Data Privacy Policy - Candidate and Talent Management Platform
TÜV SÜD AG, Westendstr. 199, 80686 Munich, Germany (“TÜV SÜD AG”) operates a web-based platform for group-wide applicant management for the companies of the globally active TÜV SÜD Group (“TÜV SÜD Group”). The platform enables employees of the TÜV SÜD Group, external applicants and/or recruitment agencies commissioned by them to create an applicant profile and submit applications for vacant positions at participating companies of the TÜV SÜD Group. Based on the information stored in the applicant profile and the details provided in the application, the companies of the TÜV SÜD Group can assess an applicant's suitability for vacant positions at companies of the TÜV SÜD Group. Based on the information stored in the applicant profile, companies within the TÜV SÜD Group may also send the applicant information about vacancies at companies within the TÜV SÜD Group and/or general information about the companies within the TÜV SÜD Group as employers.
TÜV SÜD AG processes personal data in connection with the operation of the web-based platform.
Below you will find information about the controllers of the processing of your personal data in the context of operation of the web-based platform, the application process and employee recruitment, and their data protection officers (DPOs) (Section A) and about your rights regarding processing of your personal data (Section B).
Below you will also find information on the processing of your personal data (Section C).
A. Information about the Controller
I. Controller of the operation of the web-based applicant management platform
1. Name and contact details of the controller
TÜV SÜD AG
Westendstr. 199, 80686 Munich, Germany
Email: [email protected]
Tel: +49 89 5791-0
2. Contact details of the controller’s data protection officer
Data Protection Officer of TÜV SÜD AG
c/o TÜV SÜD AG, Westendstr. 199, 80686 Munich, Germany
[email protected]
II. Controllers of the application process and employee recruitment
1. Details on controllers of the application process and employee recruitment
|
Country/Region |
Name and contact details of the controller |
|
Australia |
Global Risk Consultants (Australia) Pty Ltd |
|
Austria |
TÜV SÜD Landesgesellschaft Österreich GmbH Wiesing, Dorf 104, TÜV SÜD Platz 1, Austria |
|
Bangladesh |
TUV SUD Bangladesh (Pvt.) Ltd. |
|
Belgium
|
TUV SUD Benelux B.V. |
|
Brazil |
TÜV SÜD BRASIL ENGENHARIA |
|
|
TÜV SÜD SFDK Laboratório de Análise de Produtos LTDA |
|
Canada |
TÜV SÜD Canada Inc. 1229 Ringwell Drive, Ontario (ON), CDN-L3Y 8T8 Newmarket |
|
China |
TÜV SÜD China Holding Ltd. Unit 713 7/F East Wing Lakeside 2 BLDG, 10 Science Park West Avenue, Hong Kong Science Park Shatin, Hong Kong |
| TÜV SÜD New Energy Testing (Guangdong) Co., Ltd. No. 63 Chuangpi Rd., Shilou Town, Panyu District, Guangdong Province, VRC-511447 Guangzhou, China |
|
| TÜV SÜD New Energy Vehicle Testing (Jiangsu) Co., Ltd. No.15 Building A, Jintong International Industrial Park, No.8 Xihu Road, Wujin National Hightech Industrial Development Zone, China |
|
| TÜV SÜD Products Testing (Shanghai) Co., Ltd. No. 1999 Du Hui Road, Minhang District, Shanghai, China |
|
| TÜV SÜD SW Rail Transportation Technology (Jiangsu) Co., Ltd. Innovation Industrial Park, No.377 South Wuyi Road, Wujin National Hightech Industrial Development Zone, China |
|
|
Czech Republic |
TÜV SÜD Central Eastern Europe s.r.o. Novodvorská 994/138, Praha 4, PSČ 14221, Czech Republic |
| TÜV SÜD Czech s.r.o. Novodvorská 994, Praha 4, PSČ 14221, Czech Republic |
|
|
Denmark |
TÜV SÜD Danmark ApS Strandvejen 125, DK-2900 Hellerup, Denmark |
|
Estonia |
A-Ülevaatus OÜ |
|
France |
TÜV SÜD France S.A.S. 42, Chemin Moulin Carron, 69130 Ecully, France |
|
Germany |
PIMA-MPU GmbH Sendlinger Str. 24, 80331 Munich, Germany |
| TÜV Hanse GmbH Brackdamm 16, 20537 Hamburg, Germany |
|
| TÜV SÜD Advimo GmbH Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD AG Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD Akademie GmbH Westendstr. 160, 80339 Munich, Germany |
|
| TÜV SÜD Auto Partner GmbH Gutenbergstr. 13, 70771 Leinfelden-Echterdingen, Germany |
|
| TÜV SÜD Auto Service GmbH Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD Battery Testing GmbH Daimlerstraße 15, 85748 Garching, Germany |
|
| TÜV SÜD Business Services GmbH Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD Car Registration & Services GmbH Munich, Rüdesheimer Str. 7, Germany |
|
| TÜV SÜD Customer Engagement and People GmbH Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD Digital Service GmbH Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD Energietechnik GmbH Baden-Württemberg Gottlieb-Daimler-Straße 7, 70794 Filderstadt, Germany |
|
| TÜV SÜD Industrie Service GmbH Westendstraße 199, 80686 Munich, Germany |
|
| TÜV SÜD Life Service GmbH Westendstr. 199, 80686 Munich, Germany |
|
| TÜV SÜD Management Service GmbH Ridlerstr. 57, 80339 Munich, Germany |
|
| TÜV SÜD Pluspunkt GmbH Rüdesheimer Straße 11, 80686 Munich, Germany |
|
| TÜV SÜD Product Service GmbH Ridlerstr. 65, 80339 Munich, Germany |
|
| TÜV SÜD Rail GmbH Barthstr. 16, 80339 Munich, Germany |
|
| TÜV Technische Überwachung Hessen GmbH Robert-Bosch-Straße 16, 64293 Darmstadt, Germany |
|
| Uniscon universal identity control GmbH Ridlerstraße 57 (Newton) 80339 Munich, Germany |
|
|
Hungary |
EMI-TÜV SÜD Minöségügvi és Biztonságtechnikai Korlátolt Felelösségu Társaság 2000 Szentendre, Dózsa Gy. str. 26, Hungary |
|
India |
TUV SUD South Asia Pvt. Ltd. Off. Saki Vihar Road, Saki Naka, Andheri (East), Maharashtra IND-400072 Mumbai, India |
|
Indonesien |
PT. TUV SUD Indonesia Indonesia Stock Exchange Building, Tower I. 8th Floor Suite 806, Jl. Jenderal Sudirman, Kav 52-53, Lot 2, Jakarta Selatan 12190, Indonesia |
|
Italy |
Bytest Srl Via Brandizzo 123, 10088 – Volpiano (TO), Italy |
| P.H. S.r.l. Via Sangallo 29, 10055 – Barberino Tavarnelle (FI), Italy |
|
| TUV Italia Srl Viale Fulvio Testi 280/6, 20126 – Milano (MI), Italy |
|
|
Japan |
TÜV SÜD Japan Ltd. 4-33-4 Nishi-Shinjuku, Shinjuku-ku, 160-0023, Tokyo, Japan |
|
Latvia |
SIA Scantest |
|
Malaysia |
TUV SUD (Malaysia) Sdn Bhd. No. 18, Jalan Astaka U8/82, Bukit Jelutong, 40150 Shah Alam Selangor, Malaysia |
|
Mexico |
TÜV SÜD América de México, S.A. de C.V. Benito Juarez 898 PH, Colonia Centro, San Pedro Garza García, Nuevo León, México |
|
Netherlands |
TÜV SÜD Nederland BV Wiltonstraat 39A, 3905 KW Veenendaal, Netherlands |
|
Oman |
TUV SUD Middle East Co LLC Al Azaiba, P.C. 130, OM-113 Muscat,Oman |
|
Philippines |
TUV SUD PSB Philippines Inc. F. Ortigas Jr. Road, Ortigas Center RP-1605 Pasig City (Manila), Philippines |
|
Poland |
TÜV SÜD Polska Sp. z o.o. Podwale 17, 00-252 Warszawa, Poland |
|
Portugal |
TÜV SÜD Portugal, unipessoal Lda. Avenida da Republica, No 52, 9°, P-1050-196 Lisboa, Portugal |
|
Qatar |
TUV SUD Middle East LLC (Qatar) Al Saad Street P.O. Box, Q-24240 Doha, Qatar |
|
Romania |
TÜV SÜD Romania S.R.L. Calea Victoriei 155, RO- 010073 Bucuresti-1, Romania |
|
Saudi Arabia |
TUV SUD for Safety Engine |
| TUV SUD RHQ Company | |
|
Singapore |
TUV SUD A-Reliance Pte.Lt |
| TÜV SÜD ASIA PACIFIC Pte. Ltd. Singapore, 15 International Business Park, TÜV SÜD @ IBP, Singapore 609937 |
|
| TÜV SÜD PSB Pte. Ltd. 15 International Business Park, TÜV SÜD @ IBP, Singapore 609937 |
|
|
Slovakia |
TÜV SÜD Slovakia s.r.o. Jašíkova 6, 821 03 Bratislava, Slovenská republika |
|
Slowenia |
TÜV SÜD Sava d.o.o. Stoženska ulica 2, 1000 Ljubljana, Slovenia |
|
South Africa |
TUV SUD Inspection Authority (Pty) Ltd Boston Circle, Airport Industria, Cape Town, Western Cape, RSA-7525 Kapstadt, South Africa |
| TUV SUD South Africa (Pty) Ltd Boston Circle, Airport Industria, 7490, Cape Town, South Africa |
|
|
South Korea |
TÜV SÜD Korea Ltd. 29F, Two IFC, 10, Gukjegeumyungro, Yeongdeungpogu, Seoul, 07326, Republic of Korea |
|
Spain |
ATISAE de Castilla y León, S.A. Barranco de los Cascajos, 8, Zona de servicios Arasur, Miranda de Ebro, Burgos, Spain |
| TÜV SÜD AMT, S.A.U. Ronda de Poniente, 4, Tres Cantos, Madrid, Spain |
|
| TÜV SÜD ATISAE S.A.U. Ronda de Poniente, 4, Tres Cantos, Madrid, Spain |
|
| TÜV SÜD Iberia, S.A.U. Ronda de Can Fatjó, 13, Cerdanyola, Barcelona, Spain |
|
|
Sweden |
TÜV SÜD Sverige AB Gustavslundvägen 151C SE-167 51, Bromma, Stockholm, Sweden |
|
Switzerland |
TÜV SÜD Schweiz AG Aargauerstrasse 250, CH-8048 Zürich, Switzerland |
|
Taiwan |
TÜV SÜD Taiwan |
|
Thailand |
TÜV SÜD (Thailand) Ltd, 111 Thailand Science Park Moo 9 Paholyothin Rd., Klong Nueng, Klong Luang, Pathumthani, 10210 Thailand |
|
Turkey |
TÜV SÜD Bursa A.S. |
| TÜV SÜD Teknik Güvenlik ve Kalite Denetim Ticaret Ltd. Sti. (TGK) Ayazağa Mimar Sinan Sokak Seba Ofis Bulvar No:21 D:B Blok, 34396 Sarıyer/İstanbul |
|
|
UK |
Global Risk Consultants Ltd. Octagon House, Concorde Way, Fareham PO15 5RL, UK |
| TUV SUD BABT Unlimited Octagon House, Concorde Way, Fareham PO15 5RL, UK |
|
| TUV SUD Ltd. Napier Building, Scottish Enterprise Technology Park, East Kilbride G75 0QF, UK |
|
| TUV SUD Services (UK) Ltd. Octagon House, Concorde Way, Fareham PO15 5RL, UK |
|
|
United Arab Emirates |
TÜV SÜD Middle East LLC Office 504, 5th Floor, Arab Tower, Hamdan Street, 45117, Abu Dhabi, Abu Dhabi |
|
USA |
ABIIC RRG |
| ARISE Inc. 2711 Centerville Road, Suite 400, Delaware (DE), USA-19808 Wilmington |
|
| Global Risk Consultants Corp. 1209 Orange Street, Delaware (DE), USA-19801 Wilmington |
|
| Green Bldg Education Syst | |
| Sustainable Inv. Group | |
| TÜV SÜD America Inc. State Street 84, Massachusetts USA-02109 Boston |
|
|
Vietnam |
TUV SUD Vietnam Co., Ltd. LOT III-26, 19/5A Street, Industry Group III , Tan Binh Industrial Park, Tay Thanh Ward, Tan Phu District, HO CHI MINH City, Vietnam |
B. Information on the rights of data subjects
As data subject, you have various rights in relation to the processing of your personal data:
- Right of access (Article 15 of the General Data Protection Regulation)
- Right to rectification (Article 16 of the General Data Protection Regulation)
- Right to erasure (“right to be forgotten”) (Article 17 of the General Data Protection Regulation)
- Right to restriction of processing (Article 18 of the General Data Protection Regulation)
- Right to data portability (Article 20 of the General Data Protection Regulation)
- Right to object (Article 21 of the General Data Protection Regulation)
- Right to withdraw consent (Article 7 paragraph 3 of the General Data Protection Regulation)
- Right to lodge a complaint with a supervisory authority (Article 57 paragraph 1 point f of the General Data Protection Regulation)
You may contact our data protection officer (Section A.III.) for the purpose of exercising your rights.
To exercise your rights, you can contact our Data Protection Officer (Section A.I.2.).
Information on any specific modalities and mechanisms that facilitate the exercise of your rights, in particular your rights to data portability and objection, can be found in the information on the processing of personal data in Section C of this Privacy Policy.
Below you will find more detailed information on your rights regarding the processing of your personal data:
I. Right of access
As a data subject, you have a right to obtain access and information under the conditions provided in Article 15 of the General Data Protection Regulation.
This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15 paragraph 1 of the General Data Protection Regulation).
You can find the full extent of your right to access and information in Article 15 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2513-1-1.
II. Right to rectification
As a data subject, you have the right to rectification under the conditions provided in Article 16 of the General Data Protection Regulation.
This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.
You can find the full extent of your right to rectification in Article 16 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2599-1-1.
III. Right to erasure (“right to be forgotten”)
As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions provided in Article 17 of the General Data Protection Regulation.
This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Article 17 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17 paragraph 1 of the General Data Protection Regulation).
If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Article 17 paragraph 2 of the General Data Protection Regulation).
The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Article 17 paragraph 3 of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (b) and (e) of Article 17 paragraph 3 of the General Data Protection Regulation).
You can find the full extent of your right to erasure (“right to be forgotten”) in Article 17 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2606-1-1.
IV. Right to restriction of processing
As a data subject, you have a right to restriction of processing under the conditions provided in Article 18 of the General Data Protection Regulation.
This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Article 18 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (point (a) of Article 18 paragraph 1 of the General Data Protection Regulation).
Restriction means that stored personal data are marked with the goal of restricting their future processing (Article 4 paragraph 3 of the General Data Protection Regulation).
You can find the full extent of your right to restriction of processing in Article 18 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2700-1-1.
V. Right to data portability
As a data subject, you have a right to data portability under the conditions provided in Article 20 of the General Data Protection Regulation.
This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation and the processing is carried out by automated means (Article 20 paragraph 1 of the General Data Protection Regulation).
You can find information as to whether an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.
In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).
You can find the full extent of your right to data portability in Article 20 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2753-1-1.
VI. Right to object
As a data subject, you have a right to object under the conditions provided in Article 21 of the General Data Protection Regulation.
At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.
More detailed information on this is given below:
1. Right to object on grounds relating to the particular situation of the data subject
As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6 paragraph 1, including profiling based on those provisions.
You can find information as to whether an instance of processing is based on point (e) or (f) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.
In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2803-1-1.
2. Right to object to direct marketing
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section C of this Data Protection Information.
If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.
You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2803-1-1.
VII. Right to withdraw consent
You can find information as to whether an instance of processing is based on point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.
VIII. Right to lodge a complaint with a supervisory authority
As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in point (f) of Article 57 paragraph 1 of the General Data Protection Regulation.
The supervisory authority responsible for TÜV SÜD AG is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
E-Mail: [email protected]
Telefon: +49 981 180093-0
Fax: +49 981 180093-800
Website: www.lda.bayern.de
C. Information on the processing of personal data
Operation of the web-based platform and realisation of the application process and employee recruitment involve the processing of various personal data for various purposes.
Insofar as we, as controller, alone or jointly with others, determine the purposes and means of the processing of personal data, you will find information below in particular on
- the personal data or categories of personal data concerned,
- the purposes for which the personal data are intended to be processed,
- the legal basis for the processing and, where the processing is based on point (f) of Article 6 paragraph 1 of the General Data Protection Regulation, the legitimate interests pursued by us or by a third Party,
- the recipients or categories of recipients of the personal data, if any,
- where applicable, the fact that we intend to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the EU Commission, or in the case of transfers referred to in Article 46 or 47 of the General Data Protection Regulation, or the second subparagraph of Article 49 paragraph 1 of the General Data Protection Regulation, reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available,
- the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period,
If we collect your personal data from you as the data subject, you will also receive information below as to whether the provision of the personal data is required by law or contract or is necessary for entering into a contract, whether you are obligated to provide the personal data, and what the potential consequences of not providing it would be.
If we do not collect personal data from you as the data subject, you will also receive information below as to the source of the personal data and, if applicable, whether it comes from publicly accessible sources.
I. Operation of the web-based applicant management platform under the responsibility of TÜV SÜD AG
In its function as controller responsible for the technical operation of the web-based applicant management platform and with the purpose of ensuring the security of the IT infrastructure used in providing this platform TÜV SÜD AG processes personal data.
Data included in applications submitted via the platform are processed to transfer these applications to the relevant companies of the TÜV SÜD Group. The relevant companies then carry out the application process under their own individual responsibility, focusing on reviewing applications, establishing contacts with candidates and carrying out interviews to assess and select suitable applicants. For this purpose, we grant the companies of the TÜV SÜD Group the necessary extent of access to the platform.
We process data saved in applicant profiles based on your consent to provide these applicant profiles to the companies of the TÜV SÜD Group for independent employee recruitment under their own responsibility. The companies of the TÜV SÜD Group can also use the information provided to email you information about vacancies at companies of the TÜV SÜD Group and/or general information about the companies of the TÜV SÜD Group as employers. For this purpose, we grant the companies of the TÜV SÜD Group the necessary extent of access to the platform.
Processing of your personal data for operation of the web-based applicant management platform is carried out under the sole responsibility of TÜV SÜD AG (controller) (see Section A.I.).
You can find more details below:
1. Details on the personal data processed
|
Categories of personal data processed |
Personal data included in the categories |
Sources of the data |
Obligation to provide the data |
Storage period |
|
Protocol data generated for technical reasons whenever the platform is accessed via the hypertext transfer protocol (secure) (HTTP(S)) |
IP address, type and version of your Internet browser, the operating system used, the page you have accessed, the page you had visited before (referrer URL), date and time of page access, received data and cookie. |
User of the platform as data subject |
Data provision is not a legal requirement or a requirement necessary to enter a contract. There is no obligation to provide the data. |
The data will be stored in server log files in a form that allows identification of the data subjects for no longer than 7 days unless there is a security incident (e.g. a DDoS attack).
|
|
Login data which you need to log into the platform (hereinafter referred to as “login data”) |
User name, password |
User of the platform as data subject |
Data provision is not a legal requirement or a requirement necessary to enter a contract. There is no obligation to provide the data.
|
The data will be stored in accordance with the data subject's consent for a period of 24 months from the last login on the platform. |
|
Data uploaded to applicant profiles on the platform by ap-plicants themselves or by a personnel service provider commissioned by applicants |
Basic personal data, address; education, professional experience and other application-relevant information, certificates and other documents and information that you upload to your applicant Profile |
Applicant as data subject, or personnel service provider commissioned by the applicant. Employees of companies of the TÜV SÜD Group can voluntarily use the option of automatically importing the following employee master data from the HR management system of the respective company of the TÜV SÜD Group to the applicant profile on the platform: name, first name, user name, email address, personnel number, organisational unit, line manager. |
Provision of these data is voluntary. |
The data will be saved in accordance with the data subject's consent for a period of 24 months from the last login on the platform. |
|
Data submitted to the platform in an application by applicants themselves or by a personnel service provider commissioned by applicants |
Basic personal data, address; education, professional experience, content of a cover letter where applicable, other application-relevant information, certificates and additional documents and any other information requested within the scope of the application process. |
Applicant as data subject, or personnel service provider commissioned by the applicant |
Provision of these data is voluntary. However, if you do not provide the relevant information, completion of the application process and, where applicable, employment may not be possible. |
For the duration of the application process, the data will be saved on the platform under the respective company of the TÜV SÜD Group. After completion of the application process, data may be stored on the platform beyond the period of the application process as evidence to be used in the establishment, exercise or defence of legal claims, where applicable, or to comply with legal retention periods.
As legal requirements differ from country to country, the relevant storage periods differ depending on the controller. Details on the storage periods of various controllers can be found in Section C.II.4. |
2. Details on the processing of the personal data
|
Purposes of the processing of the personal data |
Categories of personal data processed |
Legal basis and, where applicable, legitimate interests |
Recipients |
|
Provision of the publicly accessible area of the platform. |
HTTP data |
The processing is necessary to ensure the legitimate interests of the controller pursuant to Art. 6 (1) lit. f GDPR and there are no overriding interests or fundamental rights and freedoms of the data subject.
|
Platform providers |
|
Safeguarding the security of the IT infrastructure used for the provision of the platform, to identify, eliminate and document evidence of incidents (e.g. DDoS attacks) |
HTTP data |
The processing is necessary to ensure the legitimate interests of the controller pursuant to Art. 6 (1) lit. f GDPR and there are no overriding interests or fundamental rights and freedoms of the data subject.
|
Platform providers |
|
Anonymisation of the data processed on the platform for anonymised evaluation and reporting of the data processed on the platform to improve candidate and applicant management processes. |
application data |
The processing is necessary to ensure the legitimate interests of the controller pursuant to Art. 6 (1) lit. f GDPR and there are no overriding interests or fundamental rights and freedoms of the data subject.
|
|
|
Provision of the area of the platform accessible only to registered users for use by applicants and personnel service providers commissioned by applicants, for the management of applicant profiles and applications.
|
HTTP data |
The processing is necessary to ensure the legitimate interests of the controller pursuant to Art. 6 (1) lit. f GDPR and there are no overriding interests or fundamental rights and freedoms of the data subject.
|
Platform administrators of TÜV SÜD AG, platform Providers |
|
Provision of applicant profiles and application documents to the relevant companies in the TÜV SÜD Group. The relevant companies will then carry out the application process under their own individual responsibility, focusing on reviewing applications, establishing contacts with candidates and carrying out interviews to assess and select suitable applicants. |
applicant profile data |
Consent pursuant to Art. 6 (1) lit. a GDPR and, insofar as special categories of personal data are concerned, pursuant to Art 9 (2) lit. a GDPR.
|
The companies of the TÜV SÜD Group relevant for the respective job advertisement |
|
Provision of applicant profiles to companies of the TÜV SÜD Group for independent employee recruitment.
|
applicant profile data |
Consent pursuant to Art. 6 (1) lit. a GDPR and, insofar as special categories of personal data are concerned, pursuant to Art 9 (2) lit. a GDPR.
|
All companies of the TÜV SÜD Group participating in the platform |
|
Employee referral program: |
Name, Email address |
Consent pursuant to Art. 6 (1) lit. a GDPR |
All companies of the TÜV SÜD Group participating in the platform |
No automated decision-making, including profiling (according to Art. 22 GDPR), takes place.
3. Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organization
|
Recipient |
Recipient’s role |
Recipient’s Location |
Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisation |
|
Platform administrators of TÜV SÜD AG |
Internal roles at TÜV SÜD AG, including the responsibility of technical administration of the platform |
EU |
- |
|
Unternehmen der TÜV SÜD Gruppe |
Responsible for application procedures and employee recruitment for positions at the respective company. |
(see section A.II.) |
Standard contractual clauses (Art. 46 para. 2 (c) and (d) GDPR) |
|
Platform providers (SAP SuccessFactors) |
Processor responsible for the technical operation of the platform and for providing support with its technical administration |
EU |
- |
|
TÜV SÜD Customer Engagement and People GmbH |
Processor supporting the entire recruitment process of the TÜV SÜD Group |
EU |
- |
|
TÜV SÜD Business Services GmbH |
Processor for hosting, operating, and maintaining the recruitment platform |
EU |
- |
|
Ajinga |
Processors only for the application process in China |
China |
- |
II. Application process and employee recruitment under the responsibility of the respective company of the TÜV SÜD Group
Based on your consent, we will provide your applicant profiles and application documents to the companies of the TÜV SÜD Group participating in the platform to enable them to conduct the application process and employee recruitment. The companies of the TÜV SÜD Group will process the information provided within the scope of the application process, focusing on reviewing applications, establishing contacts to candidates and carrying out interviews to assess and select suitable applicants. The companies of the TÜV SÜD Group process the information provided within the scope of employee recruitment in order to select applicants for vacancies and provide them with information about vacancies at companies of the TÜV SÜD Group and/or with general information about the companies of the TÜV SÜD Group as employers.
Processing of your personal data for the purposes of the application process and employee recruitment will be carried out by the respective company of the TÜV SÜD Group, acting under their own responsibility, i.e. as controller (see Section A.II.).
You can find more details below:
1. Details on the personal data processed
|
Categories of personal data processed |
Personal data included in the categories |
Sources of the data |
Storage period |
|
applicant profile data |
Basic personal data, address, education, professional experience and other application-relevant information, certificates and other documents and information that you upload to your applicant profile. |
Applicant as data subject, or personnel service provider commissioned by the applicant TÜV SÜD AG as responsible for the operation of the web-based applicant management platform. |
These data will be saved in accordance with the data subject's consent for a period of 24 months from the last login on the platform |
|
application data |
Basic personal data, address; education, professional experience, content of a cover letter where applicable, other application-relevant information, certificates and additional documents and any other information requested within the scope of the application process. |
TÜV SÜD AG as responsible for the operation of the web-based applicant management platform |
The data will be stored on the platform for the period of the application process at the respective company of the TÜV SÜD Group and may be stored on the platform beyond the period of the application process for evidentiary purposes for the possible assertion, exercise or defense of legal claims or storage for the fulfilment of statutory retention obligations.
|
|
Data collected within the scope of the application process at the relevant company of the TÜV SÜD Group (hereinafter referred to as “evaluation data”) |
Contents of test or exam notes, content of correspondence with the candidate, impressions from job interviews, feedback and Evaluation |
The data comes from the candidate or is generated independently by the employees involved in the application process. |
The data will be stored on the platform for the period of the application process at the respective company of the TÜV SÜD Group and may be stored on the platform beyond the period of the application process for evidentiary purposes for the possible assertion, exercise or defense of legal claims or storage for the fulfilment of statutory retention obligations.
As legal requirements differ from country to country, the relevant retention periods differ depending on the controller Details on the storage periods of various controllers can be found in Section C.II.4. |
You are not legally or contractually obligated to provide your data. However, if you do not provide the required personal data, we may not be able to consider you for the position.
2. Details on the processing of the personal data
|
Purposes of the processing of the personal data |
Categories of personal data processed |
Legal basis and, where applicable, legitimate interests |
Recipients |
|
Conducting the application process, in particular reviewing applications, establishing contact with candidates and conducting interviews to evaluate and select suitable candidates. |
applicant profile data |
The processing is necessary for the performance of a contract or a precontractual measure pursuant to Art. 6 (1) lit. b GDPR. |
HR department, Manager responsible for the respective vacancy, Workers' representatives, Disabled representative |
|
Employee recruitment, in particular selection of suitable applicants for vacancies and emailing information about vacancies at companies of the TÜV SÜD Group and/or general information about the companies of the TÜV SÜD Group as employers. |
applicant profile data |
Consent pursuant to Art. 6 (1) lit. a GDPR and, insofar as special categories of personal data are concerned, pursuant to Art 9 (2) lit. a GDPR. |
HR department, Manager responsible for the respective vacancy |
|
Retention of documents as evidence used in the establishment, exercise or defence of legal claims or to comply with legal retention periods.
|
application data |
The legal basis for storage for evidence purposes is necessary to ensure the legitimate interests of the controller pursuant to Art. 6 (1) lit. f GDPR, and no interests or fundamental rights and freedoms of the data subject prevail.
Our legitimate interest is assertion, exercise, or defense of legal claims.
|
- |
|
Preparation of anonymised and aggregated reports to be following legal reporting obligations. |
application data
|
The legal basis for the creation of reports to fulfill the legal reporting obligations of the EU or EU member states is the fulfillment of a legal obligation (Art. 6 (1) lit. c GDPR).
|
- |
No automated decision-making, including profiling (according to Art. 22 GDPR), takes place.
3. Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organisation
|
Recipient |
Recipient’s role |
Recipient’s Location |
Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisation |
|
Manager responsible for the respective vacancy |
Part of the respective Controller |
(Same as respective Controller) |
Standard contractual clauses (Art. 46 para. 2 (c) and (d) GDPR) |
|
HR department |
Part of the respective Controller |
(Same as respective Controller) |
Standard contractual clauses (Art. 46 para. 2 (c) and (d) GDPR) |
|
Workers' representatives |
Part of the respective Controller |
(Same as respective Controller) |
Standard contractual clauses (Art. 46 para. 2 (c) and (d) GDPR) |
|
Disabled representatives |
Part of the respective Controller |
(Same as respective Controller) |
Standard contractual clauses (Art. 46 para. 2 (c) and (d) GDPR) |
4. Details on the storage periods of application data
In case of a successful application, the application data will be imported to the personnel file of the employer, i.e. the respective company of the TÜV SÜD Group, where it will be stored according to legal requirements beyond the period of the application process. Detailed information on the storing of data in personnel files can be found in the special Data Protection Information for Employees of the respective company of the TÜV SÜD Group.
If candidates withdraw their applications or if applications are not successful, data may be stored beyond the end of the application process as evidence to be used for establishment, exercise or defence of legal claims or to comply with legal retention periods. As legal requirements differ from country to country, the relevant retention periods differ depending on the controller. Below you can find detailed information on this aspect:
|
Countries |
Storage period for applicant data |
|
Australia |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Austria |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Bangladesh |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Belgium |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Brazil |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Canada |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
China |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Czech Republic |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Denmark |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Estonia |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
France |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Germany |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Hungary |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
India |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Indonesia |
365 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Italy |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Japan |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Latvia |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Malaysia |
365 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Mexico |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Netherlands |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Oman |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Philippines |
365 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Poland |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Portugal |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Qatar |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Romania |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Saudi Arabia |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Singapore |
365 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Slovakia |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Slovenia |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
South Africa |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
South Korea |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Spain |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Sweden |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Switzerland |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Taiwan |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Thailand |
365 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Turkey |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
UK |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
United Arab Emirates |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
USA |
180 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
|
Vietnam |
365 days after completion, withdrawal, or rejection of the application (notification of the applicant regarding rejection or after withdrawal of the application by the applicant) |
D. Status and changes to this data privacy policy
It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.
Data Privacy Policy - Candidate and Talent Management Platform TalenTS (plattform to be switched off beginning of 2026)
TÜV SÜD AG, Westendstr. 199, 80686 Munich, Germany (“TÜV SÜD AG“) operates a web-based corporate platform for group-wide candidate and talent management at the companies of the globally operating TÜV SÜD Group (“TÜV SÜD Group”). The platform enables employees of the TÜV SÜD Group, external talents and/or personnel service providers commissioned by them to create talent profiles and submit applications for vacancies to the companies of the TÜV SÜD Group participating in the platform. The information saved in the talent profiles and included in applications allows the companies of the TÜV SÜD Group to assess whether a talent is suitable for a vacancy at a Company of the TÜV SÜD Group. The companies of the TÜV SÜD Group can also use the information saved in the talent profiles to email talents information about vacancies at LEs of the TÜV SÜD Group and/or general information about the companies of the TÜV SÜD Group as employers.
TÜV SÜD AG processes personal data in connection with the operation of the web-based platform.
Below you will find information about the controllers of the processing of your personal data in the context of operation of the web-based platform, the application process and employee recruitment, and their data protection officers (DPOs) (Section A) and about your rights regarding processing of your personal data (Section B).
Below you will also find information on the processing of your personal data (Section C).
A. Information on the Controller
I. Controller of the operation of the web-based candidate and talent management platform
1. Name and contact details of the controller
TÜV SÜD AG
Westendstr. 199, 80686 München, Federal Republic of Germany
[email protected]
+49 89 5791-0
2. Contact details of the controller’s data protection officer
Data Protection Officer of TÜV SÜD AG
c/o TÜV SÜD AG, Westendstr. 199, 80686 München, Federal Republic of Germany
[email protected]
II. Controllers of the application process and employee recruitment
1. Details on controllers of the application process and employee recruitment
|
Name and contact details of the controller |
Name and contact details of representatives in the EU for controllers outside the EU |
Contact Details of the Data Protection Officer (DPO) |
Adequacy decision or suitable and/or appropriate safeguards in case of transfer to third countries for controllers outside the EU |
|
TÜV SÜD Benelux bvba |
- |
Didier Msika (GDPR Contact) |
- |
|
TÜV SÜD Benelux VZW |
- | Didier Msika (GDPR Contact) |
- |
|
Global Risk Consultores (Brasil) Ltda., |
- |
Juaire Maureen [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Brasil Engenharia e Consultoria Ltda.
|
- |
Alice Maia |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD SFDK Laboratório de Análise de Produtos Eireli |
- |
Alice Maia |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Canada Inc. |
- |
Juaire Maureen [email protected] |
A Commission Decision on the adequate protection of personal data is available for Canada: EUR-Lex - 02002D0002-20161217 - EN - EUR-Lex (europa.eu). |
|
Changzhou Jin Biao Rail Transportation Technical Service Co., Ltd., |
- | - |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
Global Risk Consultants (Guangzhou) Co. Ltd., |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TUV SUD Certification and Testing (China) Co., Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD New Energy Vehicle Testing (Guangdong) Co., Ltd., |
- | - |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD New Energy Vehicle Testing (Jiangsu) Co., Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Products Testing (Qingdao) Co., Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Products Testing (Shanghai) Co., Ltd., |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD SW Rail Transportation Technology (Jiangsu) Co., Ltd., Changzhou |
- | - |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Central Eastern Europe s.r.o. |
- |
- |
- |
|
TÜV SÜD Czech s.r.o. |
- |
- |
- |
|
TÜV SÜD Danmark ApS |
- | - | - |
|
TÜV SÜD France SAS |
- |
Didier Msika (GDPR Contact) |
- |
|
ARMAT GmbH & Co. KG |
- |
- |
- |
|
ARMAT Südwest GmbH & Co. KG |
- |
- |
- |
|
PIMA-MPU GmbH |
- |
Matthias Bohland |
- |
|
TÜV Hanse GmbH TÜV SÜD Gruppe |
- |
Matthias Bohland |
- |
|
TÜV SÜD Advimo GmbH |
- |
Memo Arikan |
- |
|
TÜV SÜD Akademie GmbH |
- |
Rainer Seidlitz |
- |
|
TÜV SÜD Aktiengesellschaft |
- |
Rainer Seidlitz |
- |
|
TÜV SÜD Auto Partner GmbH, |
- |
Matthias Bohland |
- |
|
TÜV SÜD Auto Service GmbH |
- |
Matthias Bohland |
- |
|
TÜV SÜD Battery Testing GmbH |
- |
Memo Arikan |
- |
|
TÜV SÜD Business Services GmbH |
- |
Rainer Seidlitz |
- |
|
TÜV SÜD BUV GmbH, München |
- | Rainer Seidlitz [email protected] |
- |
|
TÜV SÜD Car Registration & Services GmbH |
- |
Matthias Bohland |
- |
|
TÜV SÜD Chemie Service GmbH |
- |
Memo Arikan |
- |
|
TÜV SÜD Digital Service GmbH |
- |
Rainer Seidlitz |
- |
|
TÜV SÜD Energietechnik GmbH Baden-Württemberg |
- |
Memo Arikan |
- |
|
TÜV SÜD Industrie Service GmbH |
- |
Hans Schnegg |
- |
|
TÜV SÜD Life Service GmbH |
- |
Matthias Bohland |
- |
|
TÜV SÜD Management Service GmbH |
- |
Rainer Seidlitz |
- |
|
TÜV SÜD Pluspunkt GmbH |
- |
Matthias Bohland |
- |
|
TÜV SÜD Product Service GmbH |
- |
Memo Arikan [email protected] |
- |
|
TÜV SÜD Rail GmbH |
- |
Memo Arikan |
- |
|
TÜV SÜD Umweltgutachter GmbH |
- |
- |
- |
|
TUV SUD Asia Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TUV SUD China Holding Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TUV SUD Hong Kong Ltd |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
ÉMI-TÜV SÜD Kft. |
- | - |
- |
|
Magyar TÜV SÜD Müszaki Szakértöi Korlátolt Felelösségü Társaság, |
- | - | - |
|
TÜV SÜD South Asia |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
PT. PSB Intellis |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
PT. TUV SUD Indo Lab |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
PT. TUV SUD Indonesia Indonesia Stock Exchange Building Tower I, Jalan J Kaveling 52-53, Lot 2 RI-121900 Jakarta Selatan Republic of Indonesia [email protected] Tel +62 21 29035015 |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
TÜV Italia SRL |
- |
- |
- |
|
Fleet Logistics Italia S.r.l. |
- |
- |
- |
|
P.H. S.r.l. |
- |
- |
- |
|
TÜV Italia S.r.l. |
- |
- |
- |
|
TÜV SÜD Japan Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
TÜV SÜD Malaysia |
- |
Dr. Boon Keet KER Danny [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
TÜV SÜD Nederland B.V. |
- | - | - |
|
TÜV SÜD PSB PHILIPPINES INC. |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR) |
|
TÜV SÜD PORTUGAL, Lda |
- |
- |
- |
|
TÜV SÜD Asia Pacific Pte. Ltd. |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre - contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD PSB Pte. Ltd. |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre - contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Korea Ltd. |
- | - |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
ATISAE Catalunya, S.A.U. |
- |
- |
- |
|
ATISAE de Castilla y León, S.A.U., |
- |
- |
- |
|
ATISAE Trauxia ITV, |
- |
- |
- |
|
ITV de Levante, S.A. |
- |
- |
- |
|
TÜV SÜD AMT, S.A.U. |
- |
- |
- |
|
TÜV SÜD ATISAE, |
- |
- |
- |
|
TÜV SÜD Iberia, |
- |
- |
- |
|
U.T.E. TÜV SÜD Nobo, |
- |
- |
- |
|
TÜV SÜD Schweiz AG |
- | - |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Thailand |
- |
Dr. Boon Keet KER Danny |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
Dunbar & Boardman Partnership Ltd., |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
Fleet Logistics UK Ltd., |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
Global Risk Consultants Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
Nuclear Technologies plc., Gloucester |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD (UK) Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD BABT |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TUV SUD Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TUV SUD Services (UK) Ltd. |
- |
- |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
ARISE Boiler Inspection and Insurance Company (ABIIC) Risk Retention Group c/o |
- |
Juaire Maureen [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
ARISE Inc. |
- |
Juaire Maureen [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of pre- contractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
Global Risk Consultants Corp. |
- | Juaire Maureen [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
National Association of Boiler and Pressure Vessel Owners and Operators (NABO), Inc. |
- | Juaire Maureen [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD America Inc. |
- | Juaire Maureen [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD Việt Nam |
- | Dr. Boon Keet KER Danny [email protected] |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). |
|
TÜV SÜD DOMUTECH A/S |
Kim Hansen |
||
|
Global Risk Consultants Corp., |
Juaire Maureen |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). | |
|
Ruby Canyon Environmental Inc. |
Juaire Maureen |
Explicit consent of the data subject to the proposed data transfer (Art. 49 (1) lit. a GDPR). Necessity of the data transfer for the implementation of precontractual measures taken at the data subject's request (Art. 49 (1) lit. b GDPR). | |
|
TÜV SÜD Customer Engagement and People GmbH |
Rainer Seidlitz |
B. Information on the rights of data subjects
As data subject, you have various rights in relation to the processing of your personal data:
- Right of access (Article 15 of the General Data Protection Regulation)
- Right to rectification (Article 16 of the General Data Protection Regulation)
- Right to erasure (“right to be forgotten”) (Article 17 of the General Data Protection Regulation)
- Right to restriction of processing (Article 18 of the General Data Protection Regulation)
- Right to data portability (Article 20 of the General Data Protection Regulation)
- Right to object (Article 21 of the General Data Protection Regulation)
- Right to withdraw consent (Article 7 paragraph 3 of the General Data Protection Regulation)
- Right to lodge a complaint with a supervisory authority (Article 57 paragraph 1 point f of the General Data Protection Regulation)
You may contact our data protection officer (Section A.III.) for the purpose of exercising your rights.
Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section C of this Data Protection Information.
Below you find more detailed information on your rights with regard to the processing of your personal data:
I. Right of access
This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15 paragraph 1 of the General Data Protection Regulation).
You can find the full extent of your right to access and information in Article 15 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2513-1-1.
II. Right to rectification
This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.
You can find the full extent of your right to rectification in Article 16 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2599-1-1.
III. Right to erasure (“right to be forgotten”)
This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Article 17 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17 paragraph 1 of the General Data Protection Regulation).
If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Article 17 paragraph 2 of the General Data Protection Regulation).
The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Article 17 paragraph 3 of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (b) and (e) of Article 17 paragraph 3 of the General Data Protection Regulation).
You can find the full extent of your right to erasure (“right to be forgotten”) in Article 17 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2606-1-1.
IV. Right to restriction of processing
This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Article 18 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (point (a) of Article 18 paragraph 1 of the General Data Protection Regulation).
Restriction means that stored personal data are marked with the goal of restricting their future processing (Article 4 paragraph 3 of the General Data Protection Regulation).
You can find the full extent of your right to restriction of processing in Article 18 of the GDPR, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2700-1-1.
V. Right to data portability
This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation and the processing is carried out by automated means (Article 20 paragraph 1 of the General Data Protection Regulation).
You can find information as to whether an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.
In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).
You can find the full extent of your right to data portability in Article 20 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2753-1-1.
VI. Right to object
At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.
More detailed information on this is given below:
1. Right to object on grounds relating to the particular situation of the data subject
As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6 paragraph 1, including profiling based on those provisions.
You can find information as to whether an instance of processing is based on point (e) or (f) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.
In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2803-1-1.
2. Right to object to direct marketing
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section C of this Data Protection Information.
If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.
You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#d1e2803-1-1.
VII. Right to withdraw consent
You can find information as to whether an instance of processing is based on point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.
VIII. Right to lodge a complaint with a supervisory authority
The supervisory authority responsible for TÜV SÜD AG is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18, 91522 Ansbach, Federal Republic of Germany
E-Mail: [email protected]
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
C. Information on the processing of personal data
Operation of the web-based platform and realisation of the application process and employee recruitment involve the processing of various personal data for various purposes.
Insofar as we, as controller, alone or jointly with others, determine the purposes and means of the processing of personal data, you will find information below in particular on
- the personal data or categories of personal data concerned,
- the purposes for which the personal data are intended to be processed,
- the legal basis for the processing and, where the processing is based on point (f) of Article 6 paragraph 1 of the General Data Protection Regulation, the legitimate interests pursued by us or by a third Party,
- the recipients or categories of recipients of the personal data, if any,
- where applicable, the fact that we intend to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the EU Commission, or in the case of transfers referred to in Article 46 or 47 of the General Data Protection Regulation, or the second subparagraph of Article 49 paragraph 1 of the General Data Protection Regulation, reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available,
- the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period,
Where we obtain your personal data from you as the data subject, you also find below information on whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failure to provide such data.
Where we do not obtain personal data from you as the data subject, you will also find below information on from which source the personal data originate, and if applicable, whether it came from publicly accessible sources.
Below you will find more detailed information on this:
I. Operation of the web-based candidate and talent management platform under the responsibility of TÜV SÜD AG (Controller)
In its function as controller responsible for the technical operation of the web-based candidate and talent-management platform and with the purpose of ensuring the security of the IT infrastructure used in providing this platform TÜV SÜD AG processes personal data.
Data included in applications submitted via the platform are processed in order to transfer these applications to the relevant companies of the TÜV SÜD Group. The relevant companies then carry out the application process under their own individual responsibility, focusing on reviewing applications, establishing contacts to candidates and carrying out interviews to assess and select suitable applicants. For this purpose, we grant the companies of the TÜV SÜD Group the necessary extent of access to the platform.
We process data saved in talent profiles on the basis of your consent to provide these talent profiles to the companies of the TÜV SÜD Group for independent employee recruitment under their own responsibility. The companies of the TÜV SÜD Group can also use the information provided in order to email you information about vacancies at companies of the TÜV SÜD Group and/or general information about the companies of the TÜV SÜD Group as employers. For this purpose, we grant the companies of the TÜV SÜD Group the necessary extent of access to the platform.
Processing of your personal data for operation of the web-based candidate and talent management platform is carried out under the sole responsibility of TÜV SÜD AG (controller) (see Section A.I.).
1. Details on the personal data processed
|
Categories of personal data processed |
Personal data included in the categories |
Sources of the data |
Obligation to provide the data |
Storage period |
|
Protocol data generated for technical reasons whenever the platform is accessed via the hypertext transfer protocol (secure) (HTTP(S)) (“HTTP data”) |
IP address, type and version of your Internet browser, the operating system used, the page you have accessed, the page you had visited before (referrer URL), date and time of page access, received data and cookie |
User of the platform as data subject |
Data provision is not a legal requirement or a requirement necessary to enter into a contract. There is no obligation to provide the data. |
The data will be stored in server log files in a form that allows identification of the data subjects for no longer than 7 days unless there is a security incident (e.g. a DDoS attack). |
|
Login data which you need to log into the platform (“login data”) |
User name, password |
User of the platform as data subject |
Data provision is not a legal requirement or a requirement necessary to enter into a contract. There is no obligation to provide the data. |
These data will be stored in accordance with the data subject's consent for a period of 24 months from the last login on the platform. |
|
Data uploaded to talent profiles on the platform by talents themselves or by a personnel service provider commissioned by talents (“talent profile data”) |
Basic personal data, address; education, professional experience and other application-relevant information, certificates and other documents and information that you upload to your talent Profile |
Talent as data subject, or personnel service provider commissioned by the talent. |
Provision of these data is voluntary. |
These data will be saved in accordance with the data subject's consent for a period of 24 months from the last login on the platform. |
|
Data submitted to the platform in an application by talents themselves or by a personnel service provider commissioned by talents (“application data”) |
Basic personal data, address; education, professional experience, content of a cover letter where applicable, other application-relevant information, certificates and additional documents and any other information requested within the scope of the application process. |
Talent as data subject, or personnel service provider commissioned by the talent |
Provision of these data is voluntary. |
For the duration of the application process, the data will be saved on the platform under the respective company of the TÜV SÜD Group. After completion of the application process, data may be stored on the platform beyond the period of the application process as evidence to be used in the establishment, exercise or defence of legal claims, where applicable, or to comply with legal retention periods. |
2. Details on the processing of the personal data
|
Purposes of the processing of the personal data |
Categories of personal data processed |
Automated decision-making |
Legal basis and, where applicable, legitimate interests |
Recipients |
|
Provision of the publicly accessible area of the platform. |
HTTP data |
No automated decision-making processes are used. |
Balancing of interests (Article 6 (1) lit. f GDPR) Our legitimate interest is to provide the content of the platform accessed by the user. |
Platform Providers |
|
Safeguarding the security of the IT infrastructure used for the provision of the platform, in particular to identify, eliminate and document evidence of incidents (e.g. DDoS attacks) |
HTTP data |
No automated decision-making processes are used. |
Balancing of interests (Article 6 (1) lit. f GDPR) Our legitimate interest is to safeguard the security of the IT infrastructure used for the provision of the platform, in particular to determine, eliminate and document evidence of incidents (e.g. DDoS attacks) |
Platform providers |
|
Anonymisation of the data processed on the platform for anonymised evaluation and reporting of the data processed on the platform to improve candidate and talent management processes. |
Application data |
No automated decision-making processes are used. |
Balancing of interests (Article 6 (1) lit. f GDPR) Our legitimate interest lies in safeguarding security for the improvement of candidate and talent management processes. |
|
|
Provision of the area of the platform that can only be accessed by registered users for use by talents and personnel service providers commissioned by talents, in particular for the administration and management of talent profiles and applications. |
HTTP data |
No automated decision-making processes are used. |
Balancing of interests (Article 6 (1) lit. f of the GDPR). Our legitimate interest is to provide the content of the platform accessed by the user. |
Platform administrators of TÜV SÜD AG, platform Providers |
|
Provision of talent profiles and application documents to the relevant companies in the TÜV SÜD Group. The relevant companies will then carry out the application process under their own individual responsibility, focusing on reviewing applications, establishing contacts to candidates and carrying out interviews to assess and select suitable applicants. |
Talent-profile data |
No automated decision-making processes are used. |
(Explicit) consent (Article 6 (1) lit. a and, if special categories of personal data are concerned, (Article 9 (2) lit. a GDPR). |
The companies of the TÜV SÜD Group relevant for the respective job advertisement |
|
Provision of talent profiles to companies of the TÜV SÜD Group for independent employee recruitment. |
Talent-profile data |
No automated decision-making processes are used. |
(Explicit) consent (Article 6 (1) lit. a and, if special categories of personal data are concerned, (Article 9 (2), lit. a GDPR). |
All companies of the TÜV SÜD Group participating in the platform |
3. Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organisation
|
Recipient |
Recipient’s role |
Recipient’s Location |
Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisation |
|
Platform administrators of TÜV SÜD AG |
Internal roles at TÜV SÜD AG, including the responsibility of technical administration of the platform |
EU |
- |
|
Platform providers |
Processor responsible for the technical operation of the platform and for providing support with its technical administration |
EU |
- |
|
Companies of the TÜV SÜD Group |
Controller of application process and employee recruitment for positions at the company in question |
(see Section A.II) |
(see Section A.II) |
II. Application process and employee recruitment under the responsibility of the respective company of the TÜV SÜD Group
On the basis of your consent, we will provide your talent profiles and application documents to the companies of the TÜV SÜD Group participating in the platform to enable them to conduct the application process and employee recruitment. The companies of the TÜV SÜD Group will process the information provided within the scope of the application process, focusing on reviewing applications, establishing contacts to candidates and carrying out interviews to assess and select suitable applicants. The companies of the TÜV SÜD Group process the information provided within the scope of employee recruitment in order to select talents for vacancies and provide them with information about vacancies at companies of the TÜV SÜD Group and/or with general information about the companies of the TÜV SÜD Group as employers.Processing of your personal data for the purposes of the application process and employee recruitment will be carried out by the respective company of the TÜV SÜD Group, acting under their own responsibility, i.e. as controller (see Section A.II.).
Below you can find more detailed information on this aspect:
1. Details on the personal data processed
|
Categories of personal data processed |
Personal data included in the categories |
Sources of the data |
Obligation to provide the data |
Storage period |
|
Data saved in a Talent profile on the platform (“talent profile data”) |
Basic personal data, address; education, professional experience and other application-relevant information, certificates and other documents and information that you upload to your talent profile. |
Talent as data subject, or personnel service provider commissioned by the talent TÜV SÜD AG as responsible for the operation of the web-based candidate and talent management platform. |
|
These data will be saved in accordance with the data subject's consent for a period of 24 months from the last login on the platform. |
|
Data included in an application submitted to the platform (“application data”) |
Basic personal data, address; education, professional experience, content of a cover letter where applicable, other application-relevant information, certificates and additional documents and any other information requested within the scope of the application process. |
TÜV SÜD AG as responsible for the operation of the web-based candidate and talent management platform |
|
The data will be stored on the platform for the period of the application process at the respective company of the TÜV SÜD Group and may be stored on the platform beyond the period of the application process for evidentiary purposes for the possible assertion, exercise or defense of legal claims or storage for the fulfilment of statutory retention obligations.
|
|
Data collected within the scope of the application process at the relevant company of the TÜV SÜD Group (“evaluation data”) |
Contents of test or exam notes, content of correspondence with the candidate, impressions from job interviews, feedback and Evaluations |
The data come from the candidate or are generated independently by the employees involved in the application process. |
Data provision by the candidate is not a statutory requirement or a requirement necessary to enter into a contract. There is no obligation to provide the data. |
The data will be stored on the platform for the period of the application process at the respective company of the TÜV SÜD Group and may be stored on the platform beyond the period of the application process for evidentiary purposes for the possible assertion, exercise or defense of legal claims or storage for the fulfilment of statutory retention obligations.
|
2. Details on the processing of the personal data
|
Purposes of the processing of the personal data |
Categories of personal data processed |
Automated decision-making |
Legal basis and, where applicable, legitimate interests |
Recipients |
|
Conducting the application process, in particular reviewing applications, establishing contact to candidates and conducting interviews to evaluate and select suitable candidates |
Talent-profile data |
No automated decision-making processes are used. |
Implementation of pre-contractual measures (Article 6 (1) lit. b GDPR) |
HR department |
|
Employee recruitment, in particular selection of suitable talents for vacancies and emailing information about vacancies at companies of the TÜV SÜD Group and/or general information about the companies of the TÜV SÜD Group as employers |
Talent-profile dataa |
No automated decision-making processes are used. |
(Explicit) consent (Article 6 (1) lit. a and, if special categories of personal data are concerned, (Article 9 (2), lit. a GDPR). |
HR department |
|
Retention of documents as evidence used in the establishment, exercise or defence of legal claims or to comply with legal retention periods. |
Application data |
No automated decision-making processes are used. |
Legal basis for storage as evidence is balancing of interests (Article 6 (1) lit. f GDPR) Our legitimate interest lies in establishing, exercising or defending legal claims. |
|
|
Preparation of anonymised and aggregated reports to be in compliance with legal reporting obligations. |
Application data |
No automated decision-making processes are used. |
The legal basis for report preparation to comply with legal reporting obligations in the EU or the EU Member States is compliance with a legal obligation (Article 6 (1) lit. c GDPR). The legal basis for report preparation to comply with legal reporting obligations outside the EU is balancing of interest (Article 6 (1) lit. f GDPR). Our legitimate interest is to be in compliance with the relevant legal reporting obligations in each case. |
3. Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organisation
|
Recipient |
Recipient’s role |
Recipient’s Location |
Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisation |
|
Manager responsible for the respective vacancy. |
Part of the respective Controller |
(Same as respective Controller) |
(Same as respective Controller) |
|
HR department |
Part of the respective Controller |
(Same as respective Controller) |
(Same as respective Controller) |
|
Workers' representatives |
Part of the respective Controller |
(Same as respective Controller) |
(Same as respective Controller) |
|
Disabled representative |
Part of the respective Controller |
(Same as respective Controller) |
(Same as respective Controller) |
4. Details on the storage periods of application data
In case of a successful application, the application data will be imported to the personnel file of the employer, i.e. the respective company of the TÜV SÜD Group, where it will be stored according to legal requirements beyond the period of the application process. Detailed information on the storing of data in personnel files can be found in the special Data Protection Information for Employees of the respective company of the TÜV SÜD Group.
If candidates withdraw their applications or if applications are not successful, data may be stored beyond the end of the application process as evidence to be used for establishment, exercise or defence of legal claims or to comply with legal retention periods. As legal requirements differ from country to country, the relevant retention periods differ depending on the controller. Below you can find detailed information on this aspect:
|
Controller |
Storage periods of application data of rejected applicants and of applicants who withdrew their application |
|
TÜV SÜD AG |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Benelux bv |
730 days after filling of the position |
| TÜV SÜD Benelux vzw |
730 days after filling of the position |
|
TÜV SÜD BRASIL ENGENHARIA E CONSULTORIA LTDA. |
365 days after filling of the position |
|
Global Risk Consultores (Brasil) Ltda. |
365 days after filling of the position |
|
TÜV SÜD SFDK Laboratório de Análise de Produtos Ltda. |
365 days after filling of the position |
|
TÜV SÜD Canada Inc. |
730 days after filling of the Position |
|
Global Risk Consultants (Guangzhou) Co. Ltd. |
730 days after filling of the Position |
|
TUV SUD Certification and Testing (China) Co., Ltd. |
730 days after filling of the Position |
|
TÜV SÜD New Energy Testing (Guangdong) Co., Ltd. |
730 days after filling of the Position |
|
TÜV SÜD New Energy Vehicle Testing (Jiangsu) Co., Ltd. |
730 days after filling of the Position |
|
TÜV SÜD Products Testing (Qingdao) Co., Ltd. |
730 days after filling of the Position |
|
TÜV SÜD Products Testing (Shanghai) Co., Ltd. |
730 days after filling of the Position |
|
TÜV SÜD Central Eastern Europe s.r.o. |
365 days after filling of the position |
|
TÜV SÜD Czech s.r.o. |
180 days after filling of the position |
| TÜV SÜD Danmark ApS |
180 days after filling of the position |
|
ARMAT GmbH & Co. KG |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
ARMAT Südwest GmbH & Co. KG |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
AWS Betriebs GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
Belegschafts-Unterstützungsverein des TÜV Bayern e.V. |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
Fleets International Consulting GmbH i.L. |
180 days after filling of the position |
|
mobileApp GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
PIMA-MPU GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
SIGNON Deutschland GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV Bau- und Betriebstechnik Unterstützungskasse GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV Hanse GmbH TÜV SÜD Gruppe |
180 days after filling of the position |
|
TÜV Hessen Immobilien Service GmbH & Co. KG |
180 days after filling of the position |
|
TÜV Hessen Trust Wohnbau GmbH |
180 days after filling of the position |
|
TÜV Südwest Unterstützungseinrichtung GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Advimo GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Auto Service GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Battery Testing GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Business Services GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Car Registration & Services GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Digital Service GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Energietechnik GmbH Baden- Württemberg |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Industrie Service GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Life Service GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Management Service GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Pluspunkt GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Product Service GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Rail GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Sec-IT GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD Umweltgutachter GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV SÜD BUV GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TÜV Technische Überwachung Hessen GmbH |
180 days after notification of the rejection to the applicant or from the date of withdrawal by the applicant |
|
TUV Sud France SAS |
180 days after filling of the position |
|
TUV SUD Asia Ltd. |
730 days after filling of the position |
|
TUV SUD China Holding Ltd. |
730 days after filling of the position |
|
TUV SUD Hong Kong Ltd |
730 days after filling of the position |
| ÉMI-TÜV SÜD Kft. |
180 days after filling of the position |
|
TUV SUD South Asia Pvt. Ltd. |
540 days after filling of the position |
|
PT. PSB Intellis |
540 days after filling of the position |
|
PT. TUV SUD Indo Lab |
540 days after filling of the position |
|
PT. TUV SUD Indonesia |
540 days after filling of the position |
|
Bytest S.r.l. |
180 days after filling of the position |
|
Fleet Logistics Italia S.r.l. |
180 days after filling of the position |
|
P.H. S.r.l. |
180 days after filling of the position |
|
TÜV Italia S.r.l. |
180 days after filling of the position |
|
TÜV SÜD Japan Ltd. |
730 days after filling of the position |
|
TUV SUD Korea Ltd. |
5 days after filling of the position |
|
TUV SUD (Malaysia) Sdn. Bhd. |
540 days after filling of the position |
|
TÜV SÜD America de México, S.A. de C.V. |
730 days after filling of the position |
| TÜV SÜD Nederland B.V. | 180 days after filling of the position |
|
TUV SUD Middle East Co. LLC |
540 days after filling of the position |
|
TÜV SÜD PSB Philippines Inc. |
540 days after filling of the position |
|
ATISAE - AGORA U.T.E. |
365 days after filling of the position |
|
ATISAE Catalunya, S.A.U. |
365 days after filling of the position |
|
ATISAE de Castilla y León, S.A.U. |
365 days after filling of the position |
|
ATISAE Trauxia ITV, S.L. |
365 days after filling of the position |
|
DIVITEL - ATISAE U.T.E. |
365 days after filling of the position |
|
Geotecnía 2000, |
365 days after filling of the position |
|
Instituto Técnico de la Construcción, S. |
365 days after filling of the position |
|
ITV de Levante, S.A. |
365 days after filling of the position |
|
ITV Dosánchez de Maqueda, S.L. |
365 days after filling of the position |
|
ITV Illescas, S.L. |
365 days after filling of the position |
|
ITV Valdemoro, S.L. |
365 days after filling of the position |
|
Servicios Técnicos y Consultoria ITV, |
365 days after filling of the position |
|
TÜV SÜD ATISAE, S. A. U. |
365 days after filling of the position |
|
TÜV SÜD Iberia, S.A.U. |
365 days after filling of the position |
|
TUV SUD (Thailand) Ltd. |
540 days after filling of the position |
|
TUV SUD Middle East LLC |
540 days after filling of the position |
|
TUV SUD Services (UK) Ltd. |
365 days after filling of the position |
|
TÜV SÜD (UK) Ltd. |
365 days after filling of the position |
|
Wallace Whittle (Holdings) Ltd. |
365 days after filling of the position |
|
Wallace Whittle Ltd. |
365 days after filling of the position |
|
ARISE Boiler Inspection and Insurance Company (ABIIC) Risk Retention Group |
730 days after filling of the position |
|
ARISE Inc. |
730 days after filling of the position |
|
Global Risk Consultants Corp. |
730 days after filling of the position |
|
National Association of Boiler and Pressure Vessel Owners and Operators (NABO), Inc. |
730 days after filling of the position |
|
TÜV SÜD America Inc. |
730 days after filling of the position |
|
TUV SUD Vietnam Co., Ltd. |
540 days after filling of the position |
| TÜV SÜD Domutech A/S | 180 days after filling of the position |
D. Effective date of and changes to this Data Protection Information
It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.
An up-to-date version of this Data Protection Information can be retrieved at any time at https://www.tuvsud.com/en/careers/data-subject-information.
