CIM Data Protection Declaration on E-Recruitment

Thank you for visiting our job and application portal. Responsible and transparent handling of personal data is very important to the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH.

Below you will find information on how to

  • what contact options are available at GIZ on the subject of data protection.
  • which data is processed when you visit the website.
  • what data is processed when you contact us, create a user account, submit applications or create job subscriptions.
  • what options exist to object to the storage of the data.
  • what rights you have towards us.

1       Controller and Data Protection Officer

The responsible body for data processing is the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH.

Address:

Friedrich-Ebert-Allee 32 + 36, 53113 Bonn

Dag-Hammarskjöld-Weg 1–5, 65760 Eschborn

Kontakt: recruiting@giz.de

If you have specific questions about the protection of your data in connection with our website or the services offered on it, please contact GIZ's Data Protection Officer: datenschutzbeauftragte@giz.de

If you contact us by e-mail, the communication will be unencrypted.

Processor:

milch & zucker, Talent Acquisition & Talent Management Company AG, Friedrich-List-Straße 23, 35398 Gießen, Telefon: +49 641 300 20 500

2       Information on the collection of personal data

2.1      General

GIZ processes personal data exclusively in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data includes, for example, name, address, e-mail addresses and user behaviour.

GIZ processes personal data only to the extent necessary. Which data is required and processed for what purpose and on what basis depends largely on the type of service that is used by you or depends on the purpose for which it is required.

2.2      Collection of personal data when visiting our job portal

When you visit the CIM job market (https://jobs.cimonline.de/) the browser used automatically transmits data that is stored in a log file. GIZ itself only processes the data that is technically necessary to display the website correctly and to ensure its stability and security.

2.2.1     Cookies

When visiting our website, small text files, so-called cookies, are stored on the visitor's computer. They are used to optimise the overall user-friendliness and effectiveness of the website. Cookies cannot run programs or transmit viruses to your computer.

CIM's job portal uses cookies that are automatically deleted as soon as the browser in which the page is displayed is closed (so-called temporary cookies or session cookies). This type of cookie makes it possible to assign different requests from a browser to a session and it is possible to recognize the browser when the website is visited again (session ID).

A detailed list of stored data can be found here.

  • BRE_GIZ_HR_FRONTEND_PRODUCTION; Session-Cookie; Stores the user's session data
  • i18next; Sesion-Cookie; Stores the user's language to display controls in the correct language
  • mcd-consent; Storage period 1 year; cookie stores which services have received the user's consent

2.2.2     Use of the services offered on our website

On our website we offer the possibility to use various services. To provide these services, we need to collect and process the users’ personal data.

The data you provide will only be used to perform the service and will not be stored beyond that without your consent.

2.2.2.1     Share Function

We offer you the possibility to share and recommend job advertisements or pages on social networks. If you visit our pages and use this feature, you will need to log in there. We will then share the URL with your chosen social network. The purpose and scope of the data collection and the further processing and use of the data by the social network, as well as the rights and setting options of the users in this regard to protect their privacy, can be found in the privacy policy of the social networks.

2.2.2.2     Registration for your application or, for example, to use the job subscription in the Career Cockpit as well as handling of personal data in the application process

For information on the collection and use of your personal data in your personalized area ("Career Cockpit") or in the application process, please read the additional information below in Chapter 2 "Applicant Data Protection".

2.3      Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR

2.4      Disclosure of personal data to third parties when using the career site

In order to be able to offer you our services, we may need to share your personal data with third parties inside or outside GIZ. These recipients can be categorized as described below:

  • GIZ staff from the various organisational units
  • Application provider (technical operator and support of the website and the recruiting system)

Personal data will not be transferred to third countries.

2.5      Your Data Protection Rights

It is important to us to make our processing operations fair and transparent. Therefore, it is important to us that in addition to the right to object, data subjects can exercise the following rights if the respective legal requirements are met:

  • Right of information, Art. 15 GDPR
  • Right to rectification, Art. 16 GDPR
  • Right to erasure ("right to be forgotten"), Art. 17 GDPR
  • Right to restriction of processing, Art. 18 GDPR
  • Right to data portability, Art. 20 GDPR
  • Right to withdraw your consent, provided that the processing of the data was carried out on the basis of consent (Art. 6 para. 1 a) GDPR). The lawfulness of the processing based on the consent given remains unaffected until the revocation is received.

In accordance with Art. 77 GDPR, users also have the right to file a complaint with the competent data protection supervisory authority. The competent authority is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

2.6      Consent

If you have given us your consent to process your personal data, we hereby inform you that you can revoke this consent at any time.

If you have given consent on this website, please withdraw your consent on the page where you originally gave your consent.

In any other cases, or if you have problems withdrawing your consent on this website, you can contact datenschutzbeauftragte@giz.de.

Please note that the consent you withdraw will only have effect for the future and will not affect the lawfulness of the processing in the past. In some cases, despite your withdrawal, we may continue to process your personal data on another legal basis – such as for the performance of a contract.

3       Applicants – Data Protection

The protection of your personal data is particularly important to us. In the following, we would therefore like to inform you about our data protection principles, which GIZ is committed to adhering to in order to enable you to have a confidential application process.

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):

  • Based on your consent (Art. 6 para. 1 a GDPR in conjunction with Art. 88 GDPR and § 26 (2) BDSG)

If you have given us your consent to process personal data for specific purposes (e.g., storing application data for a longer period), the processing of this data is lawful on the basis of your consent. Consent can be revoked at any time.

  • Based on statutory or other legal provisions (Art. 6 para. 1 lit. c GDPR and Art. 88 GDPR and § 26 BDSG) or in the public interest (Art. 6 para. 1 e GDPR)

3.1      Data Usage in the Recruiting System

3.1.1     Accounts for users

To make full use of the GIZ recruiting system, an account must be created. An account consists of at least the following information:

  • Name
  • Surname
  • Username
  • E-mail address

The retention period of an account is 6 months. After 6 months, the consent to the processing of personal account data by the user must be renewed. In the event of a renewal, the retention of the account will be extended for another 6 months.

If an application is still active at the end of the retention period, the retention period will be extended until this application has been completed.

3.1.2     Application-related data

Your answers and information provided during the online application process will be stored, along with your name, until after the application process has been completed. After 6 months from the end of the process, the results will only be stored in anonymized form, i.e., without providing your name, for further statistical evaluation. This statistical data set does not allow any conclusions to be drawn about the natural person and serves as the basis for statistical evaluations.

The processing of personal data is necessary for the achievement of the above-mentioned purposes, including the fulfilment of a contractual relationship or a pre-contractual activity.

Unless expressly stated otherwise, the legal basis for data processing is Article 6 (1) (a) or Article 6 (1) (b) and (f) of the General Data Protection Regulation (GDPR):

  • Your Consent
  • processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures.
  • processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

3.1.3     Psychological aptitude test

If necessary, a psychological aptitude test will be carried out as part of the application process to determine the interdisciplinary suitability.

3.1.4     Compliance with laws and regulatory requirements

We use your data to comply with legal provisions and regulations, as well as to pass it on to supervisory authorities and other authorities to which GIZ is subject.

This may include its use to detect or prevent crime (including terrorist financing, money laundering and other financial crimes). We will only do so on the basis that it is necessary to comply with a legal obligation or is in our legitimate interests and those of others.

3.1.5     Applying for a job offer

If you have applied for a job offer, your data will be made available to the department advertising the job and the responsible HR department. The retention period of the user account applies.

You agree that the personal data you provide may also be compared with other vacancies and passed on for review within GIZ.

3.1.6     Transfer of personal data to third parties

  • to external psychologists as responsible controllers of the psychological aptitude test

As part of the selection process, external psychologists from Alpha-Test, who have been commissioned by GIZ, will also be given access to your personal data, who will support GIZ in evaluating your data with the help of psychological assessments. Without exception, these are persons subject to professional secrecy obligations.

  • to the application provider as the person responsible for the technical operation of the recruiting system

If there are technical problems or questions during the application process, the provider's support will support in solving the problem.

In addition, GIZ will not pass on your personal data to third parties unless it is legally obliged to do so by law.

3.1.8     GIZ-Talent pool

The purpose of the GIZ talent pool is to maintain contact with you and to ensure that you can be considered for other positions to be filled in the future after an initially unsuccessful application process. The collection of your personal data for the talent pool will only take place if you expressly consent to this after receiving a corresponding e-mail from us.

If you have consented to your data being stored in the GIZ talent pool, your consent is valid for six months. You must agree to the retention of your application data in the talent pool after this period and after receiving another e-mail. If you do not agree to this or do not reply to the email, the documents you have uploaded will be automatically deleted and your data will be transferred to an anonymized record.

3.1.9     Job subscription Service

On our website, we offer users the opportunity to create a job subscription by providing their e-mail address. The e-mail address and search criteria are entered into an input mask and transmitted to us and stored to be able to provide the service. The Job subscription generally has a term of 12 months and expires automatically after that, an extension is not possible. At the end of the reference period, all entries made will be automatically deleted. You can cancel your Job subscription at any time via a link in the Job subscription e-mail sent to you.

3.2      Duration of storage of your data

The information and documents uploaded by you during the online application process will be stored for six months, starting after the application process has been completed. After that, the documents you have uploaded will be automatically deleted and your data will be transferred to an anonymized data record. This serves the sole purpose of statistical evaluations and does not allow any conclusions to be drawn about your person.

Personal applicant data will only be stored for a longer period within the framework of your consent (GIZ talent pool) or on the basis of statutory retention obligations, or unless there is a reason in accordance with Article 17 (3) of the GDPR to store the data for a longer period of time.

4       IT security of your data

The protection of personal data is an important concern for GIZ. For this reason, technical and organizational security measures ensure that the data is protected against accidental and deliberate manipulation, accidental deletion, and unauthorized access. These measures are updated in line with technical developments and are constantly adapted to the risks.