E.ON – Privacy Notice for Candidates

Legal

The protection of your personal data and compliance with the applicable data protection regulations are very important to us. In the following, we inform you about the processing of your personal data in the context of your application and participation in the E.ON recruiting process.

A. Data sources and what data we process:

We process the following personal data from you:

1. If you apply via our career pages (the "Application Portal"), we collect the following data as part of the application process: your name, title, language skills, your e-mail address, address including your country of residence, your telephone number. In addition, you can voluntarily state here whether you have been diagnosed with a severe disability or an equal treatment.

2. It is necessary to upload a curriculum vitae that can contain, among other things, professional experience, educational background, language skills, alternative contact details, date and place of birth, marital status, occupation and professional qualifications, professional and private career, other qualifications, interests and hobbies. The data is stored in your candidate profile. Application documents (CV, cover letter, etc.) may contain special categories of personal data. According to Art. 9 GDPR, special categories of personal data are personal data revealing racial and ethnic origin, political opinion, religious (e.g. information on religious affiliation/denomination) or ideological beliefs or trade union membership, as well as the processing of biometric data for unique identification (e.g. photos), health data (e.g. information on the degree of severe disability) or data on sex life, or sexual orientation. If your application documents contain special categories of personal data, we do not collect them intentionally (except in case A. 1.). We expressly ask you not to transmit such data to us.

   If you upload cover letters or other documents to your application, we will also process the data contained therein.

3. Your candidate profile provides an overview of your submitted and saved applications, in which you can view the application status and date for the respective position.

4. If a position is recommended to you via eon.talentry.com, i.e. by an employee of a participating E.ON Group company, the recommender will be informed of the following data records: first and last name, date of application and final status ("discontinued" or "rejected") of your application.

5. In the course of the application process, we may ask you further questions on our career pages, e.g. about your willingness to travel or your driver's license. We process the data that you provide to us in this context. We also process the data that you send us by e-mail as part of contacting us.

6. If you send us an application or application documents by post, we will process the personal data contained in your application. In this case, we may enter your data into the system of our career pages in order to be able to process it together with the online applications. In this case, we will contact you by email or post and send you a link to the candidate profile we have created. There you can view, change and delete your data.

7. As part of the application process, we will check whether we can offer you admission to our candidate pool(s). This is a database in which your applicant data is stored in order to be able to consider you directly in the future for a suitable vacancy. At the appropriate point in the application process, we would inform you of this opportunity by e-mail and invite you to join our candidate pool. If you provide us with your personal data for a talent retention programme (e.g. if you are accepted into our candidate pool), we will store it in order to contact you directly with job advertisements that are suitable for you. In this context, we process the data collected during registration (A. 1.) and when sending application documents (A. 2. and 3.).

8. If you complete or update your candidate profile, we will process the data you enter there.

9. In the course of the application process, the data collected on the basis of Google Analytics will be merged with the status of your application (in case you consent to the usage of Cookies on our website) for the purpose of optimizing personnel marketing. The data includes technical session ID (Google Analytics), data from web analysis (input channel, date of page view), job ID, as well as date and status of the application.

10. In case you will receive an offer by the hiring team, further information (e.g. salary) will be stored in the system. As soon as you accept the offer, we will start the contract creation process and you will receive the data protection information for employees with further information on which additional data (e.g. bank details, social security number) will be collected and stored.

E.ON SE and the responsible parties pursuant to Chapter G. operate the career portal (in Oracle) under joint responsibility. The E.ON Group company specified in the respective job advertisement is solely responsible for creating and managing the applicant account in the context of the application for a specific position.

B. Purposes and legal bases of data processing:

We process your personal data for the following purposes and on the basis of the following legal bases:

1. Data processing for the decision on the establishment of an employment relationship, Art. 6 para. 1 lit. b) GDPR

   If you apply for a job with us, we process the data collected as part of the application process for the purpose of conducting the application process. According to Art. 6 para. 1 lit. b) GDPR, data processing is permitted, among other things, for the decision on the establishment of an employment relationship. We use the personal data provided by you as a basis for our decisions in the application process within the framework of the legal requirements. We use, for example: Your professional qualifications to decide whether we will consider you on the shortlist or a personal impression in an interview to decide whether we will offer you the position for which you have applied.

2. Data processing based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a), Art. 7 in conjunction with Art. 88 para. 1 GDPR (in Germany in conjunction with § 26 para. 2 BDSG)

   If you give us your consent for data processing, we will process your data in accordance with Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR in conjunction with Art. 88 para. 1 GDPR in conjunction with § 26 para. 2 BDSG.

   1. As part of the application process, we will check, for example, whether we can offer you admission to our candidate pool. This is a database in which your applicant data is stored in order to be able to contact you directly in the future when we have a suitable vacancy. If we offer you inclusion in the talent pool, we will contact you separately by email and give you the opportunity to prevent the automated deletion of your profile. If you decide to join the talent pool, you give us your consent to store your data and to contact you about other vacancies.

   2. If you have provided us with information as part of your registration as to whether you have been diagnosed with a severe disability or equal treatment, this will also be done on the basis of your consent.

   3. The combination of data as described in A. 9 will only take place with your prior consent. The merger serves to analyze the placement of job advertisements on external job boards and, if necessary, to optimize them accordingly.

   4. In addition, as part of your application, if you give your consent, your data is used for consideration for vacancies within the country of your residence: By doing so, you consent to E.ON entities having access to your personal data in your country of residence. This selection concerns the data according to A. 1., 2., 8. (for more details under C. 2.).

   You can withdraw your consent at any time as described in F. 4 e

3. Data processing of special categories of personal data according to Art. 9 para. 1 GDPR on the basis of your consent according to Art. 9 para 2 (a) and/or (b) in conjunction with 6 para. 1 (a) and (b) GDPR, respectively Art. 88 para. 1 GDPR (in Germany in conjunction with § 26 para. 3 sentence 2 BDSG)

   If you voluntarily provide us with special categories of personal data in accordance with Art. 9 (1) GDPR (e.g. information on your religious affiliation/denomination) as part of your application documents (e.g. information on your religious affiliation/denomination), we will store them on the basis of your consent in accordance with Art. 9 para 2 (a) and/or (b) in conjunction with 6 para. 1 (a) and (b) GDPR, respectively Art. 88 (1) GDPR (in Germany) in conjunction with § 26 (3) sentence 2 BDSG. This also applies if you provide us with further special personal data in the further course of the application process.

   By voluntarily submitting this data, you agree to the storage of this special personal data as part of the application process.

   As a matter of principle, we do not take this special personal data into account when making a selection decision, unless it is required by a legal obligation to take this special personal data into account. For example, in some job advertisements, it is possible that people with disabilities are given preferential treatment in accordance with the applicable laws.

   In these cases, the information is always voluntary and is provided with your explicit consent, which you give by voluntarily submitting this data.

   In case the processing of special categories of personal data (e.g. severe disability) is necessary in the application process, for example to fulfil obligations and rights under employment law such as ensuring special protective rights or to assert or defend legal claims, this is based on Art. 9 para 2 (b), (f) or (h) GDPR or Section 26 para 3 BDSG and Art. 6 para 1 (b) GDPR.

C. Usage of your data

When registering on our career pages by entering your e-mail, name and country of residence and other details as mentioned above, your data will be used as follows:

1. My data can only be used for jobs for which I have expressly applied. (according to B.1 & B.2 a-c)

   Your data in accordance with sections A 1, 2 + 5 will be used exclusively for the filling of the position(s) by the respective company advertising the vacancy for which you have expressly applied. There will be no further transfer within the E.ON Group for the filling of other positions, unless you have applied to other E.ON companies. In this case, the status of your application(s) according to A3 can be seen by the companies advertising the vacancy. Your data in accordance with Section A 9 will be used exclusively to optimise the personnel marketing of the advertising company.

   1. Data Controller

      The data controller for the respective job advertisement is the E.ON Group company specified in the respective job advertisement.

   2. Access

      Access to the personal data stored in your candidate profile is granted to the persons within the E.ON Group who are necessary to fill vacancies, depending on the position(s) for which you have applied. Your personal data is accessible to the respective HR departments and managers in the E.ON Group. Within the framework of functional management, these can also be managers of other group units and group companies, i.e. managers who are not employed by the company advertising the vacancy. Functional management means that specific topics (e.g. Legal, Accounting, HR, Procurement, but also types of Generation [Nuclear, Gas, Wind, Solar]) are grouped together under a single management across all companies. It is therefore possible that you will be employed by one company depending on the advertised position, but your manager is employed by another company. Finally, the necessary data is given to other parties involved in the application process, including in particular the works council, if necessary a person from the specialist department to assess your professional skills and, if required by law, the representative body for severely disabled employees of the respective group company to which you have applied.

2. My data may be used to consider me for vacancies within the country of my residence (according to B.2 d)

   If you gave your consent according to B. 2 d, your data in accordance with A 1, 2 + 5 will be passed on to companies of the E.ON Group in order to fill vacancies within the country in which you reside and can be viewed by them. We expressly do not forward your data to fill positions outside the country in which you live, unless you have applied in another country outside your place of residence. In this case, the status of your application(s) according to A3 can be seen by the companies in your country of residence and the company advertising the job in the other country outside your place of residence. Your data in accordance with Section A 9 will be used exclusively to optimise the personnel marketing of the advertising company.

   1. Data Controller

      In case you gave your consent to be considered for vacancies within the country of your residence, all companies of the respective country process the data concerning the candidate search in joint controllership. The data controller for the respective job advertisement is the E.ON Group company specified in the respective job advertisement.

   2. Access

      Access to the personal data stored in your candidate profile is granted to the persons within the E.ON Group who are necessary to fill vacancies, depending on the position(s) for which you have applied and those in your country of residence. Your personal data is accessible to the respective HR departments and managers in the E.ON Group. Within the framework of functional management, these can also be managers of other group units and group companies, i.e. managers who are not employed by the company advertising the vacancy. Functional management means that specific topics (e.g. Legal, Accounting, HR, Procurement, but also types of Generation [Nuclear, Gas, Wind, Solar]) are grouped together under a single management across all companies and for the entire Group. It is therefore possible that you will be employed by one company depending on the advertised position, but your manager is employed by another company. Finally, the necessary data is given to other parties involved in the application process, including in particular the works council, if necessary a person from the specialist department to assess your professional skills and, if required by law, the representative body for severely disabled employees of the respective group company to which you have applied.

   3. Withdrawal

      You can withdraw your consent at any time by sending a message to the responsible recruiter or alternatively as described in F. 4 e.

D. Data Security

The access data to your candidate profile must be treated confidentially and stored carefully, in particular the access data may not be passed on to third parties. You must immediately notify the contact persons named in the job advertisement of any loss, accidental disclosure or misuse of the access data.

E.ON independently ensures the protection of your personal data and complies with local laws and regulations regarding the processing of data.

Your application data is encrypted in our recruiting IT system.

E. Data recipients

Your personal data will be exchanged within the E.ON Group to the extent necessary.

Your data will not be transmitted to third parties outside the E.ON Group, unless you have given your consent or E.ON has received an official order to do so. This applies, for example, if you have accepted the relevant third-party cookies in our cookie banner.

In addition, selected employees of data processors commissioned by E.ON Group have access to your personal data in order to perform their administrative and support tasks. Personal data in this context is only passed on for a specific purpose within the framework of data processing in accordance with data protection regulations to entities that operate, for example, the servers or provide certain services.

In the context of the provision of services, service providers or sub-service providers based in a third country also process personal data. The transfer to third countries is carried out in compliance with EU data protection requirements and national law, for example on the basis of an adequacy decision or suitable safeguards (e.g. EU Standard Contractual Clauses). You have the option to request further information at any time and to receive copies of any such warranties.

F. Storage period, deletion and rights of data subjects

1. Storage period of data

   We store the personal data that you provide in your candidate profile and as part of a specific application for a maximum of 180 days after the conclusion of the respective application process, unless longer or shorter statutory retention periods apply or you have given your express consent to longer storage.

2. Purpose of deletion

   Deletion removes all personal data that allows you to be identified. Anonymised or aggregated data may be retained for statistical evaluations of our recruiting practices.

3. Storage as part of inclusion in the candidate pool

   If your data is included in a shared talent pool with your consent and your personal data is stored therein, the data will be deleted in accordance with F.1 and F.2, in particular F.1.e of this privacy policy.

4. Your rights

   1. Right of access

      You have the right at any time, within the framework of the statutory provisions, to request information free of charge about the data we process concerning you, the purposes of processing, the storage period or the criteria for determining the storage period, as well as the recipients of the data. You also have the right to receive a copy of your personal data that is subject to processing. You can of course view the data we hold about you in your candidate profile at any time.

   2. Right to rectification, erasure and restriction of processing

      If the data we process about you is incorrect, incomplete or the processing is unlawful, you can ask us to correct, supplement, restrict processing or delete your data to the extent permitted by law. You also have the option to correct the information in your candidate profile yourself, to delete your entire candidate profile or to withdraw your application at any time. If you ask us to delete your candidate profile manually, your applications in progress will also be deleted.

   3. Right to data portability

      If you have provided us with data on the basis of your consent or within the framework of an existing contractual relationship with us, we will make this data available to you upon request in a commonly used format or – if technically feasible – transmit it to a third party designated by you.

   4. Right to object

      Where we process your data on the basis of a legitimate interest, you may object to this processing for reasons arising from your particular situation. A message to the data protection officer is sufficient for the objection. For contact details, please refer to section F.5 of this privacy policy.

   5. Withdrawal of consent

      You have the right to withdraw any consent you have given us at any time with effect for the future. In this case, we will inform the recipients of the data accordingly and refrain from processing the data for the purposes covered by the consent in the future. To withdraw your consent, a message to the responsible recruiter or data protection officer is sufficient, stating that you are an applicant, the job advertisement ID and the corresponding E.ON company that published the job advertisement. For contact details, please refer to section F.5 of this privacy policy.

      You can also exercise your withdrawal by deleting specific data from your candidate profile or by completely deleting your candidate profile. We will cease to process this data in the future and delete it in accordance with section F.2.

   6. Right to lodge a complaint

      If you have any questions, suggestions or criticism, please feel free to contact the data protection officer responsible for the specific job advertisement (see section F.5). You can also lodge a complaint with the respective data protection supervisory authority. In principle, the data protection supervisory authority at the registered office of the data controller for the respective job advertisement is responsible. Alternatively, you can contact the data protection supervisory authority responsible for you locally.

5. Contact details for inquiries or complaints

   The contact details of the Data Protection Officer of the company to which you submitted your application can be found in the list attached to this Privacy Policy in Section G.

6. Data integrity

   Please ensure that the personal data you provide is true, accurate and up-to-date.

7. Obligation to provide data

   You are not contractually or legally obliged to provide us with personal data. Only in the context of online registration do we require a minimum set of data (first and last name, telephone number, e-mail address, country/region of residence, CV). If you do not wish to provide us with this data, you will not be able to register. You provide the remaining data and application documents voluntarily. If you do not wish to provide us with this data, we will not be able to carry out the application process.

8. Automated decision-making and profiling

   There is no automated decision-making or profiling.

9. Country-specific supplements (only relevant for applications in the respective country)

   Retention periods of other countries:

   • 6 months:
     • United Kingdom (Equality Act 2010)
     • Germany (Art. 6 (1) f GDPR)*
     • Belgium (Art. 6 (1) f GDPR)*
     • Finland (Art. 6 (1) f GDPR)*
     • Spain (Art. 6 (1) f GDPR)*
     • Denmark (Art. 6 (1) f GDPR)*
     • Austria (Art. 6 (1) f GDPR)*
     • Italy (Art. 6 (1) f GDPR)*
     • United States*

     * The legitimate interest is to be able to counter any complaints or complaints against the rejection received within 6 months of the rejection of an application and to be able to use the application documents for this purpose.

   • 12 months:
     • Hungary (Section 17 of Act CXXV of 2003)
   • 2 years:
     • Sweden (Swedish Discrimination Act 2008:567)
     • Romania (non-discrimination legislation (Government Ordinance 137/2000)
   • 3 years:
     • Czech Republic (Antidiscrimination Act (198/2009 Coll.), § 10; Civil Code (89/2012 Coll), § 636)

G. List of data protection officers including contact email address