Data privacy policy

Information on data protection in the context of the application procedure
Valid: 25.10.2018

This data protection policy statement describes the processing of personal data in the context of the application procedure at Home Shopping Europe GmbH (HSE). It also explains the options available to you with regard to your personal data (“Your rights”) and how you can contact us.

I. Who is responsible, and how can I contact the data protection officer?
The controller, i.e. the person or party responsible under the General Data Protection Regulation (the GDPR”), is Home Shopping Europe GmbH, Münchener Strasse 101 h, 85737 Ismaning.
Further information on our enterprise as well as particulars of the persons with power of representation, along with other contact possibilities, can be found in the legal notice (“Impressum”) on our website at https://www.hse.de/dpl/c/service/impressum

In the event of questions regarding your personal data by us or on the subject of data protection in general, please contact our data protection officer, who can be reached either at the address stated in the Impressum or at the email address: datenschutz@hse.de

II. Your rights as the data subject
Every data subject has the following rights:
• Right of access (Article 15 GDPR)
• Right to rectification of incorrect data (Article 16 GDPR)
• Right to erasure (“right to be forgotten”) (Article 17 GDPR)
• Right to restriction on processing of personal data (Article 18 GDPR)
• Right to data portability (Article 20 GDPR).

Every data subject also has a general right to object (see also Article 21 Para. 1 GDPR). In this case, reasons must be given for the objection to data processing. If the data processing is done on the basis of your consent, you can withdraw your consent at any time with effect for the future.

To exercise your rights as a data subject, the simplest way is to contact service@hse.de or to use the address stated in the Impressum. You additionally have the right to complain to the data protection supervisory authority with jurisdiction for you.

III. Processing of personal data by HSE

In the following section, we will give you an overview of how we ensure the protection of your personal data in the case of access to our website and what categories of personal data we process, what purposes we process them for, and in what scope we process them.

Personal data are all information that relate to an identified or identifiable natural person. This includes, for example, your name, contact data, address, hobbies, or information relating to medical conditions/illnesses and tax status (including your affiliation to a religious denomination, if any). We treat all information submitted to us by you – i.e. not only your CV but also your photo, if sent, along with information on your health status and other private information provided by you – as application data.
 
We process the personal data you make available to us in connection with your application. As well as your application documents, this may also include other personal information provided to us within the framework of the application procedure, e.g. in telephone interviews, personal face-to-face job interviews, or during the course of a fair visit. To enable us to fully assess your application, we always need your CV, as well as certificates and other evidentiary documents. Any further information, including a photo, is optional. We also make use, on a limited scale, of data from other publicly accessible sources, such as professional networks.

1. Processing of personal data on our applicant portal
We offer you the possibility to submit your job application to us online. In this case, transmission of your entered data and any attached files takes place via a secure transport connection. Your electronic application data are received by our HR department and forwarded from there only to the relevant operational department and/or the persons entrusted with dealing with the application. The works council is also required to be involved in the selection of appointees for vacancies; access to your application data therefore also has to be granted to as small a number of works council members as possible. All persons involved will treat your application documents with the requisite care and with absolute confidentiality.
 
We process the data provided in connection with your application for the purpose of assessing your application and your suitability for the vacancy in question. To this end, we also collect personal data which we obtain lawfully from publicly accessible sources (e.g. professional networks such as XING). On completion of the applicant selection process, we will, unless we have concluded an employment contract with you, preserve your application documents for a further period of 6 months and then delete the data and/or destroy any copies. This data processing is done on the strength of Article 6 Para. 1 Letters b and f GDPR, and Section 26 BDSG (neu) [German Federal Data Protection Act - New version]. Where special categories of personal data are processed within the application process on the basis of Article 9 Para. 1 GDPR, the purpose of this is to ensure the exercise of rights or the fulfilment of legal duties under labour law, social security law or social protection needs (e.g. notification of the disabled persons’ representation body pursuant to SGB IX § 81 [German Social Code, Book IX, Section 81]). This is done on the basis of Article 9 Para. 2 Letter b GDPR in conjunction with Section 26 Para. 3 BDSG.
Independently of the preservation period indicated above, we will, unless we have concluded a contract of employment with you, store your key master data (title, first name and surname, address, birth date, and reason for refusal of your application) for a period of 12 months from conclusion of the application process. We need this data for the purpose of recognising duplicate applicants, producing recruitment figures, and reviewing the billing from HR consultants. The legal basis for this is Article 6 Para. 1 Letter f GDPR.

Should we wish to include your application documents in our applicant pool, we will contact you accordingly. The notification from us includes an option for you to actively consent to the further preservation of your documents by us. In this case, we will contact you once more after a further period of 12 months and inquire whether you wish to update your documents and keep your name in our applicant pool for a further 12 months. At the end of this second 12-month period, however, your application documents will be finally deleted.
The basis for data processing in this case is Art. 6 Para. 1 Sentence 1 Letter a GDPR and Section 26 BDSG.

Applications which you send us by normal email are usually unencrypted. We therefore recommend you to make use of our online application portal.

2. Processing of data in case of accessing the website https://jobs.hse.com/
 
When access is made to our website, technical connection data (including e.g. the IP address, browser used – with version –, configuration parameters and installed plugins, date and time of access) are collected in the form of server log files. This information is needed for technical reasons in order for us to supply the website content requested by you correctly, and it occurs automatically on use of the Internet.

In accordance with our IT security policy, the log file data generated are stored for a period of two weeks for the purpose of enabling us to detect and analyse any attacks on our website that should occur. The legal basis for the data processing in this case is Article 6 Para. 1 Sentence 1 Letter f GDPR.

3. Processing of data in case of use of the website – Your inquiries
If you send us an inquiry by email or by using the contact form or any other online channel, we collect your communicated data for the purpose of processing and responding to your matter. We store this data for evidential purposes for a period of up to three years. The legal basis for the data processing in this case is Article 6 Para. 1 Letter f GDPR

4. Information on ensuring data security
We maintain technical and operational security precautions on our web pages with the aim of protecting the personal data stored by us against access by third parties and against loss or misuse, and of facilitating secure data transfer.
We must draw your attention to the fact that because of the structure of the Internet, unwanted access to data by third parties may occur. It therefore also falls within your own responsibility to ensure protection of your data against misuse either through encryption or by other means. Without such protection measures, it is possible for data transmitted without encryption, even when sent by email, to be read by third parties.

IV. Integration of third-party services
1. Social media buttons

You have the possibility to submit your application to us via your XING or LinkedIn profile. In this case, it is up to you to decide whether, and in what scope, to submit your data for the application process to HSE. The network concerned will also be informed that you have applied to us. The further processing of this feature will be performed in compliance with the data protection regulations of XING or LinkedIn.


V. Our cookie policy
1. General information on the use of cookies
Our website uses so-called “cookies”. Cookies are small text files that are installed on your terminal device and stored by your browser. Their purpose is to make our internet offerings more user-friendly, efficient and secure. We use both temporary cookies, known as “session cookies”, which are automatically deleted when your browser is closed, and “persistent”, i.e. permanent, cookies.
You can choose whether you wish to allow cookies or not. You can make changes to your browser settings. You fundamentally have a choice between accepting all cookies, being informed of the placement of cookies, or rejecting all cookies. If you choose the latter option, it is possible that you may not be able to use all functions of our website.
Regarding the use of cookies, it is necessary to distinguish between those that are essential and those that are used for additional purposes (e.g. counting of access numbers, advertising).

2. Essential cookies for use of the website
We employ session cookies on our internet sites that are essential for use of our web pages. These include cookies that enable us to recognise you when visiting the site in the course of a single session. These session cookies contribute to secure use of our site by, for example, ensuring secure use of our applicant portal.

3. Use of cookies with your consent
The following information provides an overview of the cookies which are employed by us with consent granted by you at the start of your use of the website. Each time you are informed of their use, you will also find an opt-out possibility. The cookies in this case have the purpose of recording user behaviour on our website.

Use of cookies to record user behaviour (tracking)
The use of tracking cookies allows us to recognise users in the event of return visits to our website and provide usage processes with an internally assigned indicator (pseudonym). This enables us to track return visits to our website and analyse them in context.

In concrete terms, the following tracking cookies are deployed:

Tracking through Matomo
For the purpose of optimisation and statistical evaluation of user visits to our website, we use the web analysis software Matomo.
Matomo makes use of cookies that are installed locally on your terminal device and enable us to analyse use of our website. We ensure that the accessing IP address is converted into a hash value immediately after your access and is anonymised prior to storage, such that it cannot be traced back to you. The data obtained in this way is processed exclusively on servers of our service provider in Germany.
Processing is conducted in accordance with Article 6 Para. 1 Letter f GDPR on the strength of a legitimate prevailing interest in optimisation of our website.
You can object to storage and evaluation through Matomo at any time. In this case, an opt-out cookie will ensure that no further session data is collected by Matomo.
To do this, please use the following function:

 
In the context of our website analysis, we naturally also respect your “Do not track” preference if set by you in your browser.
 
Please remember that deleting the cookies in your web browser will also delete the opt-out cookie. In this case, however, you can reinstate this cookie at any time by once again clicking on the opt-out link.