Dataprotection

HOCHTIEF takes the protection of your personal data seriously. In the first part of this Privacy Policy, you will receive information about the processing of your personal data in connection with your visit to the HOCHTIEF website as well as a summary of your rights under the European Data Protection Regulation (hereinafter "GDPR"). In the second part, you will receive information about the cookies we use.

I. Part 1

1. Contact details of the controller

This website is operated by HOCHTIEF Aktiengesellschaft, Alfredstraße 236, 45133 Essen, Tel. 0201 824-0, Fax 0201 824-2777, info@hochtief.de (hereinafter „HOCHTIEF“ or „we“). HOCHTIEF is also the controller of all data processing activities in connection with this website pursuant to Art. 4 no. 7 GDPR.

2. Contact details of the Data Protection Officer

HOCHTIEF has appointed a Data Protection Officer whom you can contact at any time regarding all questions on the subject of data protection at the address of the controller with the addition of "The Data Protection Officer" or by e-mail to datenschutz@hochtief.de.

3. Data processing activities when visiting the website

a) Processed personal data

uring (purely informational) visits to our website, we collect so-called log data (hereinafter "log data"). This is a data record (also called server log files) that is only temporarily stored by us. The data record contains the following data:

• IP address
• Browser characteristics
• Details of the operating system
• Displayed website(s)

When you use our employment website, we collect the personal data you provide voluntarily. These are basically dependent on the respective function that you use on our employment website. This includes the following personal data (hereinafter "applicant data"):

• If you apply for a position advertised by us and send us your resume, the following information about you will be stored in our applicant database:
  • Contact details (name, address, telephone number, email address, etc.)
  • Description of your work experience, skills and education
  • If you add other electronically stored documents to your application, such as cover letters, references, application photo, etc., we will also store these in our applicant database
• If you create an application profile with us and apply for a specific or an initiative position in the process, you can use the online application form to create your personal resume by entering your profile in the query masks provided. In this case, we store all the data you enter electronically in our applicant database. They are available there for HOCHTIEF to retrieve.

When ordering our publications (magazine "concepts"), we collect the following data (hereinafter referred to as "order data"):

• Name
• Address
• Employer, in case you provide your work address

b)    Purpose and legal basis

• Log data:
  • Log data is processed for statistical purposes as well as to improve the quality of our offer, in particular the stability and security of the connection, and thus serves our legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR).
• Applicant data:
  • Application for an advertised position: If you apply for a specific job posting, we will review your documents for this position. The corresponding processing serves the possible initiation of an employment relationship with HOCHTIEF (Art. 6 para. 1 p. 1 lit. b GDPR as well as Sec. 26 para. 1 p. 1 of the German Federal Data Protection Act).
  • Creating an application profile: If you create an application profile with us without reference to a specific job posting, the collection and processing of your personal data may also serve to prepare for a possible employment relationship (Art. 6 para. 1 p. 1 lit. b GDPR and Sec. 26 para. 1 p. 1 of the German Federal Data Protection Act). Otherwise, your personal data will be processed for the execution of the underlying user contract with us via our applicant database (Art. 6 para. 1 p. 1 lit. b GDPR).
  • Review of your documents for other positions within our group: If a position for which you are applying has already been filled, or if we see another opportunity, or if you have not applied for a specific position, we will be happy to review your application for various opportunities within the HOCHTIEF Group as well as within the subsidiaries including companies with minority interests of the Group in other European countries. The corresponding examination serves our legitimate interest in filling vacancies with persons who have already shown an interest in our Group by submitting an application (Art. 6 para. 1 p. 1 lit. f GDPR). However, your personal data will only be transferred to the respective subsidiary if you have given us your consent to do so (Art. 6 para. 1 p. 1 lit. a GDPR).
• Order data:
  • The processing of order data is carried out for the fulfillment of the contract with you or the implementation of pre-contractual measures in this context (Art. 6 para. 1 p. 1 lit. b GDPR).

c)    Retention period(s)

All personal data is deleted as soon as its processing is no longer necessary for the purpose for which it was collected. Insofar as statutory retention obligations apply, the data will be deleted after expiry of the respective retention period. Otherwise, the following deletion periods apply:

• Log data: Eleven days after your visit.
• Applicant data: After completion of the application process within six months. If your application is still of interest for further positions after completion of an application procedure, we will continue to store it in our database with your consent and delete it after a further six months, unless you have given us your consent to store it beyond this time.
• Ordering data: Directly after shipment of the publication.

d)    Recipients of your personal data

Data will only be passed on if this is necessary. Recipients of the data are:

• Log data: Your log data is collected and processed by external service providers on our behalf. These are, for example, web administrators, website hosters, programmers, etc. This also includes etracker GmbH (hereinafter "etracker"), which collects data about your visit in anonymized form. You can object to processing by etracker at any time. You can find information on this in Part 2. a) of this Privacy Policy.
• Applicant data: Your resume may be viewed by the HR department and the relevant specialist department of the HOCHTIEF company in question. In addition, the application documents you submit may be forwarded within the Group's subsidiaries in other European countries, provided you have consented to such forwarding. In order to be able to offer you our employment website, we work together with an external service provider. This is Lumesse Ltd. (hereinafter "Lumesse"), a subsidiary of the Cornerstone Group, based in Poland. Insofar as Lumesse obtains access to your personal data in connection with the service, this is done on the basis of a contract processing agreement exclusively in accordance with our instructions.
• Order data: Your order data will only be viewed by employees who are required to view it in order to process the order. Insofar as external service providers such as transport companies (postal consignments) are used, they will also receive your order data to the extent necessary.
• All data: Your data will be passed on to state institutions or supervisory authorities (e.g. competent data protection supervisory authority, public prosecutor's office, etc.) insofar as we are subject to a legal obligation to pass it on. Otherwise, data will only be forwarded to other recipients if you have given us your express prior consent.
   

4.    No data transfer to third countries

A transfer of personal data to recipients in third countries outside the European Economic Area is not intended.

5.    Your Rights

You have the following rights under the GDPR with respect to our processing of your personal data:

• Right to access
• Right to rectification
• Right to erasure
• Right to restriction of the processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time with effect for the future

To exercise your aforementioned rights, you can contact us or our data protection officer at any time using the contact details above. In addition, you can complain about our processing of your personal data to a supervisory authority at any time.

II.    Part 2

Cookies

We use cookies to provide you with the best possible experience on our website. Cookies are small text files that are placed and stored on your device (computer, laptop, smartphone, etc.). These text files contain certain information. With regard to cookies, a distinction is made between so-called session cookies and persistent cookies. While session cookies are automatically deleted after the end of the respective session (closing your browser), persistent cookies can also be stored over several sessions.

On our website, we currently only use technically necessary cookies or cookies that do not process personal data. The use of these cookies is in our legitimate interest (Art. 6 para. 1 p. 1 lit. f GDPR). They are necessary to present our website to you and to enable you to use it securely.

We also use services from etracker to analyze usage data (device identification, browser characteristics, operating system details, language settings, referring URLs, duration of visits, pages viewed). Since the privacy of our visitors is particularly important to us, etracker anonymizes the IP address as early as possible and converts login or device identifiers at etracker to a unique key that is not assigned to a person. The data is processed exclusively by our web administration and etracker and exclusively for the purposes specified by us. No other use is made of the data, nor is it merged with other data or passed on to third parties. The etracker cookie we use therefore does not contain any information that could be used to identify a user.

The data generated with etracker is processed and stored by etracker on behalf of HOCHTIEF exclusively in Germany and is thus subject to the strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded the data protection seal of approval in this regard.

You can object to the aforementioned data processing at any time by clicking here, insofar as it is personal. Your objection will not have any adverse consequences for you. You can find more information about data protection at etracker by clicking here.

When you visit our employment website, we also use a cookie that stores how far you have progressed in the application process. This information enables us to identify weaknesses in our application process and optimize it based on these findings. However, the cookie does not contain any personal data and cannot be assigned to an individual person.

You can see the cookies we use in the table below: