Data Protection Declaration – Global Employee Survey

1. Controller

The Controller for the processing of your personal data is

Knorr-Bremse AG
Moosacher Str. 80
80809 Munich
Germany
Tel.: +49 89 3547-0
E-mail: info@knorr-bremse.com

The contact details of the Data Protection Officer are:

Data Protection Officer of Knorr-Bremse Group
Moosacher Str. 80
80809 München
E-Mail: datenschutzbeauftragter@knorr-bremse.com

2. Origin, Purposes and Legal Basis for the Processing of Personal Data

The following personal data is provided by your employer (the Knorr-Bremse Group company with which you have your employment relationship) and used to enable participation in a survey, the reporting of survey results and trends as well as the planning and implementation of improvement measures:

• Personnel Number (Unique User ID)
• First Name
• Last Name
• Employee Email
• Employee Status
• Manager ID
• Birth Year
• Service Date
• Executive Regional Board
• Area, Department
• Division
• KB Region
• Company Code
• Country
• Location Group
• Job Family
• Job Sub-Family
• Employee Class
• Employee Type
• Gender
• Management Level
• Language Code
• Manager (yes/no)

Additionally, you may provide personal data directly to us when answering survey questions. Please note that surveys may contain free text fields. We highly recommend to not include personal data in your answers in free text fields to retain the confidentiality of your answers.

The legal basis for the processing of your personal data is Knorr-Bremse’s legitimate interest to improve employee motivation and satisfaction within the group based on regular employee surveys in according with Art. 6 para. 1 lit. f of the EU General Data Protection Regulation.

3. Recipients of the Data

Answers will only be included in the reporting for a department, business unit or company, if the survey has been completed by at least five participants within that area to ensure that answers are not linked to individual employees.

For administrative purposes, dedicated Key Users within the Global People Development Department have access to the personal data. Additionally, the survey results for a specific team, department, business unit or company (including the name and organizational data of that area’s manager) are available to the responsible Management (up to Management Level 1) as well as the Head of HR and HR Business Partner for that area.

The Knorr-Bremse employee survey and any data collected and processed in connection with the employee survey is hosted within the EU by LinkedIn Ireland, Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland on behalf of Knorr-Bremse. (LinkedIn’s privacy notice can be found here: Glint_English_UK_DPS.pdf (glintcdn.com) . For support purposes, personal data may be accessed from countries outside the EU/EEA that do not provide the same level of data protection as the EU. In such cases, Knorr-Bremse will implement adequate data protection measures to protect your personal data, including contractual agreements based on the EU standard contractual clauses.

4. Storage Duration

Your first name, last name and email address will be deleted six weeks after the end of the relevant employee survey. If you are a manager or have (administrative) access rights to the survey platform your data will be stored beyond the individual surveys for the duration of your employment relationship to allow for the implementation and monitoring of improvement measures. In any case, your personal data will be deleted within three months after you have left Knorr-Bremse. We will also delete your personal data if Knorr-Bremse decides to terminate the Knorr-Bremse Global employee survey platform.

6. Your rights

Subject to the requirements stipulated by the GDPR, you have the following rights:

• access to your personal data,
• the rectification of incorrect or incomplete data,
• deletion of your personal data,
• restriction of the processing of your personal data,
• the right to receive your personal data in structured, commonly used and machine-readable format and the transfer of that the data to another controller,
• to object to the processing of your personal data.

If you have any questions regarding the employee survey, please contact GES@knorr-bremse.com .

If you wish to exercise your rights or have any questions regarding data protection at Knorr-Bremse, please contact the Knorr-Bremse data protection organization at privacy@knorr-bremse.com .

We take your requests very seriously and are committed to address any of your concerns. Nonetheless, you have the right to file a complaint with a competent data protection authority at any time. In Bavaria, the competent supervisory authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.