Data Privacy Policy for Applicants

General Information
The protection and security of your personal data is of great importance to us at Berenberg. It is not only for legal reasons that we wish to inform you about the processing of your personal data in connection with your application. Therefore, please read our data privacy principles carefully before posting your application to our Careers portal.

Data Controller
If you apply for a job in any of our European offices, Joh. Berenberg, Gossler & Co. KG will be responsible for the processing of your personal data throughout the application process:

Joh. Berenberg, Gossler & Co. KG
Überseering 28
22297 Hamburg
Germany

If you apply for a job listed for our U.S. based company, Berenberg Capital Markets LLC will be responsible for the processing of your personal data:

Berenberg Capital Markets LLC
1251 Avenue of the Americas, 53rd Floor
10020 New York, NY
United States of America

Registration on our Careers Portal
During the application process, the necessary information and personal details, such as name, address, email address and details regarding your educational and professional background are recorded by uploading your individual application documents (e.g. cover letter, CV, certificates). We use this data for purposes of processing your application. If you do not provide this data, we may be unable to process your application. With your user account you can then log in to our applicant portal, apply for jobs throughout Berenberg as a group and manage your applications. The legal basis for the processing of your data for your application at Berenberg is Article 6 Par. 1 lit. b) of the General Data Protection Regulation (GDPR), if not indicated otherwise.

Registration for our Talent Community
If you cannot find a suitable position on our career website, you can register for our Talent Community. We will ask you for personal data such as your name, email address and a current CV. You can also specify the areas in which you are interested. With this data we can compare when new opportunities come up and contact you accordingly. In this particular case, the legal basis of processing your data is your informed consent pursuant to Article 6 Par. 1 lit. a) GDPR, which can be withdrawn at any time for the future and without giving reasons.

Email Notifications
During the application process, we will keep you informed about the status of your application by email. This is done in order to comply with all regulatory provisions related to your application process. Furthermore, if you decide to register in our Talent Community, we will send you emails to draw your attention to jobs which in our opinion could match your profile. You can unsubscribe from these e-mails at any time.

Interviews
If you participate in an interview, whether by phone, video conference, or in-person, we process your data (name, first name, if applicable, email address, if applicable phone number) for the organization of the appointment (e.g., sending dial-in details, registering your name with our reception desk). Please understand that we cannot proceed with your application if you choose not to participate in an interview.

If you choose to participate in a video interview, you give your consent by participating; the legal basis for your participation is therefore consent under Article 6 Par. 1 lit. a) GDPR and can be withdrawn at any time. During the video interview, we use your IP address to establish a connection and transfer video and audio date to your device. No recording takes place. For our video interviews, we use the platform provided by Cisco Webex or Zoom.

Employee Referrals
If you have been recommended for a position by one of our employees, they will pass on your full name and email address to us so that we are notified of your interest. In order to ensure that you are not contacted by us on an unsolicited basis, we will send you an email in which you confirm whether you consent to the processing of your personal data for the purpose of applying for a specific position. If you do not respond to our email within 14 days, the system will automatically delete your data. The legal basis of this processing activity is legitimate interests, which are composed of the bank's interest in qualified personnel on the one hand and the interest of the potential applicant in a job on the other.

Recipients of Your Data
It is possible for you to apply for vacant positions at all companies within the Berenberg Group through the Careers portal - your application data will be shared with the company that is advertising the position.

In addition – if we come to an agreement and you will be employed by Berenberg - we would pass on your e-mail address to your future manager so that they can contact you for onboarding activities. The latter takes place on the basis of so-called legitimate interests and serves to ensure a smooth onboarding process.

How Long we Retain Your Data
After the end of the application process, we will store your data for six months in order to be able to meet our obligation to present our case in relation to any claims for damages under anti-discrimination laws. After this period, your candidate profile will be deleted automatically.

If you have shared your personal data for a longer period of time (e.g., by registering for our Talent Community), we will contact you every 12 months per email to obtain your consent for continuing the processing of your data.

Processing subject to European Union, United Kingdom or Swiss Data Protection Law
The following sections of this policy (entitled ‘Legal Basis for Processing’, ‘Third Country Transfers’ and ‘Your Rights’) apply to you if Berenberg’s processing of your personal data is subject to European Union, United Kingdom or Swiss data protection law (e.g. if you apply for a position with one of the Berenberg companies or branches in the European Union, the United Kingdom or Switzerland).

Legal Basis for Processing
The legal basis for processing your application data is that the use of this data is necessary for taking steps at your request prior to entering into a contract with you (in other words, to process your application).
Email notifications about jobs which could match your profile (see above ‘Email Notifications’) take place on the basis of consent, which you can withdraw at any time without giving reasons and with effect for the future.

Third Country Transfers
We implement the following measures for each country of the Berenberg companies and branches to which your data may be transferred:

Your Rights
You have the following rights in relation to the personal data concerning you. In general, you can exercise most of these rights independently in the Career portal. Of course, you can also make a separate request at any time through the regular channels, e.g. by e-mailing the Talent Acquisition team or the Data Protection Officer (see below for contact details)

• Right of access by the data subject and right to data portability: You can create a copy of all documents relating to your application in your user profile at any time and download them. These documents also include all personal data which Berenberg has collected about you during the application stage. The format of this data is identical with the format that you have used when you uploaded the data to the Careers portal.
• Right of rectification: As long as you are registered as a user on our Careers portal, you will be able to rectify all data concerning you or add further information.
• Right to erasure (‚right to be forgotten‘): You have the right to ask us to delete your personal data in certain circumstances, including if it is no longer necessary for the purpose for which it was collected or otherwise processed.
• Right to restriction of processing: If you would like to exercise your right to have the processing of your application data to be suspended or restricted, please contact the Data Protection Officer or the Talent Acquisition Team.
• Right to object: At any time, you can object to the processing of your personal data on our Careers portal. You can do this by requesting us to delete your data from the system; however, please consider that we will be unable to further process your application in this case.
• Right to lodge a complaint with a supervisory authority: If you suspect that there may be a breach of data protection law or other laws by Berenberg, you may contact the Talent Acquisition team at Berenberg, or the Data Protection Officer. The Data Protection Officer will investigate your complaint and inform you about the further procedure. You also have the right to lodge a complaint with the relevant data protection authority.

Contacts at Berenberg:

Human Resources/ Talent Acquisition
Cont. Europe: +49 (040) 35060 2380
UK : +442034652737
recruitment%40berenberg.com

Data Protection Officer:
+49 (0)40 35060 7950
datenschutz@berenberg.com