Data protection

ESE Engineering und Software-Entwicklung GmbH, Part of DB E.C.O. Group,

Theodor-Heuss-Straße 9
38122 Braunschweig
Tel.: 0531 23880-30
E-Mail: info@ese.de
Website: www.ese.de

collects and processes your data as the controller.

The appointed data protection officer is Dr. Marein Müller. If you have any questions or suggestions regarding data protection, please contact us:

E-mail: datenschutz@ese.de

Data protection information Application procedure

The protection and confidential handling of personal data during the application process is a high priority for us and for the company acting on our behalf, BITE GmbH, with whom we have concluded a contract processing agreement. Below, we explain what data we collect during the application process and how it is processed. In addition, this compilation contains further data protection information on so-called data subject rights in accordance with the provisions of the General Data Protection Regulation. For further information on the storage of data when visiting our websites, in particular with regard to technical usage data, please refer to our general privacy policy: https://www.ese.de/datenschutz/

1. Description of the processing activity

Collection and processing of personal data in connection with personnel selection procedures.

2. Name and contact details of the controller within the meaning of Art. 4 No. 7 GDPR

The controller responsible for the processing is

Company name: ESE Engineering und Software-Entwicklung GmbH

Street: Theodor-Heuss-Straße 9

Zip code / Place: 38122 Braunschweig

Phone: +49 531 23880 30

E-mail: info@ese.de

3. Contact details of the data protection officer

Company name: Deutsche Bahn AG, Dr. Marein Müller

Street/house number: Potsdamer Platz 2

Zip code / Place: 10785 Berlin

Phone: +49 (0)30 297 62550

E-mail: datenschutz@ese.de

4. Purposes and legal bases of the processing of personal data

Data from applications are required for the personnel selection process. This is supported by applicant management software from BITE GmbH, although decisions are not based exclusively on automated principles. Specifically, we initially store the data provided to us. On the basis of this information, it is checked whether an invitation to an interview can be considered as part of the selection process. In the case of fundamental suitability, we collect further personal data that is essential for the selection decision. If persons are considered for employment, we will inform them of the further data to be collected. Personal data is processed in applicant management on the following legal bases:

– Art. 6 para. 1 UAbs. 1 letter b) GDPR (initiation of a contractual or employment relationship) in conjunction with Art. 9 para. 2 lit. b) and h) GDPR, Art. 8 para. 1 (Conditions for the consent of a child in relation to information society services)

– Art. 6 para. 1 UAbs. 1 letter a, Art. 7 GDPR (voluntary consent)

– Art. 88 GDPR (data processing in the employment context) in conjunction with Section 26 para. 1 to 3 Federal Data Protection Act (BDSG)

5. Categories of personal data that are processed

– First name and last name,

– Name, date and place of birth,

– Nationality

– Contact details (address, telephone number, e-mail address, if provided voluntarily)

– Information on family circumstances (marital status, spouse, children, if provided voluntarily)

– Photograph, if applicable, provided voluntarily)

– Educational and professional background incl. Qualifications and job references, external training and further training, studies

– Further information to be collected in the course of the selection procedure (see section 4)

6. Categories of recipients of the personal data

Application data will be forwarded to the extent necessary to carry out the personnel selection procedure:

– internal administrative departments or persons, insofar as they are involved in the recruitment process

– BITE GmbH, Magirus-Deutz-Str. 12, 89077 Ulm, Germany, phone: 0731/14 11 50-0, e-mail: datenschutz@b-ite.de.

Further data transfers – including to third parties for advertising purposes – do not take place.

7. Transfer of personal data to a third country

Data will not be transferred to a third country or an international organization.

8. Duration of the storage of personal data

– We store personal data obtained as part of the personnel selection process for at least six months.

– In the event of an unsuccessful application or its withdrawal, we will also destroy or delete the transmitted data six months after rejection. The retention or storage of the data is necessary within the aforementioned time limits in the event of any legal action.

If consent has been given for inclusion in an applicant pool, we store data for a maximum of 12 months.

If you are hired, you will be informed separately about the applicable regulations on the handling of personal data (see section 4).

9. Rights of data subjects

Applicants have the following rights under the General Data Protection Regulation:

If your personal data is processed, you have the right to receive information about the personal data stored about you (Art. 15 GDPR). If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you can request the erasure or restriction of processing (Art. 17, 18 GDPR). The right to erasure pursuant to Art. 17 para. 1 and 2 GDPR does not apply, however, if the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 17 (3) (b) GDPR). Applicants may object to the processing of their personal data by us at any time for reasons arising from their particular situation (Art. 21 GDPR). If the legal requirements are met, we will subsequently no longer process your aforementioned data. By using our online application system and submitting an application, you voluntarily consent to the storage and further processing of your personal data. In this case, you are entitled to revoke this consent for the future at any time.

Processing carried out up to the time of revocation remains lawful (Art. 7 para. 3 GDPR). Furthermore, if consent has been granted or if a contract for the processing of personal data using automated procedures exists, applicants may have the right to have the data transferred to them or to another data controller (Art. 20 GDPR). If you make use of your above-mentioned rights, we will check whether the legal requirements for this are met. Furthermore, you have the right to lodge a complaint with the competent supervisory authority for data protection.

10. Obligation to provide personal data

The provision of the above data is necessary for the application and the possible conclusion of an employment contract.

We collect and process your data exclusively for specific purposes. These may result from technical necessities, contractual requirements or explicit user requests.

This website is hosted internally. The personal data collected on this website is stored on the servers of ESE GmbH. This may include IP addresses, contact requests, information about the browser types and versions used, the user’s operating system, the date and time of access and other data generated via a website.

For technical reasons, certain data must be collected and stored when you visit www.ese.de, such as the date and duration of the visit, the websites used, the identification data of the browser and operating system type used, the website from which you are visiting us and your anonymized IP address. Insofar as this data provides information about the number of visitors and use of our websites, this is done exclusively anonymously. The legal basis for the processing of your data is Art. 6 lit. f) GDPR, namely the legitimate interest of ESE GmbH, Part of DB E.C.O. Group, to ensure the functionality of the website and to optimize it.

If you would like to contact us, you can write to us directly by e-mail. In this case, we store the data you provide when contacting us (e.g. e-mail address, your name and your request) on our company servers for as long as is necessary for the purpose of initiating contact and resolving your request by the relevant specialist department. The legal basis for the storage of your contact data is Art. 6 para. 1 lit. f) GDPR, the legitimate interest of ESE GmbH, Part of DB E.C.O. Group, in responding to your request.

Please note that the transmission of e-mails on the Internet is not necessarily encrypted throughout and is therefore not protected against unauthorized access.

As a rule, the provision of our services requires the involvement of instruction-dependent processors, e.g. for processing applications.

External service providers who process data on our behalf are always carefully selected by us and strictly bound by contract. The service providers work according to our instructions, which is ensured by strict contractual regulations, technical and organizational measures and supplementary controls.
Your data will otherwise only be transferred if you have given us your express consent or on the basis of a legal regulation.
Your data will not be transferred to third countries outside the EU/EEA or to an international organization unless there are appropriate guarantees. These include the EU standard contractual clauses and an adequacy decision by the EU Commission.

Disclosure may be necessary, for example, in the following constellation for the purpose of applying for vacancies:
By clicking under the menu item “Job vacancies”, on an individual job vacancy, you leave our website www.ese.de and are automatically redirected to the applicant portal of an external service provider. Your application will be managed by us in the BITE applicant portal. You can find data protection information on the applicant portal under II. Further data protection information.

We only store your data for as long as it is necessary to fulfill the purpose for which it was collected (e.g. as part of a contractual relationship) or if this is required by law. As part of a contractual relationship, we store your data at least until the contract is fully terminated. The data is then stored for the duration of the statutory retention periods.

• You can request information about what data is stored about you.
• You can request the correction, deletion and restriction of the processing (blocking) of your personal data as long as this is legally permissible and possible within the framework of an existing contractual relationship.
• If you are of the opinion that the processing of your personal data violates data protection law, you have a right of appeal. pursuant to Art 77 para. 1 GDPR, you have the right to lodge a complaint with your data protection authority. The supervisory authority responsible for ESE GmbH, Part of DB E.C.O. Group, is the competent supervisory authority:

State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover

• You have the right to the portability of the data that you have provided to us on the basis of your consent (data portability).
• Revocation: If you have given us your consent to data processing, you can revoke it at any time in the same way in which you gave it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
• Objection: You may object to data processing on grounds relating to your particular situation if the data processing is based on our legitimate interests or is necessary for the performance of public tasks.

To exercise your rights, simply send a letter by post to:

ESE GmbH
Theodor-Heuss-Straße 9
38122 Braunschweig

or by e-mail to: datenschutz@ese.de

Cookies are small text files in which personal data can be stored. The cookies can be transmitted to a page when it is called up and thus enable the user to be assigned. Cookies help to simplify the use of websites for users.

We distinguish between cookies that are absolutely necessary for the technical functions of the website and cookies that are not absolutely necessary for the technical function of the website.

We want to give you the opportunity to make an informed decision for or against the use of cookies, which are not absolutely necessary for the technical functions of the website.

We inform you here about the type and scope of the use of cookies on our pages:

The use of www.ese.de is generally possible without cookies that do not serve technical purposes. You can therefore prevent tracking by cookies in your browser (do-not-track, tracking protection list) or prohibit the storage of third-party cookies.

Real Cookie Banner

The Real Cookie Banner asks website visitors for their consent to the setting of cookies and the processing of personal data. For this purpose, each website visitor is assigned a UUID (pseudonymous identification of the user), which is valid until the cookie for storing consent expires. Cookies are used to test whether cookies can be set, to store reference to the documented consent, to store which services from which service groups the visitor has consented to and, if consent is obtained in accordance with the Transparency & Consent Framework (TCF), to store the consents in TCF partners, purposes, special purposes, functions and special functions. The consent obtained is fully documented as part of the duty of disclosure under the GDPR. In addition to the services and service groups to which the visitor has consented, and if consent is obtained according to the TCF standard, to which TCF partners, purposes and functions the visitor has consented, this includes all settings of the cookie banner at the time of consent as well as the technical circumstances (e.g. size of the viewing area at the time of consent) and the user interactions (e.g. clicking on buttons) that led to consent.

We also use the following functional cookies:

Kununu

Our website uses the kununu live score widget of the social network Kununu, which is operated by XING Kununu Prescreen GmbH, Schottenring 2-6, A – 1010 Vienna, Austria of the parent company Xing GmbH & Co. KG, Dammtorstraße 30, 20354 Hamburg, Germany.
When you visit our website that contains this widget, your browser establishes a direct connection to the Kununu servers. The content of the button is transmitted by Kununu directly to your browser, which integrates it into the website. This allows our visitors to view our kununu live score on our website to strengthen our image. The legal basis for use is Art. 6 para. 1 p. 1 lit. f) GDPR. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Kununu. We have no influence on the scope of the data that Kununu collects with the button. The purpose and scope of the data collection and the further processing and use of the data by Kununu as well as your rights in this regard and setting options to protect your privacy can be found in Kununu’s privacy policy at http://www.kununu.com/info/agb or in Xing’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung.
If you do not want Kununu to be able to assign your visit to our pages to your user account, please log out of your Kununu user account beforehand.

BITE

BITE uses “cookies” when operating the website. These serve to make your online application more user-friendly, effective and secure.

WPML

This website uses the language plugin WMPL from OnTheGoSystems Limited to offer a German and English language version of the website. WPML uses a cookie to determine the visitor’s current language. The cookie is a “session cookie” that is deleted as soon as you leave the site.

We use the Matomo analysis service on our website to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. Small text files (cookies) are used to store data about how you use our website, including your IP address. This data is anonymized and stored on our servers.

The legal basis for the use of Matomo is Art. 6 para. 1 p. 1 lit. f) GDPR.

Your deactivation options: If you do not agree with the analysis of your usage behavior, you can set your browser at any time so that no analysis cookie can be set. You can also decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data. Your visit to this website is currently recorded by Matomo Web Analytics.
Please note: If you delete all your cookies, the deactivation cookie will also be deleted. This means that you would have to exercise your objection to the analysis of usage behavior again.

If you click on a link to an external page, you are moving outside the pages of www.ese.de. ESE GmbH, Part of DB E.C.O. Group, is therefore not responsible for the content, services or products offered on the linked website or for the data protection and technical security of the linked website.

We adapt the data protection notice to changed functionalities or changed legal situations. We therefore recommend that you take note of the data protection notice at regular intervals. If your consent is required or components of the data protection notice contain provisions of the contractual relationship with you, the changes will only be made with your consent.

08.10.2024