DATA PROTECTION INFORMATION FOR CANDIDATES
Data protection information for candidates
Preliminary note
Throughout this document, “we”, “us”, “our”, “ours”, refer to DEKRA (India) Pvt. Ltd.. Wherever we have said ‘you’ or ‘your’, this means YOU.
With the following information, we would like to provide you with an overview of how your personal data is processed by us, as well as your rights under data protection law.
This data protection information describes all data processing procedures carried out by us and our Group companies via the DEKRA candidate portal.
Who is responsible for data processing, and whom can I contact?
The data controller deemed responsible for the processing of your personal data in connection with your visit to this website and the creation of a candidate profile via the DEKRA candidate portal under data protection law is DEKRA INDIA PVT. LTD. with its branch office located on the First Floor, 105D, Vatika Mindscapes, Tower D, Sector 27D, Faridabad 121003 Haryana. If you apply to one of our Group companies, it will act as an independent controller for the subsequent application process. Please refer to the further information in the respective job advertisement and on our website.
If you create a candidate profile independently of an application and do not make your profile visible, Dekra India Pvt. Ltd. is the controller.
If you make your candidate profile visible to recruiters from participating Group companies worldwide or nationally, i.e. in the country/region of your place of residence, the following Group companies act as joint controllers for processing in connection with your candidate profile outside of a specific application, depending on your selection:
DEKRA INDIA PRIVATE LIMITED First Floor, 105D, Vatika Mindscapes, Tower D, Sector 27D, Faridabad 121003 Haryana.
DEKRA Testing, Inspection & Certification India Private Limited Bldg No.GB 320 GAT No.12 Badhalwadi Village, Talegaon G H, Mawal, Maharashtra 410507, India.
DEKRA SE Handwerkstr. 15, 70565 Stuttgart, Germany konzerndatenschutz@dekra.com.
For any general questions and queries regarding the collection and processing of your personal data, please contact the contact persons mentioned in the respective job advertisement.
Should you have any questions about your rights as a data subject or would like to exercise these rights, please contact the data protection officer of the relevant DEKRA company via the contact address provided.
What data sources do we use?
We process personal data for the purpose of enabling the use of the DEKRA candidate portal, and for carrying out selection procedures to establish an employment relationship:
- which has been received directly from you as part of the candidate process, or the creation of your account and candidate profile,
- which we have permissibly collected from public sources or from third parties,
- or which has been disclosed to us, for example, by public authorities, insurance providers, pension funds, credit institutions, educational and training institutions, other external service providers or by third parties you have named as references.
Relevant personal data may include: Personal information (e.g. title, last name, first name), contact information (e.g. e-mail address, postal address, telephone number), information about your career (e.g. curriculum vitae), information about your qualifications (e.g. certificates), documentation data (e.g. interview notes) and other data comparable to the categories mentioned.
What do we process your data for (purpose of processing), and on what legal basis?
We process your personal data in accordance with the provisions of all applicable data protection laws.
A. For the purpose of the technical provision of the website
Insofar as you visit our website, it is necessary for the purpose of the website’s technical provision (and ensuring the requisite system security) that we process certain information automatically transmitted by your browser so that our website can be displayed in your browser and you can use the website. This information is automatically collected each time our website is accessed and automatically stored in so-called server log files; this information essentially comprises:
- IP address of the requesting computer
- Host name of the accessing computer
- Recognition data of the browser and operating system used
- Date and time of access
- Website from which the access is made (referrer URL)
Our legitimate interest in this regard is that we can make our website and our candidate portal technically available to you.
B. For the purpose of creating a user account and candidate profile
In the event that you create a user account in our candidate portal and provide us with your express consent to the collection and processing of your personal data, we process your personal data for the purpose of creating and managing the user account for the DEKRA candidate portal. Insofar as you create a candidate profile within your user account and provide us with your consent, and thereby provide information about your career and qualifications, we process your personal data for the purpose of enabling the creation and management of your candidate profile.
This primarily comprises personal information, address data, communication data, access data (e-mail address, password), as well as data pertaining to your professional experience and qualifications. You consent to the collection of personal data by DEKRA when you expressly click on the box provided for your consent for processing of your personal data for specified reasons while using the Website. You can withdraw the consent given at any time with effect for the future in any appropriate form.
C. For the purpose of communication
For the purpose of communicating with you, we process personal data upon your consent to do so, in order to respond to your inquiries or to communicate with you in the context of job recruitment procedures, and to send you pre-contractual documents.
This may include, in particular, your first name, last name, home address, e-mail address, telephone number and, if applicable, contract data.
Our legitimate interest here is to be able to stay in touch and communicate with you in the context of inquiries and vacancy procedures. This is to ensure smooth preparation of job placements and support of interested parties.
D. For the purpose of inclusion in an candidates pool
In the event that you provide us with your consent to store your personal data for the purpose of worldwide or nationwide matching with future job profiles in the context of selection procedures for possible employment, we will process your personal data in accordance with your selection for the purpose of notifying you by e-mail about jobs that match the requirements and qualifications you have indicated.
This may include, in particular, your personal information (title, last name, first name), address data (street, house number, postal code, city), contact data (private e-mail address, social media profiles), the preferred language of communication, candidate documents (cover letter, resume, references, salary requirements, notice period, possible start date), individual responses (how did the candidates become aware of the position, is the candidates of legal age, willing to relocate), previous activities, language skills and interests.
E. For the purpose of conducting a selection process for possible employment
In the event that you apply for a specific position and have given us your consent to store your candidate data in our candidates pool for suitable positions in the future, we process your personal data in the context of job filling procedures for the purpose of conducting a selection process for possible employment. For this purpose, your personal data will be transferred to the DEKRA company that has advertised the vacancy.
This may include, in particular, your first name, last name, address, country, e-mail address, telephone number, work experience, qualifications, references and language skills.
F. For the purpose of sending the newsletter (information about career opportunities) and sending the job newsletter
In the event that you provide us with your consent to send you regular information about career opportunities by e-mail or to inform you about jobs of interest to you via our job newsletter, we will process your personal data for the purpose of informing you by e-mail.
This may include, in particular, your first name, last name, e-mail address and your selection based on the filters set in the candidate profile.
We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will first send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
When you register for the newsletter, on the basis of your prior consent to the collection and processing of your personal data, we store your IP address entered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later date. We also store your registration to prove that you have registered and agreed.
You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter, or by withdrawing your declaration of consent vis-a-vis the data controller.
For the purpose of sending the newsletter, we store your data until you withdraw your consent or until the newsletter is permanently discontinued. For the purpose of proving consent, no longer than by the end of the fourth calendar year following the last advertising e-mail dispatch.
Who receives my data?
In order for us to process your data in accordance with the purposes described above, it may also be necessary to provide other recipients with your data for processing.
Within our group of companies, your data will also be transferred to other companies if they have advertised the vacant position or perform data processing tasks centrally for the companies affiliated in the group (e.g. IT services, HR support, disposal of files, etc.). Information on data protection is available on the website of the respective DEKRA company, or on DEKRA’s data protection portal (Data privacy notice).
With regard to the transfer of data to recipients outside the DEKRA Group, we only pass on information if this is required by law, if the candidateshas issued their consent, or this is necessary, in order to protect our legitimate interests.
Under these conditions, the recipients of personal data may include, for example, service providers and vicarious agents employed by us who receive data for these purposes, provided they observe confidentiality and data protection requirements, in particular. These can be companies operating within HR and IT services, telecommunications and consulting categories, for example. We ensure that your personal data is used in accordance with your instructions by concluding group-internal data processing agreements and with commissioned service providers.
The processing operations described in this data protection notice are processed via the SuccessFactors candidate of SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf. A corresponding data processing agreement has been concluded with SAP to this end, which ensures that your personal data is processed by SAP in accordance with instructions and in compliance with the requirements of data protection law. For more information pertaining to data privacy at SAP, see the SAP Data Protection Declaration and the Data Protection Area of the SAP Trust Center.
Is data transferred to a third country or to an international organization?
To provide you with the access and usage described above, your data may be processed or stored both in and outside your country of residence and you understand and provide your consent to such transfer. Some of the affiliated companies and partners of DEKRA that act as processors may access your personal information and may be established in countries outside your country of residence. In any case, your data may be transferred outside India to countries offering adequate protection according to Data Protection Laws and regulations applicable in India. In any case, where your personal information is sent to countries other than your country of residence your data will be protected by adequate safety systems, which are constantly updated and maintained in accordance with local Data Protection Laws and regulations.
How long will my data be stored?
We will retain your personal data till the time you withdraw your consent from sharing your personal data or as soon as it is reasonable to assume that the purpose for which the data is collected is no longer being served, whichever is earlier, after which it shall be erased unless retention is necessary for compliance with any law for the time being in force.
We generally store your personal data for a period of 4 months after the end of the process. If you have consented to be included in our candidate pool, we will process your data for this purpose for two years. However, you may opt any time to withdraw your consent from sharing your personal data.
We store any consent given to us for a period of four years from the time of its revocation or expiry.
In addition, we store your data for the purpose of complying with statutory retention periods, and for exercising legal claims or defending against legal claims within the scope of the statutory limitation provisions.
Is there an obligation for me to provide data?
You are not obliged to provide us with personal data. In the context of an application procedure, however, you must provide us with the personal data that is required for the procedure itself, in order to participate as a candidate in a selection process.
HOW CAN YOU ACCESS THE INFORMATION WE HOLD ABOUT YOU OR ACCESS YOUR PRIVACY RIGHTS
If you wish to exercise your access, correction, cancellation, portability and objection rights under the local Data Protection Laws including rights of correction, completion, updating and erasure, as detailed below, or make complaints and other inquiries, please email at dataprotection.esa@dekra.com.
Under the Data Protection Laws, you can exercise the following rights:
to be informed about any recipients of the information.
to access and review the information provided to the organization.
to amend or update the information if it is inaccurate or incomplete.
to withdraw consent at any time. You must withdraw consent in writing.
GRIEVANCE OFFICER
Security of your data is important to us. In case of any complaints or concerns on Privacy related issues you can always approach our Grievance Officer, Jieyu Tao and Cynthia Xu at jieyu.tao@dekra.com and cynthia.xu@dekra.com. Your concerns will be addressed in a time bound manner in accordance with the Data privacy laws. In the event you are not satisfied with the resolution of your complaints or concerns, you may approach to the relevant authority as per applicable law.
Version and amendment of this data protection declaration
The version of this data protection declaration is May 2024.
The further development of our company may also have an impact on the handling of personal data. We, therefore, reserve the right to amend this data protection declaration in the future within the framework of the applicable data protection laws and, if necessary, to adapt it to changed data processing realities. We will notify you separately of any significant changes to the content.
