Data Protection Notices

Below, we wish to inform you about the processing of your personal data as part of the appli-cation process and the rights you have under the provisions of the European Union’s General Data Protection Regulation (GDPR) or each country’s national regulations. If a particular country has special statutory regulations governing the processing of personal data, they take precedence over the provisions mentioned above. Any such special statutory regula-tions are found here.

Personal data that you send to us will be processed by Continental AG (hereinafter referred to as “Continental”) for the purposes stated below. If required to fulfill those purposes, the data may be shared with affiliated companies as defined by Sections 15 et seq. of the Aktiengesetz (AktG – German Stock Corporation Act) and in accordance with Continental’s Binding Corpo-rate Rules.

Definitions

Legislators require personal data to be processed lawfully, fairly, and in a transparent manner for the data subject (“lawfulness, fairness, and transparency”). To ensure that, we are provid-ing you with definitions of the individual terms that are also used in this Privacy Statement:

Personal data 

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter: “data subject”). An identifiable natural person is one who can be identified, direct-ly or indirectly, in particular by reference to an identifier such as a name, an identification number, location, online identifier, or to one or more factors specific to the physical, physiolog-ical, genetic, mental, economic, cultural, or social identity of that natural person.

Processing 

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, record-ing, organization, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combi-nation, restriction, erasure, or destruction.

Restriction of processing 

“Restriction of processing” means the marking of stored personal data with the aim of limiting its processing in the future.

Profiling 

“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

Pseudonymization 

“Pseudonymization” means the processing of personal data in such a manner that the per-sonal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to tech-nical and organizational measures to ensure that the personal data is not attributed to an iden-tified or identifiable natural person.

Filing system 

A “filing system” means any structured set of personal data that is accessible according to specific criteria, whether centralized, decentralized or dispersed on a functional or geograph-ical basis.

Controller 

“Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Mem-ber State law, the controller or the specific criteria for the controller’s appointment may be provided for by Union or Member State law.

Processors 

“Processor” means a natural or legal person, public authority, agency, or other body that pro-cesses personal data on behalf of the controller.

Recipient 

“Recipient” means a natural or legal person, public authority, agency, or another body to which the personal data is disclosed, whether a third party or not. However, public authorities, which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law, shall not be regarded as recipients. The processing of that data by those public authorities shall be in compliance with the applicable data protection rules ac-cording to the purposes of the processing.

Third party 

“Third party” means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the control-ler or processor, are authorized to process personal data.

Consent 

“Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear af-firmative action, signifies agreement to the processing of personal data relating to him or her.

Controller

The controller as defined by the GDPR – i.e. the person or entity responsible for processing your personal data – is named below:

Continental AG, Vahrenwalder Strasse 9, 30165 Hannover, Germany

Contact information for the data protection officer

You can contact our data protection officer as follows:

E-mail: dataprotection@conti.de

Categories of personal data

As part of the application process, we process the following categories of personal infor-mation: 

• Master data (e.g. last name, first name, home address, date of birth)
• Log data from using the portal (e.g. IP address)
• Performance assessments (e.g. letters of reference)
• Information on schools you attended and jobs you have held
• Communications data (e.g. e-mail address, telephone number)
• Visual and audio recordings (e.g. resume photo)
• Job-related data (e.g. employee number for internal applications)
• Documents submitted by the applicant
• Payment information (e.g. bank account number for reimbursement of expenses)

This list is not exhaustive and may vary depending on the job requirements and the docu-ments submitted by the applicant. 

Under certain circumstances, we may process special categories of personal data in accord-ance with Art. 9 (1) of the GDPR, for example data concerning your health, trade union mem-bership, or religious affiliation. 

Purposes and Legal Basis for Processing as Part of the Application Process

Data processing aids conducting of the application process, particularly when establishing an employment relationship. The legal basis for it is Art. 6 (1b) of the GDPR in conjunction with Section 26 (1), sentence 1 of the Bundesdatenschutzgesetz (BDSG – German Federal Data Protection Act) or corresponding national legislation.

If special categories of personal data are involved, this occurs on the basis of Art. 9 (2b) of the GDPR in conjunction with the corresponding national legislation. In some instances, pro-cessing may take place for the purpose of preventive medicine, occupational medicine, or for the assessment of the working capacity of the employee. The legal basis for such cases is Art. 9 (2h) of the GDPR.

Notification Feature

The application platform affords you the option of activating the notification feature regarding your application(s) so that you may be informed of their current status, via text message, for instance, and/or reminded of scheduled appointments. The legal basis for processing in those cases is Art. 6 (1a) of the GDPR. By activating the service, you declare your consent to pro-cessing. You may withdraw your consent at any time. In particular, the feature can be deac-tivated anytime.  

Talent Pool

As part of the application process, you may also decide to allow your application to be consid-ered for future positions as well as permit us to contact you in the event of vacancies in the future. The legal basis for processing in those cases is Art. 6 (1a) of the GDPR. You may withdraw your consent at any time.

Recipients of Your Personal Data

Within the Continental Corporation (Section 15 of the German Stock Corporation Act), we will share your personal data only if doing so is necessary to fulfill the purpose outlined herein, particularly for the purpose of accepting and processing your application. 

Furthermore, we use service providers to perform our duties (referred to as “processors”). Whenever personal data is transferred to processors, this is always done in accordance with applicable data protection regulations. In particular, we and our processors have concluded an agreement concerning data processing on our behalf. 

Outside the European Union (EU) and the European Economic Area (EEA), we transfer per-sonal data exclusively to those third countries for which the European Commission has veri-fied an adequate level of protection or for which other appropriate data protection guarantees (e.g. binding corporate data protection rules or EU standard contractual clauses) are in place or legal facts permit transmission. Furthermore – to the extent permitted by applicable data protection laws – other precautions (e.g. encryption and additional contractual provisions) will be taken to ensure an appropriate level of protection for your personal data.

Additional information about the Continental Corporation’s binding internal data protection rules can be found by following the link.

You can access the EU standard contractual clauses in the EU’s languages at the following URL:

https://eur-lex.europa.eu/legal-content/de/TXT/?uri=CELEX%3A32021D0914    

Use of Google Analytics

This website uses Google Analytics, a service for analyzing Web traffic, provided by Google, Inc. (“Google”). Google Analytics uses cookies. Cookies are text files that are stored on your computer and that help analyze your use of the website as a visitor. The data stored by the cookies as you use the website is transmitted to Google and stored on its servers in the Unit-ed States.

If IP address anonymization is activated on the Website, your IP address will be truncated in Member States of the European Union or in other countries in the European Economic Area that are contract parties. Only in exceptional cases will the full IP address be transmitted to a Google server in the U.S. first and stored there. This website has IP anonymization activated. Google uses the information specified above on behalf of the website provider to evaluate your use of the website by preparing reports on the activity on the web page for the website operator and providing you with other services regarding your website activities and internet usage. The IP address transmitted by your browser as part of Google Analytics is not com-bined with other data in Google’s possession.

If your personal data is transferred to servers in the US, that will happen only on the basis of your consent. If you accept the cookie, you declare your express consent in accordance with Art. 49 (1) sentence 1a of the GDPR to allow your personal data to be transferred to the US.

We wish to inform you that the Court of Justice of the European Union (CJEU) has classified the United States as a third country for which an adequacy decision has not been made and that does not provide guarantees for the enforcement of your rights. In particular, it cannot be ruled out that government (surveillance) authorities may access your data and process it, potentially without judicial redress or the right to an effective remedy. The legal basis for pro-cessing is your consent in accordance with Art. 6 (1) sentence 1a, of the GDPR and Art. 49 (1) sentence 1a of the GDPR.

You can permanently reject tracking by Google Analytics by downloading and installing the Google Analytics opt-out browser add-on four your current Web browser (to do so, click here https://tools.google.com/dlpage/gaoptout?hl=en-GB). You can also withdraw your consent at any time from that point forward by adjusting your cookie settings here or rejecting all cookies.

Mouseflow

This website furthermore uses the web analysis tool Mouseflow from Mouseflow ApS, Flaes-ketorvet 68, 1711 Copenhagen, Denmark (“Mouseflow”). Mouseflow uses cookies on our site that are created only with your consent. These cookies are used for collecting and storing data for marketing and optimization purposes. Anonymized usage profiles can be created on the basis of this data. Mouseflow randomly selects and records individual visits. This results in a record of mouse movements and clicks so that these randomly selected visits can be recreated in order to derive potential website improvements from this. Your IP address is transmitted anonymously. It is thus not possible to determine the identity of an individual web-site visitor at any time.

Your Rights Concerning Your Personal Data

Please note that, as the data subject, you have the following rights with regard to the pro-cessing of your personal data in accordance with the GDPR:

Right to withdraw consent

If processing of personal data is based on consent that has been given, you have the right to withdraw that consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent prior to its withdrawal.

You may contact us any time to exercise your right to withdraw consent.

Right to information 

You can request information about whether your personal data is being processed. If you do so, you may request further information – in particular, regarding the purposes of processing, the categories of personal data being processed, the recipients, the period of storage, or, if that is not possible, the criteria for determining the period of storage, as well as additional de-tails. You can request a copy of your personal data. If you request is submitted by e-mail, a copy will be provided to you in a commonly used electronic format unless doing so violates the rights of freedoms of other individuals.

You may contact us at any time to make such a request using the contact information provid-ed above.

Right to rectification 

You may request that we rectify inaccurate personal data concerning you or that we complete incomplete personal data without undue delay. However, please note that we are unable to subsequently correct recordings; we can only delete them.

Right to erasure 

You may request the erasure (deletion) of your personal data without undue delay. We will store your personal data only as long as required by the purpose indicated or as long as stat-utory retention periods apply. Once the purpose is fulfilled or your personal data is no longer required for data processing, we will delete it. 

Aside from that, we are permitted to process your personal data for a different purpose, pro-vided we comply with statutory regulations. Examples include the establishment, exercise, or defense of legal claims. This purpose applies only as long as the periods of limitations allow the establishment of legal claims. 

Right to restrict processing 

You may restrict processing of your personal data, particularly in the following circumstances: 

- You contest the accuracy thereof, and the accuracy of the data is to be verified. 

- The processing is unlawful, and you oppose erasure of the data.

- The data is no longer needed by us, but you require the data for the establishment, exercise, or defense of legal claims.

- You have objected to processing. 

If you restrict processing, your personal data may only be stored and, in particular, pro-cessed only with your consent or for the establishment, exercise, or defense of legal claims.

Right to data portability 

Upon receiving your request, we will transfer your data to a different controller – if technically feasible. However, you have this right only if data processing is based on your consent or is necessary for the performance of a contract. Instead of receiving a copy of your data, you may request that we transfer the data directly to a different controller specified by you.

Right to object 

You may object to the processing of your personal data concerning you if the processing is based on a legitimate interest (Article 6 (1), sentence 1f, of the GDPR). The data will then no longer be processed unless compelling grounds can be demonstrated for processing. Please address your objection to our data protection officer; the contact details can be found above.

You may contact us at any time to make such a request using the contact information provid-ed above.

Right to lodge a complaint with a data protection authority

Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a supervisory authority – in particular, in the Member State of their ha-bitual residence, place of work, or place of the alleged infringement if the data subject consid-ers that the processing of personal data relating to them infringes the GDPR.

Right to effective judicial remedy

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR if you consider that your rights under the GDPR have been infringed as a result of the processing of your per-sonal data in non-compliance with the GDPR.

Annex: Sub-Processors

• SmartRecruiters Inc (SPOLKA AKCYJNA) Oddzial w Polsce, Poland
• SmartRecruiters EURL, France
• SmartRecruiters Ltd. , UK
• Amazon Web Services EMEA Sárl, Luxembourg (hosting location AWS Germany)
• Textkernel BV, Netherlands
• MailJet SAS, France (exchange of e-mail messages with candidates)