Status: September 2021
1. GENERAL INFORMATION
The protection of your personal rights when processing personal data is an important concern for MAN Truck & Bus SE. We process personal data, which are collected when visiting our website, pursuant to the statutory provisions of the country, in which the data controller responsible for the data processing has its registered seat.
In addition, companies of the MAN Group have obligated to a comprehensive and standard protection of personal data through a binding Group Policy. This way a level of protection is ensured worldwide within the MAN Group that is comparable with that in Germany and the European Union.
Furthermore, our employees are obliged to confidentiality and to protect provided personal data.
1.2. Data controller and contacts
The data controller within the meaning of data protection law for your data is the company of the MAN Group, which operates the website that you visit.
In case of general and data protection-related questions please contact the responsible contact person, who is named in the section "Contact" or in the Legal Disclosure. Alternatively, you can contact the Group Data Protection section, which will forward your request to the responsible persons.
2. INFORMATION RELATING TO THIS WEBSITE
With this data protection information, we inform you how we collect, process and use personal data when you visit this website.
"Personal data" are in this respect all information, which refer to an identified or identifiable natural person. A natural person is deemed as identifiable, who can be identified directly or indirectly, in particular by means of allocation to an identifier such as a name, a code number, to location data, an online identifier or to one or more particular features, which are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
The purpose of this and other websites is to make information available to you relating to selected companies of the MAN Group.
3. COLLECTION OF GENERAL INFORMATION AND PERSONAL DATA WHEN VISITING OUR WEBSITE
3.1. Simple navigation on the website
When you visit our website, information of a general nature is collected automatically. This information includes the type of used web browser, the used operating system, the domain name of your internet service provider, the website, which you visit of our group, the website, from which the request comes, date and time of the request as well as technical information regarding the visit (IP address, https/http method, https/http version, https/http status code, length of the transmitted data) and similar items. This exclusively concerns information, which do not allow any conclusions to be drawn about your person. With the IP address, the last octet is masked - e.g. the storage is carried out as 123.456.789.xxx. Moreover, these data are also generated with access to all other websites on the internet. Therefore, this does not concern a specific function of this website. These data are necessary from a technical point of view in order to display our website to you and to guarantee the stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR).
Information of this kind is to be anonymized without delay after collection and only evaluated for statistical purposes. The better we understand your wishes, the faster you will find the requested information on our websites.
We store these data for the duration of 14 days in a so-called log file at our hosting provider. After this the data will be erased.
3.2. Contact via email
When you contact us by email the data communicated by you (your email address, if applicable your name and telephone number and your message) will be stored by us in order to reply to your questions. We erase the data produced in this context after the storage is no longer necessary or we restrict the processing, in case of statutory storage obligations.
These data are processed by us in order to be able to deal with your concern. The data processing is carried out owing to a contractual basis (Art. 6 Para. 1 S. 1 lit. b GDPR) insofar as it concerns questions relating to a purchase of our products. For the execution of the customer service otherwise and the reply to your requests the processing is carried out owing to legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR), as it enables satisfactory customer advice.
A cookie is a small data record, which is stored on your terminal device and contains data such as personal page settings and login information. This data record is generated by the web server, with which you established a connection via your web browser and is sent to you. This website does not use any cookies.
4. WEB ANALYSIS WITH MATOMO ANALYTICS
Our website uses an open-source software tool for the anonymised analysis of the visitor flows on our website. The knowledge gained from this analysis enables us to consistently optimise the user friendliness of our website. The tool is hosted on servers of MAN so that no data outflow is carried out to external third parties. Matomo does not use any cookies in the configuration used by us.
Matomo enables us, among others, to determine from which website you came to our website and how often or how long you visited a subpage. Details relating to the used browser and your device are also collected, for example the screen resolution or the used operating system. IP addresses are anonymised in Matomo by the settings carried out by us by the fact that the last two octets are masked. We do not store any digital fingerprints with Matomo. An allocation of the web statistics to your devices or your point of access is therefore not possible. Merely an allocation to individual regions is visible.
We have set Matomo so that collected analysis data are erased after 3 years.
The legal basis for the use of Matomo is a weighing up of interests according to Art. 6 Para. 1 lit. f. GDPR for the continuous further development and optimisation of our online offer.
On our website you can subscribe to our newsletter, in which we provide you comprehensive information about MAN and the fascinating world of transport and logistics. We use the so-called double-opt-in-procedure for the registration for our newsletter. This means that we send you an email to the entered email address after your registration, in which we request you for confirmation that you request the sending of the newsletter. If you do not confirm your registration you will not be included in our distribution list. In addition, we respectively store your used IP addresses and times of the registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if applicable, to be able to investigate a possible misuse of your personal data. Our legitimate interests can be derived from the aforementioned purpose. The legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR.
After your confirmation we will store your email address for the purpose of sending the newsletter. The legal basis is your consent and therefore Art. 6 Para. 1 S. 1 lit. a GDPR.
With your consent we record your user behaviour with regard to our newsletter. This means that we can track whether you open the newsletter emails sent by us and how often and on which links you have clicked in the newsletter emails sent by us. We do this in order to optimise the contents of the newsletters and in order to make information and offers available to you, which are of interest to you. The legal basis is your consent and therefore Art. 6 Para. 1 S. 1 lit. a GDPR.
You can revoke your consent to the sending of the newsletter and the analysis of your user behaviour at any time by cancelling the newsletter. You can declare the revocation by clicking on the link provided in each newsletter email or by a message to the contact data stated below.
In case of revocation of your consent we will store the data stated above for proof of your registration for a further 7 months. The legal basis is our legitimate interest in the defence against possible legal claims and therefore Art. 6 Para. 1 S. 1 lit. f GDPR.
6. PROFILES IN SOCIAL MEDIA
6.1. General details
We maintain a corporate profile on the following social networks and platforms: Facebook, Instagram, YouTube, Twitter, LinkedIn. We maintain these profiles in order to communicate with our customers, users and interested parties as well as to provide further information all relating to our services and activities.
Please note that personal data of the users may be processed in third countries outside of the European Economic Area (EEA). In these countries there may be an insufficient level of data protection as there is no decision of the EU Commission regarding adequacy and no further suitable guarantees for the protection of your personal data. This may lead to risks for the users, e.g. it may be more difficult for the users to assert their rights.
If you leave messages for us on these profiles or write contributions, we process your data for communication with you. This represents a legitimate interest; the legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR.
No further storage of the communication data takes place on our part outside of these networks. The Business Terms and Conditions of the operators of these platforms shall apply. We cannot make any statement concerning which data are processed by these operators within the scope of your visit to the aforementioned networks.
6.2. Details relating to the operators
Please inform yourself directly at the respective provider, you can find the links to the relevant data protection information as well as details relating to the service provider here:
Details relating to the service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
7. PURPOSE LIMITATION OF THE USE OF PERSONAL DATA
Your personal data are only used for the purpose for which you have provided these data to us.
8. FORWARDING OF PERSONAL DATA
The aforementioned data processing is partly provided by data processors within the European Union (e.g. agencies for the development, design and supervision of our website, service providers for sending newsletters). These are bound by contracts and obliged to only process the data pursuant to our instructions and do not pursue any own interests or purposes with the processing.
A transmission to state institutions and authorities will only be carried out within the scope of obligatory national legal regulations.
9. DATA STORAGE AND ERASURE
Your data will only be stored as long as necessary for the stated purposes. Details can be seen from the respective sections of this data protection information.
In addition, a storage will only be carried out in case of statutory or contractual storage obligations.
10. YOUR RIGHTS
Besides the right to information regarding the data relating to you and rectification of your data, you have the right in the stipulated statutory framework -insofar as this is not opposed by any statutory regulations - to erasure or blocking of your data as well as a right to object to the processing of your data. Furthermore, you have a right, also in the statutory framework, to data portability.
Insofar as we collect and process your personal data owing to your consent you moreover have the right to revoke the consent granted by you. Your revocation will have no effect on the lawfulness of the data processing carried out owing to the consent until the revocation.
If necessary, we must verify your identity before we can process your applications.
Should, despite our efforts to ensure data accuracy and actuality false information have been stored we will rectify this after a corresponding indication.
In case of complaints there is the possibility to contact a data protection supervisory authority.
Your data are protected by MAN through technical and organisational security measures in order to avoid accidental or wilful manipulation, loss, destruction or access by unauthorised persons. Our security measures, such as e.g. the data encryption, are regularly improved in line with the technological development.
12. LINKS TO WEBSITES OF OTHER PROVIDERS
Our website may include links to websites of other providers. At the time when the link was set MAN convinced itself that the directly linked sites were free of illegal contents. MAN has however no influence on the contents of the linked sites and cannot control these continuously. Therefore, MAN does not assume any liability for the contents of the linked sites, which were changed after the link was set. This privacy statement does not apply to the linked websites of other providers.
In order to take the consistent development of the internet into account MAN can adjust this data protection information at any time by complying with the stipulations under data protection law.
14. DATA PROTECTION NOTICE FOR THE MAN APPLICANT PORTAL
14.1. General information
a) Information regarding data protection
The protection of your privacy rights during the processing of personal data is of the utmost concern to MAN. Data collected through the use of our website is handled in compliance with the law of the country in which the company responsible for data processing is located. Furthermore, the companies in the MAN Group have undertaken to provide comprehensive and uniform protection of personal data through the implementation of a binding Group policy. Within the MAN Group, this ensures a level of protection around the globe which is comparable to that in Germany and the European Union.
b) Controller and contact person
The controller for your data pursuant to data protection legislation is the company from the MAN Group that advertised the position you applied for. For general questions and questions about data protection, please contact the HR contact person that is specified in the advertisement for the job you have applied for. Alternatively, you can contact the Group Data Protection department, which will forward your query to those responsible on site.
14.2. Information about the MAN job portal
a) The MAN job portal
With this data protection notice, we provide you with information as to what personal data we may collect, process, and use when you visit our job portal without registering.
The term “personal data” refers to all information relating to an identified or identifiable natural person. A natural person is considered to be identifiable if they can be identified, either directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more particular characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural, or social identity of this natural person.
The purpose of the job portal is to provide you with information about job vacancies within the MAN Group.
b) Collection of general information
When you access our MAN job portal, information of a general nature is automatically collected. This information contains, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, and other similar information. This only concerns information which does not permit conclusions to be drawn about your person. This data is also generated during access to every other website on the Internet. This is therefore not a specific function of the MAN job portal. Information of this type is only collected in an anonymized form and evaluated by us statistically. The better our understanding of your preferences, the faster you can find the information you want on our website.
c) Collection and processing of personal data
Personal data is only collected if you provide it of your own accord, e.g., within the context of registration.
As a general rule, MAN protects your data by means of technical and organizational security measures in order to prevent accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures, such as data encryption, are regularly improved in line with technological development.
e) Links to other providers’ websites
Our website may contain links to the websites of other providers. MAN checked the directly linked websites at the time of link creation and was satisfied that these were free of legal violations. However, MAN has no influence of any kind on the content of linked websites and is not able to monitor these on an ongoing basis. MAN therefore assumes no liability for the content of linked websites that have been modified after the creation of the link. This data protection notice does not apply to the linked websites of other providers.
14.3. Information about the MAN application process
You do not have to provide any personal data in order to simply view job vacancies.
However, applying for a position is only possible using our MAN job portal. To do this, you first have to register for a user account by creating a user name and password. Your first and last name and your e-mail address are additional fields that are required (registration details). You can then use these registration details to log in to our MAN job portal, apply for positions, manage your applications, or find out about new job vacancies via e-mail in the future.
After entering your registration details, you can confirm that you have read and understood the data protection policy that applies to the MAN application process by ticking the relevant box. If you do not confirm this, you cannot continue with the application process.
Once you have registered, you have the opportunity to add additional personal details in “Mein Profil” (My profile), such as your address, your date of birth, academic achievements, links to online profiles, or telephone numbers. You can also upload documents here, such as CVs and other corresponding documents.
Any entries you make in the MAN job portal are voluntary, apart from the mandatory fields which are marked with an asterisk (*).
b) Legal basis for processing
The legal basis for data collection and processing is MAN using your information to decide whether to enter into an emplyoment relationship with you (Art. 26 (1) sentence 1 of the Bundesdatenschutzgesetz (BDSG — Federal Data Protection Act), latest version).
After registering and signing in, you can apply for individual jobs using the “Zur Stellensuche” (To job search) function in the MAN job portal. You then have to click the “Jetzt bewerben!” (Apply now!) button in the relevant job vacancy.
As part of an application, your e-mail address, surname, and preferred title are required as mandatory fields. You have the opportunity to enter further information and upload documents: cover letter, application portfolio, photo, CV, reference, certificate, and transcript (collectively referred to as “application data”). The company you are applying to may have set specialist test questions they require you to answer. A navigation path in the top image bar will guide you clearly through the online application process.
Once you have entered all the information for your application and clicked the “Bewerbung abschicken” (Send application) button, this information is forwarded to the company in the MAN Group that published the vacancy. A pop-up notification and a message sent to your e-mail address confirm that your application has been successfully sent. You can view your active applications in “Mein Profil” (My profile). You can also withdraw or close your application here.
Only the HR department and the specialist department of the company that advertised the job have access to your profile and application data in default standard mode. This right to access your information remains after the application process has finished and ends when you close your user account.
d) Limitation on use and transfer of personal data
We use your profile and application data exclusively as part of the selection process to fill a vacancy (vacancies).
You can set your profile status so that MAN HR specialists from across the company and worldwide can view your data and the documents you have uploaded, such as your CV. In this case, we are entitled to consider your application data for other job vacancies you may be suited to in other companies within the MAN Group. This function is voluntary and can be deactivated at any time. This function is deactivated in the standard mode.
Activating this function means that MAN HR specialists from non-member states outside the European Economic Area (EEA) can also view your data. In these countries, the level of data protection may be insufficient, as no decision has been made regarding the adequacy of the data protection by the EU Commission and no other suitable guarantees exist. Your data is transferred to these non-member states on the basis of your consent according to point (a) of Art. 6(1) of the EU General Data Protection Regulation (GDPR) or on the basis of the derogations from Art. 49(1) of the GDPR, which apply due to you activating the relevant function.
Your data can also be seen by associated companies from the MAN and VW Group, as well as external service providers who provide and technically operate the MAN job portal and the recruitment systems linked to it. Data protection contracts have been concluded with these companies in order to ensure a high level of data protection.
e) Data storage and deletion
We differentiate between application(s) and your user account in terms of storage and deletion of data. Since several different applications can be assigned to one user account, the application(s) must first be deleted (depending on their status and after a defined period of time) before the entire user account can be deleted.
Applications are deleted automatically 150 days after being given the “abgelehnt, zurückgezogen oder einzustellen” (rejected, withdrawn, or to be hired) status. Applications in “im Entwurf” (draft) status are deleted automatically after 90 days. Applications marked with the “in Bearbeitung” (in process) status will not be deleted.
Your user account will remain on the portal as long as at least one application is “in Bearbeitung” (in process).
If you have not logged in to your user account for 120 days, you will automatically receive an e-mail notification. So that unnecessary data about inactive users is not saved, we will delete your user account for good if you do not respond to this message within another 30 days.
We will also delete your user account if you click the “Profil löschen” (Delete profile) button (“Mein Profil > “Benutzerkonto” (My profile > User account) menu). Deleting the user account means that all registration and profile data, as well as all uploaded documents, are deleted. For evidential purposes and to respond to complaints, the final and irrevocable deletion only takes place after 150 days. Your user account is locked during this period and cannot be accessed via the application portal by you or by employees in the HR department.
14.4. Your rights
You have the right to be informed about the data that relates to you and the right to correct your data. Provided that there are no statutory regulations to the contrary, you also have the right to delete and block your data, as well as the right to object to the processing of your data. Furthermore, you have the right to data portability.
If we collect and process your personal data on the basis of your consent, you also have the right to revoke the consent you granted. The legality of the data processing carried out with your consent until you revoke it remains unaffected by your revoking of consent.
In order to revoke your consent or to exercise your rights in relation to your data, please contact the member of the HR department specified in the job vacancy that you are applying for.
Please note that you will be unable to apply to MAN without your data being processed.
In the event of complaints, you have the possibility to contact a data protection supervisory authority.
In order to keep apace with the continuous development of the Internet, MAN may adapt this data protection information at any time while adhering to the provisions of data protection legislation.