Information on data protection regarding our processing of applicant data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Dear applicants,

we are delighted that you would like to apply for a position at VietinBank – German Branch. In accordance with the requirements of Art. 13 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data submitted by you as part of the application process, as well as any personal data collected by us, and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

VietinBank - Filiale Deutschland

Grüneburgweg 16-18

60322 Frankfurt am Main

 +49 69 255 119 0

info@vietinbank.de

www.vietinbank.de

2. CONTACTS OF OUR DATA PROTECTION OFFICER

BSG Wüst Data Securtiy GmbH

Adelonstraße 58

65929 Frankfurt am Main

+49 (0)69 36 00 74 06

mail@datadepot.de

www.datadepot.de

3. PURPOSES AND LEGAL BASIS OF PROCESSING

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 6 paragraph 1 lit. a and lit. b GDPR for the initiation or implementation of contractual relationships. Furthermore, we may process personal data from you if this is necessary for the fulfillment of legal obligations (Art. 6 paragraph 1 lit. c GDPR) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 (1) lit. f GDPR. The legitimate interest is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG). If you give us explicit consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time, with effect for the future (see section 10 of this data protection information). If an employment relationship arises between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG-neu, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement.

4. THE REQUIREMENT TO PROVIDE PERSONAL DATA

The provision of personal data is neither required by law nor by contract. Therefore, you are not obliged to provide personal data. However, the provision of personal data is required for the decision on an application or the conclusion of a contract relating to an employment relationship with us. If you do not provide us with any personal data, we will not be able to make a decision regarding the establishment of an employment relationship. We recommend that you only provide personal data in your application that is required to complete the application.

5. WHICH CATEGORIES OF PERSONAL DATA DO WE PROCESS?

We only process data in connection with your application. This may include general information about you (such as your name, address and contact details), information about your professional qualifications and education or information about professional training or other information you provide us in connection with your application.

6. SOURCES OF THE PERSONAL DATA

We process personal data that we receive from you during the application process by postal mail or e-mail, or that you provide us via our CV upload form.

7. RECIPIENT OF THE DATA

We only pass on your personal data within our company to those areas and persons who require this data to fulfill contractual and legal obligations or to implement our legitimate interests. Otherwise, data is only passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations, or if we have your consent.

8. IS DATA INTENDED TO BE TRANSFERRED TO A THIRD YOUNTRY?

A transfer of data to a third country will not take place.

9. HOW LONG WILL YOUR DATA BE RETAINED?

We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of seven months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is required or permitted by law. We store your personal data beyond this time only insofar as this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute. In the event that you have consented to a longer storage of your personal data, we will store it in accordance with your declaration of consent.

If an employment relationship, apprenticeship or trainee relationship is established following the application process, your data will initially continue to be stored insofar as this is necessary and permissible and will then be transferred to the personnel file. If applicable, you will receive an invitation to join our talent pool following the application process. This will allow us to further consider you in our selection of applicants for suitable vacancies in the future. If we have your consent to do so, we will store your application data in our talent pool in accordance with your consent or any future consent.

10. YOUR RIGHTS

Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DSGVO if you believe that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 DSGVO. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements (see section 9 of this data protection information).

To preserve your right you are welcome to contact us.

11. AUTOMATED DECISION-MAKING

Since the decision on your application is not based exclusively on automated processing, no automated decision takes place in individual cases within the meaning of Art. 22 GDPR.