Privacy Policy WORKDAY Recruitment System
Status: October 2019
Data controller
Siemens Gamesa Renewable Energy (“Siemens Gamesa”) – with registered office at Siemens Gamesa Renewable Energy, S.A. Parque Tecnológico de Bizkaia, Edificio 222, 48170, Zamudio, Vizcaya as Data Controller, takes data protection seriously. As part of this effort, we ensure that our Workday recruitment system is in compliance with the applicable laws on data privacy and security.

This Privacy Policy serves to inform on the types of personal data we collect on our Workday recruitment system, in addition to the reason for which these are collected. It also provides information on who your data is shared with and why, in cases where applicable. This Privacy Policy is updated from time to time. The last update can be found at the top of this page.

Further information about cookies can be found in our Cookie Policy; the policy gives direction on how to take control over this subject.

When only visiting and browsing the Workday recruitment system no personal data – other than the IP address – is collected. IP addresses are analyzed only in the event of a cyber-attack. Log data is promptly deleted on a regular basis.


Siemens Gamesa may ask for your consent before using your personal data (Article 6 (1) (a) General Data Protection Regulation - GDPR):

  • To fulfil a specific request, such as to offer Workday recruitment system’s services and functions and to administer your use of Workday recruitment system; to verify your identity, to answer and fulfill your specific requests, as reasonably necessary to enforce our Terms of Use in connection to recruiting activities for which you gave us the data. Siemens Gamesa will process the data based on the consent of the interested party given when entering Workday.
  • To handle the requests of candidates who want to work at Siemens Gamesa through the “Jobs at Siemens Gamesa” section. Siemens Gamesa will process the data based on the consent of the interested party given when entering Workday.

To exercise legitimate interests pursued by Siemens Gamesa (Article 6 (1) (f) GDPR) Siemens Gamesa will process your personal data:

  • To defend against fraud (and this may include the verification of identity), or to verify the legitimacy of a legal claim.
  • To maintain and protect the security of our products, services and websites, preventing and detecting security threats, fraud or other criminal or malicious activities. To improve customer service and to assist in identifying ways in which we can provide you with a better service, or enhance your experience of our website and other services.

To comply with Siemens Gamesa’s legal obligations (Article 6 (1) (c) GDPR) Siemens Gamesa will process your personal data:

  • To comply with legal and regulatory obligations and enforce our legal rights. For compliance purposes and Business Partner auditing, record keeping, compliance screening obligations (to prevent money laundering and other white-collar crimes).
As part of our offerings, Siemens Gamesa may provide links to e.g. a job board. This privacy policy does not cover third parties; as such Siemens Gamesa is not responsible for the privacy practices of these websites or applications.

For the aforementioned purposes, personal data processed by Siemens Gamesa may include:

  •  Contact information – e.g. full name, private and work addresses, private and work telephone numbers and private and/or work email addresses;
  • Curriculum Vitae - recommendation letters, motivation letters, documentation of finalized education and training;
  • Salary expectations;
  • Assessment;
  • Publicly available information – e.g., information available from integrity data bases;
  • Compliance screening obligations; and
  • Further personal data can be requested while the candidate progresses during the recruitment process.
As part of our effort to protect your data, we will only share your personal data with the relevant managers assigned to the current job openings to which you have applied. Other SGRE managers will have access to search among candidate profiles. Our subsidiaries will only have access to candiate personal data when necessary and when we are legally entitled to do so. We only share your personal data with Siemens Gamesa subsidiaries in third countries that have adopted and implemented our Binding Corporate Rules (BCR) for the protection of personal data.

For the operation of Workday recruitment system, we work with service providers such as hosting services, IT maintenance service providers and our outsourced provider. Your personal data is processed and interfaced to other candidate management tools in partnership with our outsourced provider. In such cases, there are safeguards put in place to make certain that your personal data is protected according to the regulations of the European Union. For recipients located in countries outside the European Economic Area (“third countries”), there is a possibility that the applicable laws on data protection do not offer the same level of protection as in the European Economic Area (EEA). Where this is true, Siemens Gamesa takes the necessary steps to ensure that an appropriate level of protection of personal data exists.

Data is shared only in connection with and in compliance with applicable laws and regulations.
We do not sell or otherwise market your personal data to third parties.
In case you wish, you may exercise your rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, portability, object and not to be subject of an automated individual decision-making, including profiling as explained in the Siemens Gamesa Renewable Energy Employee Privacy Notice. At Workday recruitment system, we provide you the possibility to update and delete data that you included in your profile. 

You may also revoke your consent at any time by deleting your profile or exercising your data subject requests by sending an e-mail to dataprotection@siemensgamesa.com. We will respond to all legitimate requests. 
Users who feel that their data protection rights have been violated or users who have any complaints regarding their personal information may contact the relevant Siemens Gamesa Data Protection Department at dataprotection@siemensgamesa.com.

In any event, data subjects may always lodge a complaint before the competent data protection authority in accordance with the applicable legislation.
We will retain the personal data that you provided to us to fulfill the purposes for which it was initially collected, or unless otherwise required by law and keep your profile open until you decide to close your account or for the period of 9 months after the latest updated action performed by you in Workday recruitment system. Before this period of time, we will send you a reminder that your profile will be close.
If you have any matters relating to personal data, you can reach the Siemens Gamesa data protection department at: dataprotection@siemensgamesa.com.

Share

Further information about data protection can be found in our privacy policy.