Data protection information for applicants As at October 2019 

FOLLOWING YOU WILL FIND INFORMATION ABOUT HOW PERSONAL DATA IS PROCESSED AS PART OF THE RECRUITMENT PROCESS AT DEUTSCHE POST DHL GROUP. 1. Why are you being provided with this information? It is important to us to protect your personal data, such as your contact details and your curriculum vitae, and to ensure your data is processed in accordance with regulations. We would therefore like to provide you with the following comprehensive information about how we process your data when you make an application and throughout the recruitment process, in accordance with the provisions of the General Data Protection Regulation (GDPR) and, where necessary, any additional applicable statutory data protection provisions. "Processing" covers aspects such as the collection,storage, use, amendment and deletion of your data. 2. Who is responsible for processing your data? The group company specified in the job advertisement is responsible for any positions advertised and for any data processing undertaken in connection with your application. The advertisement will also provide relevant contact details. Deutsche Post AG provides you and Deutsche Post DHL Group companies with a central platform for providing details of global job opportunities,along with centralised tools such as Job Alerts 1 .Deutsche Post AG is responsible for all aspects of the platform that relate to data protection legislation. In Sweden, DHL Express(Sweden) AB 3. Who is the responsible company Data Protection Officer? Data Protection Officer for DHL Express(Sweden) AB: Damon Bailey, Data Protection Official (DPO), DHL Express (Sweden) AB Visiting address: Västberga Allé 37, 126 30 Hägersten E-mail:seexpressgdpr@dhl.com 1 Job Alert Is an automated notification tool for job advertisements. Refer to 5 below. G. Data protection information for applicants As at October 2019 Page 2 of 6 4. Who is the responsible regulatory authority? If you are of the opinion that your data protection rights have not been sufficiently respected and you would like to complain about this to the responsible data protection regulatory authority, you may do so at any time. Datainspektionen Drottninggatan 29 5th Floor, Box 8114 104 20, Stockholm Tel. +46 8 657 6100, Fax +46 8 652 8652 E-mail: datainspektionen@datainspektionen.se Website: http://www.datainspektionen.se/ 5. For what purposes do we use your data? Your data will be used by the companies belonging to the Deutsche Post DHL Group (DPDHL Group) for the purpose of contacting you and in connection with the recruitment process. The items listed below may also give rise to other reasons to process your data. a. Your Specific application Your application to a group company will be handled by the employees of that company who are responsible for the application process. Those employees will process your data for the applicable purposes only. b. Spontaneous applications If you make an application to us that does not relate to a specific vacant position, we will assume that all applicable group companies may use your data in order to make you aware of any vacant position that might be suitable for you. Your Data Will be stored for this purpose in an IT system. The individual group companies will use this data to search for suitable candidates for current or future vacancies. You can withdraw your spontaneous application at any time. To do so, simply notify the office to which you sent your application. c. Intra-group disclosure for an application regarding a specific vacant position In the event that you apply for a specific vacant position within a group company, we will only forward your data to other group companies for the purposes of possibly filling vacant positions within that company, provided that you give us your express consent to do so. You are able to revoke your consent at any time with effect for the future. d. Data matching for compliance purposes We are obliged by law to ensure that we do not provide financial support to recipients under sanction pursuant to EU anti-terror laws(sanctions list) and any relevant national law. In each case, we therefore compare the master data that we receive from our selected candidates against the current sanctions list/laws. Data protection information for applicants As at October 2019 Page 3 of 6 e. Registering on a career platform If one of our career platforms requires you to register, your access data (such as name, email address and password) will only be used for the purpose of securing your access to the career platform and the data that you store on the platform. Where necessary, you can find more information on the career platform about how your data is processed. f. Statistical analyses In order to improve our job advertisements and recruitment processes, we perform analyses and assessments for statistical purposes, e.g. how many applicants have applied for a particular job, or how long a vacancy was advertised. In this context, we process data about current and former applicants, e.g. how far from the workplace the applicant lives. Our legitimate interest in improving our job advertisement and recruitment process forms the legal basis for this type of processing. You May object to the processing of your personal data for this purpose on the basis of reasons relating to your particular circumstances, pursuant to Art. 21 para. 1 GDPR. g. Job Alerts If you enable the Job Alert function, your email address will be used to inform you about current job vacancies within our group companies that fit your search criteria (category, location). 6. How do we collect your data? In general, you will save your own data on our career platform. You can also find additional information on the platform about how your data is processed. If you send your application to us via a different channel, as a rule we will also store your data on our career platform. If that you have supplied data via publicly available networks and platforms used for professional purposes, we will also process this data in accordance with the applicable terms and conditions of use of the operating company. Where we work with recruitment agencies, we assume that those agencies forward your data to us having sought your consent for them to do so. In all cases,the data will originate directly with you (direct data collection). 7. What data do you need to provide? In addition to your master data and contact details, in order to assess each application we require personal data from you that provides an insight into how suitable you are for the position in question (application data).Unless, by way of exception,there is a legal obligation to provide information about certain personal requirements, e.g. proof of credentials for drivers or pilots, you decide what data you will provide to us. Data protection information for applicants As at October 2019 Page 4 of 6 8. What data do we collect from you? • Master data (surname, first name, date of birth) • Contact details(address,telephone number, email address, etc.) • Application details such as curriculum vitae, cover letter, certificates, references and anything further you provide to us or wish to disclose during interviews • Photograph, where applicable • Citizenship and work permit, where applicable • Copy of passport and driving licence • Previous convictions where this is applicable to the advertised position, e. g. for drivers • Account details to reimburse you for travel expenses, for example • Data about you that you have provided via publicly available networks or platforms used for professional purposes, in accordance with the applicable terms and conditions of use of the operating company. • Access data for the career platform(username and password) • As far as applicable, data obtained from references, assessments and screening reports. 9. What is the legal basis for processing your data? We will process your data for the purposes of making a decision about establishing an employment relationship. Depending on the individual application,the following legal bases may apply:  Art. 6 para. 1a GDPR (your consent), Art. 6 para. 1b GDPR (the potential employment contract), Art. 6 para 1c GDPR (our legal obligation) and Art. 6 para 1f GDPR (our legitimate interests). Other applicable legal provisionsmay give rise to other data protection requirements. 10. Who has access to your data? Your data will generally be processed by a person authorised to do so for the group company to which you are making an application. For the purposes of undertaking the application process, some group companies may engage specially trained employees from other group companies (intra-group service providers) or contracted external service providers. In all cases, assurance is given that corresponding agreements are in place that ensure your data is handled in accordance with data protection law. Your data will only be accessed in each case by individuals who are authorised to do so. If that your data is passed on within the group, the conditions outlined under 5a and 5b will apply. Group-wide recruitment processes may further stipulate that, alongside the line Data protection information for applicants As at October 2019 Page 5 of 6 manager and the HR Department of the group company in which the position is vacant, technical and recruitment service providers, both from other group companies and external companies, can access your data. Where applicable, the responsible Works Council and authorities will also use your data to exercise their statutory participation rights during the recruitment process. Group-wide processes such as IT outsourcing, for example, may stipulate that employees of various group companies are authorised to access your data. 11. How is data passed on to countries outside of the GDPR jurisdiction? If you apply for a position outside of the European Union or you share your data for the purposes of being included in the pool of applicants, group companies in third countries will also have access to your data. In the event that personal data is shared with other group companies in third countries, this process will be undertaken in accordance with the Deutsche Post DHL Group data privacy policy. This ensures that our group companies worldwide process personal data in accordance with standards that guarantee an appropriate level of data protection as required by European data protection legislation.Our group data privacy policy has been approved by the European regulatory authorities as Binding Corporate Rules(BCR). You can obtain a summary of the contents at https://www.dpdhl.com/content/dam/dpdhl/homepage/dpdhl-data-privacy-policysummary.pdf If an external company is appointed (technical)service provider, this company will be bound by contractual agreements and the obligation to comply with European data protection standards. We will not forward your data to international organisations. 12. How long will your data be stored for? We will store your data until you withdraw your spontaneous application or you revoke, with effect for the future, the consent you have given to be included in our pool of applicants in connection with your application for a specific position. If the application process concludes without you being appointed, we will store your data for 2 years, unless applicable provisions give rise to any additional retention periods. If you are appointed, we will add your application data to your personnel file. 13. What is the process for making a decision about your application? Applications are generally assessed personally by employees of the HR department that is responsible for the job advertisement. If, by way of exception, an automated decision is taken within a permissible framework or certain information about you is automatically processed and assessed and a prediction is made about you (for the purposes of building a profile),the group company to which you apply will inform you about your right to be heard and your right to object. Data protection information for applicants As at October 2019 Page 6 of 6 14. What rights do you have? In accordance with the statutory provisions, you are entitled: • to revoke any consent you have given with effect for the future (Art. 7 para. 3 GDPR), • to receive information about the data that we have stored about you (Art. 15 para. 1 GDPR), • to receive a copy of the data we have stored about you (electronically, where applicable) (Art. 15 para. 3 GDPR), • to demand that we rectify incorrect data that we have stored about you (Art. 16 GDPR), • to demand that we delete any data that we may no longer store about you (Art. 17 para. 1 GDPR), • to object to your data being processed for the purposes of maintaining our legitimate interests(Art. 21 GDPR) and • to be consulted in the event of automated decision-making and to contest the outcome (Art. 22 GDPR). 15. How do you exercise your rights? To exercise your rights, please use our career platformer contact the relevant person involved in the application process. Any data recipients will also be informed if your data is rectified or deleted. The responsible data protection officer will be happy to help should you have any further questions. If you are of the opinion that your rights are not being sufficiently upheld, you have the option to lodge a complaint with the relevant regulatory Data Protection Supervisory Authority. 16. Changes to this information
This information is correct as at October 2019. Please note that we reserve the right to amend this information as required. 17. Amendments to this information In case of amendments to this information, we will provide a new version under: https://www.dpdhl.jobs.