Data Protection Statement Recruitment

Controller for processing of your personal data as described in this Data Protection Statement is Henkel AG & Co. KGaA, Henkelstraße 67, 40589 Düsseldorf, Germany

‏(henceforth “Henkel”, “we”, or “us”).

If you have any queries with regard to our processing of your personal data, please send an e-mail or a letter to our Data Protection Officer, c/o Henkel AG & Co. KGaA, Henkelstraße 67, D 40191 Düsseldorf, Germany, E-Mail: Datenschutz@henkel.com.

We process your personal data when you apply for a position at the Henkel group or otherwise want to become part of our talent pool. If you apply for a position and/or create an account for our talent community, we will collect the following personal data from you:

• Applicant Master Data ‏(personal information such as your name, age etc.)
• Contact Details ‏(address, e-mail-address, telephone number etc.)
• Application Data ‏(Information on your education, previous occupations, CV etc.)
• Fields of interest ‏(Information on positions you are or could be interested in etc.)

We collect this personal data directly from you when you apply for a position with the Henkel group, during the applications and selection process ‏(for instance, during ‏(video) interviews), or when you express your wish to become part of our talent pool to stay in contact for future recruitment purposes ‏(for instance, by checking the respective checkbox during your application process). Data fields marked with an asterisk ‏(*) are required for conducting the application and selection process, addi-tional information can be helpful for this process depending on the position you apply for.

We may also collect your professional information via LinkedIn that you have made public in order to approach you for a job offer.

3.1    Execution of the application and selection process

We process your personal data for the following purposes:

• Creating a general application profile which we will use and rely on for all of your applications ‏(you can amend your general application profile by logging into your account at any time);
• Creating a personalized job alert to receive new job offers published on the site corresponding to your search criteria. You can unsubscribe from receiving job alert notifications at any time via the link that is shared in every email we send you or by updating your preferences in your profile;
• Conducting the application and selection process with you, including the evaluation of your application also by using technical means to analyse if and to what extent your application fulfils the requirements in the job advertisement and including the conduction of possible ‏(video) interviews and online/onsite assessments ‏(e.g. personality tests, cognitive ability tests, etc.);
• Necessary ancillary processes to the application and selection process ‏(for instance, for mandatory reporting purposes and sanction list screening etc.);

We process this personal data in order to conduct the application and selection process, if successful employ you, and to make you part of our talent pool and provide you with its services, Art. 6 sec. 1 lit. b GDPR. The selection of suitable candidates also constitutes a legitimate interest on our part within the meaning of Art. 6 sec. 1 lit. f GDPR.

All your applications and their status will be visible to our recruiters and selected HR Managers for transparency in the selection process.

We will retain your application for 6 Months in order to comply with legal requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR and your general profile for 12 Months after your last update.

If you apply for a position in the USA or Puerto Rico, we will retain your application for 36 Months in order to comply with local requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR.

If you apply for a position in Indonesia, we will retain your application for 60 months in order to comply with local requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR.

If you apply for a position in Singapore, we will retain your application for 24 months in order to comply with local requirements to document the application and selection process, Art. 6 sec. 1 lit. f GDPR.

3.2 Talent pool

We also process your personal data for our talent pool by:

• Creating a profile for you in our talent pool to be considered for future job offers and stay in contact with you ‏(if you agreed to such use, for instance by checking the respective check box when applying for a job opening or during the application and selection process).
• Providing you with information regarding the Henkel group as an employer, employment op-portunities and new job offers, if you agreed to become part of our talent pool ‏(see above). 
• If you registered for the talent pool and also consented to receiving such information, we will send you information regarding our employer branding activities via e-mail.

We process your personal data for these purposes based on your consent, Art. 6 sec. 1 lit. a GDPR. We will ask you for your consent either directly during the application and selection process, via e-mail, or when you fill in a form and tick a respective check box. You can withdraw your consent by using the settings in your account area at any time or delete your account at any time. You may also contact us via the contact information provided above to let us know that you wish to withdraw your consent. We will then stop processing your personal data to send you such information. This does not make the processing previous to your withdrawal unlawful.

We will store your talent pool profile for 24 Months after registration for the talent pool or your last update of your talent pool profile. You can also delete your talent pool profile along with all your personal data connected to it at any time by logging into it and using the option for deletion.

If you are located in North America, we will store your talent pool profile for 36 Months after registration for the talent pool or your last update of your talent pool profile. You can also delete your talent pool profile along with all your personal data connected to it at any time by logging into it and using the option for deletion.

3.3 Video Interview

We will also process your data within the recruitment process for some positions in the course of a video interview. Please be aware that video interview will always be an optional step within the recruitment process. By rejecting the terms & conditions of Video Interview you will continue being part within the overall recruitment process without any negative consequences due to your refusal.

For matters of technical support, your personal data might be accessed from HireVue technical sup-port team which is located in the US.

We process your personal data for these purposes based on your consent, Art. 6 sec. 1 lit. a GDPR. Associated data transfers to third countries – here: to the US – are based your consent as well as on Art. 49 sec. 1 subsec. 1 lit. a GDPR. We will ask you for your consent with regards to data access for HireVue technical support team before starting the video interview / collection of data. You can withdraw your consent by contacting us via the contact information provided above to let us know that you wish to withdraw your consent. We will then stop processing your personal data to send you such information. This does not make the processing previous to your withdrawal unlawful.

Please find further information on how HireVue technical support team could access your data:

• Identity of the receiver:
  • HireVue technical support team
• Country to which the data is to be transferred for technical support:
  • Jordan,Utah - United States of America
• Why is the (restricted) transfer necessary?
  • Data exchange is required for matters of technical support. The technical support team will be involved in case of technical issues around HireVue system
  • The technical support team will at times need to access the HireVue platform in order to research/review platform related technical issues 
• The type of data that is being accessed
  • HireVue technical support team will only access data directly related to the technical issue
  • No further data is being accessed by HireVue technical support team  
  • Data that might be accessed will be: Contact data, data on former employment, data regarding the personal life, video data 
• The risks of data transfer:
  • Please note that for the third country ‏(US) to which your data might be transferred, there might be no adequate safeguard measures in place  
  • Under European law, the US does not guarantee an adequate level of data protection
  • Also, please note that in the third country (US):
    • there might be no supervisory authority 
    • and / or data processing principles 
    • and / or data subject rights might not be provided

Potential risks of data transfer might be related to illegitimate access, loss of data or undesired modification of data

3.4 Background check

All applicants for North American jobs ‏(no matter which nationality) will have to go through a back-ground check prior to any contract signature in line with North American regulations.

Background check is an indispensable tool for spotting candidates who pose as legitimate threat to an organization based on past behavior. In fact, background checks often are the best defense against negligent hiring and retention claims. Employers can protect their brand, reputation, customers, em-ployees and guard against financial loss

A major reason to conduct background is to avoid harm or legal liability of various types to the em-ployer or to others. This includes harm to:

• Other employees by sexual harassment or workplace violence.
• The organization's internal and external customers by, for example, sexual assault on busi-ness premises.
• The employer's business through financial loss or image and reputational issues.
• Defense of legal claims, such as negligent hiring, is a compelling reason to conduct in-depth criminal records searches of job applicants. A multilevel jurisdictional criminal records search can be strong evidence that the employer exercised due care in hiring

In Henkel’s capacity as the mother company of the global Henkel group of companies, we will share your personal information with other Henkel offices or subsidiaries around the world in such countries for which you have registered your application, including countries outside the European Union or the European Economic Area, which might not provide the same level of data protection. All such entities are subject to this Data Protection Statement and further measures to secure an appropriate level of data protection that is equivalent to the one of the European Union, such as the conclusion of Stand-ard Data Protection Clauses as issued by the EU Commission pursuant to Art. 46 sec. 2 lit. c GDPR. You can find all Henkel offices and subsidiaries on our website.

To conduct the application and selection process and provide our talent pool we also rely on external service providers, which are strictly bound by our orders and may not process your personal data for their own purposes. These act as data processors pursuant to Art. 28 GDPR.

In case of involvement of head-hunters or recruitment agencies, specific process-related information will be shared with the head-hunter / agency for this particular process.

This website uses cookies and similar technologies. Cookies are small units of data temporarily stored on the hard disk of your device by your browser that are necessary for using our website. A cookie often includes a unique identifier, which is a randomly generated number and stored on your device. Some expire at the end of your website session; others remain on your device for longer. Technically necessary cookies will be used automatically. Other cookies ‏(or similar technologies) will only be applied based on your prior consent.

More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They may be set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block or alert you about these cookies, but some parts of the site may not then work.

Targeting Cookies

These cookies may be set through our site by us and/or our service partners, including social media companies. They can be used to build a profile of your interests based on the browsing information they collect from you when you visit a website, which includes uniquely identifying your browser and/or internet device and show you relevant content or adverts on our and other sites. Our website uses the “Apply with LinkedIn” or the “Share” plugin button and if you interact with this plugin by clicking for instance “Apply” the plugin will use cookies to identify you and initiate your request to apply. If you do not allow these cookies, you will experience less targeted advertising.

Henkel Talent Community Landing Pages and Registration Portals use some cookies which are essential, as they enable you to move around the portal and use its features, such as accessing secure areas, allowing multiple applications without re-entering information, or using connections to social networks to apply.

Essential cookies used in portals

• Session cookie ‏(ScustomPortal-{portalUrlPath}): used to keep user logged through private portal areas.
• Language cookie ‏(portalLanguage-{portalId}): used to store current language selected by user in the portal.
• Token field for CSRF ‏(tokenField): Used for CSRF protection (only for logged users).
• Cookie consent preferences ‏(userCookieConsent-{portalUrlPath}): used to store the cookie types allowed/declined by the users in portals with the cookie management feature enabled, so they don't have to renew their consent on every page view/visit.

For how long are cookies stored?

• Session cookie: Until you close your browser.
• Language cookie: Until you close your browser.
• Token field for CSRF: 1 hour.
• Cookie consent preferences: do not expire.

You can find more information on the Cookies and other technologies used by our website and their purposes on our website under “Cookies” and “Cookie settings”. There, you can also withdraw your consent at any time with effect for the future by disabling the respective cookie setting. 

As a data subject, you have the following rights regarding your personal data:

• Right to access your personal data and receiving a copy;
• Right to rectification;
• Right to erasure ‏(also called “right to be forgotten”);
• Right to restrict the use of your personal data;
• Right to data portability;
• Right to withdraw your consent;
• Right to complain to a supervisory authority.

You also have the right to object to the use of your personal information in certain circumstances. For example ‏(i) where you have grounds relating to your particular situation and we use your personal information for our legitimate interests pursuant to Art. 6 sec. 1 lit. f GDPR ‏(or those of a third party); and ‏(ii) if you object to the use of your personal information for direct marketing purposes.

You can also easily access, rectify, and erase your data, as well as withdraw your consent by logging into your general application profile or your talent pool profile. You can also delete your general application profile and your talent pool profile at any time.

Also, you may exercise your rights by contacting us via the contact details disclosed above.