Kinto Europe GmbH (KINTO EU) Privacy Policy for Online Applications

As part of your online application, your personal data will be processed by Kinto Europe GmbH (KINTO EU) and stored for the period of time required to fulfill the specified purposes and legal obligations. Please find information regarding what personal data is being processed, how it is processed and which rights you have in this regard as follows.

 

1. Who is the controller of the processing and whom can I contact with?

The controller is:

Kinto Europe GmbH (KINTO EU)
Toyota-Allee 5, 50858 Cologne

You can reach our Data Protection Officer at Kintoeu.gdpr@kinto-mobility.eu. 

 

2. General Data Processing and Personal Data Categories

The purpose of this career website is to allow you to enter your application data electronically and submit it to KINTO EU on a voluntary basis. To apply, you must register for an applicant account. You can then apply for a position. To do so, you will be asked to provide additional data.

Should you decide to go through our application process, you will be compulsorily asked to provide certain personal data and upload a CV. The provision of personal data is not required by law or contract. You are not required to provide any personal data. However, providing your personal data (e.g., first name, last name, email address, resume, password for your account on our website, place of residence, phone number, mailing address, etc.) is required for registration and the recruitment process. The required categories of data are marked with an asterisk (*) in the web form. If you do not provide this data, your application cannot be submitted and will not be processed.

You have the option to voluntarily upload additional documents, e.g. application documents such as cover letter, application photo, academic certificates, professional qualifications, etc.

Please note that, in particular, the resumes and additional documents you submit for application purposes must not contain any sensitive data, such as information on racial or ethnic origin, political opinion, membership in a trade union or political party, information on physical or mental condition or sexual life.

If you have given us consent to process personal data for the purpose of transferring the data to other Toyota companies, we will transfer the data you have provided to the entities described in Section 5 so that your data may also be processed for other job postings during the ongoing application process.

If you have given us consent to process personal data for notifications of new job vacancies, we will process your data (name and e-mail address) for the purpose of notifying you of new job vacancies at all companies by e-mail newsletter.

If you have given us consent to process personal data for the talent pool, we process your data (e.g. name, e-mail address, resume, etc.) to maintain contact with you and, if applicable, to recruit you for future employment. For this purpose, you will be informed about special job offers.

Pursuant to Section 6 (2) No. 5 of the German Money Laundering Act (GwG), we are obliged to create suitable risk-oriented measures to check the reliability of employees, which is why a police clearance certificate submitted by you is processed after the application procedure as part of the recruitment process.

Technical information is automatically transmitted to us by your web browser when you access our websites. This includes your IP address, information about the browser used, information about the operating system, time and date of your visit and, if applicable, the referrer URL. This information is used exclusively for statistical purposes and for the appropriate design of our web pages. You as a user remain unidentifiable to us.

 

3. Why are we processing your data (purpose of the processing) and on what legal basis?

We process personal data that we have received from you as part of your application and the subsequent application process. In addition, we process - insofar as this is necessary for the application process - personal data that we permissibly obtain from publicly accessible sources (e.g. professional networks on the Internet) or that is transmitted to us by other companies with which we are associated under company law or by other third parties. In particular, we may also have received data from service providers (e.g. job placement services).

We process personal data in accordance with the provisions of the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The legal basis of the processing are:

a) Fulfillment of contractual obligations (Art. 6 (1) (b) GDPR)

The manual or automatic processing of data is carried out to take steps at regarding your application (request) prior to entering into a contract. The information you provide is processed only for the purpose of reviewing your application(s) and, if your application is successful, for managing your personnel file.

b) Our legitimate Interest (Art. 6 (1) (f) GDPR)

To the extent necessary, we process your data to protect the legitimate interests of us or third parties. This applies in particular to accessing profile pages of individual applicants on job-related networks (e.g. Xing and LinkedIn). Furthermore, we anonymize your data as part of our deletion processes. After the anonymization process has been carried out, there is no longer any reference to a person.

c) Based on your consent (Art. 6 (1) (a) GDPR)

To the extent necessary, we process your data based on our or third parties legitimate interests.

d) on the basis of statutory or legal requirements (Art. 6 (1) (c) GDPR) or public interest (Art. 6 (1) (e) GDPR)

In addition, as a bank, we are subject to various legal obligations, in particular under the German Banking Act and the German Money Laundering Act, which require us to process personal data.

 

4. Cookies

We use cookies and similar functions (hereinafter: cookies) on our site to make our website technically available.

Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves on the one hand to technically present and provide our offer to you. For this purpose, we use so-called session cookies to recognize that you have already visited individual pages of our website or that you have already logged into your user account. These cookies are automatically deleted when you close your browser and are absolutely necessary according to Art. (2) (2) TTDSG to provide a service you requested. We base the processing of your data through the cookies used for the aforementioned technically necessary purposes pursuant to Art. 6 (1) (f) GDPR on our legitimate interest, which is to be regarded as justified within the meaning of the aforementioned provision.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

 

5. Who receives my data?

Within KINTO EU, access to your data is granted to those departments that require it in order to fulfill our legal obligations or in connection with our legitimate interests. Processors used by us (Art. 28 DS-GVO) may also receive data for these purposes. These are companies in the category of performing services related to applicant management.

With regard to the transfer of data to recipients outside KINTO EU, it should be noted that we may only pass on information about you if this is required by law or if the transfer is permitted under data protection regulations to protect the legitimate interests of KINTO EU or third parties.

If you have given your consent for the Toyota companies named below to process your application data for the purpose of processing your application in order to be able to contact you about other relevant vacancies, your data will also be collected and processed in the interests of the other Toyota companies. In doing so, they may also have access to your personal data.

You can choose whether you want your information to be visible only to KINTO EU, which manages open positions for which you are applying, or to all Toyota companies mentioned below.

These are:

No third country data transfer takes place within the scope of this processing.

 

6. How long will my data be stored?

We store the data that we have obtained from you or collected about you on the basis of your application and during the application process for a period of six months (storage period) after completion of the application process. The application process is completed when you have been hired for the advertised position or when it has been decided that you will not be hired.

If you have given us your consent by agreeing to the continued storage of your application documents, we will also store the data beyond the storage period until you revoke your consent.

 

7. What data protection rights do I have?

You have the right to:

  • In accordance with Art. 7 (3) GDPR to withdraw your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;

 

  • in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or right to object, as well as the existence of a right to lodge a complaint, the origin of your data, if these have not been collected from us, as well as about the presence of automated decision-making including profiling and, if applicable, meaningful information about their details;

 

  • in accordance with Art. 16 GDPR, to request the rectification of inaccurate or incomplete personal data stored by us without undue delay;

 

  • in accordance with Art. 17 GDPR to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

 

  • in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the exercise, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

 

  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and

 

  • in accordance with Art. 77 GDPR to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

To exercise your rights, please contact the contact points mentioned at the beginning of this privacy policy.

 

INFORMATION ABOUT YOUR RIGHT TO OBJECT ACCORDING TO ART. 21 GDPR

Under the conditions of Art. 21 (1) GDPR, you may object to the processing of data on grounds relating to the particular situation of the data subject.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) GDPR data processing in the public interest) and Art.6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

 

8. Is there an obligation for me to provide data?

You are not legally or contractually obligated to provide us with your personal data. However, if you do not provide us with your personal data, which is necessary for the proper selection of applicants as well as for the fulfillment of legal obligations, your application cannot be submitted and processed.