1. General information

This applicant system is operated by IEG (Deutschland) GmbH, Knesebeckstr. 59-61, 10719 Berlin, company register number HRB 89021 B.
IEG (Deutschland) GmbH is the controller within the meaning of Section 11 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) or Art. 28 of the EU General Data Protection Regulation (GDPR) and Section 62 BDSG (neu) (new German Federal Data Protection Act).
This data privacy statement, which exclusively relates to the data acquired in the context of the online application process, is provided to you to tell you how we handle the personal data acquired in the context of the application process. By sending your application, you agree to these data protection regulations, in particular to the processing and storage of your data in our applicants database.

2. Personal data in the context of the application process

Personal data means any information concerning the personal or material circumstances of an identified or identifiable individual. This includes all information such as your name, your address, your telephone number and your birth date, but also data on your specific career etc. which can be assigned to a specific person with reasonable effort. By contrast, information which cannot be related directly to your real identity is not personal data.

3. Acquisition and processing of personal data

Our data protection regulations are in compliance with the BDSG or the EU GDPR and the BDSG (neu) and the German Teleservices Act (Telemediengesetz, TMG).
When you apply for an advertised job or on your own initiative via our website, you voluntarily transmit personal data and information (first name, surname, e-mail address, telephone number and any attachments, such as CVs, covering letters etc.).
These transmitted data are transmitted using TLS encryption and stored in a database for which our company is responsible and which is operated by a third-party company called Personio GmbH (https://www.personio.de/), Buttermelcherstr. 16, 80469 München. We have concluded an appropriate data protection agreement within the meaning of the applicable laws mentioned above with Personio GmbH which offers the personnel administration and applicant management software that we are using and stores data exclusively on ISO-certified servers located in Germany.
If you send a speculative application directly by e-mail to careers@ieg-banking.com, the encryption will depend on your e-mail service provider.
Employees in charge at our company can access the database mentioned to fill vacancies with suitable candidates.

4. Storage of personal data

 
Personal data are as a rule stored only for the purpose of filling the vacancy for which you have applied.

5. Erasure of personal data

You may contact us at any time at careers@ieg-banking.com to arrange for the erasure of your data.

6. Disclosure of personal data

As described, we disclose your personal data to our service provider Personio GmbH (cf. Section 3 of these data protection regulations). Your personal data will be disclosed otherwise only if IEG (Deutschland) GmbH is under a legal obligation to do so or if this is necessary in a case of misuse or to carry out investigations. However, this requires concrete indications of unlawful or abusive behaviour. By order of an authorised body, we may in a particular case provide information as to these data (existing data), in particular for the purpose of criminal prosecution.

7. Security of your personal data

Both we as an enterprise, any employees involved in the application process and involved third parties, such as Personio GmbH, are obliged to take suitable organisational and technical measures to protect personal data against misuse, unauthorised publication and loss. These measures at least comply with the requirements of Section 9 BDSG or Section 64 BDSG (neu).

8. Right to information

Under Section 34 BDSG or Art. 15 DSGVO and Section 57 BDSG (neu), you have the right to demand that we provide you with information as to the data we have stored on you. In addition to this, you have the right within the scope of Section 20 BDSG or Art. 16 et seq. GDPR or Section 58 BDSG (neu) to demand that we correct, erase and block your personal data. To exercise these rights, please contact IEG (Deutschland) GmbH or send an e-mail to careers@ieg-banking.com.

9. Questions and suggestions

You may contact us directly at any time if you have any questions regarding our notes on data protection and the processing of your personal data. Please write to:
IEG (Deutschland) GmbH,
attn. of Ms Giorgia Ferrero
Knesebeckstraße 59-61
10719 Berlin
or send an e-mail to: careers@ieg-banking.com.

10. Validity of and amendments to the data protection regulations for the applicant system

The data privacy statement is currently in force and dates from 24 November 2017. The further development of our application process or the implementation of new functions or technologies and/or statutory requirements may make it necessary to alter these data protection regulations. We reserve the right to make appropriate changes at any time.
Note: This template was created with care but does not claim to be complete, up-to-date and accurate. It is intended to be a suggestion and provided for information only. This does not release the reader from the obligation to check it on his own responsibility. In particular, this template must not be understood as providing legal advice and cannot substitute the advice of a lawyer.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.