Data privacy statement job application

We process your personal data for the following purposes:

• Creating a general application profile which we will use and rely on for all of your applications ‏ (you can amend your general application profile by logging into your account at any time);
• Creating a personalized job alert to receive new job offers published on the site corresponding to your search criteria. You can unsubscribe from receiving job alert notifications at any time via the link that is shared in every email we send you or by updating your preferences in your profile;
• Conducting the application and selection process with you, including the evaluation of your application and conduction of possible ‏ (video) interviews and online/onsite assessments ‏ (e.g. personality tests, cognitive ability tests, etc.);
• Necessary ancillary processes to the application and selection process ‏ (for instance, for mandatory reporting purposes and sanction list screening etc.);

We process this personal data in order to conduct the application and selection process, if successful employ you, and to make you part of our talent pool and provide you with its services, Art. 6 sec. 1 lit. b GDPR.

All your applications and their status will be visible to our recruiters and selected HR Managers for transparency in the selection process.

We will retain your application for 6 Months in order to comply with legal requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR and your general profile for 12 Months after your last update.

If you apply for a position in the USA or Puerto Rico, we will retain your application for 36 Months in order to comply with local requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR.

If you apply for a position in Indonesia, we will retain your application for 60 months in order to comply with local requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR.

If you apply for a position in Singapore, we will retain your application for 24 months in order to comply with local requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR.

3.2 Talent pool

We also process your personal data for our talent pool by:

• Creating a profile for you in our talent pool to be considered for future job offers and stay in contact with you ‏ (if you agreed to such use, for instance by checking the respective check box when applying for a job opening or during the application and selection process).
• Providing you with information regarding the Henkel group as an employer, employment op-portunities and new job offers, if you agreed to become part of our talent pool ‏ (see above).
• If you registered for the talent pool and also consented to receiving such information, we will send you information regarding our employer branding activities via e-mail.

We process your personal data for these purposes based on your consent, Art. 6 sec. 1 lit. a GDPR. We will ask you for your consent either directly during the application and selection process, via e-mail, or when you fill in a form and tick a respective check box. You can withdraw your consent by using the settings in your account area at any time or delete your account at any time. You may also contact us via the contact information provided above to let us know that you wish to withdraw your consent. We will then stop processing your personal data to send you such information. This does not make the processing previous to your withdrawal unlawful.

We will store your talent pool profile for 24 Months after registration for the talent pool or your last update of your talent pool profile. You can also delete your talent pool profile along with all your personal data connected to it at any time by logging into it and using the option for deletion.

If you are located in North America, we will store your talent pool profile for 36 Months after registration for the talent pool or your last update of your talent pool profile. You can also delete your talent pool profile along with all your personal data connected to it at any time by logging into it and using the option for deletion.

3.3 Video Interview

We will also process your data within the recruitment process for some positions in the course of a video interview. Please be aware that video interview will always be an optional step within the recruitment process. By rejecting the terms & conditions of Video Interview you will continue being part within the overall recruitment process without any negative consequences due to your refusal.

For matters of technical support, your personal data might be accessed from HireVue technical sup-port team which is located in the US.

We process your personal data for these purposes based on your consent, Art. 6 sec. 1 lit. a GDPR. Associated data transfers to third countries – here: to the US – are based your consent as well as on Art. 49 sec. 1 subsec. 1 lit. a GDPR. We will ask you for your consent with regards to data access for HireVue technical support team before starting the video interview / collection of data. You can withdraw your consent by contacting us via the contact information provided above to let us know that you wish to withdraw your consent. We will then stop processing your personal data to send you such information. This does not make the processing previous to your withdrawal unlawful.

Please find further information on how HireVue technical support team could access your data:

• Identity of the receiver:

• HireVue technical support team

• Jordan,Utah - United States of America

• Data exchange is required for matters of technical support. The technical support team will be involved in case of technical issues around HireVue system
• The technical support team will at times need to access the HireVue platform in order to research/review platform related technical issues

• HireVue technical support team will only access data directly related to the technical issue
• No further data is being accessed by HireVue technical support team
• Data that might be accessed will be: Contact data, data on former employment, data regarding the personal life, video data

• Please note that for the third country ‏ (US) to which your data might be transferred, there might be no adequate safeguard measures in place
• Under European law, the US does not guarantee an adequate level of data protection
• Also, please note that in the third country (US):

• there might be no supervisory authority
• and / or data processing principles
• and / or data subject rights might not be provided

Potential risks of data transfer might be related to illegitimate access, loss of data or undesired modification of data

3.4 Background check

All applicants for North American jobs ‏ (no matter which nationality) will have to go through a back-ground check prior to any contract signature in line with North American regulations.

Background check is an indispensable tool for spotting candidates who pose as legitimate threat to an organization based on past behavior. In fact, background checks often are the best defense against negligent hiring and retention claims. Employers can protect their brand, reputation, customers, em-ployees and guard against financial loss

A major reason to conduct background is to avoid harm or legal liability of various types to the em-ployer or to others. This includes harm to:

• Other employees by sexual harassment or workplace violence.
• The organization's internal and external customers by, for example, sexual assault on busi-ness premises.
• The employer's business through financial loss or image and reputational issues.
• Defense of legal claims, such as negligent hiring, is a compelling reason to conduct in-depth criminal records searches of job applicants. A multilevel jurisdictional criminal records search can be strong evidence that the employer exercised due care in hiring

4. Transfer of your personal data to other parties

In Henkel’s capacity as the mother company of the global Henkel group of companies, we will share your personal information with other Henkel offices or subsidiaries around the world in such countries for which you have registered your application, including countries outside the European Union or the European Economic Area, which might not provide the same level of data protection. All such entities are subject to this Data Protection Statement and further measures to secure an appropriate level of data protection that is equivalent to the one of the European Union, such as the conclusion of Stand-ard Data Protection Clauses as issued by the EU Commission pursuant to Art. 46 sec. 2 lit. c GDPR. You can find all Henkel offices and subsidiaries on our website.

To conduct the application and selection process and provide our talent pool we also rely on external service providers, which are strictly bound by our orders and may not process your personal data for their own purposes. These act as data processors pursuant to Art. 28 GDPR.

In case of involvement of head-hunters or recruitment agencies, specific process-related information will be shared with the head-hunter / agency for this particular process.

5. Use of cookies on our application form

This website uses cookies and similar technologies. Cookies are small units of data temporarily stored on the hard disk of your device by your browser that are necessary for using our website. A cookie often includes a unique identifier, which is a randomly generated number and stored on your device. Some expire at the end of your website session; others remain on your device for longer. Technically necessary cookies will be used automatically. Other cookies ‏ (or similar technologies) will only be applied based on your prior consent.

More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They may be set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block or alert you about these cookies, but some parts of the site may not then work.

Cookie name

Cookie purpose

expiration

Provider

Cookie Domain

The Amplitude Cookie is used to distinguish users and to provide information in case of troubleshooting and to improve the portal and is usage.

This is a default cookie that is required for ASP based pages to load. Without this cookie, our website will not function. This cookie contains the unique session identifier. This cookie does not contain any Personal Information.

This cookie is used to manage load balancing at our data center environment

This cookie is used to manage load balancing at our data center environment

This cookie provides our 24x7 global performance monitoring system with regional statistics to ensure our pages load quickly and consistently. This cookie contains the name of the portal logged into and an identifier representing a logged in user.

Targeting Cookies

These cookies may be set through our site by us and/or our service partners, including social media companies. They can be used to build a profile of your interests based on the browsing information they collect from you when you visit a website, which includes uniquely identifying your browser and/or internet device and show you relevant content or adverts on our and other sites. Our website uses the “Apply with LinkedIn” or the “Share” plugin button and if you interact with this plugin by clicking for instance “Apply” the plugin will use cookies to identify you and initiate your request to apply. If you do not allow these cookies, you will experience less targeted advertising.

Cookie name

Cookie purpose

expiration

Provider

Cookie Domain

Used for Cross Site Request Forgery ‏ (CSRF) protection and URL signature validation.

To facilitate data center selection

Used to store consent of guests regarding the use of cookies for non-essential purposes

Browser Identifier cookie to uniquely indentify devices accessing LinkedIn to detect abuse on the platform and diagnostic purposes

Used for remembering that a logged in user is verified by two factor authentication and has previously logged in

Used to remember a user's language setting to ensure LinkedIn.com displays in the language selected by the user in their settings.