5. Explanation of Security Measures
To protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encryption procedure on our website. Your information is transmitted from your computer to our server and vice versa via the internet using TLS encryption. You can recognize this by the closed lock symbol in your browser’s status bar and the address line beginning with https://.

6. Your Rights as a User
When your personal data is processed, the GDPR grants you, as a website user, certain rights:
Right of access (Art. 15 GDPR):
• You have the right to obtain confirmation as to whether or not personal data concerning you is being processed; if so, you have the right to access this personal data and the specific information listed in Art. 15 GDPR.

• Right to rectification and erasure (Art. 16 and 17 GDPR): You have the right to request the rectification of inaccurate personal data concerning you without undue delay and, where applicable, to have incomplete personal data completed

• You also have the right to request that personal data concerning you be erased without undue delay where one of the reasons listed in Art. 17 GDPR applies, e.g., if the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing (Art. 18 GDPR):

• You have the right to request the restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g., if you have objected to processing, for the duration of the verification

• Right to data portability (Art. 20 GDPR): In certain cases, as listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request the transmission of that data to another controller.

• Right to object (Art. 21 GDPR): If data is collected based on Art. 6(1)(f) GDPR (data processing for the purposes of legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

• Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. The right to lodge a complaint may be exercised in particular before a supervisory authority in the Member State of your residence, workplace, or the place of the alleged infringement.

7. Contact Details of the Data Protection Officer

Our corporate data protection officer is available to provide information or suggestions on the topic of data protection:
datenschutz süd GmbH
Web: www.datenschutz-sued.de
E-mail: office@datenschutz-sued.de
Phone: +49 221 17 91 86-19

8. Contact
If you have any questions or requests regarding the processing of your personal data in accordance with this policy, including exercising your rights as described above, you may contact us by e-mail at dpo.recycling@arcelormittal.com.

9. Online Applications
We process your personal data in accordance with applicable data protection regulations based on § 26 BDSG. We process the data you disclose to us in your online application solely for the purpose of selecting candidates. The data is not processed for any other purpose. You determine the scope of the data you provide to us in your application. The data from our job portal is processed on the servers of our service provider Oracle Luxembourg SARL. Online applications are electronically transmitted via the applicant management system to our HR department and processed as quickly as possible. Transmission is encrypted. As a rule, applications are forwarded to the heads of the relevant departments within our company. Beyond this, your data is not passed on. Your information will be treated confidentially within our company. If your application is unsuccessful, your data will be deleted six months after the end of the application process. If you would like us to consider your application for other or future job postings, please include a corresponding note in your application. You will receive a separate link from us through which you can confirm your consent. We then process your data based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

As a data subject, you have the right to access the personal data concerning you and to have inaccurate data corrected or deleted, provided that one of the reasons listed in Art. 17 GDPR applies, e.g., if the data is no longer necessary for the purposes pursued. You also have the right to restrict processing if one of the conditions in Art. 18 GDPR is met and, in the cases of Art. 20 GDPR, the right to data portability. Every data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of their data violates data protection regulations. The right to lodge a complaint may be exercised in particular before a supervisory authority in the Member State of the data subject’s residence, workplace, or the place of the alleged infringement.