Data Privacy 

 Recruiting-Events 

Data protection information in accordance with Art. 13, 14 EU General Data Protection Regulation (GDPR)


The following data protection information is intended to explain to you in an understandable, transparent and clear manner how we, PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft (hereinafter: "PwC WPG"), and the affiliated companies of PwC WPG:
•    PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Germany
•    PricewaterhouseCoopers Legal AG Rechtsanwaltsgesellschaft, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main, Germany
•    PwC Strategy& (Germany) GmbH, Bernhard-Wicki-Straße 8, 80636 Munich, registered office of the company: Georg-Glock-Straße 22, 40474 Düsseldorf
•    PwC Cyber Security Services GmbH, Kapelle-Ufer 4, 10117 Berlin

process your personal data in connection with your use of our event site, applications ("apps") and online services. However, if you have any questions of understanding or other queries about data protection at PwC, you are welcome to contact our data protection officer at DE_Datenschutz@pwc.com.


1. Controller

The controller within the meaning of Art. 4 No. 7 GDPR for the processing of your personal data is
PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft,
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main
E-Mail: DE_Kontakt@pwc.com
Switchboard: +49 69 9585-0
Fax: +49 69 9585-1000


2. Data protection officer

PwC WPG has appointed a data protection officer in accordance with Art. 37 GDPR. You can reach the Data Protection Officer of PwC WPG, Dr Tobias Gräber, at the following contact details
Email contact: DE_Datenschutz@pwc.com
Telephone: +49 69 9585-0
Address for postal contact:
PricewaterhouseCoopers GmbH WPG
Dr Tobias Gräber, Data Protection Officer
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main


3. Rights of data subjects/your rights under data protection law

You have the following rights under the applicable data protection law with regard to the personal data concerning you:

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller. You can find a list of supervisory authorities (for the non-public sector) with addresses at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

You have the following rights under the applicable data protection law with regard to the personal data concerning you:

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller. You can find a list of supervisory authorities (for the non-public sector) with addresses at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Right to information: You can request information from us at any time as to whether and what personal data we store about you. The provision of information is free of charge for you. The right to information does not exist or only exists to a limited extent if and insofar as the information discloses information that requires confidentiality, e.g. information that is subject to professional secrecy.

Right to rectification: If your personal data stored by us is incorrect or incomplete, you have the right to request that we correct this data at any time.

Right to erasure: You have the right to request that we erase your personal data if and to the extent that the data is no longer required for the purposes for which it was collected or, if the processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and remove it from our IT systems and databases. There is no right to erasure if
•    the data may not be deleted due to a legal obligation or must be processed due to a legal obligation
•    data processing is necessary for the establishment, exercise or defence of legal claims.

Right to restriction of processing: You have the right to request that we restrict the processing of your personal data.

Right to data portability: You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format and the right to have this data transmitted to another controller. This right only exists if
•    you have provided us with the data on the basis of consent or on the basis of a contract concluded with you
the processing is carried out by automated means.


4. Right to object to the processing

If your data is processed on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR, you can object to the processing at any time.

You can assert all of the data subject rights described above against PwC WPG if you address your specific request to the following contact details:
•    By e-mail: DE_Datenschutz@pwc.com
•    By post:
PricewaterhouseCoopers GmbH WPG
Dr Tobias Gräber, Data Protection Officer
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main


5. right to lodge a complaint with a data protection supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

6 Provision of the data

Even if data is sometimes transmitted automatically when you visit our event page, you are not legally or contractually obliged to provide data in connection with the use of our website.

In connection with the contact form and contacting us by e-mail, you are free to send us data via these channels, but without the corresponding provision of data in the course of contacting us, we cannot process and answer any enquiries from you in this respect.


7 Description of data processing and legal basis for processing


7.1 Processing of personal data when accessing the event page


7.1.1 Type and scope of data processing

When you access our event page, we collect the data that is technically necessary to display this event page to you. This involves the following personal data, which is automatically transmitted to our server by your browser
•    IP address
•    Date and time of your enquiry/access to the event page (of the app)
•    Time zone difference to Greenwich Mean Time (GMT)
•    Content of the request (information about which specific page you have accessed)
•    Access status/http status code
•    Amount of data transferred in each case
•    Event page from which the request originates
•    Browser (information about the browser you are using)
•    Operating system and its interface (operating system of the computer you used to access the event page)
•    Language and version of the browser software

This event page is hosted by a service provider; the data collected on our event page is therefore stored on the service provider's servers. The server locations are in Germany and other EU countries. Data is transferred abroad, but only to countries in the European Union or the European Economic Area.


7.1.2 Legal basis

This personal data is processed on the basis of our overriding legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. The event page cannot be accessed and offered to users without the use of this data; there is a legitimate interest in making it technically possible to access and use the event page. The data is also stored in order to technically secure the event page. We have an interest in the security and availability of this event page.

7.1.3 Storage period

The data information is stored for 14 days and then deleted.

7.2 Registration and creation of a user account


7.2.1 Type and scope of data processing

If you would like to apply to PwC WPG via the career portal, you can register in the first step and create a personal user account. You can then use your user account to complete our application forms and upload your application documents.
The following categories of personal data are processed:
•    Salutation,
•    title,
•    First name (mandatory),
•    Surname (mandatory information),
•    User name (mandatory),
•    e-mail address (mandatory)


7.2.2 Legal basis

The processing of data in the context of registration and the creation of a user account by you is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.  Registration and the creation of a user account are voluntary. By registering yourself or setting up a user account, you consent to the processing of the data collected in this context.
You can revoke your consent at any time with effect for the future.


7.2.3 Storage period

The data collected during registration and the creation of the user account will be stored for the duration of the continued existence of the registration and the existence of the user account.

You can delete your account yourself at any time, either by using the self-service or by sending us a request for deletion by email or post. In both cases, your account will be deleted as soon as possible. The deletion of your user account does not affect the lawfulness of the processing of personal data between registration/setup of the user account and deletion of the user account by you.


7.3 Participation in an event


7.3.1 Type and scope of data processing

You can register for a career event on our website at any time. We process the following data for this purpose
•    Contact details
•    Address data
•    Information on educational / professional history
•    Information on interests
•    If applicable, information on diet, food intolerances and other information necessary for the organisation of the event (voluntary)


7.3.2 Legal basis

This personal data is processed on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. With regard to information on food intolerances, processing is carried out on the basis of Art. 9 para. 2 lit. a) GDPR.
You can revoke your consent at any time with effect for the future.


7.3.3 Storage period

We store your data until the end of the event.

7.4 Active approach on professional social media platforms



7.4.1 Type and scope of data processing

We use professional social networks to recruit staff by identifying suitable talent for PwC. If necessary, a subsequent approach is made via the network's internal chat function.

In doing so, we use the personal data published on the respective professional social media platform.


7.4.2 Legal basis

We process personal data with regard to the identification of suitable talents on the basis of our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. We have an interest in filling our vacancies.

The processing of data in the context of actively approaching applicants on professional social media platforms is based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR.


7.4.3 Storage period

If your data is stored in this context, we will store it for as long as storage is required or you have withdrawn your consent. If there are statutory retention obligations, the data will be stored for the duration of the statutory retention obligation.

7.5 Further development of artificial intelligence (AI)


7.5.1 Type and scope of data processing

Artificial intelligence supports us in the application process. We use data from the application process to further develop artificial intelligence in order to find and assess the right talent for vacancies. We use what is known as a "human-in-the-loop" technique. This is a technique in which "people are taken into the learning loop" in order to optimise candidate suggestions and assessments to our needs.

The data categories processed to further develop the AI are your skills, your location and your previous work experience. No other demographic information is processed.


7.5.2 Legal basis

The processing of data in the context of the further development of artificial intelligence is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. We have a legitimate interest in ensuring that artificial intelligence adapts to actual requirements.

7.5.3 Storage period

We store your personal data for as long as it is necessary for the decision on your application. If an employment relationship between you and us does not materialise, we may continue to store data if this is necessary for the defence against possible legal claims. As a rule, your data will be deleted within 6 months of the end of the application process.

7.6 Contact by e-mail with the so-called "job alert"


7.6.1 Type and scope of data processing

By creating a job alert, you agree to receive emails with job offers from PwC. Your e-mail address and your job preferences will be stored for this purpose.

7.6.2 Legal basis

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. You have the right to revoke the declarations of consent you have given to PwC at any time in whole or in part without giving reasons with effect for the future.
To revoke your consent, you can revoke your consent via the Self Service in your user account. This is done in the same way in which you gave us your consent. The revocation does not affect the lawfulness of the processing of your personal data between consent and revocation.


7.6.3 Storage period

We store your data until it is no longer required or you have withdrawn your consent. Insofar as statutory retention obligations exist, the data will be stored for the duration of the statutory retention obligation.

7.7 Event marketing


7.7.1 Type and scope of data processing

We offer you the opportunity to receive emails with job offers from PwC, invitations to events, feedback surveys on the application process and other career-related topics. You also have the opportunity to join one of our Talent Communities as part of our Talent Relationship Programmes. Your name and email address will be processed for this purpose.

7.7.2 Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You have the right to revoke the declarations of consent you have given to PwC at any time in whole or in part without giving reasons with effect for the future.
To revoke your consent, you can revoke your consent via the Self Service in your user account. This is done in the same way in which you gave us your consent. The revocation does not affect the lawfulness of the processing of your personal data between consent and revocation.


7.7.3 Storage period

We store your data until it is no longer required or you have withdrawn your consent. Insofar as statutory retention obligations exist, the data will be stored for the duration of the statutory retention obligation.

8. Cookies

We and certain third parties use cookies on our event page to make visiting our event page attractive and to enable the use of certain functions. These are small text files that are stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognise your browser on your next visit (persistent cookies).
The following cookie categories are used:


8.1 Cookies that are technically necessary for the operation of our website:

These cookies are technically necessary for the operation and functionality of the event page. They make the event page technically accessible, secure and usable and provide essential and basic functionalities, such as navigation on the event page, the correct display of the event page in the Internet browser or consent management.

8.2 Analytics/analysis cookies:

The analytics cookies allow us to collect data in an aggregated form about our event page visitors and your experience on our website. We use this data to eliminate errors and improve the experience for all visitors.

8.3 Marketing cookies:

These cookies enable us to draw your attention to relevant PwC advertising campaigns and show you personalised PwC content based on your interests, including on third-party event pages. In addition, we can use targeting to limit the frequency with which an advert appears and reduce the display of the advert for you.

You can find more information about the cookies used on this website in our Cookie Policy. 


9. recipient of the data

In order to fulfil the processing purposes listed below, data is also transferred to third parties. This may also include the transfer of personal data to other European and non-European countries and the storage of data outside the EU or the European Economic Area (EEA).

9.1 Recipients bound by instructions

We pass on your data to service providers bound by instructions both within the PwC network and to other third parties, such as IT service providers, who support us in our activities, e.g. in the administration and maintenance of the event pages and the associated systems and/or for other internal or administrative purposes.

PwC is a member of the global PwC network, which consists of the individual legally autonomous and independent PwC companies. As part of our activities, we use other German or foreign PwC network companies as network-internal IT service providers bound by instructions, which provide services for the operation, maintenance and care of the IT systems and applications used by the PwC network companies. In particular, this is PwC IT Services Ltd. based in the United Kingdom (UK).

If we pass on data to service providers bound by instructions, we do not require a separate legal basis for this.

You can find more information about the cloud service providers used by PwC at the following link: www.pwc.de/externe-dienstleister.


9.2 Self-responsible recipients

In addition, in individual cases we pass on your data both within the PwC network and to other third parties who use your data on their own responsibility. For example, in individual cases we also transfer personal data to other companies in the PwC network in order to support and optimise our business processes (including coordinated marketing activities).

In addition, we also pass on your data to other third parties in individual cases, e.g. authorities, courts or other bodies, if we are obliged by law or by official or court order of an EU member state to disclose personal data to these bodies. These bodies also use the data on their own responsibility.

Insofar as you have explicitly consented, Art. 6 para. 1 lit. a) GDPR is the legal basis for the data transfer. Insofar as there is a legal obligation to disclose the data, Art. 6 para. 1 lit. c) GDPR is the legal basis for the data transfer.
If, on the other hand, the disclosure is necessary for the fulfilment of a contractual or pre-contractual measure with you as a natural person, Art. 6 para. 1 lit. b) GDPR is the legal basis for the data transfer. Otherwise, the transfer is based on our legitimate interests and the legal basis is Art. 6 para. 1 lit. f) GDPR; we and the other companies in the PwC network have an interest in organising our work processes efficiently and sharing business processes within the PwC network for this purpose.


9.3 Data transfer to recipients in third countries outside the EU/EEA

If one of the above-mentioned data transfers is made to a recipient outside the EEA (in so-called "third countries"), an appropriate level of data protection for the foreign transfer is guaranteed by suitable security measures.
For data transfers within the PwC network, the PwC network companies have, among other things, concluded an internal data protection agreement which provides for compliance with the EU standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) GDPR for the transfer of personal data from EU/EEA countries to PwC network companies outside the EU/EEA.
If you have any questions about such data protection contracts based on the EU standard contractual clauses or if you would like more information on further security mechanisms and security measures for data transfers to third countries, you are welcome to contact our data protection officer, e.g. at DE_Datenschutz@pwc.com.


10. social plugins / linking of social media

We offer you the option of using so-called "social media buttons" on our event page. To protect your data, we use the "Shariff" solution for implementation. This means that these buttons are only integrated on the event page as a graphic that contains a link to the corresponding event page of the button provider. By clicking on the graphic, you will be redirected to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the corresponding providers.

We have integrated the social media buttons of the following companies on our website:

Facebook, Instagram, Twitter, YouTube, LinkedIn and Xing by means of corresponding social media buttons.

Google AdWords
Our website uses Google Conversion Tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our careers page via an advert placed by Google, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advert placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

You can find more information about data processing by Google in the Google privacy policy: https://policies.google.com/privacy. You can also change your personal data protection settings there in the data protection centre.

Revocation of consent:
The provider does not currently offer the option of simply opting out or blocking data transmission. If you want to prevent your activities on our website from being tracked, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.



11. Links

Our websites may contain links to websites of other providers that are not covered by this privacy policy. If the collection, processing or use of personal data is associated with the use of the websites of other providers, please refer to the data protection notices of the respective providers.

12 SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.