Source: https://www.mtu.de/careers/online-job-market/privacy-statement-applicants/
Timestamp: 2019-04-21 21:08:59+00:00

Document:
MTU takes the protection of its applicants’ personal data very seriously.
Our processing of personal data complies with all legal requirements.
§ 3	What Are Personal Data?
Personal data are individual details about personal or factual situations of a specific or identifiable natural person (the data subject), including the person’s name, address, telephone number, date of birth and e-mail address. Information with which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by making the information anonymous, is not personal data.
When you apply for a position at MTU, we collect and use your personal data only to the extent necessary to decide whether to make you an offer of employment.
Your personal data shall not be used for any other purpose, especially for advertising purposes. We shall not transmit your personal data to third parties without your consent, except in the cases out-lined below, unless we are obliged to disclose them by law.
We may transmit your personal data for the purposes described in § 5 below – insofar as necessary for your application – to enterprises affiliated with MTU Aero Engines AG in the sense of §§ 15ff of the German Stock Corporation Act.
We furthermore transmit personal data – to the extent permissible by law – to courts of law, legal advisors or government authorities (in particular, fiscal authorities, aviation control authorities etc.) if necessary in order to comply with applicable law or to assert, enforce or defend against legal claims.
Furthermore, in connection with your application, it may be necessary for us to transmit your personal data to other recipients, such as tax consultants, insurers or business partners.
Where we transmit personal data to service providers (e.g. IT service providers) acting on behalf of our company, we will contractually oblige them in advance to comply with the applicable requirements of data protection law and they shall be subject to our instructions.
When processing personal data that are required for the decision to create an employment agreement or that are needed after the creation of an employment agreement for administration or termination purposes, the legal basis is §26 Section 1 “Federal Data Protection Act (BDSG). The legal basis for our processing of personal data to meet legal obligations to which we are subject is Art. 6 Section 1 lit.c of the GDPR.
Moreover, §26 Section 2 “Federal Data Protection Act (BDSG)“ may serve as a legal basis, provided that you have expressly consented to the processing of your personal data in individual cases.
Your personal data shall be erased or blocked as soon as the purpose of storage ceases to apply. We may continue to store your data after this, however, if required to do so by European or national laws or other statutory provisions to which we are subject. We also delete or block your personal data upon expiration of a valid legal storage limit unless we must continue to store the data for purposes of concluding or fulfilling a contract.
Since applicants must grant consent to the processing of their personal data and no person under the age of sixteen may legally grant such consent, applications from persons under the age of sixteen require the consent of a legal guardian. The legal guardian must consent to the processing of the applicant’s personal data or grant permission for the applicant to consent. Applicants under the age of sixteen must therefore assure that they are submitting their application with the express permission of a legal guardian.
All other responses to the application form are voluntary. Once your application is complete, your application data are forwarded to the company in the MTU Group which is responsible for filling the respective vacancy. The application data will be accessible to only two departments within that company: human resources and the relevant specialty department.
We undertake to protect the personal data we store and to treat it as confidential. To prevent the loss or misuse of data stored by us, we take extensive technical and organizational safety precautions which are regularly checked and adapted to technological progress.
However, we would like to point out that due to the structure of the Internet, the data protection rules and the above-mentioned safety measures may not be observed by other persons or institutions outside our field of responsibility. In particular, unencrypted data transmitted by e-mail, for instance, can be read by third parties. We have no technical influence on this.
MTU is constantly striving to optimize its website. This is based on statistics on the use of the website. MTU uses the web analysis tool "Matomo" to generate the statistics. When one of our online services is accessed, Matomo anonymously protocols and evaluates its use.
Matomo uses so-called "cookies". These are text files which are stored on your computer and are used to analyse the use of our website. For this purpose, the usage information generated by the cookie (including your anonymized IP address) is sent to our server and stored for usage analysis, which helps optimize our website. Your IP address is immediately made anonymous during this process, so that you as a user remain anonymous to us. The information generated by the cookie about your use of our website is not passed on to third parties (see Section 4).
Besides the cookies described in Section 9 above, we use other cookies which are sent by our web server to your browser during your visit to our website and are stored on your computer for later retrieval. These cookies contain a characteristic character string that enables clear identification of the browser when the website is called up again.
The legal basis for processing personal data using technically necessary cookies is Art. 6, Section 1f of the GDPR. If the user has given his or her consent in this regard, the legal basis for processing personal data using cookies for analysis purposes is Art. 6, Section 1a of the GDPR.
if you have filed an objection to the processing pursuant to Art. 21, Section 1 of the GDPR and it has not yet been determined whether the controller's legitimate reasons outweigh your reasons.
You file an objection against the processing pursuant to Art. 21, Section 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21, Section 2 of the GDPR.
Your personal data have been collected regarding the services offered by the information company pursuant to Art. 8, Section 1 of the GDPR.
If we have made your personal data public and are obliged to delete it pursuant to Art. 17, Section 1 of the GDPR, we shall take appropriate measures, including technical measures, considering the available technology and the implementation costs, to inform the processors of the personal data for which you as the data subject have asked for the deletion of all links thereto or of copies or replications thereof.
While exercising this right, you also have the right to request that your personal data be transferred directly from us to another controller, so far as this is technically feasible. Other persons' freedoms and rights must not be affected by this.
You have the right to object at any time, on the grounds of your particular situation, to the processing of your personal data in accordance with Art. 6 Section 1e or 1f of the GDPR; this also applies to profiling based on these provisions.

References: § 3
 § 5
 §26
 Art. 6
 §26
 Art. 6
 Art. 6
 Art. 21
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6