Privacy Notice for applicants and interested parties (f / m / d)

Personal data comprises all information relating to an identified or identifiable natural person. This can be your name, address, telephone number or details about your professional career, for example.

Data processing refers to the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

Without limitation, the legal regulations applicable to processing personal data are found in the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

We process personal data in a variety of situations. For example, you may be affected by data processing if you have a contractual relationship with us, surf our website or use one of our apps. This privacy policy applies to data processing that is carried out in relation to your capacity as applicant for vacancies with us or one of our Group companies with whom we carry out the recruiting process jointly.

For internal applicants and prospective customers who are already employees of EnBW AG or one of its affiliated companies pursuant to § 15 AktG, the company regulations on data protection also apply.

The controller for purposes of processing your data is:

EnBW Energie Baden-Württemberg AG

Durlacher Allee 93

76131 Karlsruhe

Company headquarters:

Karlsruhe Mannheim Local Court HRB No. 107956

Chairman of the Supervisory Board: Lutz Feldmann

Executive Board: Dr. Georg Stamatelopoulos (Chairman), Thomas Kusterer (Debuty Chairman), Dirk Güsewell, Colette Rückert-Hennen

Recruiting Department

TELEPHONE 0721 63-26060

E-MAIL recruiting@enbw.com

as well as the company in the EnBW Group, where the position you are applying for or for which you have expressed interest must be filled. Please refer to the job advertisement for identification of the relevant company. In case of any questions, suggestions or complaints, please don’t hesitate to contact us.

You can reach our data protection officer at datenschutz@enbw.com. Our data protection officer is happy to answer any questions you may have concerning data protection.

We process the personal data that we receive from you as part of your application or expression of interest. This represents data that you provide to us as part of your application, in particular by submitting your application documents and information you provide in job interviews. We also visit profiles of applicants and prospects on Xing and LinkedIn or other professional social networks, if any. We do not visit profiles on private social networks.

It is also possible that we may receive information from recruiters to whom you have provided your application documents to and those who suggested you to us as a candidate for a position.

If you are applying for a position that is relevant to compliance, we will carry out an integrity check for those applicants who will be included amongst those receiving further consideration. The following positions are relevant for compliance purposes: Municipal Consultant (f/m/d), Compliance Officer (f/m/d), Strategic Purchases (f/m/d) including Claim Manager (f/m/d), Lawyers (f/m/d), Auditors (f/m/d), Land Surveyors (f/m/d) (Renewable Energies). These positions are marked accordingly. A background check is carried out for external hires and for internal reassignments/transfers if the employee has been with the company for less than 5 years. An Internet-based search (Google search) is also carried out, whereby this search does not cover social networks. If references are to be requested from previous employers, this will be discussed separately with the applicant.

In order to apply online or to show interest in jobs, it is necessary that you register for the EnBW job market. You will need to enter your e-mail address and set a password in order to do so. After registration you will receive an e-mail with a confirmation link to verify your e-mail address. You can then log in by entering your e-mail address and password. Please keep your password strictly confidential and don´t share it with third parties. When applying, you will be asked to provide information about yourself and how you can be contacted, to answer questions relevant to the position and to upload the standard documents such as cover letter, CV and certificates. Correspondence with you is regularly carried out via the e-mail address you have provided; these emails are not encrypted.

Your user profile will be automatically deleted if you do not log in for six months. Furthermore, we will gladly delete your user profile if you wish. To do so, simply contact us using the contact details provided above.

We process your data only if processing is legally permitted or if we have received your consent to data processing.

Processing your data for hiring purposes (Art. 6(1)(b) GDPR)

Data is processed for the purpose of personnel selection to fill vacancies, i.e. ultimately to initiate employment contracts.

Processing of your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR)

In addition to processing your data for the purpose of initiating a contract, we also process your data in our legitimate interest or the interest of a third party provided that your fundamental rights and freedoms requiring protection do not outweigh these interests.

Background research of applicants for positions with special compliance relevance.

As already mentioned in paragraph 6, we perform an integrity check for positions with special compliance relevance. It is in our legitimate interest to investigate whether applicants who are shortlisted for such positions have provided correct information.

Improvements in our recruiting process, surveys on applicant satisfaction

We are constantly aiming to improve our applicant selection process. Therefore, if you have given us your consent, or if permitted by law, we carry out surveys on applicant satisfaction and use the findings to identify where there is still room for improvement in the recruiting process. We want to find out who is applying to us and who we are reaching with our job advertisements.

If and as far as possible, we process your data, it is done in a pseudonymised form, i.e. in such a way that we can no longer directly identify you.

Defence against and assertion of legal claims

In addition, we store applicant data in order to be able to defend ourselves against any claims asserted against us, for example under the General Equal Treatment Act (AGG). We disclose personal data to government agencies, authorities and courts if this is necessary to defend ourselves in legal disputes or to enforce legal claims.

Recommendations from job boards or recruiters

If legally authorised, or with your consent, we may recommend that you use certain job boards or contact certain recruiters with whom we work.

Processing your data for compliance with a legal obligation (Art. 6(1)(c) GDPR)

Furthermore, data will be processed if we are obliged to do so by law. This includes feedback to the Federal Employment Agency (Agentur für Arbeit) as well as information to administrative offices, authorities and courts, provided we are obliged to do so.

Consent (Art. 6(1)(a) GDPR)

Data will also be processed if and to the extent that you have consented to data processing in accordance with Art. 6(1)(a) GDPR. The purposes for which data processing takes place in this context are based on the respective consent.

We treat your application to us as well as your personal data confidentially. Within EnBW AG, only those departments and employees who need your data to fulfil the above-mentioned purposes will have access to it. As a rule, this includes employees in the personnel department and the operational department where the position is to be filled, e.g. the manager in whose team the vacancy is to be filled.

EnBW AG not only recruits to fill positions for itself, but also at other Group companies. EnBW Group companies work together on a collaborative basis. Personal data is also only transferred to other Group companies if there is a legal basis to do so and it is necessary for one of the purposes mentioned above. As a rule, the Group company for which a position is advertised is sent and processes the respective data.

If there is a legal obligation to do so, the information is also transmitted to public authorities, such as law enforcement agencies or the Federal Employment Agency (Agentur für Arbeit). Data is only shared with third parties if necessary and legally permitted for the above-mentioned purposes or if you have given your prior consent. Furthermore, we are obliged to transmit data to the Ministry of the Environment in the case of mandatory background checks. In the case of employing applicants from third countries, data is transferred to the Centre for International Placement Services (ZAV).

Furthermore, personal data is shared with the works council within the framework of co-determination.

In addition, we work together with service providers who support us. We only share your personal data with our service providers and cooperation partners if there is a legal basis to do so. This involves service providers in the following areas:

• Personnel consultants and recruiters
• Headhunters
• Service providers for examining applicant qualifications

We will not store your personal data outside of the European Economic Area. However, access from a country outside the European Economic Area is also possible through administrative access, as system operability is often ensured based on the “follow-the-sun” principle. In these cases, data will only be accessed if either a Commission adequacy decision applies to the respective country, we have included the standard contractual clauses provided by the EU Commission for these cases in our agreements with the service providers or the respective company has established its own internal binding data protection policies which have been recognised by the data protection supervisory authorities.

We store your personal data as long as it is necessary for the completion of the processing purposes and/or for the fulfilment of legal retention obligations.

If you have not been selected for the position to which you applied, provided you withdraw your application, we will delete your data six months after you have withdrawn your application and, if we reject you, six months from the date of the rejection. In the event that an employment contract is concluded between you and us, or one of our Group companies, your application documents will be included in your personnel file and stored for the duration of your employment at a minimum.

If and to the extent that you have given us your consent for data processing for specific purposes, for example to actively contact you in order to offer you further vacancies with us or one of our Group companies, the processing period will be based on the purpose for which you have given your consent. Please note the information provided in connection with the declaration of consent.

As a data subject, you have the following rights regarding the processing of your personal data:

Subject to the requirements of

• Art. 15 GDPR, you have the right to request information about your personal data subject to processing. Please note the restrictions contained in section 34 BDSG.
• Art. 16 GDPR, you have the right to have incorrect personal data corrected
• Art. 17 GDPR, you have the right to the erasure of personal data. Please note the restrictions contained in section 35 BDSG.
• Art. 18 GDPR, you have the right to restrict processing
• Art. 20 GDPR, you have the right to data portability

Right to object under Art. 21 GDPR

If we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR) or to perform a task carried out in the public interest (Art. 6(1)(e) GDPR), you have the right to object to this processing in accordance with Art. 21(1) GDPR DSGVO on grounds relating to your particular situation. In the event of an objection, we will no longer process your data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You have an - unrestricted - right to object to any form of processing for purposes of direct marketing pursuant to Art. 21(2) (3) GDPR.

You may address your objection to us at any time on an informal basis.

You may contact us using the following contact details:

Recruiting Team

0721 915-32060

recruiting@enbw.com

If we process your personal data on the basis of consent you have provided, you have the right to withdraw your consent at any time. Your data will then no longer be processed for the purposes covered by the consent. Please note that the lawfulness of data processing performed prior to the withdrawal of your consent is not affected by this withdrawal. You may address your withdrawal to us at any time on an informal basis, for example by contacting:

Recruiting Team

recruiting@enbw.com

If you believe that the processing of your personal data violates applicable law, you may lodge a complaint with a supervisory authority at any time in accordance with Art. 77 GDPR. This is without prejudice to any other administrative or judicial remedies.

An application and expression of interest with us is voluntary. However, providing your personal data regarding your previous professional and/or academic background, your qualifications, your abilities and information about yourself and how you can be reached is necessary so that we can find out whether you as an applicant and the position to be filled match and we can make a hiring decision. Without the provision of personal data by you as an applicant or interested party, no personnel selection or application procedure can be performed. Consequently, failure to provide personal data simply means that you cannot be considered as a candidate when filling a position.

No, we do not use automated decision-making.

In light of the circumstance that data processing is subject to change, we will also update our privacy policies from time to time. We will inform you of any changes in good time.