Applicant portal privacy policy

Status: July 2023

Welcome to our career portal. Thank you for your interest in our company. With this privacy policy, we would like to inform you about the handling of your personal data when you visit our career portal and carry out the application process.

ENERCON technically operates the “SAP SuccessFactors Recruiting” application system worldwide to manage applications and publish job offers for Germany and for other companies in the global group of companies. This is cloud-based software for human resource management from SAP SuccessFactors with SAP Deutschland SE & Co. KG

Headquarters: SAP Germany SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf.

For the use of SAP SuccessFactors, we have concluded an order processing contract with SAP in accordance with Article 28 GDPR.

The application system is used in particular to support recruitment, i.e. to fill job offers within the ENERCON group of companies - within Germany and worldwide - with suitable applicants.

Please read the following information carefully. By ticking the box to read the privacy policy before you register, you confirm that you have read it.

contents

I. Responsible persons and data protection officers

II. Data processing when you visit this website

III. User account

IV. Application-related data

V. Use and transfer of personal data; pool of applicants

VI. Modification and deletion of data

VII. Simultaneous application to several ENERCON Group companies

VIII. Data security

IX. Your rights

I. Responsible persons and data protection officers

ENERCON Global GmbH (“ENERCON”) collects and processes your data in connection with the operation of this website and, if you apply to ENERCON, also as the responsible authority.

Contact details: ENERCON Global GmbH, Dreekamp 5, 26605 Aurich

email: geschaeftsfuehrung@enercon.de

The appointed data protection officers can be reached by post at Data Protection Officer, Dreekamp 5, 26605 Aurich, or at the e-mail address datenschutz@enercon.de.

If you apply to another ENERCON group of companies, the responsible department of the relevant company to which you are applying will have access to your application documents; in the case of multiple applications to different ENERCON companies or if you participate in our pool of applicants, other responsible departments of other ENERCON companies will also have access to your data and process it. In this case, the respective ENERCON companies are responsible within the meaning of data protection law. In this case, too, you can contact the above contact address and ENERCON's data protection officers are also appointed for these companies and can be reached via the email address above.

2. Visiting this website

If you simply visit our website without actively contacting us, we will not process any personal data about you. Our web servers only store every access in a log file for seven days. The following data is collected: IP address of your client, website from which access was made, date and time of access, name and URL of the retrieved file, pages visited, amount of data transferred, message as to whether the retrieval was successful, viewing videos/audio, clicking on individual links, search words or search phrases, recognition of the browser and operating system used and the name of your Internet access provider.

This data is processed for the purpose of presenting our website optimally and securely from a technical point of view. There are no personal evaluations.

3. User account

To register in our application system for the purpose of applying or creating an application profile, each user must create a user account. To do this, we need the following information from you: first name/surname, user name, password and email. The legal basis is the initiation of the employment relationship, Art. 6 para. 1 p. 1 b), Art. 88 General Data Protection Regulation (GDPR) in conjunction with Section 26 Paragraph 1 Sentence 1 Federal Data Protection Act 2018 (BDSG).

If you do not apply to us online but by email or post, your application, if we can consider it, will be entered electronically in our system and we will create an application profile for you.

After completing the application process, the retention period for your user account and application documents is 6 months. Your user account is automatically deleted by the system when the retention period expires.

If you have another ongoing application at the end of a retention period, the retention period applies accordingly, i.e. until the end of this application process plus 6 months.

You can also create an account with us with an application profile without specific reference to a specific job advertisement. In this case, we will contact you as soon as your application profile matches a current job posting. If you do not start an application process within 6 months, your user account will be deleted again.

4. Application-related data

In the course of carrying out the application process, the following data may be stored about you: contact details, date of birth, school, training and study qualifications, certificate data, curriculum vitae, other certificates. The answers and information given will be stored together with your name until the retention period expires.

Thereafter, information about your application will only be stored in anonymized form for further statistical evaluation. This statistical data set does not allow any conclusions to be drawn about the natural person and serves as a basis for statistical evaluations.

5. Use and transfer of personal data; pool of applicants

Your personal data will only be used during the application process by the applicant management staff and the responsible department involved. The legal basis is Art. 6 para. 1 sentence 1 b), Art. 88 DSGVO, § 26 para. 1 sentence 1 BDSG.

By means of a separate data release declaration, you can also give your consent that we will add you to our pool of applicants and that employees from the HR departments of all national companies in the ENERCON group of companies will be aware of your application and access to your profile in order to check your application or profile for suitability for other job offers advertised at ENERCON. If you give your consent, it is possible that other companies in the ENERCON group of companies will also contact you with suitable job offers that match your profile. You can revoke this consent to be included in the pool of applicants at any time. We will then immediately cancel the data release. The legal basis for this is also Section 26 Paragraph 1 Sentence 1 BDSG. We may also use third parties, contractually strictly bound service providers, e.g. the internal personnel services company ENERCON Consulting Services GmbH, to carry out the application process. Your data will not be passed on by us or the processors commissioned by us to third parties in any form, unless this is necessary within the ENERCON group of companies to carry out the application process or if this is subject to your consent or an official or court order.

We use SAP SuccessFactors for the application process. SAP acts as a service provider for us as part of providing the system as a SaaS (Software as a Service) solution. The operation of the system (hosting) and the storage and further processing of your data (e.g. maintenance and maintenance of the system) are carried out exclusively within the European Union in certified data centers. We have concluded a so-called order processing contract with this provider, which ensures that data processing is carried out in a lawful manner.

Your data will not be transferred to third countries.

6. Modification and deletion of data

You can review, correct or withdraw your application at any time and update or delete your profile in the career portal at any time.

Please note that changes to your profile will affect your entire application and, if your data is deleted, you will withdraw from all applications.

We will delete your application and profile as well as the account, otherwise by default 6 months after completion of the application process or, if no application process is carried out, 6 months after creating the user account; this also applies if you are included in the applicant pool.

7. Simultaneous application to several ENERCON Group companies

In the event that you apply simultaneously for several jobs in different companies in the ENERCON group of companies, to which you have applied directly or via this career portal, the relevant departments concerned, to which you have applied directly or via this career portal, will be aware of all parallel applications. In this way, we want to ensure that applications are processed efficiently. Application data (content from the application) will not be passed on.

8. Data security

We have taken extensive technical and operational security measures to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress. Please note that unencrypted emails are not transmitted with access protection. We therefore strongly recommend that you send us your application documents either by encrypted e-mail or via our contact form on our career portal.

When you register or log in to our career portal, you also provide us with personal data about yourself. To prevent them from falling into the wrong hands, we encrypt your personal data “end to end” using the TLS process (transport layer security). This is a proven and very secure data transmission method on the Internet using the latest state of the art.

9. Your rights

Under the legal requirements, you have the following rights as a data subject, which you can assert against us:

Right of access: You are entitled at any time, within the framework of Article 15 GDPR, to request confirmation from us as to whether we are processing personal data relating to you; if this is the case, you are also entitled under Article 15 GDPR to provide information about this personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of a third country transfer, the appropriate guarantees) and receive a copy of your data.

Right to rectification: In accordance with Article 16 GDPR, you have the right to demand that we correct the personal data we have stored about you if it is incorrect or incorrect.

Right to erasure: Under the conditions of Article 17 GDPR, you are entitled to demand that we delete personal data concerning you immediately. The right to erasure does not exist, among other things, if the processing of personal data is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation to which we are subject (e.g. statutory storage obligations) or to assert, exercise or defend legal claims.

Right to restrict processing: Under the conditions of Article 18 GDPR, you have the right to demand that we restrict the processing of your personal data.

Right to data portability: Under the conditions of Article 20 GDPR, you are entitled to demand that we provide you with the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.

Right of revocation: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.

Right of objection: You have the right to object to the processing of your personal data under the conditions of Article 21 GDPR, so that we must stop processing your personal data. The right of objection only exists within the limits provided for in Article 21 GDPR. In addition, our interests may preclude the termination of processing, so that we are entitled to process your personal data despite your objection.

Right to lodge a complaint with a supervisory authority: Under the conditions of Article 77 GDPR, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR. The right of appeal exists without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

The State Commissioner for Data Protection of Lower Saxony

Prinzenstrasse 5

30159 Hanover

Telephone: +49 (0511) 120 45 00

Fax: +49 (0511) 120 45 99

email: poststelle@lfd.niedersachsen.de

However, we recommend that you always address a complaint to our data protection officer first.

If possible, your requests to exercise your rights should be addressed in writing to the address given above or directly to our data protection officer.

If you want