Data privacy statement | Career portal

For the sake of improved readability, we refrain from any linguistic differentiation between gender forms. Instead, we adopt the masculine form, but understand the use of this form and our gender policy explicitly and completely as gender-neutral.

The protection and security of your personal data is an important concern to us at Commerzbank Group. In the following we would therefore like to inform you about our data protection principles, with which Commerzbank undertakes to comply, in order to ensure that your application procedure takes place on a basis of trust.

Collection and storage of your data

Your personal data are collected and stored in the job portal of Commerzbank if you

• register online reps. create a user account,
• apply on a speculative basis, or
• apply for specific vacancies.

Registration / Creation of a user account

We need some information to create your user account.

This user account allows you to e. g. log in to our job portal, apply for jobs and manage your applications. For the application process, the necessary information and personal data, such as the name, address, e-mail address or school background information. In addition, you have the opportunity to submit individual application documents (e. g. cover letter, CV, certificates). The information and uploaded documents are added to our job portal and stored there.

The creation of a user account is either done by you via manual registration or third-party registration (social media registration) or otherwise automatically by us without prior registration on your part.

1) Manual registration

The following data will be collected by you during a manual registration:
• First name
• Last name
• Desired username
• Email address
• Self-selected password

To complete your registration, you will need to confirm your email address. To do so, we will send you an email with a corresponding confirmation link immediately after sending the registration form or your application.

You can change your personal data at any time after registration via the "My career portal" tab. The data itself, as well as the changes, are stored in our job portal and are made available to independent third parties only to the extent that this is expressly mentioned in this data privacy statement. Under no circumstances will we pass on your data to third parties for the commercial use of your data.

2) Third-party login

As an alternative to the manual registration described above, you can also register via external third-party services - these are currently Facebook, LinkedIn and Google. If you use this registration and login feature of our job portal, we may access some of the data stored by these third parties for login or identification purposes.

2.1 Facebook Connect (Facebook Inc.)

In our job portal, you can log in for registration using "Facebook Connect" as part of the so-called Single Sign On technology, if you have a Facebook profile. "Facebook Connect” is a service of the social network Facebook, which is run by Facebook Inc., 1 Hacker way, Menlo Park, CA 94025, USA ("Facebook").

If you click the respective button (Facebook logo), you will be redirected to the Facebook pages where you can log in with your Facebook user information. By this transfer, Facebook receives the information that your browser has accessed the login page of our job portal, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including the IP address) will be transmitted by your browser directly to a Facebook server in the United States and stored there.

When using the "Facebook" button to register, Facebook will provide us with the general and public information stored in your profile, depending on your personal Facebook privacy settings. This information includes:

• First and last name
• Email address
• Profile picture

We would like to point out that changes to Facebook's privacy policy and terms of use may result in the transfer of additional data if it has been marked as "public" in Facebook's privacy settings.

Your name and email address are mandatory for your registration in order to identify you. We do not use the profile picture in our job portal.

The purpose and scope of the data collection and the further processing and use of your data by Facebook, as well as your rights and settings to protect your privacy, can be found in the Facebook privacy notice: facebook.com/about/privacy

We do not transmit detailed user data (e. g. duration of usage, pages visited or job advertisements noted) on Facebook. However, Facebook will be contacted once each time you log in because your identity needs to be verified again. This process can be logged by Facebook. For more information about Facebook Connect and its privacy settings, see the Facebook Inc. privacy notice and terms of use.

2.2 LinkedIn OAuth (LinkedIn Corporation)

In our job portal, you can log in for registration with your LinkedIn account using the so-called Single Sign On technology, if you have a LinkedIn account. LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton place, Dublin 2, Ireland ("LinkedIn”).

If you click the respective button (LinkedIn logo), you will be redirected to the LinkedIn pages where you can log in with your LinkedIn user data. You will then be explicitly asked to release the following data stored by LinkedIn:

• First and last name
• Profile picture
• Email address

Your name and email address are mandatory for your registration in order to identify you. We do not use the profile picture in our job portal.

We do not transmit detailed user data (e. g. duration of usage, visited pages or noted job advertisements) to LinkedIn. However, LinkedIn will be contacted once each time you log in because your identity needs to be verified again. This process can be logged by LinkedIn. For more information on how to log in with LinkedIn and the privacy settings, see the LinkedIn Ireland Unlimited Company Privacy Notice and Terms of use at linkedin.com/legal/privacy-policy.

2.3 Google OAuth (Google Inc.)

In our job portal, you can log in for registration as part of the so-called Single Sign On technology with "Google OAuth” and log in if you have a Google account. Google OAuth is a sign-in and authentication service provided by Google Inc. that is connected to the Google network. Google is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, California 94043, USA ("Google”).

If you click the respective button (Google logo), you will be redirected to the Google pages where you can log in with your Google user data. You will then be explicitly asked to release the following data stored on Google:

• First and last name
• Email address
• Profile picture

Your name and email address are mandatory for your registration in order to identify you. We do not use the profile picture in our job portal.

We do not transmit detailed user data (e. g. duration of usage, visited pages or noted job advertisements) to Google. However, Google will be contacted once each time you log in because your identity needs to be verified again. This process can be logged by Google. For more information about Google login and privacy settings, please refer to the privacy notices and Google LLC Terms of use at policies.google.com/privacy.

3) Creation of a user account without registration

In the interests of user-friendliness and the simplification of the application process, we offer you the possibility to apply without registration. In this case, when you submit your online application, an account will be created automatically if it is not already available. The following personal information is stored for your account:

First name
Last name
Email address
Username (initially created by us for you)
Password (initially created by us for you)

To complete your application, you must confirm your email address. To do so, we will send you an email with a corresponding confirmation link immediately after sending the application. Only then will your application be submitted to our HR department.

The "My career portal" tab allows you to view and manage your personal data at any time after your application, i. e. to change and / or delete it. The data itself, as well as the changes, are stored in our job portal and are made available to independent third parties only to the extent that this is expressly mentioned in this data privacy statement. Under no circumstances will we pass on your data to third parties for the commercial use of your data.

Processing and utilisation of your data

Specific job advertisement (direct application)

If you apply for an advertised job via the job portal, your data can be viewed and processed only by the competent staff of the HR department and the competent staff of the advertising specialist department.

Speculative application

With a speculative application via our job portal you make your personal data available to us for the purpose of seeking an appropriate position. Your data can then be viewed by the HR departments of Commerzbank AG and by the specialist department staff involved in the application process to check your profile for suitable vacancies.

In addition to this, we check whether your application comes into question for other vacancies in Germany, at European locations or subsidiaries of Commerzbank AG. If there is a suitable vacancy your applicant data are specifically forwarded for this by the competent HR department.

The applicant data which are made available within the scope of the online application procedure can be forwarded within Commerzbank AG Germany, to European locations and to consolidated subsidiaries.

Simultaneous application in several Group companies

In the event that you apply simultaneously for various positions at several companies of the Commerzbank Group, the HR areas concerned obtain knowledge of all parallel applications. This has no impact on application procedures which are already in progress.

Application-related data

The replies and information which you give in the application phase are stored together with your name for up to six months after completion of the application procedure. After that the results are stored only in anonymised form for statistical evaluations. This statistical data record does not permit any conclusions to be drawn about your person.

Right of access and rectification, right of revocation

You have the right to view and update all your personal data stored in the job portal in the section “My career portal”. You yourself are responsible for ensuring that these data are true and correct. You can also delete your user account at any time.

The utilisation period of the account is six months. After six months you have to renew your agreement to the consent to the data protection declaration in order to extend the utilisation period. If you renew your agreement the utilisation period is extended by another six months. If you do not, your account is automatically closed.

If a current application is being processed when the utilisation period expires, the utilisation period is extended until this application has been completed.

Security in dealing with personal data

We employ technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction, or access by unauthorised persons. Transmission of your data in the internet is encrypted. Our security measures are checked and revised regularly in accordance with technological development.

Enforcement of and compliance with the data privacy statement

Commerzbank undertakes to comply with the above-mentioned points concerning data privacy as described.

If you have any questions or suggestions concerning data privacy and data protection in our job portal please contact:

Commerzbank AG
Data Protection Officer
datenschutzbeauftragter@commerzbank.com