Information regarding the processing of your personal data
Below, we inform you about the processing of your personal data in context of an online application at the BMW Group in France and the rights you are entitled to according to the data protection law.
1. Who is responsible for the processing of my data and who is the data protection officer?
Depending on the offer of the BMW Group entity in France to which you are applying, the data controllers on this platform may be Alphabet France Fleet Management, BMW Distribution, BMW Finance, or BMW France domiciled at 5 rue des Hérons, Montigny-le-Bretonneux CS 40752, (78182) Saint-Quentin-en-Yvelines.
For each entity, you can contact our Data Protection Officers at the above postal address or at the following e-mail addresses:
For Alphabet France: privacy.fr@alphabet.com
For BMW Distribution: dpo_bmwfrance@bmw.fr
For BMW Finances: protectiondesdonnees.finance@bmw.fr
For BMW France: dpo_bmwfrance@bmw.fr
2. Which data categories are used and where do they come from?
The categories of personal data to be processed include in particular your contact data (such as first name, last name, country of your residence, phone number, e-mail address) as well as additional data related to your career/background (e.g. curriculum vitae, qualifications and degrees, professional experience) and your person (e.g. motivational letter, career interests).
Your personal data are usually collected from you directly in context of the application procedure and encoded during the electronic transmission. The data come from the application form to be completed online as well as from the uploaded files.
In addition to the data provided by you in context of your application, we process personal data that we permissibly acquired from publicly accessible sources (e.g. professional networks).
If you have successfully completed the application process and signed your employment contract, certain entities of the BMW Group or parts of BMW Group entities will request additional personal data that is necessary to start work.
According to art. 13 para. 2 lit. e) GDPR (General Data Protection Regulation), we are obliged to point out that you are not obliged to provide us with your data. However, without your data we are not able to include you in the application process. For further information, please see the table under item 9.
3. When, for which purposes and based on which legal basis are my data processed?
To make you the application for different positions are easy as possible, we create a candidate profile when you submit an application for the first time which shall apply to all your applications. Here, you acquire general personal data, such as e.g. your name and your contact data. Those apply to all your applications if they are not updated by you in the meantime.
Apart from the data required for the creation of a candidate profile (first name, last name, country of residence, curriculum vitae, e-mail address and phone number), you are able to provide other personal data on a voluntary basis.
If you have applied and successfully passed the application process, you will be requested to administer additional personal data in your application (e.g. date of birth, place of birth, nationality). This data is required to initiate the preparation of your contract.
We process your personal data on the basis of the provisions of the GDPR (Regulation EU 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data) and the Loi Informatique et Libertés (Law no. 78-17 of January 6, 1978 on information technology, files and freedoms).
Our Group is also committed to complying with binding guidelines.
The processing of your personal data is necessary for the proper execution of the recruitment process within the BMW Group in France, as well as for the drafting of the employment contract. The legal basis that prevails for this purpose is Article 6.1 (b) of the GDPR.
In certain cases, it is also possible to have recourse to the legal basis of consent, in accordance with Article 6.1 (a) of the GDPR. If the processing of your data is based on your consent, you have the right to revoke it at any time.
We may also process your personal data in order to safeguard the legitimate interests of the data controller or a third party (for example, a subsidiary of the BMW Group France entity). Such an interest is invoked in particular when the processing of your data is necessary to verify the absence of criminal offences, or for an internal data exchange within the group for administrative purposes. The applicable legal basis is thus Article 6.1 (f) of the GDPR.
We compare personal data (surname, first name and, only in the case of correspondence, address and place of birth) with selected European and American sanction lists, in accordance with the regulations in force.
Your personal data (surname, first name - only if matched with date of birth and gender) can also be compared with official warnings, economic crime reports and data on politically exposed persons. This ensures that the integrity of applicants meets the requirements of the position. In this respect, the applicable legal basis is legitimate interest, in accordance with Article 6.1 (f) of the GDPR.
In the context of applications for so-called "high-risk" positions, a certificate of good conduct, financial standing, or international and national press reports are also checked. The Head of Compliance determines which functions are to be considered as "high-risk" functions. This applies in particular to management and executive functions in the fields of finance and compliance. In this respect, the applicable legal basis is Article 88.1 of the GDPR.
If special categories of personal data in accordance with Article 9.1 of the GDPR are processed, they will be used, as part of the application procedure, to exercise rights or comply with legal obligations under employment law, social security legislation and social protection.
Furthermore, the processing of particular categories of personal data may be based on your consent, in accordance with Article 9.2 (a) of the GDPR.
We will inform you in advance of any processing of personal data for purposes other than those mentioned above.
For further information, we invite you to consult the table in point 9 below.
4. Who gets my data?
When setting up your candidate profile, you are able to choose to what extent your profile data shall be visible. Depending on the visibility settings chosen by you, the access to your data is granted for the persons in charge of the filling of vacancies. There are two ways to control the access to your data:
- Please consider my candidate profile additionally for other suitable jobs: Your data is used by the BMW AG and its worldwide subsidiaries.
- Please consider my candidate profile additionally for open positions with an active application: Your data is only used for positions to which you apply and is only visible for persons to whose field of responsibility the advertised position is assigned.
Within our company, only those persons and units (e.g. human resources management, department, works council) will receive your personal data who need those data to execute the application procedure or fulfil our contractual and statutory obligations.
If you should send your application to one of our subsidiaries, we will provide your data to the persons and units responsible there so that they are able to continue the application process.
Within our corporate group, your data will be transferred to other affiliates if those affiliates perform data processing tasks for the affiliated companies (e.g. recruiting, IT-services).
In addition, in order to fulfil our legal and contractual obligations and for the purpose of personnel diagnostic test procedures, we partly employ specialized external service providers (e.g. in the fields of IT) who process the applicants’ data on our account and our instruction. We would like to point out, however, that the results of these test procedures only serve to provide additional support in making a recruitment decision – the test results are always combined with other information (e.g. application documents, certificates, interviews) and are by no means the only decisive factor for a decision.
You are at any time able to change the visibility settings in your candidate profile.
5. Which data protection rights can I as an affected person assert?
You are able to request information regarding the data saved concerning yourself. Moreover, you are under certain conditions entitled to demand the correction or deletion of your data. You may also be entitled to demand the limitation of the processing of your data, i.e. to mark the stored personal data with the objective to limit the future processing. Eventually, you may also be entitled to demand the surrender of data provided by yourself in a structured, common and machine-readable format.
You can exercise your right to information at the postal or e-mail addresses mentioned above for each BMW Group entity in France.
For detailed information, please see the following table:
Information |
You are able to inspect your current application processes as well as your profile via your candidate profile (accessible under the following link: https://career5.successfactors.eu/career?company=bmwag&lang=en_EN&site=&loginFlowRequired=true |
Correction |
You are able to edit or withdraw your current application processes via your candidate profile (accessible under the above-mentioned link). You are also able to make amendments in your profile at any time. In case of an application for an apprentice position or in case of other problems with your candidate profile, you are able to contact the applicants’ hotline: recrutement-bmwgroupenfrance@bmw.fr You can exercise your right to information at the postal or e-mail addresses mentioned above for each BMW Group entity in France. |
Deletion |
You are able to withdraw your current application processes or delete your profile via your candidate profile (accessible under the above-mentioned link). Applicable in this context are the deadlines specified in item 6.
You can exercise your right to information at the postal or e-mail addresses mentioned above for each BMW Group entity in France. |
If you feel that we have not responded adequately to your complaints or concerns, you have the right to lodge a complaint with the CNIL (www.cnil.fr).
Right of objection
In case we should use your personal data with your consent for the purpose of the application, you are entitled to at any time and without giving reasons object to this use of your data. If the data processing should not serve for the entering into the employment but to safeguard legitimate interests (see above, item 3), you are entitled to object to this processing for reasons resulting from your particular situation. We will then no longer process your personal data, unless we should be able to prove compelling, worth to be protected reasons for the processing which outweigh your interests, rights and liberties or the processing serves for the assertion, exercising or defense of legal titles/interests.
You can exercise your right to information at the postal or e-mail addresses mentioned above for each BMW Group entity in France.
6. For how long will my data be stored?
Your data relating to an application for a specific job advertisement will be saved and processed in our house for the duration of the ongoing application process. Upon completion of the application procedure (for example in form of a commitment or refusal), the application file will be deleted from the system 24 months upon completion of the application process. You are at any time able to initiate the end of the application procedure by withdrawing from an application.
BMW Talent pool
We gladly support you in finding your desired position in our company. Therefore, we would like to take you up into our talent pool. By means of this pool, we would like to call your attention to positions which are particularly suited to your profile and, if desired, provide you with information regarding career opportunities by e-mail (Hear more about career opportunities).
Depending on your personal visibility settings, your profile may be assigned to an internal talent pool by employees of the human resources department. In this context, you are able to choose whether you want to hear more about career opportunities when you set up your candidate profile. If you do not want to be kept up-to-date about your career opportunities, you will not receive e-mails which you would receive due to a possible assignment to a talent pool.
Candidate profile
Your candidate profile will remain in place as long as active application processes are saved for your profile. Upon completion of all application processes, your last login to the candidate profile will be decisive for the deletion. Your candidate profile will be deleted 24 months after your last login to the candidate profile.
You may at any time remove your profile data via tab “Options”, “Settings” and the button “Delete profile”. In doing so, you will withdraw from all activated and not completed applications, also from accepted application processes. Your profile and any possibly existing applications will then be deleted from the system considering the deadlines mentioned above.
Job notifications
If you want to receive new job posting notifications, you may indicate this when creating your candidate profile (Hear more about career opportunities). As soon as you have set up your candidate profile, you are able to create your individual job notifications under the tab “Options” and “Job Alerts”. In doing so, you define detailed search profiles and are, depending on the self-chosen period of time, notified by e-mail. If you should no longer want to receive those e-mails, you are able to delete your job notifications at any time. If you should have deleted your profile, you will no longer receive any job notifications.
7. Are my data transferred into a third-party country?
In case we should transfer personal data to service providers and affiliates outside the European Economic Area (EEA), the transfer will only be performed if it was confirmed by the EU-Commission that this third party country has an adequate level of data protection (art. 45 para. 1 GDPR) or if other adequate data protection guarantees within the meaning of art. 47 GDPR (e.g. binding company-internal data protection regulations according to art. 46 para. 2 b) or, standard data protection clauses according to art. 46 para. 2 c enacted by the EU-Commission)) exist. If you would like more information about data transfers, please contact the BMW Group France entity concerned, either by post or by e-mail, at the respective addresses mentioned above.
8. To what extent are automated case-by-case decisions or measures regarding profiling performed?
We do not use any purely automated processing processes to reach decisions (including profiling) in context of the application procedure.
9. Further information regarding the collection of data and its purpose
In the following section, we list those data that we process of you in context of the application process:
a) Job market: Here, you are able to search for job vacancies without prior registration. The entering of personal data is not required for this purpose.
b) Registration: the creation of a candidate profile is required for the online application. Personal data (such as name and e-mail address) are acquired in this process in order to enable the approach and the creation of a candidate profile.
c) You are able to create your profile when first applying for a job as well as without any specific application process. You are able to complete your profile as follows:
File attachments |
CV*, additional documents, cover letter |
Person |
Personal details: first name*, last name*, country of residence*, e-mail*, phone number*, address, gender |
Education |
Duration of education, type of educational institution, name of the educational institution, type of degree, main area of education, grade, additional information |
Professional experience |
Start and end date of the deployment, company name, industry, job title, country |
Language skills |
Options from a language catalogue, language level
|
Career interests and mobility |
Desired job type, job status, willingness to travel, willingness to relocate, preferred city |
Future Job Preferences |
Area of interest, preferred job field |
Trigger for the application (source of information) |
Based on this indication, we learn how you took notice of the position. |
d) Application: In case of an application, additional data are acquired depending on the type of application:
Request in case of permanent positions/employments |
Earliest possible start date, salary expectation, possibly first and last name incl. department short code of a recommending person |
Request in case of internship positions |
Preferred start date, type of internship, desired time of internship (in months) |
e) If you should have passed the application process successfully, we will need additional information to initiate the creation of your contract:
Request in case of permanent positions/employments |
Title, date of birth**, place of birth**, country of birth**, nationality**, street**, postal code**, city/town**, social security number**. |
Request in case of student positions |
Date of birth**, place of birth**, country of birth**, nationality**, street**, postal code**, city/town **, previous employment**, social security number**. |
Request in case of apprenticeship and dual studies positions |
Date of birth**, gender**, place of birth, country of birth, nationality, street, ZIP code, city, social security number**. |
All fields marked with an asterisk (*) are mandatory fields. All other fields are voluntary particulars.
All fields marked with two asterisks (**) become mandatory fields as soon as the creation of the future contract is initiated.
For some positions, it is additionally required to answer specific questions, e.g. regarding certain professional competences.
We exclusively collect, process and use your profile and applicant data to handle the application procedure.