Protecting personal data is one of our top priorities, so Knorr-Bremse processes your data in compliance with the provisions of the European General Data Protection Regulation (GDPR) and other relevant data protection and data security legislation.
The following information applies to the Sustainability Competition entitled “Your Ideas for Sustainable Impact” and launched as part of the company’s 120th anniversary celebrations. The competition gives employees an opportunity to apply for our Sustainability Innovation Award. This document explains what personal data we collect in the course of the competition, why we collect it and how we use it. We also explain your rights in relation to your personal data.
1. Data Controller
The data controller within the meaning of the relevant data protection legislation is:
Knorr-Bremse AG
Moosacher Str. 80
80809 Munich
Germany
Phone: +49 89 3547-0
Email: info@knorr-bremse.com
The Data Protection Officer’s contact details are as follows:
Knorr-Bremse Corporate Data Protection Officer
Moosacher Str. 80
80809 Munich
Germany
Email: dataprotectionofficer@knorr-bremse.com
2. What do we use your personal data for, and on what legal basis?
When you visit the web page with details of the Sustainability Innovation Award
When you visit the page that tells you about the competition, which is a web page on the Knorr-Bremse Group website, our application server automatically processes data that makes it technically possible to display the website to you. This data includes: your IP address, the date and time of your access request, the page or web service accessed, the type of access, the response code, the size of response, and the type of browser you are using. In addition, the server automatically logs any error that occur, together with the cause of the error. This data is stored in our systems’ log files for a maximum of three months.
In this case, the legal basis for processing your data is Article 6 (1) point (f) GDPR. Our legitimate interest lies in ensuring the functionality and security of our website.
The registration form for taking part in the Sustainability Competition
Knorr-Bremse Group employees who do not have an internal company email address can register to take part in the competition by making use of a special registration form on the Sustainability Innovation Award web page and entering an external email address. Once they have registered, they will be sent a personal link to the official entry form in Microsoft Forms. If you use the registration form to register for the competition, we also process the data you provide in the registration form (your name, email address and position in the Knorr-Bremse Group).
In this case, the legal basis for processing your data is your consent pursuant to Article 6 (1) point (a) GDPR.
Using Microsoft Forms to take part in the Sustainability Competition
If you enter the Sustainability Competition – i.e. submit your application – via Microsoft Forms, we process the data you enter in your answers to the questions on the application form. This data may include, for example, your name, a description of the idea or concept you are submitting, and other uploaded content such as material explaining the concept in more detail in the form, for example, of PDF, PowerPoint or image files (for more information on graphical material, please see the terms and conditions of entry). The data is stored in our system when the entry form is submitted. We need to process this personal data so we can continue to process your entry in the course of the Sustainability Innovation Award’s assessment and adjudication process. While you are entering data relating to your competition submission, you can temporarily save it, in which case it is stored in the same place as the data will be stored once you submit the completed entry form.
In this case, the legal basis for processing your data is your consent pursuant to Article 6 (1) point (a) GDPR.
Processing and adjudication of the submitted concepts
When you finally submit your application, your concept is entered into the selection and adjudication process for the Sustainability Innovation Award. The data you have submitted (answers, description of your concept, uploaded supporting material) will be processed internally as part of the selection procedure, and checked, sorted and assessed against the selection criteria.
Once again, the legal basis for processing your data in this respect is your consent pursuant to Article 6 (1) point (a) GDPR.
3. Who do we share your personal data with?
We share your personal data with certain individuals within the Knorr-Bremse Group who are entrusted with running the competition and responsible either for assessing and shortlisting the participants who will be entitled to pitch to the ESG Board, or for selecting the competition finalists and winners.
4. Where will your personal data be published, if at all?
As part of the selection and adjudication process, your personal data may be used for purposes of internal communication relating to the Sustainability Innovation Award competition. In addition, data relating to your idea or concept may also be used for internal communication purposes (e.g. in a short video presenting the pitch concepts when selecting the competition winners) and/or for external communication purposes on or in, for example, the Knorr-Bremse Group’s social media, print or online media.
The legal basis for publishing your data, photos and/or videos is your consent pursuant to Article 6 (1) point (a) GDPR. We obtain the consent of the selected competition applicants and winners prior to publishing such data.
Data published on the Internet or on social media channels is globally accessible. It is consequently impossible to rule out further use of this data by third parties.
5. When do we delete your personal data?
We erase your personal data (including data pertaining to your registration, participation, processing and adjudication under the terms of the competition) as soon as it is no longer required for the purposes described above, taking statutory retention periods into account. Once the process of presenting the Sustainability Innovation Award is complete, your ideas and the associated data may be stored for up to two years, for further consideration in a different context or as part of a sustainability project organized at a later date.
You may request that the data you submitted via Microsoft Forms be deleted at any time. If you wish to have your data erased ahead of schedule, please send an appropriate message to sustainability.award@knorr-bremse.com.
The data relating to concepts selected for participation in pitches to the ESG Board, together with the personal data of competition finalists and winners in particular, will be erased once it is no longer required or if the individuals (data subjects) concerned withdraw their consent (for publication of such data on the intranet, Internet or social media).
Please note that in the case of publication in print media, it is only possible to erase your personal data or revoke your consent up to the time at which the publication concerned goes to press.
Data published on the Internet is globally accessible. It is consequently impossible to rule out further use of this data by third parties.
6. What are your rights?
You have the right to request that we confirm whether or not we are processing personal data concerning you; if this is the case, you have the right to be informed about this personal data and to the information described in detail in Article 15 GDPR.
You have the right to request that we immediately rectify any inaccurate personal data concerning you and, if necessary, that we complete any incomplete personal data.
You have the right to request that we immediately erase any personal data concerning you if one of the grounds described in detail in Article 17 GDPR applies, so for example if the data is no longer required for the purposes specified (right to erasure).
If one of the provisions listed in Article 18 GDPR applies, so for example if you object to the processing of your personal data, you have the right to request that we restrict the processing of your data for the duration of our verification procedure.
You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular circumstances. At such time we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms, or unless the processing is required for purposes of establishing, exercising or defending a legal claim or claims.
Because we process your personal data on condition that you consent to our doing so, you may revoke this consent at any time. Please note that revoking your consent does not affect the legality of any data processing carried out on the basis of this consent before you revoked it.
8. Who can you contact if you have questions or wish to exercise your rights?
If you would like to exercise your rights or have any questions about Knorr-Bremse’s data protection policy or procedures, please contact the Knorr-Bremse data protection organization at privacy@knorr-bremse.com.
We take your questions, inquiries and concerns very seriously and make every effort to respond to them. However, you also have the right to lodge a complaint with a competent data protection authority at any time. In Bavaria, the competent supervisory authority is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.