Data Protection

Article: Data Protection

Thank you for visiting our website. We are pleased that you are interested in Deutsche Bahn (AG)* as a potential employer. The protection of personal data of applicants**, employees and all third parties connected with us is of particular importance to us.

When processing personal data, Deutsche Bahn takes account of the relevant statutory provisions on privacy and data security applicable in the respective countries, as well as of our internal privacy regulations.

This Privacy Notice provides information on how Deutsche Bahn deals with personal data collected through Deutsche Bahn’s job board web pages, or that you otherwise provide to Deutsche Bahn, due to your application, and explains the handling of your personal data in the course of the application process.

For better clarity, this privacy notice is divided into three sections: The first section A provides general information relevant for all subsidiaries of Deutsche Bahn which use these web pages for their application processes. Country and subsidiary specifics with regard to privacy are then explained in section B. Section C gives you further insights into technically relevant information.

Part A - General Information

1. Which purpose has the personal data collection?

Deutsche Bahn needs your personal data to handle your application. The data you have provided to us in line with your application will only be used and processed for the purpose of applicant selection. For the handling of your application we will only use the information that you have provided to us directly. This may include details that you have stored in online career networks or other job boards.

In addition, it is our goal to make the application process as easy as possible for you. We take your application into account for further positions within our subsidiaries. In this case, we might contact you and invite you to apply for another position if your profile matches. You then decide if you are interested in applying. The same applies for any speculative application that you might have provided to us.

2. Which personal data do we collect?

We record your personal data which is relevant for, or that you provide to us during, the application process (including, but not limited to last name, first name, address, email, position you applied for, and details on your application). To be able to consider your application thoroughly we might also need information on your previous professional career and other similar information.

In the case of a speculative application which does not refer to a concrete position, we also ask for your interests (e.g. with regard to location and job groups of interest) in order to consider you for other suitable jobs.

In the case of an online application you complete the personal data in the online forms and upload the relevant documents. In the case of other application channels, we record the relevant information from your application and store your application documents.

3. Who processes the information from your application?

Due to the organizational structure of Deutsche Bahn and depending on the method of application chosen by you, your application might be processed by different divisions. In all cases, your personal data will exclusively be processed by the unit that is responsible for recruiting and, if necessary, by service providers which are contractually bound and legally obliged to comply with the applicable privacy regulations.

In your online application for a specific job or to attend a recruitment event, you can, as an external applicant, actively agree to the disclosure of your personal data for other suitable jobs in the same or another group company (both nationally and internationally). If you do not agree or if you cancel your agreement, this means that the application will cease to be considered for other jobs. If you have applied by email or post, we will inform you in the acknowledgement of application that we would also like to check your application against other job offers in the same or another group company. In this regard, we will advise you to notify us if you do not agree to this. Prior to any disclosure of your personal data, we will contact you again to obtain your express consent. You may cancel your agreement to disclosure at any time, by email or post, at the address indicated in Clause 1. Cancelling your agreement to disclosure of the application means that the application will cease to be considered for other jobs.

4. Who is informed about your application?

Your personal data is treated strictly confidentially and will be provided only to the competent persons involved in the recruitment process and to subcontractors which might deliver necessary services during the selection process (e.g. online test suppliers). For more details on subcontractors on a country and subsidiary level please refer to section B.

Should you be considered for employment, the subsequent use or disclosure of your information is limited to general accepted employment-related purposes to those with a need to know. This includes information disclosed to internal or third party providers for required pre-employment check, verification and any legal or regulatory requirements.

If you apply online, we ask you to decide to which extent we are allowed to share your personal data:

If you select „nationally": In this selection, we only show your data to the recruiters and employees who decide whether you get the job. In most cases, these are the employees in the country and area you are applying for. Sometimes the team that decides on your application works in a different country. But it is important for you to know that the rules for protecting your data apply to the country in which the position you are applying for is located. Therefore, please read the relevant privacy policy.
By selecting "internationally" instead, all Deutsche Bahn recruiters worldwide who use this technical platform will have access to your application data. In addition, also the employees who decide whether you get the job. You can revoke this option at any time. This choice is an advantage if you would like to work in other countries.

Within DB Group uniform minimum standards apply for dealing with personal data, according to our Global Privacy Policy.

In particular, it is inadmissible to use your application/profile for other purposes besides our recruitment processes, as described in our Privacy Policy. Nevertheless please note that due to the various locally applicable data protection regulations there are different levels of protection by the respective privacy regulation in the different countries.

If you applied using any other application channel besides online application, your personal data will only be shared in the country the job is located in.You can revise your decision on the visibility of your application at any time, for instance you may decide to withdraw your decision to be visible internationally. If you want to do so, please refer to part B and the respective country and subsidiary specific section for the concrete email address.

5. How can you change your personal data?

In the case of an online application you can access and update your profile and personal information in the job board, including your personal data and added documents, at any time. Furthermore, it is possible to withdraw an application for a position via your profile. If you want us to delete your profile and/or some or all of your applications with immediate effect, please refer to part B for the respective email address to request the deletion. In this case we will also inform any subcontractor (e.g. for online tests) who might have received your personal data and request the instant deletion of your personal data.

6. When is your personal data deleted?

Due to different deletion periods based on the diverse applicable local data protection laws please refer to the relevant paragraph in part B for further details. We will only store your personal data as long as necessary.

You have questions about data privacy?

For question and suggestions around the privacy topic please address them to our contact persons in the respective country and subsidiary named in part B.

Part B – Additional Country and Subsidiary Specific Information

Austria

Besides the general information provided in section A and C the following country-specific details are relevant in addition if you lodge an application to Schenker & Co AG (DB Schenker in Austria).

1. Who is responsible for data collection and processing?

Schenker & Co AG, Human Resources Department, Stella-Klein-Löw-Weg 11, 1020 Vienna, karriere@dbschenker.com, is the office responsible for collecting and processing your data.

If you have any questions to or suggestions on data protection issues relating to our recruitment, please contact us: at.sm.vie.privacypolicy@dbschenker.com

2. On which legal basis and how do we collect your personal data for the purposes of a job application?

(Supplement to Part A item 1)

We collect your personal data for the purpose of handling your application on the legal basis of Art. 6 clause (1) b) in addition to the aforementioned legal ground, to safeguard our legitimate interests (eg to exercise or defend legal claims) in accordance with Art. Article 6 (1) (f) GDPR and for the fulfillment of legal obligations (to which Schenker & Co AG is subject) pursuant to Art. Art 6 (1) (c) GDPR and on the basis of your consent in accordance with Art. Article 6 (1) (a) GDPR. In the case of an online application for a specific job, an initiative application or to attend a recruitment event (cf. on this Clause 8.2 Event Portal), you enter your data into the appropriate online form yourself. For security reasons, we will send you a notice of confirmation after you have completed online registration. In the case of an email application, we enter all relevant data into our recruitment system and upload your documents including your email. Your email will subsequently be deleted from our mailbox. Where an application is made on paper, we scan your application documents and upload them into our recruitment system. Your original documents will be returned to you by post once the information has been entered.

3. What data do we collect for the purposes of your application?

(Supplement to Part A item 2)

In relation to your application, we undertake only to use data which comes directly from you personally. This may also include data which you make available online for the purposes of the describing your professional career (e.g. in social networks). We will not undertake any additional research relating to you personally, e.g. by way of an internet search engine. Please feel free to notify us of further information relating to your professional career which is available online.

Where you make an online application, instead of entering your personal data manually or uploading a CV document, you can also transfer your profile from a social network (LinkedIn, XING, Seek, Viadeo).

If, during the application process, we ask you to state your gender by indicating how you wish to be addressed (Mr/Mrs/Ms/Mx), this is solely to ensure that we use the correct form of address when writing or speaking to you. The reason for entering your age or date of birth is that a statutory minimum age applies to some of our professions and jobs. Non-EU nationals require a work permit for Austria. We will therefore ask about your nationality during the application process.

If you receive a confirmation from us and an employment contract is concluded with you, the transmitted data will be processed and stored for the purpose of processing the employment, under observation of the statutory provisions.

Due to the anti-terror regulations EC-VO 2580/2001 and EC-VO - 881/2002, DB Schenker Austria must not maintain any economic relationships with organizations and persons suspected of engaging in terrorism. In order to meet this regulation, we are required to reconcile every applicant invited for a job interview against a sanction list with the persons and organizations suspected of terrorism. Of course, this happens in compliance with all data-protection-law provisions.

4. Who processes the information contained in your application?

(Supplement to Part A item 3)

When selecting the 'Nationally' option for application review, your personal data will be shared exclusively with the responsible recruiting team. Due to organizational structure at DB Schenker, the team that decides on your application may work in a different country within the Region Europe. This includes disclosure to recruiters and relevant employees involved in the decision-making process to assess your suitability for the position. Rest assured that your information will be handled with the utmost confidentiality and used solely for the purpose of evaluating your application for employment within the specified country.

By choosing 'Internationally’, your application data will be accessible to DB Schenker recruiters in Region Europe who utilize this technical platform. It's important to note that the Region Europe may encompass countries outside the EU/EEA. By submitting your application, you explicitly consent to the transfer of your data to these countries, for the purpose of comprehensive evaluation of your application. You retain the right to revoke this option at any time. This choice is particularly advantageous if you have an interest in working across various countries. Rest assured, your data will not be disclosed to third parties outside of our DB Group.

In your online application for a specific job or to attend a recruitment event, you can, as an external applicant, actively agree to the disclosure of your personal data for other suitable jobs in the same or another group company (both nationally and internationally). If you do not agree or if you cancel your agreement, this means that the application will cease to be considered for other jobs. If you have applied by email or post, we will inform you in the acknowledgement of application that we would also like to check your application against other job offers in the same or another group company. In this regard, we will advise you to notify us if you do not agree to this. Prior to any disclosure of your personal data, we will contact you again to obtain your express consent. You may cancel your agreement to disclosure at any time, by email or post, at the address indicated in Clause 1. If you retract your consent to share your application, the consequence is that your application will no longer be taken into account for other positions.

When selecting someone for a specific job, and throughout the recruitment process, your application documents will be shared with those responsible for recruitment in the relevant group company.

5. Upload CV / Resume to create a profile – DB Talent Pool

Apart from applying for a specific job, our career page also allows you, as an external applicant, to submit your profile and CV to the DB Talent Pool.

Where, following a personal meeting at a DB event or trade fair; after completing your internship with DB or after applying for a specific job, you would like to stay in touch with us for career guidance, we invite you to join the DB Talent Pool. In order to submit your data to the DB Talent Pool, go to our career page and enter your personal details, upload your CV / resume to create a profile in the same way as for an online application. We will also ask about your preferred region, field of work, starting date and availability.

6. When will your personal data be deleted?

(Supplement to Part A item 6)

In the context of an online application for a specific job or to attend a recruitment event, and when submitting your data to the DB Talent Pool, you can delete your data and the attachments (e.g. your CV) at any time yourself. In addition, you can ask us to delete your data. If you require the immediate deletion of your applicant profile, please contact the address indicated in Clause 1.

Our standard deletion period for an application is seven months after the end of the application process (the applicant has either been hired or rejected).

The reason for the retention period of seven month is the Austrian “Gleichbehandlungsgesetz” and its limitation period of 6 months. It lies in our legitimate interests to store application data to be able to defend ourselves in court proceedings.

Your candidate profile (online user account) will be deleted automatically from our career portal seven months after your last application has been deleted and if you have not also logged in to the career portal since that deletion. If you have logged in without submitting an application, the deletion period of seven months is as from your last log-in. In both cases, you will receive an e-mail 14 days before your candidate profile (online user account) is deleted, notifying you of the upcoming deletion. In this e-mail, you will also be informed that you can keep the account active and prevent deletion if you log in to your candidate profile (online user account).

If you have created a profile and stored your profile in the DB Talent Pool without submitting an application, we will notify you via e-mail if your candidate profile was last updated 6, 9, 12 or 15 months ago and request that you update your candidate profile. If you do not update your candidate profile, your data will be deleted completely at the latest after 18 months if your profile is not updated.

7. Technical information on the career portal (https://db.jobs)

(Supplement to Part C)

7.1 Supplemental information on the use of cookies

(Supplement to Part C Item 2)

Session cookies cannot be deactivated as they are necessary for the use of this website.

The “JSESSIONID cookie” is used as an identifier for applications using stateless protocols in order to identify multiple requests from one client and assigned them to a session. This cookie contains a long, alphanumeric ID which is stored on the server. If the two IDs match, the client is permitted to send queries to the server. The session and the cookie are deleted as soon as the page is closed.

7.2 Supplemental information on the use of YouTube

(Supplement to Part C Item 4)

We are interested in giving you a wide variety of information across media formats. Our website includes embedded YouTube videos. The legal basis for this processing is Article 6 Subsection 1 littoral f of the General Data Protection Regulation (GDPR). We merely enable a connection to YouTube. YouTube is a service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

The privacy-enhanced mode is activated for all YouTube videos on our website. The privacy-enhanced mode is provided by YouTube and ensures that YouTube does not save any cookies containing personal data on your computer. When the website is called up and in the embedding of the videos the IP address is transmitted. This will not be assigned to any other data if before you call up the page you have not logged in to YouTube or another Google service or if you are not permanently logged in.

When you click to play the embedded video, the privacy-enhanced mode means that YouTube saves on your computer only cookies that do not contain any personally identifiable data. These cookies can be disabled in the browser settings and extensions. YouTube sets a session cookie that is deleted when you close your browser.

For more information on the integrated YouTube videos, see YouTube's informational page under: https://support.google.com/youtube/answer/171780?hl=de

7.3 What happens with links to external websites?

When you click a link to an external website, you are forwarded to a page outside DB's career portal. DB Schenker Austria does not assume responsibility for the content, services or products offered by or the data protection and technical security on the linked website.

8. Rights of the Data Subject

You have the right to request information on the personal data stored about you, at any time. You also have the right to request the correction of inaccurate personal data concerning you, including the completion of incomplete data, if necessary in the form of a supplementary statement. In addition, you have the right, where appropriate, to request the deletion of stored personal data about you. If statutory provisions, e.g. storage obligations, do not allow deletion, processing of your data will instead be restricted (i.e. blocked), so that the data is only accessible for the purpose of complying with the mandatory statutory provisions. You may also have the right to request that the processing of your data be restricted (blocking). With regard to personal data that you have made available to us and which is processed by us using automated procedures based on consent or contractual agreement, you have the right to request that this data be transferred to you or, where applicable, to a third party designated by you. You may object to data processing for reasons arising from your particular situation if data processing is based on our overriding legitimate interests or is necessary for the performance of a public duty. Insofar as data processing is based on your consent, you have the right to withdraw consent at any time. You also have a right to complain to the regulatory body. The regulatory body responsible for DB Schenker Austria is: Austrian Data Protection Autority/Österreichische Datenschutzbehörde, Wickenburggasse 8, 1080 Vienna, Austria/Europe, telephone: +43 1 52 152-0, email: dsb@dsb.gv.at.

To exercise your rights as a data subject, simply send a letter by post or email to the DB Schenker Recruitment Department in Austria at the address indicated in Clause 1. “Who is responsible for data collection and processing?”.

Please also contact this address if you wish to withdraw your agreement to the alternative consideration of your application for other suitable jobs within the group or for the purposes of ensuring the international visibility of your profile/application.

Part C – Technical Information

For technical reasons, certain data must be collected and saved when you visit this website. The following data is collected without any action on your part and saved until it is automatically deleted after 10 days:

IP address from the querying computer,
Date and time of access,
Name and URL of the file acessed,
Website from which the access took place (referrer URL),
the browser used and in some cases the operating system of your computer.

1. How is your personal data transferred?

The internet server of our provider meets the current security standards. Our aim is to protect your personal data from loss, misuse, unauthorised access, publication, change and deletion. Your personal data is transferred to the servers using the security standard, the TLS method.

2. What is a cookie?

Cookies are small text files which might store personal data. Cookies can be sent to this website when it is called, allowing the user to be identified. Cookies help users to use internet sites more easily.

We differentiate between cookies that are necessary for the technical functions of the website and those that are not necessary. We would like to provide you the option to make an informed decision for or against the use of cookies that are not necessary for technical functions of this website. The use of this website in its entirety will not be affected by this.

2.1 How are cookies used?

This is an information of how and in what manner cookies are used on our sites.

The use of the career portal and application system is generally possible without the use of cookies that do not serve a technical purpose. This means that you can prevent browser tracking from cookies (do-no-track, tracking protection list) or disallow saving of third-party cookies. In addition, we recommend checking the saved cookies regularly if they are not expressly desired.

Please note that when you delete all cookies, you are also deleting any opt-out cookies, meaning that you must opt out again.

Cookies that are mandatory for using the site:

Session cookies cannot be deactivated as they are necessary for the usage of this website.

The “PHPSESSID cookie” and the "ScustomPortal-[...] cookie" are used by the platform on stateless protocols as identification criteria to recognize several associated requests of a client and to assign them to one session. In these cookies there is a long alphanumerical ID included which is also stored on the server. In case both IDs match, the client is allowed to send a request to the server. The session and the cookie are destroyed as soon as the page is closed.

Cookies that are not mandatory for site use include Google Analytics cookies. Please refer to item 3.

3. Use of Adobe Analytics

This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland) ("Adobe"), in order to analyze and periodically improve the use of this website. The statistics we collect enable us to improve our services and make them more interesting for you as a user. Adobe Analytics uses cookies with a duration of 24 months that are stored on your computer to enable us to analyze your use of the website.

The information generated by the cookie is transferred to an Adobe server in the USA and stored there. Since a technique for anonymizing your IP address is activated on this website, your IP address will be shortened beforehand. Adobe will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to us relating to website activity and internet usage. In this way we can see how often which sections and texts on our pages are read and used, and whether the design of our page has an influence on the extent of use. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. Entries made in form fields during the application process are not evaluated with Adobe Analytics.

Adobe provides us with this information only as aggregate data that represents general website usage. The information we receive from Adobe is not personalized nor is it possible to link it to one specific individual.

The legal basis for the use of Adobe Analytics is Art. 6 Para. 1 S. 1 lit. f) GDPR.

You can object to the creation of the user profiles described above at any time. There are several ways of doing so:

One possibility to object to web analysis by Adobe Analytics is to set an opt-out cookie that instructs Adobe not to store or use your data for web analysis purposes. Please note that with this solution, the web analysis will only not take place as long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click here: https://www.adobe.com/privacy/opt-out.html
You can also prevent the storage of the cookies used for profile creation by setting your browser software accordingly.

4. Use of YouTube

We want to give you a wide variety of information across media formats. Our website includes embedded YouTube videos. We merely enable a connection to YouTube. YouTube is a service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.