PRIVACY STATEMENT FOR JOB APPLICANTS IN DEUTSCHE TELEKOM CLOUD SERVICES
Dear Applicant,
We are pleased that you decided to apply for a job in Deutsche Telekom Cloud Services (“DTCS” or “we”), which is part of Deutsche Telekom AG Group (“DT AG Group”). After submission of your job application, resp. after starting of the selection process to fill the vacancy position as chosen by you, this Privacy Statement for Job Applicants in Deutsche Telekom Cloud Services (hereinafter only “Privacy Statement”) will apply to you and your personal data.
Please consider that depending on the location of the job you are applying for within DTCS, one of the following DTCS companies (“DTCS companies”) is responsible for the protection of your personal data and for ensuring compliance with this Privacy Statement as the controller:
-
Deutsche Telekom Cloud Services s.r.o., with its registered seat at Ružová dolina 6, 821 08 Bratislava, Slovak Republic, ID No.: 48 129 178;
-
Deutsche Telekom Cloud Services Kft., with its registered seat at 1097 Budapest, Hungary, Könyves Kálmán krt. 36, ID No.: 01-09-271999;
-
Deutsche Telekom Cloud Services EPE, with its registered seat at 9 Fragkoklisias Str., 15125 Marousi of Attica, Greece, ID No.: 134112901000 / 300378;
-
Deutsche Telekom Cloud Services S.R.L., with its registered seat at B-dul, Dimitrie Pompei nr. 9-9A, Iride Business Park Cladirea 20, etaj 3, Sector 2, Bucharest, Romania, ID No.: J40/4603/2016; or
-
Deutsche Telekom Cloud Services d.o.o., Radnička cesta 21, 10000 Zagreb, Croatia ID No: 080987135.
For avoidance of any doubt, any of the above-mentioned DTCS companies act independently during processing of your personal data and if you provide your personal data to any third party, this Privacy Statement does not apply, and such third party is responsible for the protection of your personal data in line with the conditions of its privacy statement or similar document.
This Privacy Statement explains, how DTCS will use your personal data obtained directly from you or from third parties during the selection process to fill concrete vacancy position. We provide you with this Privacy Statement a in layered format to enable you easy and comfortable orientation and navigation. Please click through to jump to a specific section:
-
Whose data do we process, which data do we process, why and based on which legal basis?
-
Do we share your data with other parties?
-
Do we transfer your data to the third countries?
-
How long do we store your personal data?
-
Are you subject to automated decision making or profiling?
-
Which measures do we use to protect your data?
-
What kind of rights do you have in relation to the data processing?
-
How can you contact us?
Please note that the content of this Privacy Statement might be updated from time to time. This version of the Privacy Statement is effective as of 17 November 2023.
For the purposes of this Privacy Statement, the abbreviation “GDPR Regulation” means General Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Whose data do we process, which data do we process, why and based on which legal basis?
Since we have an interest to find the right candidates for the vacant positions in DTCS, we are processing personal data of all job candidates that apply for the concrete position. We can obtain such data either directly from you (e.g., if you are applying through dedicated job portals) or from other people, who refer to you as a right candidate for the respective position.
Our main purpose for processing of your data is our legitimate interest to find a right candidate for the vacant position in DTCS. The ways through which we are able achieve this legitimate interest and process your personal data are, e.g. evaluation and assessing of the information included in your CV, motivation letter, videos or in various questionnaires provided by us, while using various HR tools or techniques and conducting an interview with you either by online means or personally. If you attend personal interview, your data will be processed also in the CCTV system in our premises, since we have legitimate interest to ensure health and safety of our employees and to protect our assets and your belongings. Last, but not least, we may process your data for the purpose of legal claims and proceedings and if we are requested to do so by the public authorities.
Please note that we process your data and data of your relatives in limited scope, securely, only when we have a justified reason and legal basis for processing and in compliance with applicable data protection legislation.
If you are interested, please find below more detailed overview of the purposes for your data processing:
Please be informed that when we process your data based on our legitimate interest, i.e., under Art. 6 (1) (f) of GDPR, you have right to object such processing, unless our compelling legitimate interests override your rights and freedoms. You can object data processing by sending us an email on the address mentioned below.
Whenever we process your personal data based on your consent, you are free to withdraw it at any time. Withdrawal of your consent does not affect processing of your personal data based on previously granted consent. You can withdraw your consent with data processing by sending us an email on the address mentioned below.
If processing of your data is a contractual obligation and you do not provide us with the data, it may have some negative impacts on you, including the impossibility to enter into the respective agreement with us. More information about your rights, including right to object and right to withdraw the consent is available further below in this Privacy Statement in part “What kind of rights do you have in relation to the data processing?”.
Do we share your data with other parties?
We may share your personal data with our suppliers who support us in our business or provide us with partial services, e.g., recruitment agencies, postal services, physical security services, legal and audit services, tax advisors, various support services, technical subcontractors, HR services, etc. We share your personal data among DTCS companies, mainly with Deutsche Telekom Cloud Services s.r.o.
We do not permit our suppliers to sell any personal data we share with them, or to use any personal data we share with them for their own purposes or for other purpose than to perform the services they provide to us. Before engaging any supplier, we perform extensive due diligence, including detailed privacy, security, and legal analysis. We do not engage a supplier unless our quality standards are met. Our suppliers are all subject to contract terms that enforce compliance with applicable data protection laws.
We may further share your personal data with other entities belonging to DT AG Group, and so in connection with the fulfilment of the purpose of processing of personal data (e.g. to obtain references about you if you are already working or have been working for Deutsche Telekom AG Group, or to agree on interview with you or to inform you about special working and remuneration conditions in Deutsche Telekom AG Group). You can find the information about entities belonging to Deutsche Telekom AG Group on the following link.
Certain of our employees may have access to your personal data as well. In such a case, access shall be granted only if it is necessary for the purposes described and only if the respective employee is bound by the confidentiality duty.
Please note that when we process your data through online tools, we rely on our DT AG Group suppliers, including third-party provider HireVue Inc., 10876 S River Front Pkwy Ste 600 South Jordan, Utah 84095, United States (“HireVue”) for the purpose of online assessment, and Eightfold AI Inc, 2625 Augustine Drive, Suite 601, Santa Clara, CA 95054, USA (“Eightfold”) for the purpose of talent acquisition (candidate selection).
Further, kindly note that our suppliers may engage additional contractors to support them in their business and to provide them with certain services, which can possibly require also processing of your data. Such services may include but are not limited to cloud services and website hosting, data analysis, information technology and related infrastructure, customer service, email delivery, banks and payment method providers, accounting, legal, tax and audit services. These further contractors should provide their services based on the contract, under which they are obliged to follow applicable law, especially with respect to observance of applicable data protection legislation.
Last but not least, we may share your personal data if required to do so by law or decision of respective public authority or court order, for example with our suppliers or clients, tax authorities, social security agencies, law enforcement agencies or other governmental agencies.
Do we transfer your data to the third countries?
Your personal data is processed primarily in the EU. For the purpose of the usage of online tools HireVue and Eightfold, we enable transfer of your data to the USA, however solely in compliance with the requirements of the applicable data privacy legislation, including based on valid EU Standard Contractual Clauses and additional appropriate safeguards. In case you wish us to provide you with their copy, please approach us via e-mail stated below.
How long do we store your personal data?
We store your personal data as long as is necessary to fulfil the purposes mentioned in this Privacy Statement, for which the data was obtained, i.e., to pursue our legitimate interests and comply with applicable laws. This means that we will retain most of your data during the selection process and will delete them within 6 months after finding the suitable candidate. If you have been selected as a successful candidate, we will retain your personal data further in your personal file in accordance with applicable legislation and our internal HR regulations. Your data processed through our CCTV system will be stored for 3 days and then automatically erased.
Please note that we may process some of your personal data for longer period, if e.g., (i) the applicable law requires us to do so, (ii) there is an ongoing legal proceeding, or (iii) in exceptional cases, if you have given us the permission to keep your personal data on record for a longer period. The above stated period may be prolonged in case of the request of the relevant public authority or of the court.
Are you subject to automated decision making or profiling?
Your personal data may be subject to profiling. During the candidate selection process, we use tools which help us identify how well you match the vacant position to which you applied and evaluate your suitability for the position by comparing your experience and skills, or other information if provided, to the criteria of the vacant position. We do not rely solely on such results, and they are always revised by our employees which reduces the significance of such processing to a minimum.
Which measures do we use to protect your data?
We make reasonable efforts to ensure a level of security appropriate to the risk associated with the processing of your personal data. We maintain technical and organizational measures designed to protect your personal data within our organization against relevant security threats, including against unauthorized access, destruction, loss, alteration, or misuse. As already mentioned above, your data are accessible only to a limited number of personnel who need access to perform their duties. In case you wish to learn more about our technical and organizational measures, please do not hesitate to contact us on the contact details mentioned below.
What kind of rights do you have in relation to the data processing?
It is important for us that you understand the rights you have with respect to the processing your personal data. Please see the table below for more details:
In addition to the abovementioned rights, if you would like to file a complaint about how we process your personal data, even with respect to the abovementioned rights, you can contact our Data Protection Officer via email below, and your suggestions and requests will be reviewed.
If you are not satisfied with our response or you believe that we process your data unfairly or unlawfully, you have the right to lodge a complaint with a supervisory authority. Depending on which DTCS company is the controller responsible for the protection of your personal data, the supervisory authority:
-
for Deutsche Telekom Cloud Services s.r.o. is the Office for Personal Data Protection of the Slovak Republic, www.dataprotection.gov.sk.;
-
for Deutsche Telekom Cloud Services Kft. is the National Authority for Data Protection and Freedom of Information, www.naih.hu;
-
for Deutsche Telekom Cloud Services EPE is the Hellenic Data Protection Authority, www.dpa.gr;
-
for Deutsche Telekom Cloud Services S.R.L. is the National Supervisory Authority for Data Processing, www.dataprotection.ro;
-
for Deutsche Telekom Cloud Services d.o.o. is the Agency for Protection of Personal Data, www.azop.hr.
How can you contact us?
If you have any questions or complaints about this Privacy Statement or processing of your personal data, please do not hesitate and contact us via email sent to: dtcs.privacy@eu.telekom.com