information (“personal data”; also referred to as “personal information”) in accordance with GDPR provisions and the German Federal Data Protection Act (BDSG).

      You can contact Bertelsmann’s designated Data Protection Officer at the address indicated above by using the reference ‘For the attention of the Data Protection Officer’ or by writing to: datenschutz@bertelsmann.de.

    • 2. What data is collected?

      When you visit our website, the data of the computer you use to access our website is automatically logged (“access data”). This access data includes server log files that generally consist of information pertaining to your web browser type and version, your operating system, your internet service provider (ISP), the date and time you used the website, the websites previously visited by you and the websites you accessed from our website, in addition to the IP address of your computer. 

      Generally speaking, you can access the content on our website without divulging any information about you, e.g. in order to obtain information about us. However, some features of our website require that you provide personally identifiable information to us. In this case, the information provided by you is used to provide the service requested by you or to process a matter submitted by you (e.g. search queries, entries made in forms or contracts, click data).

    • 3. What cookies are used?

      Cookies are used on our website. Cookies are small text files that are saved to your computer when visiting a website. The cookies that are saved can be attributed to the web browser used by you. When the website is visited again, your web browser returns the content of the cookies, thus enabling you, the user, to be recognized. Certain cookies are deleted when you log out or end the browser session (“transient cookies” or “session cookies”). Other cookies are saved for a specific period of time (“temporary cookies”) or indefinitely (“persistent cookies”).Our website distinguishes two types of cookies: functional cookies and non-functional (optional) cookies. Functional cookies are essential for the website to work (to provide the website in a technically and functionally flawless manner) (e.g. identifying and authenticating the user, language settings, display of recorded images). Without these functional cookies, the content offered on our website would be limited. Optional cookies, on the other hand, help to optimize what is offered on our website by collecting information on user behavior and subjecting it to statistical analysis.

      As a general principle, cookies enable online recognition without reference to a specific person. Cookies may be personally identifiable when the information generated by the cookies is merged with other information, e.g. access data pursuant to section 2 (e.g. when web tracking is used). Any merging is done in a pseudonymized manner. Merging data in a personally identifiable manner is not permissible unless you have given your consent or this is permitted under the law.

    • 4. What data is collected and for what purpose?

      The purpose of data processing may be based on technical, contractual or statutory requirements, or result from consent having been given by the user.

      We use the information provided by you for the following purposes:

      • To provide website features and content and for technical security in troubleshooting technical issues, and also to ensure that unauthorized persons do not gain access to our website systems;
      • To conduct marketing reach measurements and web analyses in order to make our website more efficient and interesting for you, and for market research purposes;
      • To establish contact and engage in communication with you; and
      • To enable you to assert rights as a data subject.

      Data processing for taking part in the application procedure, participating in our programs and for taking part in our events including the publication of pictures and video recordings is not done directly via our website. Details on these different processing typescan be found below and under the following link:

      Job application platform: https://jobsearch.createyourowncareer.com/content/Privacy-Policy/?locale=de_DE

       

       

      4.1     Provision of the website

      4.1.1 Description and scope of data processing

      In order to enable the proper functioning of our website, security analyses to be conducted, and denial-of-service attacks to be prevented and stopped, server log files are automatically collected and saved on a short-term basis as an integral part of access data that is created by the system of the visiting computer upon accessing our website and while using it (see section 2). The content of the server log files is not merged with other data. We use the server log files for statistical analyses to troubleshoot and remedy technical issues, prevent and defend against denial-of-service attacks and attempted fraud, and to optimize the proper functioning of our website.

      4.1.2 Purpose and legal basis of data processing

      The legal basis for the creation of server log files follows from Art. 6 (1) (f) GDPR. Our legitimate interests lie in the proper functioning of our website, conducting security analyses and defending against threats.

      4.1.3 Duration of retention or criteria applied in defining this period

      When the pages of our website are accessed, information is logged to server log files that are stored on our web server; the IP address contained in them is deleted after 7 days at the latest. No analysis is conducted during this time unless a denial of service or other attack occurs.

      4.1.4 Options for lodging an objection and having your data removed

      You have the right to lodge an objection to the processing of your data contained in the server log files provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to lodge an objection, please write to the contact address in section 1.

       

      4.2.    Establishing contact with us

      4.2.1 Description and scope of data processing

      On our website you have the option of contacting various people at Bertelsmann about job applications, Bertelsmann’s programs and talent management by email or by telephone using the designated email address and phone number. If you take advantage of this option, the information you provide such as your email address and/or your phone number and your request/reason for contacting us are disclosed to us. Depending on the reason you are contacting us (e.g. questions about your application, training opportunities or possible degree courses), your contact details are subjected to further processing. If necessary for processing your request, this information may be shared with third parties (e.g. subsidiaries).

      4.2.2 Purpose and legal basis of data processing

      The legal basis for processing your contact details follows from Art. 6 (1) (f) GDPR. We have legitimate interests in processing your request and in continued communication. If the purpose for your establishing contact with us is to apply with us or to take part in a program and/or event, the legal basis for processing your contact details follows from the contract or quasicontractual relationship pursuant to Art. 6 (1) (b) GDPR / section 26 (1) (1) German Federal Data Protection Act (BDSG).

      4.2.3 Duration of retention or criteria applied in defining this period

      Your details are deleted once your request has been processed and further communication has been discontinued. This does not apply if the purpose of contacting us is your applying with us or taking part in a program and/or event. In this case your details remain on file until all contractual and similar obligations have been fulfilled and statutory retention periods (currently 6 months for applicant data) do not prevent this information from being deleted.

      4.2.4 Options for lodging an objection and having your information removed

      You have the right to lodge an objection to the processing of your information provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to lodge an objection, please write to the contact address in section 1. If you lodge an objection, communication with you cannot be continued.

       

      4.3     Asserting your rights as a data subject

      4.3.1 Description and scope of data processing

      In this privacy policy we advise you of the option of asserting your rights as a data subject and obtaining information on the information stored on you. In order to assert your rights as a data subject, it may be necessary that you provide information pertaining to your person and the specific information that has been processed. Without providing this information, we are not able to cater to your rights as a data subject.

      4.3.2 Purpose and legal basis of data processing

      Under the GDPR, we are legally obligated to process your data so that you can exercise your rights as a data subject. The legal basis for this follows from Art. 6 (1) (c) GDPR.

      4.3.2 Duration of retention or criteria applied in defining this period

      We retain the correspondence exchanged with you in relation to your asserting your rights as a data subject for a period of three years. This does not apply to information obtained to substantiate your identity, e.g. by way of a labeled photocopy of your personal identity card, where we have been provided one. It will be deleted once your identity has been established.

      4.3.3 Options for lodging an objection and having your information removed

      The processing of your information is required for complying with your rights as a data subject. To that extent you have no right to revoke your consent to its processing.

       

      4.4     Google Tag Manager

      This website uses Google Tag Manager, a service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Inc.). Google Tag Manager enables the web tracking services integrated in this website (see section 4.4) and other services to be administered by tags (tags are placeholders for website code). Google Tag Manager only implements these tags. No cookies are used nor is any personally identifiable information collected by Google Tag Manager in a targeted manner. Google Tag Manager only triggers other tags that in turn gather other data as applicable. However, Google Tag Manager never accesses this data.

       

      4.5     Google Analytics (web tracking)

      4.5.1 Description and scope of data processing

      This website uses Google Analytics. Google Analytics is a service provided by Google Inc. Google Analytics causes a usage profile to be created in order to optimize the user-friendliness of our website. A pseudonym is assigned to this profile. 

      Pseudonymity is ensured by the fact that when collecting your access data your IP address is shortened before being transmitted to Google Inc., meaning no information can be attributed to you. These usage profiles to which pseudonyms are assigned are analyzed for the purpose of optimizing user-friendliness. This data is not merged with other data by Google Inc. We ensure that Google Inc. only uses this data as instructed by us under a contract data processing agreement we have concluded with Google Inc.

      Transfer of information to a third country takes place by virtue of the use of Google Analytics. However, by being certified under the EU-US Privacy Shield, Google Inc. ensures that a level of data privacy and protection comparable to that in the EU/EEA is ensured. For more details pertaining to the transfer of information to third countries, see section 7.

      For more information on data processing related to Google Analytics, refer to the Google’s privacy policy: https://policies.google.com/privacy?hl=en.

      4.5.2 Purpose and legal basis of data processing

      The legal basis for recording and evaluating pseudonymous user profiles is founded upon Art. 6 (1) (f) GDPR. We have a legitimate interest in optimizing the user-friendliness of our website and performing marketing reach measurements.

      4.5.3 Duration of retention or criteria applied in defining this period

      As a general rule, the data that is collected and analyzed in association with Google Analytics is retained until you raise an objection to it being used in this manner. Analytics cookies are stored for a maximum of 24 months.

      4.5.4 Options for lodging an objection and having your data removed

      You can raise an objection to the use of Google Analytics by changing your browser settings and/or clicking on the following link to download and install the browser plug-in: https://tools.google.com/dlpage/gaoptout

       

      4.5     External services and content

      We integrate external services and content on our website. If you use one of these services or you are shown the content of third parties, communication data is exchanged between you and the provider of that service or content for technical purposes.

      That provider may use your data for their own purpose. To the best of our knowledge and belief, we have configured the services and content of third-party providers who are known to use data for their own purposes so that communication for purposes other than rendering their content or services on our website is prevented or communication does not come about unless you actively decide to use the service. However, since we have no control over the data collected by third parties and its processing by them we are unable to make any binding statements pertaining to the purpose and scope of the processing of your data.

      For further information on the purpose and scope of the collection and processing of your data, please refer to the privacy policy of the responsible provider (under data protection law) of the services or content integrated by us:

       

       

    • 5. Who comes into possession of my personal information?

      Within Bertelsmann those who need access to your information for the purposes described in section 4 will be given access to it. Service providers contracted by us may also be given access to your information (“contract data processors”, e.g. data centers, web tracking). They are bound by our directives and must provide for data security and the confidential treatment of your information under the contract data processing agreements we have concluded with them.

      No information is shared with other recipients such as our subsidiaries (“third parties”) unless this is permitted by law or you have consented to this.

    • 6. Is my personal information processed outside of the EU or EEA (“transfer to a third country”)?

      The use of Google Analytics as described in section 4.4 above causes personal data to be transferred to a third country since the data centers of Google Inc. are located outside of the European Union and the European Economic Area (“EU or EEA”). Such transfers of personal data to third countries may result in your personal information being transmitted to a country which does not provide for the same standard of data privacy and protection as the EU or EEA. However, by being certified under the EU-US Privacy Shield, Google Inc. ensures that a level of data privacy and protection comparable to that in the EU/EEA is ensured. You can request a copy of these safeguards by contacting the addresses indicated in section 1 above.

    • 7. What data privacy rights do I have?

      You have the right at any time to request access to your personal information that is currently on file with us. If this information is incorrect or not up to date, you have the right to request that it be corrected. You also have the right to have your personal information erased and/or its processing restricted as provided for in Art. 17 and Art. 18 GDPR. You also have the right to request a copy of the personal information provided by you that is held by us in a structured, commonly-used, machine-readable format (“right to data portability”).

      If you have given your consent to the processing of your personal information for specific purposes, you can revoke that consent at any time with effect for the future. Your notice of revocation is to be addressed to Bertelsmann by writing to the contact address indicated in section 1.

      Pursuant to Art. 21 GDPR, you also have the right, for reasons relating to your specific situation, to raise an objection at any time to the processing of your information that is done on the basis of Art. 6 (1) (f) GDPR. You also have the right to file an objection to automated processes involving the use of individual cookies, unless they are required for providing the functionality of our website.

      You also have the right to lodge a complaint with the competent data protection authority. The authority responsible for Bertelsmann is: 

      Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

      Kavalleriestr. 2-4

      40213 Düsseldorf, Germany

      Phone: 0211/38424-0

      Fax: 0211/38424-10

      Email: poststelle@ldi.nrw.de

      You also have the right to contact the data protection authority at your place of residence and request support in pursuing your matter.

    • 8. Children

      This website is also intended for students. As a rule they are at least sixteen years old, meaning that Bertelsmann need not take into account any other requirements with regard to processing the data of children under the GDPR.

       

      Date of this Privacy Policy: Version 2.0/ October 2019

  • Career Programs at Bertelsmann — Privacy Policy

    • General Information

      The following information is designed to provide an overview of our use of personally identifiable information (referred to below as “personal data” or “personal information”) relating to applying for job opportunities and taking part in career programs at Bertelsmann. These are: Creative Management Program, Bertelsmann Entrepreneurs Program, Bertelsmann Data Science Program MEDIAN, Bertelsmann Management Associate Program PERSPECTIVES, and Talent Meets Bertelsmann (“career programs”).

    • 1. Who is accountable for processing my personal data?

      Bertelsmann SE & Co. KGaA

      Corporate Management Development Dept.

      Carl-Bertelsmann-Strasse 270

      33311 Gütersloh, Germany

       

      Phone: +49(0)5241-80-0

      Fax: +49(0)5241-80-9662/63/64

      Email: createyourowncareer@bertelsmann.de

       

      is responsible for processing your information as described below. “We” or “us” as used below is in reference to Bertelsmann SE & Co. KGaA. We process personal information in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

       

      You can contact our data protection officer by post at the address indicated above by using the reference “Attn: Data Protection Officer”, or by writing to: datenschutz@bertelsmann.de.

    • 2. Why is my personal data being processed (designated processing purpose) and what is the legal basis for this?

      To take part in our career programs you have to apply by sending us your application materials in electronic form (consisting of a cover letter (motivational letter), general information about you including your contact details, details on your formal education & training and professional background, and other information like your hobbies and language skills).

      Applying predefined criteria, we decide on your suitability for participating in the career programs. To do this, we review your application materials and conduct interviews with you on the phone and/or in person. To organize interviews, we process your contact details and communicate with you via email and/or the phone. For further information on data processing via our job application platform, please follow this link: https://jobsearch.createyourowncareer.com/content/Privacy-Policy/?locale=de_DE

      In the Creative Management Program, an online intelligence test called Talent Q, of Korn Ferry International GmbH, is also part of the application procedure. The online test takes about 30 minutes and consists of three sections: verbal, numerical and logical reasoning skills. The test examines your ability to interpret written information (verbal reasoning skills), to analyze and draw inferences from numerical information and data (numerical reasoning skills), and your ability to analyze abstract information and apply this to determine outcomes and patterns (analytical or logical reasoning skills). You can prepare for this test by doing practice exercises. The data collected during the online intelligence test is used exclusively for making hiring decisions. Contractual agreements with Korn Ferry International GmbH ensure that personally identifiable information relating to you is not used for other purposes. For more information about how we process your information, please follow this link: https://www.kornferry.com/privacy.

      In Talent Meets Bertelsmann, an asynchronous video interview is conducted with viasto GmbH in lieu of a personal interview, owing to the international orientation of this career program. The video interview also facilitates the application process for applicants outside of Germany, by saving them time and money. The video interview takes approximately 20 to 30 minutes, during which you respond to previously arranged questions on your motivation for taking part in Talent Meets Bertelsmann. Between the responses to the individual questions you have time to prepare for the next question. Contractual agreements with viasto GmbH ensure that personally identifiable information relating to you is not used for other purposes. For more information about how your information is processed, please follow this link: https://www.viasto.com/en/imprint/.

      The legal basis for processing your information in the application procedure is founded upon the requirement to create a contractual or participation agreement as provided for by Art. 6 (1) (b) GDPR. Participating in an asynchronous video interview is part of the application procedure for this career program, however, you can discontinue the interview and/or repeat it at any time. If you do discontinue it, we offer an alternative (e.g. phone interview or Skype call). As a general principle, you are not penalized in the application procedure if you discontinue the interview.

      By participating in the career program, a contract is created between you and Bertelsmann. The subject of this contract is essentially your participation in the career program. Depending on the type and scope of the program, we process your data for participating in, organizing and conducting meetings and/or events, and for human resources management, payroll and/or time tracking. If you receive an employee profile on our HR platform peoplenet when participating, we also process your information for communication and exchanges with the JAM communities, for registering for and conducting training and CPD programs and/or assessing your performance and/or development potential.

      The legal basis for processing your information when taking part in the career programs is founded upon the requirement to perform a contractual or participation agreement as provided for by Art. 6 (1) (b) GDPR.

    • 3. Am I under an obligation to provide personal information?

      In applying for and taking part in the career programs you must provide the personal information that is necessary for conducting and completing the application process. Without this information we cannot select you as a program participant or enable you to take part.

    • 4. Who comes into possession of my personal information?

      The career program generally addresses and is conducted throughout the Bertelsmann group, and thus is not exclusively limited to a single company, Bertelsmann SE & Co. KGaA. Depending on the type and scope of the program, in order to apply and/or participate it may be necessary for other persons in our subsidiaries, apart from selected staff of the Corporate Management Development Dept., to process your information (e.g. executive management, talent managers, event managers) by being given access to your information. By taking appropriate technical and organizational measures we ensure that only a limited number of persons gain access to your information, and that access is limited in time and restricted exclusively to the information that is necessary for the designated processing purpose, including but not limited to, the application procedure.

       

      In individual cases people are hired by subsidiaries that are headquartered outside of the European Union / European Economic Area (“third countries”) (e.g. Penguin Random House New York City). A level of data privacy and protection that satisfies GDPR can be ensured in third countries by way of the presence of an adequacy decision issued by the EU Commission (cf. Art. 45 (1) GDPR) or by way of appropriate guaranties, including, but not limited to, the agreement of EU standard contractual clauses (cf. Art. 46 (2) (c) GDPR. Guarantees can be waived in exceptional cases, i.e. if you have given your consent or where data processing has to be performed via a contractor located in a third country for creating and/or performing the contract with you (cf. Art. 49 (1) (a), (b) GDPR).

      Finally, we contract service providers (contract data processors, e.g. data centers and delivery services) who are bound by our directives to store your details, the online tests, video interviews, send out emails, etc.). Contract data processors are provided access to your information only to the extent and for the period necessary to provide the services contracted by us. Where these service providers process your personal information outside of the European Union or the European Economic Area, this may result in it being transmitted to a country which does not provide for the same standard of data privacy and protection as the European GDPR. In this case, we ensure that the service providers guarantee an equivalent level of data privacy and protection by way of Commission adequacy decisions and model contract clauses that are provided by the EU Commission. You can request a copy of these safeguards by contacting the addresses indicated in section 1 above.

       

    • 5. How long is my personal information stored?

      When the application procedure is concluded, your application materials are retained on file for six months for the purpose of defending against any legal claims founded on labor law and social security law or social protection law. Your application materials are then deleted upon the lapse of this six-month period.

      When the career program is completed, your data will be deleted unless you consent to taking part in our Alumni programs, are hired in, and/or we are compelled to retain your information on file due to statutory retention periods.

    • 6. What rights do I have with regard to my personal information?

      You have the right at any time to request access to your personal information that is currently on file with us. If this information is incorrect or not up to date, you have the right to request that it be corrected. You also have the right to have your personal information deleted and/or its processing restricted as provided for in Art. 17 and Art. 18 GDPR. Where our processing of information provided by you by automated means is based on your consent or is the subject of a contract with you, you have the right to request a copy of this data in a structured, commonly-used, machine-readable format (right to data portability).

      Where the legal basis for processing your information is founded upon Art. 6 (1) (f) GDPR (“legitimate interest”), you have the right to lodge an objection to the processing of your information as provided for by Art. 21 GDPR. 

      If you want to exercise any of your rights, or if you have questions of a general nature about data privacy as it relates to career programs, you can address these issues to the contact indicated in section 1 above at any time.

      You also have the right to lodge a complaint with the competent data protection authority. The authority responsible for us is LDI NRW (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 200444, 40102 Düsseldorf). However, you also have the right to contact the competent data protection authority at your place of residence, who will refer your matter to the competent authority.

    • 7. To what extent is my information processed by means of automated decision-making, including profiling?

      No automated decision-making or profiling takes place. This applies in particular to online tests and video interviews conducted in the application process. 

       

      Last updated: 10/2019

  • Career Events at Bertelsmann — Privacy Policy

    • General Information

      The following information is designed to provide an overview of our use of personally identifiable information (referred to below as “personal data” or “personal information”) relating to you when participating in Talent Meets Bertelsmann and/or associated Alumni events. The following events are specifically affected: the main event Talent Meets Bertelsmann (TMB), TMB Alumni Meetings, and TMB Alumni Hubs (“TMB Events”).

    • 1. Who is accountable for processing my personal data?

      Bertelsmann SE & Co. KGaA

      Corporate Management Development Dept.

      Carl-Bertelsmann-Strasse 270

      33311 Gütersloh, Germany

       

      Phone: +49(0)5241-80-0

      Fax: +49(0)5241-80-9662/63/64

      Email: createyourowncareer@bertelsmann.de

       

      is responsible for processing your information as described below. “We” or “us” as used below is in reference to Bertelsmann SE & Co. KGaA. We process personal information in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

      You can contact our data protection officer by post at the address indicated above by using the reference “Attn: Data Protection Officer”, or by writing to: datenschutz@bertelsmann.de.

    • 2. What information on me is stored?

      As a general rule, you are or have been a participant at Bertelsmann’s TMB and are invited to TMB Alumni Events. This means that we have access to some information on your that is already available, including your contact details (consisting of your name, postal address, email address, phone number). However, we also collect new data on you, i.e. travel data and personal preferences / dislikes / food intolerances / allergies when making restaurant and/or hotel reservations. The TMB Events are covered by one or more photographers in order to document the event and publish its highlights via our communication channels. This means that pictures and videos showing you may be made.

    • 3. Why is my personal data being processed (designated processing purpose) and what is the legal basis for this?

      We use your contact details to send you invitations to our TMB Events, and to send you relevant information (e.g. event program, restaurant and/or hotel bookings) by postal mail or email in advance of an event. The legal basis for processing this information is Art. 6 (1) (f) GDPR, based on our legitimate interest in maintaining relations with TMB participants and Alumni and integrating them in our networks.

       

      If you should no longer wish to receive any invitations to our events, you have the option of lodging an objection to the use of your details for this purpose by writing to: datenschutz@bertelmann.de. In this case, we would immediately discontinue sending you invitations to our events.

       

      When you take part in a TMB Event we process your personal data in order to conduct the event and to enable you to take part in it. This also extends to including your details in a participant list that is provided to the others attending the event (including in electronic form), or providing your information (name, details on your company/institution) to the moderators/hosts of the event for the purpose of conducting the event. We also use this information to send you relevant material after the event. We also share your information with cooperating organizations to the extent that this is required for conducting the event and enabling you to take part in it, e.g. external guest management. The legal basis for this processing of information follows from Art. 6 (1) (1) (b) GDPR.

       

      In addition, pictures and videos are routinely made at our TMB Events. Some of them are published on our website, on our social media channels, in the course of external and internal reporting or in Bertelsmann newsletters, together with your name, as applicable. In addition to the pictures and videos, metadata such as the time and location is automatically stored in digital cameras. The legal basis for making and storing photographs and video recordings follows from Art. 6 (1) (1) (f) GDPR, based on our legitimate interest in reporting on the TMB Events. The legal basis for publishing photographs and video recordings is founded upon section 22, 23 German Art Copyright Act (KUG).

       

      Pursuant to Art. 21 (1) GDPR, you have the right, for reasons relating to your particular situation, to lodge an objection at any time to the making and storage of photographs and video recordings in which you appear with effect for the future by writing to datenschutz@bertelmann.de and setting out your objection.

    • 4. Am I under an obligation to provide personal information?

      You are not legally or contractually obligated to provide personal information. However, if you take part in our TMB Events or would like to receive an invitation to them, you must provide your personal details. Without your details we are generally not able to send you invitations to our TMB Events or enable you to take part in them.

    • 5. Who comes into possession of my personal information?

      We share your personal information with the departments and positions indicated in section 3 for the purposes set out in section 3. We also contract service providers (contract data processors, e.g. data centers and delivery services) who are bound by our directives to store your details, the online test, video interviews, send out emails, etc.).Contract data processors are provided access to your information only to the extent and for the period necessary to provide the services contracted by us. Where these service providers process your personal information outside of the European Union or the European Economic Area, this may result in it being transmitted to a country which does not provide for the same standard of data privacy and protection as the European GDPR. In this case, we ensure that the service providers guarantee an equivalent level of data privacy and protection by way of Commission adequacy decisions and model contract clauses that are provided by the EU Commission. You can request a copy of these safeguards by contacting the addresses indicated in section 1 above.

    • 6. How long is my personal information stored?

      We store your contact details for the purpose of sending out invitations – unless you should lodge an objection – for the purpose of catering to our legitimate mutual interest in communication and the provision of information. We will store any objection lodged by you for a period of three years for evidentiary purposes.

      The pictures and videos of you which are stored along with their metadata are retained on file until you legitimately lodge an objection against their retention, unless there are overriding legitimate reasons for processing them.

      In the event that contract data processors, who are bound by our directives, are given access to your information this is done only to the extent and for the period necessary to provide the services contracted by us. Bertelsmann ensures that relevant agreements on deleting data are complied with.

    • 7. What rights do I have with regard to my personal information?

      You have the right at any time to request access to your personal information that is currently on file with us. If this information is incorrect or not up to date, you have the right to request that it be corrected. You also have the right to have your personal information deleted and/or its processing restricted as provided for in Art. 17 and Art. 18 GDPR. Where our processing of information provided by you by automated means is based on your consent or is the subject of a contract with you, you have the right to request a copy of this data in a structured, commonly-used, machine-readable format (right to data portability).

      Where the legal basis for processing your information is founded upon Art. 6 (1) (f) GDPR (“legitimate interest”), you have the right to lodge an objection to the processing of your information as provided for by Art. 21 GDPR. 

      If you want to exercise any of your rights, or if you have questions of a general nature about data privacy as it relates to TMB Events, you can address these issues to the contact indicated in section 1 above at any time.

      You also have the right to lodge a complaint with the competent data protection authority. The authority responsible for us is LDI NRW (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 200444, 40102 Düsseldorf). However, you also have the right to contact the competent data protection authority at your place of residence, who will refer your matter to the competent authority.

    • 8. To what extent is my information processed by means of automated decision-making, including profiling?

      No automated decision-making or profiling takes place. 

      Last updated: 10/2019

Jump to top