Content:
This information gives you an overview of how we process your personal data when you visit the website BRITA Karriere and use our online application system. We inform you about what data we collect from you and how we use it. We will also inform you about your rights under applicable data protection law and tell you who to contact if you have any questions.

1. Who is responsible for data processing?
In the context of processing your personal data for the purpose of applying to a BRITA Group company, the respective BRITA Group company is responsible. In this data processing, BRITA SE is a commissioned data processor within the meaning of Art. 28 DSGVO. For certain processing of your personal data in connection with the use of the online application system, BRITA SE is responsible for the processing.

The contact details of BRITA SE are:

BRITA SE
Heinz-Hankammer-Straße 1
65232 Taunusstein
Telephone +49 6128 - 746-0
E-mail: jobs@brita.net

If required , you can also use these contact details to obtain the contact details of the BRITA Group company to which you are applying for a job or submitting an unsolicited application.

2. Who can you contact with questions about data processing?
You can address questions regarding the processing of your data to the data protection officer at any time.
The contact details of the data protection officer of BRITA SE are:

Dr. Karsten Kinast
KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
D-50672 Cologne
E-mail: mail@kinast.eu
URL: www.kinast.eu

3. What data do we process from you?
We process your personal data when you visit the website brita.de/career and use the online application system or contact us in any other way. Specifically, this may include the following data:

• Data you provide when setting up a candidate profile (first name, last name, email address, password, residence (country), address, phone number, date of birth, interest in receiving email notifications, consent to be included in the candidate pool, documents you upload such as resume and references)
• Data we need to prove that your candidate profile has been set up properly (including IP address and timestamp of profile setup)
• Data you provide to us when you create a job ticker for suitable jobs (including keywords, location)
• Data about your applications carried out when using the online application system (including title, first name, last name, date of birth, address, e-mail address, telephone number, mobile phone number, previous contacts with a company of the BRITA Group, data on school education, training and studies, data on previous professional career, data on driving license, data on possible impairments, data on the field of application, cover letter, resume, certificates, portrait photo)
• Data we receive when conducting an aptitude or recruitment test for trainees (data on personality and performance)
• Data from career-oriented social networks (e.g. Xing, LinkedIn), insofar as these are generally accessible
• Data that we need to prove that you have given your consent, e.g. in the case of inclusion in the candidate pool (IP address and time stamp, declarations of consent given)
• Data that you provide to us via a web form or in any other way when you contact us
• Data you provide to us as part of a chat application (voice recording and text logs) e.g. your name, contact details, work experience.

4. Is there an obligation to provide the data?
There is no legal requirement to provide your data. However, some of the data mentioned are required in order to set up a candidate profile as well as to submit an application. Without the communication of the data required to carry out an application process, we are not able to enter into an employment contract with you. The communication of other data is voluntary, but may be necessary for the use of certain services. This concerns, for example, data for setting up a job ticker for suitable jobs. We will inform you when you enter data if the provision is required for the respective service or function. This data is marked as mandatory fields. In the case of required data, failure to provide it will result in the relevant service or function not being provided. In the case of optional data, failure to provide it may result in us not being able to provide our services in the same form and to the same extent as usual.

5 For what purposes do we process your data and on what legal basis is this done?

5.1 Candidate profile
If you create a candidate profile with us, we will set up a password-protected profile for you. In your profile, you can manage your data and set up a job ticker. Your e-mail address, together with your password, serves as identification for your candidate profile. The legal basis for the described data processing is  Art. 6 (1) (b) of the General Data Protection Regulation (pre-contractual measures and contract performance).

5.2 Job ticker
If you have created a candidate profile, you can also create a job ticker to receive information about open jobs in BRITA Group companies that match your interests. You can change, update or delete these details and the job tickers you have created at any time, or deactivate your job tickers. The legal basis for the described data processing is Art. 6 (1) (a) of the General Data Protection Regulation (consent).

5.3 Personal career information
If you have created a candidate profile, you can receive information about current career topics. The companies of the BRITA Group will send you content on current career topics (e.g. information on specialist areas/topics, entry opportunities within the Group, and announcements and invitations to events) by e-mail. Based on your candidate profile, the career information will be tailored to you personally. You can revoke your consent for personalized career information at any time in your candidate profile under "Data protection information". The legal basis for the described data processing is Art. 6 (1) (a) of the General Data Protection Regulation (consent).

5.4 Implementation of application procedures
You have the option of applying online for an advertised job or submitting a speculative application. The online application system is available to you for this purpose. Your data and the file attachments you send are transmitted via an encrypted connection. Your data will be received by the Human Resources department and forwarded to the department responsible for the advertised job or to the persons entrusted with handling the application process. All parties involved will treat your application documents with due care and confidentiality.

We process the data you send us in connection with an application in order to check your suitability for the job (or, if applicable, other open positions in the BRITA Group company to which you are applying for a job or submitting a speculative application) and to carry out the application procedure. The legal basis for the described data processing is Article 6 (1) (b) of the General Data Protection Regulation (prior steps to entering into a contract on request of the data subject).

If we conclude an employment contract with you, we will further process your data for purposes of the employment relationship if this is necessary for its implementation or termination. The legal basis for the described data processing is Article 6 (1) (b) of the Basic Data Protection Regulation (implementation of the employment relationship).

5.5 Defense against legal claims
We process your data insofar as this is necessary for the defense of asserted legal claims arising from the application process. The legal basis for this is Art. 6 (1) (f) of the Basic Data Protection Regulation (legitimate interests, based on the interest of the BRITA Group company to which you are applying for a job or submitting an unsolicited application, to be able to defend against legal claims.)

5.6 Candidate pool
If your application does not match the job profile you are looking for, but seems suitable for other jobs, you can agree to be included in our candidate pool.

If you agree to be included in our candidate pool, we will process your data beyond a specific application process. This enables recruiters to approach you at a later date with new jobs from BRITA Group companies that match your personal qualifications and interests. Consideration in such a new application process will only take place with your consent. You can edit, change or delete the information you have provided at any time. The legal basis for the described data processing is Art. 6 (1) (a) of the General Data Protection Regulation (consent).

5.7 Web server logs
When you visit our websites, in order to ensure the security of our IT systems, we process the connection data of the requesting computer including the IP address, the websites that you visit with us, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard. The legal basis for the described data processing is Art. 6 (1) (f) of the General Data Protection Regulation (legitimate interests, based on BRITA's interest in ensuring the security of IT systems).

We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. We do not determine your exact location. We process the data to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the described data processing is Art. 6(1)(f) of the General Data Protection Regulation (legitimate interests, based on BRITA's interest in measuring the success of employer advertising campaigns).

6. Who has access to your data and for what reason?
Within the BRITA Group company to which you apply for a job posting or submit a unsolicited application, only persons who need your data to perform the tasks assigned to them will have access to it. This mainly concerns employees of the Human Resources Department.

Outside the BRITA Group company to which you apply for a job or submit a speculative application, BRITA SE has access to your data for the purposes of providing the online application system and managing the candidate pool. If you have given your consent to be included in the candidate pool, all BRITA Group companies may access your data in order to contact you if a suitable vacancy arises. In addition, service providers who support us in fulfilling our tasks may have access to your data. These are service providers in the following categories:

• Hosting service providers for the operation of our servers
• Development service providers for programming, development, maintenance and support of software applications, in particular the online application system
• Scanning service providers for the digital capture of paper documents
• Service provider for conducting aptitude and recruitment tests
• Service provider for the execution of chat applications
• Personnel service providers to support the selection of applicants
• The service providers we use must meet special confidentiality requirements. They will only be granted access to your data to the extent and for the period of time necessary to perform their tasks.

7. Is data processed outside the European Union?
We also use service providers located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally provide an adequate level of protection. We have therefore taken special measures to ensure that your data is processed in the third countries as securely as within the European Union. With service providers in third countries, we conclude the standard data protection clauses provided by the Commission of the European Union for the processing of personal data in third countries.

8. How long will the data be stored?
In the event of a rejection of your application on our part, we will delete your collected data six months after the rejection.

We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted at most after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We store your personal data only to the extent required by law or in a specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will initially continue to be stored insofar as this is necessary and permissible and will then be transferred to the personnel file. Otherwise, we delete your data after these periods or determine the deletion period according to these criteria:

• Candidate profile data after 6 months of inactivity of the candidate at the latest
• Data on job tickers set up either after revocation of consent or at the latest 6 months after the candidate has been inactive
• Data on an application 6 months after completion of the application process

9. What rights do you have?

9.1 Information
You can request information about your personal data processed by us.

9.2 Correction
If your information is not (or no longer) accurate, you can request your data to be corrected. If your data is incomplete, you can request it to be completed.

9.3 Deletion
You have the right to request the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that require us to retain your data.

9.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate reason.

9.5 Objection
You have the right to object to the processing of your data on legitimate reasons relating to your particular situation. In the event of a justified objection, we will no longer process your data.

9.6 Right of complaint
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

9.7 Data portability
You have the right to receive personal data that you have provided to us in an electronic format.

9.8 Withdrawal of your consent
You have the right to revoke any consent to the processing of your data that you have given to us at any time. This also applies to the revocation of declarations of consent that you gave to us before the applicability of the General Data Protection Regulation, i.e. before 25.05.2018. The revocation of consent does not affect the lawfulness of the processing of your data carried out until the revocation.

9.9 Contact
To exercise the aforementioned rights, the easiest way is to contact us at jobs@brita.net