Privacy notice

 

BASF welcomes your interest in working for our group. Before you proceed with your application, we would like to briefly notify you how we process and protect your personal data.

 

We are hereby informing you regarding the processing of your personal data by BASF and your rights under the General Data Protection Regulation (“GDPR”).

For better clarity, this privacy notice is divided into three sections: The first section I. provides general information relevant for all subsidiaries of BASF which use these web pages for their application processes. Country and subsidiary specifics with regard to privacy are then explained in section II. Section III. gives you further insights into technically relevant information.

 

Overview

Part I. – Information on the application portal

Part II. – Information about the application process

Part III. – Technical Information

 

Part I. – Information on the application portal

A.    Who is responsible for processing of the data?

Responsible for processing of the data is

 

BASF Services Europe GmbH,

Rotherstraße 11, 10245 Berlin

Phone: +49 30 2005-5000

Fax:  +49 30 2005-5665 999

communications-berlin@basf.com 

 

Our Data Protection Officer can be contacted at: data-protection.eu@basf.com

 

 

B.    What categories of data do we use within the application portal?

In order to submit an application, you register with the application system and create an account. For this, you need your name, your email address, and the country of your residency. Through this account, are able to track your submitted applications and for which positions at BASF you applied.

 

You can use your personal data stored by third parties (e.g. Xing, LinkedIn, Dropbox or Google Drive) to create the profile in the portal. Information on the treatment of your personal data by these third parties can be found in the data protection policies of these third parties.

 

Once you have registered on the portal, you can enter and/or upload additional information to your profile, such as your CV, cover letter, attachments (both general and application specific) and other profile information (how did you learn about this position, details of the source, whether our HR managers may contact you about job opportunities that may be of interest to you), information about your education and work experience, professional certificates and language skills.

 

C.    For what purposes and on what legal basis are the data processed?

 

1.       If you register for our application portal in order to follow our job advertisements there and would like to be regularly informed about them, we will process your personal data on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a EU General Data Protection Regulation (GDPR).

You have the right to withdraw your consent at any time in the future, without affecting the lawfulness of the processing that has taken place on the basis of the consent until the withdrawal.

 

2.       If you want to apply for an advertised position, your registration is required so that we can process your application and contact you.

Registration is part of the application process and thus serves to carry out pre-contractual measures. The legal basis for the processing of data is therefore Art. 6 para. 1 letter b of the EU General Data Protection Regulation (GDPR).

 

 

D.    For how long is your data stored?

 

1.         If you have registered in our applicant portal for information purposes only (see I. C. 1.), your data will be deleted after 12 months since your registration in the portal.

           

2.         If you register for an application procedure, your registration will be deleted after the completion of the last application procedure, as soon as the provision of data for the above-mentioned purposes is no longer necessary. Your personal data will be stored in particular for the time in which claims can be made against us.

You can also delete your entire account via the profile function or have it deleted by a recruiter. Then, your personal data will be kept in our system for a maximum of 6 months and then automatically deleted.

 

E.    Objection to processing and erasure

 

You can change or delete the data stored about you at any time. Please note the contact information given in A. You can also use the address jobs@basf.com to contact us.

As a user, you also have the following options in the profile area at any time:

-       You can cancel your entire account/registration at any time.

-       You can delete all or selected information from your profile.

-       You can withdraw both your consent to the processing of your data and your application.

 

However, if you delete your account before the end of the application process, we can no longer consider your application.

 

Part II. – Information about the application process

 

A.    Who is responsible for processing of the data?

 

Responsible for processing of the data is

 

BASF Services Europe GmbH,

Rotherstraße 11, 10245 Berlin

Phone: +49 30 2005-5000

Fax:  +49 30 2005-5665 999

communications-berlin@basf.com 

 

Our Data Protection Officer can be contacted at: data-protection.eu@basf.com

 

B.    Which data categories do we use as the potential employer and where do they come from?

 

In particular the data you have given during the application process, e.g. master data (such as first name, last name, additional titles, nationality), contact data (such as private address, cellphone number, e-mail address), qualification data (testimonies, motivational letter), soft skill data (learnings from the interview, assessment center), suitability data (results from suitability test), bank account details, data on occupational pension schemes and family data (e.g. names and dates of birth of spouse and children) are part of the categories being processed. This may also include special categories of personal data such as health data.

 

Your personal data are normally recorded directly within the scope of the hiring process or during the application selection procedure. In specific constellations, your personal data are also recorded by other official bodies on the basis of statutory provisions. This includes in particular requests for tax-related information from the relevant tax authority based on a particular case as well as information regarding absences from work by the respective healthcare provider. In addition, we may have received data from third parties (e.g. job placement agencies, courts).

 

 

C.    For what purposes and on what legal basis are the data processed?

 

We process your personal data in compliance with the provisions of the GDPR as well as all other relevant laws.

 

The data is processed primarily for the potential conclusion, performance and termination of the employment contract. As part of the application process your data will thus be used by the HR departments at BASF and by other persons within BASF with a legitimate interest in the data, in particular the managers involved in the application process, in order to check your profile against job openings. At the same time, we will check whether we can offer you admission to our talent pool. The primary legal basis for this is Art. 6 Sect. 1 b) GDPR. In addition, collective agreements (company agreements and union regulations) in accordance with Art. 6 Sect. 1 b) in conjunction with Art. 88 Sect. 1 GDPR as well as your special consents in accordance with Art. 6 Sect. 1 a), 7 GDPR.

 

We also process your data in order to comply with our obligations as an employer particularly in the area of Tax and Social Security Law. This is done on the basis of Art. 6 Sect. 1 c) GDPR.

 

Where necessary, we also process your data on the basis of Art. 6 Sect. 1 f) GDPR for safeguarding legitimate interests by us or third parties (e.g. government agencies). This applies in particular to help solving crimes or within the BASF group for purposes of group management, internal communication and other administration purposes.

 

Moreover, due to the European regulations 2580/2001 and 881/2002 we are obligated to compare your data with the “EU terror list” in order to ensure that no money or other type of funding is being provided for terrorism-related purposes.

 

To the extent that special categories of personal data are processed in accordance with Art. 9 Sect. 1 GDPR, this is for the purpose of exercising rights or complying with legal duties under Employment Law, Social Security and Social Protection (e.g. disclosure of health data to healthcare provider, recording of severe disability status due to additional vacation and for calculating the severe disability charges) within the framework of the employment relationship. This is done on the basis of Art. 9 Sect. 2 b) GDPR. Moreover, processing of health data may be necessary for assessment of your fitness for work in accordance with Art. 9 Sect. 2 h) GDPR.

 

In addition, the processing of special categories of personal data may be on the basis of consent as set out in Art. 9 Sect. 2 a) GDPR (e.g. company health and integration management).

 

If we intend to process your personal data for a purpose not stated above we will inform you in advance.

 

 

D.    Who gets your data?

 

Within our company only persons and bodies (e.g. HR department, Works Council, Severely Disabled Representatives) who need your personal data for fulfillment of their contractual and statutory duties will receive your data.

 

Within the BASF group your data is provided to specific companies within the group as well as affiliated companies (e.g. joint ventures) if they centrally perform key tasks for affiliates within the company group or perform cross-company functions on the basis of the organizational structure.

 

In addition, in order to fulfill our contractual and statutory obligations we in part employ different service providers (e.g. in the context of onboarding "Enboarder" and otherwise travel service providers, debt collection service providers, IT service providers, consulting companies).

 

We may also disclose your personal data to other recipients outside of the company if necessary for fulfillment of our contractual and statutory duties as an employer. These may be, for example:

 

·       Official bodies (pension insurance provider, occupational pension schemes, Social Security providers, tax authorities, courts)

 

·       The employee’s bank (SEPA-payment medium)

 

·       Receiving offices of healthcare providers

 

·       Official bodies in order to guarantee claims from the company pension scheme

 

·       Third party debtors in the case of salary and wage garnishing

 

·       Receiver in the case of private insolvency

 

·       Auditors and experts

 

E.    For how long is your data stored?

 

We delete your personal data as soon as they are no longer needed for the purposes cited above. After termination of the employment contract, your personal data will be stored for as long as we are obligated to do so by law or it is necessary for fulfillment of subsequent obligations (e.g. from the company pension scheme). This normally arises due to obligations to provide and preserve records prescribed by law. Moreover, personal data may be stored for the time in which claims may be asserted against us.

 

 

F.    Which data protection rights can you assert as a party concerned?

 

At the above address you may request information on your personal data. To the extent that you have direct access to your data via portals/self-service the right to information is regarded as having been fulfilled. In addition, under specific circumstances you may demand correction or deletion of your data. You may also be entitled to a right to restriction of the processing of your data as well as a right to the disclosure of the data provided by you in a structured, customary and machine-readable format.

 

 

G.   Do you have the right to object?

 

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. We don’t process the personal data any longer unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

 

 

H.    Where can you complain?

 

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.

 

The supervisory authority with which the complaint has been lodged shall inform you on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

 

Furthermore, you can file a complaint with the Data Protection Officer specified above or contact the Data Protection Authority, having jurisdiction for us:

 

State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)

Hintere Bleiche 34

55116 Mainz

https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/

Emailpoststelle@datenschutz.rlp.de

 

 

I.      Will your data be disclosed to a third country?

 

Should we disclose personal data to service providers or companies within the BASF group outside of the European Economic Area (EEA) they will only be disclosed if the EU Commission confirmed an adequate data protection level for the third country or other data protection guarantees (such as binding corporate rules or EU standard contractual clauses) apply. You may request the information from the above specified contact details.

 

 

J.    Are you obligated to provide your data?

 

Within the scope of your application you are obligated to provide personal data necessary for the conclusion, performance and termination of your potential employment contract and compliance with the associated contractual duties or data which we are obligated by law to record. Without this data we will be unable to survey whether we can enter into a contractual relationship with you.

 

Part III. – Technical Information

Privacy Policy

Thank your visiting the BASF website. We appreciate your interest in our company.

As data protection is of utmost priority at BASF, we would like to inform you in detail about our Privacy Policy.

A.    Who is responsible for data processing and who is our data protection officer?

B.    What data do we process, for what purposes, for how long and on what legal basis?

C.    Are you obliged to provide us with this data?

D.    Whom do we disclose your personal data to?

E.    How do we secure your personal data?

F.    What are your rights?

G.    Where can you lodge a complaint?

 

A.        Who is responsible for data processing and who is our data protection officer?

You can find the controller here.

Our data protection officer:

Alexandra Haug
EU Data Protection Officer
67056 Ludwigshafen
+49 (0) 621 60-0

e-mail: data-protection.eu@basf.com

B.        What data do we process, for what purposes, for how long and on what legal basis?

Below, we inform you about data processing on our site (a), its purposes and legal basis (b) as well as the respective storage period and, if applicable, specific objection and removal options (c).

1.    Log files

a.     Data processing

If you visit our website for information purposes only, i.e. if you do not register or transmit data in any other way (e.g. via a contact form), the following information is automatically transmitted from your browser to our server:

·         Your terminal's IP address

·         Information about your browser

·         Name of the website from which you are visiting

·         Name of the offer page (URL) accessed or file opened

·         Date and time of your visit

·         Status information such as error messages

·         Transferred data volumes and the access status (file transferred, file not found, etc.)

·         Operating system and version of the operating system of your computer as well as the name of your access provider

b.    Purposes and legal bases

When you visit the BASF website, we use the IP address and other data that is automatically transmitted from your browser to our server under B. 1 a, to:

(i)            provide you with the requested content

(ii)           ensure the security and stability of our website and to trace any unauthorized use

(iii)          make it easy to use our website.

The legal basis for data processing is Article 6(1), first sentence, point (f) GDPR. Our legitimate interests follow from the data processing purposes specified above. We do not use the collected data for the purpose of drawing conclusions on your person under any circumstances.

c.     Storage period

The data will be erased once it is no longer necessary for the purpose for which it was collected. If data is collected to provide the website, it will be erased once when the respective session has ended. If the data is stored in log files, it will be erased after seven days, at the latest. It may be stored longer. In this case, the IP addresses are rendered anonymous by deleting the last eight bits and it will be no longer possible to attribute the calling client.

2.    Cookies

a.     Data processing and respective legal basis

We use cookies on our website. This is text information that can be stored for a visited website in the browser on the viewer's terminal (web server, server). The cookie is either sent from the web server to the browser or generated in the browser by a script (JavaScript). The web server can read this cookie information directly from the server during subsequent visits to this page or transfer the cookie information to the server via a website script. Cookies do not cause any damage to your terminal, and do not contain any viruses, Trojans or other malware.

The cookie stores information which in each instance arise in connection with the specifically used terminal device. However, this does not mean that as a result, we obtain immediate knowledge of your identity.

Generally, we use the following cookies:

·         Essential cookies

These cookies are required for the website to function. Usually, such cookies are only set in response to actions taken by you which correspond to a service request, such as configuring your privacy settings, logging in, or completing forms. You can select your browser settings to block such cookies or to notify you about them. However, in this case, some areas of the website will not work.

The legal basis for processing such cookies is Article 6(1), first sentence, point (f) GDPR. Our legitimate interests follow from the data processing purposes specified under B.1.b.

·         Service cookies

These cookies enable us to count visits and traffic sources in order to gauge and enhance the performance of our website. They assist us in determining which pages are most popular, which are least used and how visitors move around the website. All information gathered by these cookies is aggregated and therefore anonymous. If you do not accept these cookies, we cannot know when you have visited our website.

The legal basis for processing such cookies is your consent pursuant to Article 6(1), first sentence, point (a) GDPR, which you have given us by selecting in the cookie banner or in our Privacy Preference Center.

You have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. To do this, please change the settings in the Privacy Preference Center.

·         Functional cookies

These cookies enable the website to provide enhanced functionality and customization. They can be set by us or by third party providers whose services we use on our pages. If you do not allow these cookies, some or all of these services may not function properly.

The legal basis for processing such cookies is your consent pursuant to Article 6(1), first sentence, point (a) GDPR, which you have given us by selecting in the cookie banner or in our Privacy Preference Center.

You have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. To do this, please change the settings in the Privacy Preference Center.

·         Cookies for marketing purposes

These cookies may be set via our website. They may be used by our advertising partners to profile your interests and show you relevant ads on other sites. If you do not accept such cookies, you will experience less targeted advertising.

The legal basis for processing such cookies is your consent pursuant to Article 6(1), first sentence, point (a) GDPR, which you have given us by selecting in the cookie banner or in our Privacy Preference Center.

You have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. To do this, please change the settings in the Privacy Preference Center.

b.    Specific use of cookies, purposes and storage duration

Specifically, we use the following cookies, depending on the cookie preferences you set in the Privacy Preference Center. Only essential cookies are activated by default. If you do not want this either, you have the option of rejecting cookies in your browser altogether. In this case the functionality of the visited website may be affected.

 

 

Further details on the respective cookie providers is available in the Privacy Preference Center, under the respective cookie categories.

3.    Contact form and e-mail

a.    Data processing

Our websites contain contact forms as well as links for contacting us directly by e-mail. If you use one of these contact forms, the data entered in the entry mask will be transmitted to us and processed. The mandatory data, which must be provided in the respective contact form electronic contact information, are marked therein with (*). If you provide us with additional data, this is done voluntarily.

If you contact us directly by e-mail, we process the associated e-mail meta data as well as the content of the message.

b.    Purposes and legal bases

Your data will be processed to enable us to contact you and to process your request and also to provide you with our respective services, as well as to prevent any misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for processing such mandatory information is Article 6(1), first sentence, point (f) GDPR. The aforementioned purposes also constitute legitimate interests in the processing of the data. If the objective of the contact is the entering into a contract, an additional legal basis for the processing is Article 6(1), first sentence, point (b) GDPR. The legal basis for processing of data voluntarily provided by you is your consent pursuant to Article 6(1), first sentence, point (a) GDPR.

c.    Storage period

The data subject's personal data will be erased or blocked once the storage purpose ceases to apply. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations governing the controller. The data will also be blocked or erased once a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of such data for entering into or performance of a contract.

If you have given your consent, you have the right to  withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. Please notify your respective BASF contact partner accordingly.

4.    Embedded YouTube videos

a.    Data processing

We have embedded YouTube videos into our online offering, which are stored on the YouTube platform and can be played directly from our website. YouTube is a service of Google LLC. All videos are embedded in "enhanced privacy mode", i.e., no data about you as a user is transferred to YouTube unless you play the videos. At the same time, only a preview image loaded from our own web server is displayed.

Data will be transferred only when you play back the videos. We have no influence on this data transmission. The data transfer takes place regardless of whether you are logged into a YouTube user account or whether no user account exists. If you are logged in to Google, your information is directly associated with your account.

b.    Purposes and legal bases

We use such YouTube plug-ins on our website to present videos to you in an easy way.

The legal basis for processing such plug-ins is your consent under Article 6(1), first sentence, point (a) GDPR. You give your consent by clicking on the "play button" on the preview image.

If you have given your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.

c.    More information

Further information on data processing, in particular also on the legal basis and storage period by YouTube is available in the provider's privacy policy (https://policies.google.com/privacy) and also in the privacy banner on the YouTube platform. There you will also find further information about your rights and setting options to protect your privacy.

Moreover, Google processes your personal data in the USA, a third country without an adequate level of data protection.

5.    Social media hyperlink

Our website includes hyperlinks to the following social media services: LinkedIn, Facebook, Twitter, Vimeo, YouTube, Slideshare, flickr and Instagram.

These are designed in the form of the corresponding logos and are stored on our own server. No data about you as a user is transferred to the respective provider services that when our website is loaded for the first time. You will be directed to the respective website only when you click on the logos. More of your data may be processed on such websites.

We have no influence on such data processing on the respective linked websites.

C.      Are you obliged to provide us with this data?

When visiting our website, the information mentioned in point B. 1. a. and the information from the cookies classified as essential is processed automatically. Transmission of such information is voluntary. We cannot display the requested page without the provision of such personal data.

If you:

·         allow us to use cookies not classified as essential,

·         want to contact us and send us an e-mail or use our contact form to do so (including the necessary reCAPTCHA query), or

·         would like to watch embedded YouTube videos,

transmission of such information is voluntary.

If you contact us, we will not be able to answer your request, or not in the optimal manner in the selected way if you do not provide us with personal data required in the particular case. Insofar as cookies are concerned, the lack of consent may lead to the restriction of the functionality of the website or parts of it. Embedded videos cannot be played without your consent.

D.      Whom do we disclose your personal data to?

Within our company, only persons and departments are given access to your aforementioned personal data who need such data to fulfill the purposes mentioned above.

We also collaborate with service providers. These service providers work only according to our instructions and are contractually obliged to comply with the applicable data protection requirements.

Moreover, we disclose your data to third parties only if:

·         you have given your express consent to do so in accordance with Article 6(1), first sentence, point (a) GDPR,

·         the disclosure is necessary in accordance with Article 6(1), first sentence, point (f) GDPR, for the establishment, exercise or defense of legal claims and if there is no reason to assume that you have overriding legitimate interests in your data not being disclosed,

·         there is a statutory disclosure obligation in accordance with Article 6(1), first sentence, point (c) GDPR, or

·         this is permitted by law and required for the performance of contractual relationships with you in accordance with Article 6(1), first sentence, point (b) GDPR.

Your personal data will be disclosed to service providers in a third country only if the special requirements of Article 44 et seqq. GDPR are satisfied.

E.      How do we secure your personal data?

BASF uses technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously revised in line with technological developments.

F.      What are your rights?

You are entitled to certain rights under the General Data Protection Regulation:

Right of access: The right of access allows you to obtain information about your personal data processed by us and about certain other information (such as that provided in this Privacy Policy);

Right to rectification: If your personal data is incorrect or incomplete, you have a right to rectification;

Right to erasure: Based on the so-called "right to be forgotten", you can request the erasure of your personal data, unless there is an obligation to retain them. The right to erasure is not an absolute right. For example, we have the right to continue processing your personal data if such processing is necessary for compliance with our statutory obligations or for the establishment, exercise or defense of legal claims;

Right to restriction of processing: This right includes the restriction of use or of the manner of use. This right is limited to certain cases and exists in particular if: (a) the data is inaccurate; (b) processing is unlawful and you refuse its erasure; (c) we no longer require the data, but you need for the establishment, exercise or defense of legal claims. If the processing is restricted, we may continue to store the data, but not use it. We keep a list of persons who have exercised the right to restrict processing in order to be able to ensure this restriction;

Right to data portability: This right includes that if technically possible, we transmit your personal data in a structured, common and machine-readable format for your own purposes;

Right to object: You may object to the processing of your personal data if they are processed on the basis of legitimate interests, in particular in the case of direct marketing.

Right to withdraw your consent: If you have given us your consent to processing, you have the right to withdraw your consent at any time. Such withdrawal will not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.

The exercise of these rights is free of charge for you. However, you must prove your identity with two factors. We will make reasonable efforts in accordance with our statutory obligations to transfer, rectify or erase your personal data in our file systems.

To exercise your rights, please contact us, e.g. by e-mail or by post. The contact details are provided in section A.

G.     Where can you lodge a complaint?

You have the option of lodging a complaint with the data protection officer specified to in this Privacy Policy (see section A for contact details) or with a supervisory authority, in particular in the Member State of your place of abode, your place of employment or the place of the suspected infringement.

In any case, you may contact:

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (Rhineland-Palatinate State Commissioner for the Protection of Data and Freedom of Information)

Hintere Bleiche 34

55116 Mainz, Germany

https://www.datenschutz.rlp.de/de/general-storage/footer/ueber-den-lfdi/kontakt/

e-mailpoststelle@datenschutz.rlp.de

 

 

Credits Data Protection Contact