Below, we inform you about the processing of your personal data in context of an online application at the BMW Group in Hungary and the rights you are entitled to according to the data protection law.
1. Who is responsible for the processing of my data and who is the data protection officer?
This information applies to all persons interested to take part in BMW recruitment process.
Data controller of your data will be always the legal entity being part of BMW Group (Bayerische Motoren Werke Aktiengesellschaft Petuelring 130 D-80809 München, Germany) which job offer you answered to.
The data controller is the legal person that determines the purposes and means of the processing of your personal data. Each of legal entity acts as separate data controller. Especially in case of the legal entities with registered offices in Hungary there might be:
BMW PLANT |
BMW Manufarcuring Hungary Kft. 4025 Debrecen, Széchenyi utca 31 |
Contact to Data protection officer:
|
Vámosi-Nagy Ernst & Young Law Firm Dr. Csoba Dénes Denes.Csoba@hu.ey.com 1132 Budapest, Váci út 20., Magyarország |
WWW: |
WWW: https://www.bmwgroup.jobs/hu |
BMW NSC |
BMW Hungary Kft. 2220 Vecsés, Lőrinci út 59. |
Contact: |
Klára Hidasi: klara.hidasi@bmw.hu |
Contact to Data protection officer:
|
EY Law – Pelzmann Gall Größ Rechtsanwälte GmbH Dr. Ermano Geuer Wagramer Straße 19/33 1220 Vienna, Austria |
WWW: |
WWW: https://www.bmwgroup.jobs/hu |
This shall also apply if you apply for a job with a German affiliate of the BMW AG.
2. Which data categories are used and where do they come from?
The categories of personal data to be processed include in particular your contact data (such as first name, last name, country of your residence, phone number, e-mail address) as well as additional data related to your career/background (e.g. curriculum vitae (CV), qualifications and degrees, professional experience) and your person (e.g. motivational letter, career interests). This may also include special categories of personal data. All candidates are able to upload documents. However, the above-mentioned documents are neither requested nor copied.
Your personal data are usually collected from you directly in context of the application procedure and encoded during the electronic transmission. The data come from the application form to be completed online as well as from the uploaded files.
In addition to the data provided by you in context of your application, we process personal data that we permissibly acquired from publicly accessible sources (e.g. professional networks).
If you have successfully completed the application process and signed your employment contract, certain BMW Group entities or parts of BMW Group entities will request additional personal data that is necessary to start work.
According to Article 13.2 e) of the GDPR (General Data Protection Regulation), we are obliged to point out that you are not obliged to provide us with your data. However, without your data we are not able to include you in the application process. For further information, please see the table under item 9.
3. When, for which purposes and based on which legal basis are my data processed?
To make you the application for different positions as easy as possible, we create a candidate profile when you submit an application for the first time which shall apply to all your applications. Here, you acquire general personal data, such as e.g. your name and your contact data. Those apply to all your applications if they are not updated by you in the meantime.
Apart from the data required for the creation of a candidate profile (first name, last name, email address and phone number, CV and source of being aware of this position), you are able to provide other personal data on a voluntary basis.
If you have applied and successfully passed the application process, you will be requested to administer additional personal data in your application (e.g. date of birth, place of birth, nationality). This data is required to initiate the preparation of your contract.
We process your personal data based on the provisions of the EU General Data Protection Regulation (GDPR), the Act CXII of 2011 on the Right to Information and Freedom of Information (Info Act) as well as all other relevant laws (e.g. Act I of 2012 on the Hungarian Labour Code (Labour Code), Act CXXV of 2003 on Equal Treatment and the Promotion of Equal Opportunities, etc.). Furthermore, our company has committed itself to binding corporate guidelines.
The data processing serves for the initiation of an employment. The prevailing legal basis for this purpose is Article 6.1 b) of the GDPR in conjunction with Section 10 of the Hungarian Labour Code. Apart from that, it is possible to use consents according to Articles 6.1 a) and Article 7 of the GDPR in conjunction with Section 5 of the Info Act as a permission requirement in terms of the data protection law. If the processing of your data is based on a consent, you shall at any time be entitled to revoke this consent with effect for the future.
In individual cases, we process your data to safeguard legitimate interests of the responsible party (legal basis: GDPR - Article 6 (1) (f)). Such a legitimate interest shall in particular be given if the processing of your data is required to archival purposes (aiming to keep evidences to determine, investigate or defend from any claims in proceedings before the court or public authorities), carrying out compliance checks (e.g. to verify if you are allowed to enter BMW Group properties), conducting internal audits, reporting and other internal procesess within the BMW Group to which the contoller belongs. Where a purpose of processing is required for pursuing a legitimate interest, then we will make available the balancing test of the underlying interests upon a request submitted to us by means of the contact details listed herein above.
In case processing of your data shall be required for the clearing up of criminal offenses (legal basis Article 6.1 f) of the GDPR in conjunction with Section 11 (3) of the Labour Code) you will be presented with separate information notice according to the law.
If special categories of personal data according to Article 9.2 of the GDPR are processed, this shall, in context of the application process, serve for the exercising of rights or fulfilment of legal obligations under the labor law, the social security legislation and the social protection (e.g. when employing a person with a disability, care must be taken to ensure reasonable conditions – according to Section 51 (5) of the Labour Code). This is done based on Article 9.2 b) of the GDPR in conjunction with Section 5 of the Info Act.
Apart from that, the processing of special categories of personal data may be based on a consent according to Article 9.2 a) of the GDPR in conjunction with Section 5 of the Info Act. This may happen in below listed cases
· If you decide to include in your CV or motivational letter, extra personal data ( e.g. your image, interests, special categories of personal data like any information regarding your health, such as disability, or your ethnic origin) on which you do not have a legal obligation to provide. In this case providing your data is voluntary, it is your own initiative and requires your clear consent for its processing. You do not have an obligation to provide us any extra personal data, that are not required by the law and your consent on providing such data is voluntary.
· You may give us separate and voluntary, additional consent, so that your data can be proceed also regarding future recruitment processes by the data controller. You also have an option to consent for being contacted for other open positions in other BMW legal entities.
If we intend to process your personal data for purposes other than those mentioned above, we will inform you in advance.
For further information, please see the table under item 9.
4. Who gets my data?
When setting up your candidate profile, you are able to choose to what extent your profile data shall be visible. Depending on the visibility settings chosen by you, the access to your data is granted for the persons in charge of the filling of vacancies. There are two ways to control the access to your data:
· Please consider my candidate profile additionally for other suitable jobs: Your data is used by the BMW AG and its worldwide subsidiaries.
· Please consider my candidate profile additionally only for open positions with an active application: Your data is only used for positions to which you apply and is only visible for persons to whose field of responsibility the advertised position is assigned.
Within our company, only those persons and bodies (e.g. human resources management department, HR Services, technical department, where you apply) will receive your personal data who need those data to execute the application procedure or fulfil our contractual and statutory obligations.
If you send your application to one of our Hungarian subsidiaries, we will provide your data to the persons and bodies responsible there so that they are able to continue the application process.
We may transfer your data for processing to third parties in a contractual relationship with BMW, provided that they perform data processing tasks in connection with your application (e.g. recruitment, IT services).
Within our corporate group, your data will be transferred to other affiliates if those affiliates perform data processing tasks for the affiliated companies (e.g. recruiting, IT-services).
You are at any time able to change the visibility settings in your candidate profile and you can take back your application at any time.
If an employee offers you a job through a participating BMW company's talent referral program, the referrer will receive the following information from the moment your application is received: first and last name, date of application and application status. This service is provided to us by an external service provider.
5. Which data protection rights can I as an affected person assert?
You are able to request information regarding the data saved concerning yourself. Moreover, you are under certain conditions entitled to demand the correction or deletion of your data. You may also be entitled to demand the limitation of the processing of your data, i.e. to mark the stored personal data with the objective to limit the future processing. Eventually, you may also be entitled to demand the surrender of data provided by yourself in a structured, common and machine-readable format.
You may at any time assert those rights under the above-mentioned address.
Also available for your right to information, correction and deletion is your candidate profile which you can reach under the following link:
https://career5.successfactors.eu/career?company=bmwag&lang=en_EN&site=&loginFlowRequired=true
For detailed information, please see the following table:
Information |
You are able to inspect your current application processes as well as your profile via your candidate profile (accessible under the above-mentioned link). You are alternatively able to assert your right to obtain information under the above-mentioned address. |
Correction |
You are able to edit or withdraw your current application processes via your candidate profile (accessible under the above-mentioned link). You are also able to make amendments in your profile at any time.
You are alternatively able to assert your right to have your data corrected under the above-mentioned address. |
Deletion |
You are able to withdraw your current application processes or delete your profile via your candidate profile (accessible under the above-mentioned link). Applicable in this context are the deadlines specified in item 6.
You are alternatively able to assert your right to have your data deleted under the above-mentioned address. |
Apart from that, you have the right of appeal to a data protection supervisory authority if you think that a processing of the personal data concerning yourself by us violates any applicable data privacy legislation.
The data protection supervisory authority responsible for you is:
Hungarian Authority for Data Protection and Freedom of Information (NAIH) http://naih.hu/;
Address: 1055 Budapest, Falk Miksa utca 9-11.
Postal address: H-1363 Budapest, Pf.: 9
Telephone: +36-1-391-1400
Fax: +36-1-391-1410
E-mail: ugyfelszolgalat@naih.hu)
Your right to withdraw your consent and your right of objection
In case we should use your personal data with your consent for the purpose of the application, you are entitled to at any time and without giving reasons withdraw your consent.
If the data processing should not serve for the entering into the employment but to safeguard legitimate interests (see above, item 3), you are entitled to object to this processing for reasons resulting from your particular situation. We will then no longer process your personal data, unless we should be able to prove compelling, worth to be protected reasons for the processing which outweigh your interests, rights and liberties or the processing serves for the assertion, exercising or defense of legal titles/interests. To assert your objection, you may at any time withdraw your application or delete your candidate profile. Alternatively, you are able to appeal to the above mentioned address (item 1).
6. For how long will my data be stored?
Your data relating to an application for a specific job advertisement will be saved and processed in our house for the duration of the ongoing application process. Upon completion of the application procedure (for example in form of a commitment or refusal), the application file will be deleted from the system after 2 years. You are at any time able to initiate the end of the application procedure by withdrawing from an application.
BMW Talent pool
We gladly support you in finding your desired position in our company. Therefore, we would like to take you up into our talent pool. By means of this pool, we would like to call your attention to positions which are particularly suited to your profile and, if desired, provide you with information regarding career opportunities by e-mail (Hear more about career opportunities).
Depending on your personal visibility settings, your profile may be assigned to an internal talent pool by employees of the human resources department. In this context, you are able to choose whether you want to hear more about career opportunities when you set up your candidate profile. If you do
not want to be kept up-to-date about your career opportunities, you will not receive e-mails which you would receive due to a possible assignment to a talent pool.
Candidate profile
Your candidate profile will remain in place as long as active application processes are saved for your profile. Upon completion of all application processes, your last login to the candidate profile will be decisive for the deletion. Your candidate profile will be deleted 2 years after your first registration.
You may at any time remove your profile data via tab “Options”, “Settings” and the button “Delete profile”. In doing so, you will withdraw from all activated and not completed applications, also from accepted application processes. Your profile and any possibly existing applications will then be deleted from the system considering the deadlines mentioned above.
Job notifications
If you want to receive new job posting notifications, you may indicate this when creating your candidate profile. As soon as you have set up your candidate profile, you are able to create your individual job notifications under the tab “Options” and “Job Alerts”. In doing so, you define detailed search profiles and are, depending on the self-chosen period of time, notified by e-mail. If you should no longer want to receive those e-mails, you are able to delete your job notifications at any time. If you should have deleted your profile, you will no longer receive any job notifications.
Onboarding Platform
If you have successfully completed the application process and signed your employment contract, you will automatically receive access to our onboarding platform. For entry measures in selected companies or parts of companies, additional data will be requested from you (see the section of this information notice listing the possible legal basis of the data processing operations). If you decide to revoke your employment contract during the onboarding process, the data entered through the onboarding platform will be deleted within 30 days after you decide on not to take up your employment.
7. Are my data transferred into a third-party country?
In case we should transfer personal data to service providers and affiliates outside the European Economic Area (EEA), the transfer will only be performed if it was confirmed by the EU-Commission that this third party country has an adequate level of data protection (Article 45.1 of the GDPR) or if other adequate data protection guarantees within the meaning of Article 47 of the GDPR (e.g. binding company-internal data protection regulations according to Article 46.2 b) or, standard data protection clauses according to Article 46.2 c) enacted by the EU-Commission)) exist. Further information regarding binding company-internal data protection regulations and standard data protection clauses are available under the above-mentioned address (item 1).
8. To what extent are automated case-by-case decisions or measures regarding profiling performed?
We do not use any purely automated processing processes to reach decisions (including profiling) in context of the application procedure.
9. Further information regarding the collection of data and its purpose
In the following section, we list those data that we process of you in context of the application process:
a) Job market: Here, you are able to search for job vacancies without prior registration. The entering of personal data is not required for this purpose.
b) Registration: the creation of a candidate profile is required for the online application. Personal data (such as name and e-mail address) are acquired in this process in order to enable the approach and the creation of a candidate profile.
c) You are able to create your profile when first applying for a job as well as without any specific application process. You are able to complete your profile as follows:
File attachments
|
CV*, additional documents, cover letter
Please do not upload copies of official documents (e.g. ID, diploma) – only provide those data which are relevant for your application. |
Person |
Personal details: first name*, last name*, e-mail*, phone number*, gender, source of application* |
Education |
Duration of education, type of educational institution, name of the educational institution, type of degree, main area of education, grade, additional information |
Professional experience |
Start and end date of the deployment, company name, industry, job title, country |
Language skills |
Options from a language catalogue, language level |
Career interests and mobility |
Desired job type, job status, willingness to travel, willingness to relocate, preferred city |
Future Job Preferences |
Area of interest, preferred job field |
Trigger for the application (source of information) |
Based on this indication, we learn how you took notice of the position. |
d) Application: In case of an application, additional data are acquired depending on the type of application:
Request in case of permanent positions/employments |
Earliest possible start date, salary expectation, possibly first and last name incl. department short code of a recommending person |
e) If you should have passed the application process successfully, we will need additional information to initiate the creation of your contract:
Request in case of permanent positions/employments |
salutation*, title*, gender*, First name*, last name*, full name*, email*, phone number*, birth first name*, birth last name*, date of birth**, mother’s first name*, mother’s last name*, nationality*, place of birth*, date of birth*, address*, address type*, zip code*, city*, country*, building*, staircase*, floor*, door*, street name*,type of street*, house number*, postal code**, city/town*, tax ID*, social security number*, pensioner*, emergency contact*, phone number of emergency contact* |
All fields marked with an asterisk (*) are mandatory fields. All other fields are voluntary particulars.
All fields marked with two asterisks (**) become mandatory fields as soon as the creation of the future contract is initiated.
For some positions, it is additionally required to answer specific questions, e.g. regarding certain professional competences.
We exclusively collect, process and use your profile and applicant data to handle the application procedure.