Data Privacy 

Data protection information to be provided pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (GDPR)


The following information is designed to provide you with a clear, concise and easy to understand explanation of how we, PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft (hereinafter "PwC WPG"), and our affiliates: 
•    PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main,
•    PricewaterhouseCoopers Legal AG Rechtsanwaltsgesellschaft, Friedrich-Ebert-Anlage 35-37, 60327 Frankfurt am Main,
•    PwC Strategy& (Germany) GmbH, Bernhard-Wicki-Straße 8, 80636 Munich, registered office: Georg-Glock-Straße 22, 40474 Düsseldorf,
•    PwC Cyber Security Services GmbH, Kapelle-Ufer 4, 10117 Berlin,

process your personal data when you use our careers pages, applications ("apps") and online services. However, should you require further explanation or have any other queries relating to data protection at PwC, please do not hesitate to contact our data protection officer at DE_Datenschutz@pwc.com. 


1. Controller

The controller within the meaning of Article 4(7) GDPR responsible for processing your personal data is:
PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft, 
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main
E-mail: DE_Kontakt@pwc.com
Switchboard: +49 69 9585-0
Fax: +49 69 9585-1000


2. Data protection officer

PwC WPG has appointed a data protection officer pursuant to Article 37 GDPR. You can contact PwC WPG's data protection officer, Dr Tobias Gräber, via the following channels:
E-mail: DE_Datenschutz@pwc.com
Tel.: +49 69 9585-0
Postal address:
PricewaterhouseCoopers GmbH WPG
Dr Tobias Gräber, Data Protection Officer
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main


3. Rights of data subjects/your rights under data protection law


You have the following rights under applicable data protection law with respect to your personal data: 

You may lodge a complaint at any time with a data protection supervisory authority, e.g. the competent supervisory authority in your home State or the competent authority responsible for us as the controller. For a list of supervisory authorities (for the private sector) and their addresses, please see https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Right of access: You may request information from us at any time as to whether we store your personal data and what the nature of that personal data is. We are required to provide this information to you free of charge.
The right of access does not exist or is subject to limitations if and to the extent that providing this information to you would result in the disclosure of confidential information, such as information that is subject to professional secrecy.
Right to rectification: If your personal data stored by us is inaccurate or incomplete, you have the right to demand the rectification thereof at any time.
Right to erasure: You have the right to demand that we erase your personal data if and to the extent that the data is no longer needed for the purposes for which it was collected or, if the data was processed on the basis of your consent, you have opted to revoke your consent. In such cases, we must cease processing your personal data and remove that data from our IT systems and databases.
You do not have a right to erasure if
•    the data may not be deleted due to a statutory obligation or must be processed due to a statutory obligation;
•    the processing of data is necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing: You have the right to demand that we restrict the processing of your personal data.
Right to data portability: You have the right to receive from us the data provided by you in a structured, commonly used, machine-readable format as well as the right to have that data transmitted to a different controller. This right exists only if
•    you have made this data available to us on the basis of consent or an agreement entered into with you;
•    the processing is carried out by automated means. 


4. Right to object to processing


If your data is processed on the basis of Article 6(1)(f) GDPR, you may object to the processing at any time.

You may assert any of the rights of data subjects described above against PwC WPG by addressing your specific requests via the following channels:
•    by e-mail: DE_Datenschutz@pwc.com
•    by post:
PricewaterhouseCoopers GmbH WPG
Dr Tobias Gräber, Data Protection Officer
Friedrich-Ebert-Anlage 35-37
60327 Frankfurt am Main


5. Right to lodge a complaint with a data protection supervisory authority


Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

6. Provision of data by you


Even though some data is transmitted automatically when you visit our careers page, you have no legal or contractual obligation to provide data in connection with using our website.
If you use our contact form or contact us by e-mail, it is up to you whether you send us data through these channels, however if you do not provide us with certain data when you contact us, we will not be able to process and respond to your enquiry.


7. Description of processing operations and legal basis for processing


7.1 Processing of personal data when you visit the careers page


7.1.1 Nature and scope of processing

When you visit our careers page, we collect the data that is technically necessary to display the careers page to you. This involves personal data, which is transmitted automatically by your browser to our server, including:
•    IP address
•    date and time of your request/careers page (app) access
•    time zone offset from Greenwich Mean Time (GMT)
•    content of the request (information about which specific web page you visited)
•    HTTP status code
•    transferred data volume
•    the careers page requesting access
•    browser (information about your browser)
•    operating system and interface (operating system of the computer you used to access the careers page)
•    language and version of the browser software

This careers page is hosted by a service provider, so the data collected on our careers page is stored on the service provider's servers. The servers are located in Germany and other EU countries. Data is transferred abroad, however only to countries in the European Union or the European Economic Area.


7.1.2 Legal basis

This personal data is processed on the basis of our overriding legitimate interest pursuant to Article 6(1)(f) GDPR. The careers page cannot be accessed and offered to users without using such data; there is a legitimate interest in making it technically possible to access and use the careers page. The data is also stored to technically safeguard the careers page. We have an interest in ensuring the security and availability of the careers page.

7.1.3 Storage period

The data is stored for 14 days and then deleted.


7.2 Registering and creating a user account


7.2.1 Nature and scope of processing

If you wish to apply for a position at PwC WPG through the careers portal, the first step is to register and create a personal user account. Through your user account you can then fill out our application forms and upload your application documents.
The following categories of personal data are processed during this process: 
•    Salutation,
•    Academic title,
•    First name (required),
•    Surname (required),
•    User name (required),
•    E-mail address (required)


7.2.2 Legal basis

When you register and create a user account, your data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR.  Registering and creating a user account is voluntary. By registering and creating a user account, you consent to the processing of the data collected in connection with this process. 
You may revoke your consent at any time with future effect.


7.2.3 Storage period

The data collected when you register and create a user account is stored for as long as you remain registered and your user account continues to exist.
You can delete your account yourself at any time either by using the self-service tools or by sending us a deletion request by e-mail or by post. In both cases, your account will be deleted as soon as can be arranged. The deletion of your user account does not affect the lawfulness of the processing of your personal data in the period between registration/creation of your user account and deletion of the user account by you. 


7.3 Submission and review of your application


7.3.1 Nature and scope of processing

We use your personal data so that we can find suitable candidates to fill our vacancies. In order to do this, we review your application documents.
If you would like to apply for a position through our careers page, you can register on the careers page and enter your applicant details and upload your application documents via your personal user account. 
There is also the option of speaking with our chatbot. It can help answer your questions about our job offers. Answering the questions asked by the chatbot will enable it to send you a filtered list of advertised positions. Apart from this function, you can also apply using the "Quick Apply" function. Our chatbot will lead you through the questions necessary to submit your application. 
In cases where we work with a headhunting provider, they will send your application documents and we will check the application. The source of the data is the headhunting provider.
The personal data processed specifically includes the following: 
•    Academic title,
•    First name (required),
•    Surname (required),
•    Nationality,
•    Gender, 
•    Street address,
•    State (required),
•    Postal code, 
•    City,
•    Telephone number (required),
•    Course of study or training
•    Degree (sought)
•    Educational institution or university
•    Desired start date/notice period
•    Salary expectations
•    Preferred location
•    How you heard of the position (required)
•    Whether you would like the Disabled Persons' Representative to participate in the process
•    CV (required)
•    Other documents such as a cover letter, school certificates and university degree certificates, letters of reference, certificates of semesters spent overseas & internships
•    Message to PwC
•    Job-specific questions depending on the position advertised

The provision of personal data through the careers page is voluntary. However, some of the information is requested in mandatory fields (also referred to as "required" in the above list). If you do not complete these fields, you will not be able to submit your application to us and we will not be able to consider you in the selection process.

When we review your application, we also use an artificial intelligence tool. The tool is used solely to provide an additional assessment of how well an applicant's profile matches the requirements of a particular position. The criteria used are the name of the position, qualifications, location and professional experience. No demographic information is used. 
The AI definitely does not make any hiring decisions and does not prepare any recommendations or supporting documents for such decisions. The decision as to whether an applicant should be considered for a vacancy is always reserved for a recruiter or hiring manager. No automated decision-making takes place within the meaning of Article 22 GDPR.


7.3.2 Legal basis

This personal data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR. 

You may revoke your consent at any time with future effect. 


7.3.3 Storage period


However, we store your personal data for as long as is necessary to make a decision on your application. If we decide not to employ you, we may continue to store data if it is necessary to defend against potential legal claims. Generally speaking, your data is deleted within six months of the close of the application process.

7.4 Assessing suitability for other vacancies 


7.4.1 Nature and scope of processing

We have the ability to consider your applicant profile for other advertised positions that you have not applied for or which could also be suitable for you. The AI in our applicant management tool assists us to identify positions matching your profile based on the job requirements of the various positions advertised. Our recruitment team may decide to suggest other positions to you based on the results of the AI matching, provided you have given your consent to us sending you these suggestions. 
During this process, we generally process the same data that you sent to us in connection with your application. 


7.4.2 Legal basis

When we assess your suitability for other vacancies, your data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR. 
You may revoke your consent at any time with future effect. 


7.4.3 Storage period

We store your data until it is no longer necessary or you revoke your consent. To the extent that the data is subject to statutory retention requirements, it will be stored for the duration of the prescribed statutory retention period. Generally speaking, your data is deleted within six months of the close of the application process.

7.5 Actively contacting applicants through social media platforms 


7.5.1 Nature and scope of processing

We use professional social networks to identify suitable talent for PwC's recruitment purposes. We may then make contact via the network's chat function.

To do this, we use personal data that has been published on the relevant professional social media platform.


7.5.2 Legal basis

We process personal data for the purpose of identifying suitable talent on the basis of our legitimate interest pursuant to Article 6(1) sentence 1 (f) GDPR. We have an interest in filling our vacant positions.

When we actively contact applicants on professional social media platforms, your data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR. 


7.5.3 Storage period

If your data is stored in this context, we store it until it is no longer necessary or you revoke your consent. To the extent that the data is subject to statutory retention requirements, it will be stored for the duration of the prescribed statutory retention period.

7.6. Talent scout (recruitment by PwC employees)


7.6.1 Nature and scope of processing

You may be recruited by one of our employees. This is where you provide our employee with your application documents and they start the application process for you. We process the same categories of data for this as those listed in section 6.3.1. 

7.6.2 Legal basis

This personal data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR. 

You may revoke your consent at any time with future effect. 


7.6.3 Storage period

However, we store your personal data for as long as is necessary to make a decision on your application. If we decide not to employ you, we may continue to store data if it is necessary to defend against potential legal claims. Generally speaking, your data is deleted within six months of the close of the application pross.

7.7 Preliminary review of applications from third countries to assess the likelihood of obtaining a residence permit and a work permit


7.7.1 Nature and scope of processing

If you do not automatically possess a valid residence permit because of your nationality (nationals from countries outside the European Union and the Schengen area), we check when processing your application whether the criteria for obtaining a residence permit are met and it will be possible to hire you. For this purpose, we send your application data to a service provider that specialises in this area.

7.7.2 Legal basis

When we assess whether applications from third countries meet the necessary criteria for a residence permit, your data is processed on the basis of our legitimate interest pursuant to Article 6 (1) sentence 1 (f) GDPR. We have a legitimate interest in ensuring that prospective employees are able to demonstrate  that they hold a valid residence permit.

7.7.3 Storage period

We store your personal data for as long as is necessary to make a decision on your application. If we decide not to employ you, we may continue to store data if it is necessary to defend against potential legal claims. Generally speaking, your data is deleted within six months of the close of the application process. If you are not employed with us, our service provider promptly deletes your data.

7.8 Development of artificial intelligence (AI) 


7.8.1 Nature and scope of processing

We use artificial intelligence to assist us with the application process. We use the data from the application process to develop this artificial intelligence so that we can find the best talent matches and evaluate them for vacant positions. We use a "human-in-the-loop" system for this purpose. This is a system that involves "humans in the learning process" in order to optimally align proposed candidates and evaluations with our needs. 

The categories of data processed to develop the AI are your skills, your location and your previous professional experience. No other demographic information is processed.


7.8.2 Legal basis

In connection with developing artificial intelligence, your data is processed on the basis of our legitimate interest pursuant to Article 6(1) sentence 1 (f) GDPR. We have a legitimate interest in ensuring that the artificial intelligence adapts to actual requirements. 


7.8.3 Storage period

We store your personal data for as long as is necessary to make a decision on your application. If we decide not to employ you, we may continue to store data if it is necessary to defend against potential legal claims. Generally speaking, your data is deleted within six months of the close of the application process. 


7.9 Reviewing expense claims

7.9.1 Nature and scope of processing

The costs of presenting for an interview necessarily include travel expenses, which we are happy to reimburse. You are also entitled to reimbursement for interview costs if you are asked to attend an interview not with us directly but with a recruitment agency engaged by us. This is regardless of whether an employment contract is subsequently entered into with you. In order to reimburse you for these costs, we require the following data for accounting purposes:
•    Name
•    Home address (street address, postal code, city, country)
•    Bank account details
•    E-mail address


7.10.2  Legal basis

When we review expense claims, your data is processed for the purpose of taking steps prior to entering into a contract pursuant to Article 6(1) sentence 1 (b) GDPR. 


7.10.3 Storage period

We store the above personal data for up to 10 years after the close of the application process. 


7.10 E-mails with "job alerts"

7.10.1 Nature and scope of processing

When you set up job alerts, you agree to receive e-mails from PwC with job offers. Your e-mail address and your job preferences are stored for this purpose. 


7.10.2 Legal basis

This data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR. You may give notice to PwC at any time revoking your consent in whole or in part with future effect without providing reasons. 

You can use the self-service tool in your user account to revoke your consent. You can revoke your consent in the same way that you granted your consent. Revocation does not affect the awfulness of the processing of your personal data in the period between the grant and revocation of your consent. 


7.10.3 Storage period

We store your data until it is no longer necessary or you revoke your consent. To the extent that the data is subject to statutory retention requirements, it will be stored for the duration of the prescribed statutory retention period.


7.11 Job marketing

7.11.1 Nature and scope of processing

We offer you the option of receiving e-mails with job offers from PwC, invitations to events, feedback surveys on the application process and other career-related topics. You also have the option of joining one of our talent communities as part of our talent relationship programme. Your name and e-mail address are processed for this purpose. 


7.11.2 Legal basis

This data is processed on the basis of your consent pursuant to Article 6(1) sentence 1 (a) GDPR. You may give notice to PwC at any time revoking your consent in whole or in part with future effect without providing reasons. 

You can use the self-service tool in your user account to revoke your consent. You can revoke your consent in the same way that you granted your consent. Revocation does not affect the lawfulness of the processing of your personal data in the period between the grant and revocation of your consent. 


7.11.3 Storage period

We store your data until it is no longer necessary or you revoke your consent. To the extent that the data is subject to statutory retention requirements, it will be stored for the duration of the prescribed statutory retention period.


8. Cookies

To make our careers page attractive to visitors and enable the use of certain functions, we and certain third parties use cookies on our careers page. Cookies are small text files that are stored on your device. Some of the cookies we use are deleted again at the end of your browser session, in other words after you close your browser (known as session cookies). Other cookies remain on your device and allow us or our partners to recognise your browser next time you visit (known as persistent cookies).
The following types of cookies are used: 


8.1 Strictly necessary cookies:

These cookies are strictly necessary because without them, our careers page will not function properly. They make the careers page technically accessible, secure and usable and enable essential and fundamental functionalities such as the ability to navigate to the careers page, display the careers page correctly in your browser and manage your consent.


8.2  Analytics/performance cookies:

Performance cookies allow us to collect aggregated data about the visitors to our careers page and your experience on our website. We use this data to fix bugs and improve the experience for all visitors.


8.3  Marketing cookies:

These cookies allow us to alert you to relevant PwC advertising campaigns and to display customised PwC content to you based on your interests, including on third party careers pages. By way of targeting, we can also limit how often an ad is displayed and limit the volume of advertising displayed to you.

Please see our Cookie policy for more information about the cookies used on this website.


9. Data recipients

Data is also transferred to third parties to achieve the purposes of processing listed below. This may also include the transfer of personal data to European and non-European countries and the storage of data outside the EU or the European Economic Area (EEA).


9.1 Recipients bound by instructions

We transfer your data to service providers bound by our instructions both within the PwC network and to other third parties such as IT service providers. They assist us with our work, e.g., in connection with administering and maintaining the careers pages and the associated systems and/or for other internal or administrative purposes.

PwC is part of the global PwC network of member firms, each of which is a separate and independent legal entity. In the context of our work, we use other German or foreign-domiciled member firms of the PwC network as network-internal IT service providers bound by our instructions to provide services for the operation, service and maintenance of the IT systems and applications used by the member firms of the PWC network. These service providers particularly include PwC IT Services Ltd. domiciled in the United Kingdom (UK).

When we transfer data to service providers bound by our instructions, we do not need a separate legal basis for the processing.

For more information on the cloud service providers PwC uses, click here: www.pwc.de/externe-dienstleister.


9.2 Recipients not bound by instructions ("independent recipients")

In certain cases, we also transfer your data both within the PwC network and to other third parties that use your data independently. For example, in certain cases we also send personal data to companies outside the PwC network to assist and improve the effectiveness of our business processes (including coordinated marketing activities).

In certain cases we also send your data to other third parties such as government agencies, courts and other bodies if we have a statutory obligation to disclose personal data to these bodies or are required to do so pursuant to a regulatory or court order of an EU member state. These bodies also use the data independently.

If you have expressly consented to this, the legal basis for the data transfer is Article 6(1)(a) GDPR. If we have a legal obligation to disclose the data, the legal basis for the data transfer is Article 6(1)(c) GDPR. 
By contrast, if the disclosure is necessary for the performance of a contract or in order to take steps prior to entering into a contract with you as a natural person, the legal basis for the transfer is Article 6(1)(b) GDPR. Otherwise, the transfer is based on our legitimate interest and the legal basis is Article 6(1)(f) GDPR. We and the other member firms of the PwC network have an interest in organising our work processes efficiently, and to that end allocating business processes within the PwC network.


9.3 Transfers of data to recipients in third countries outside the EU/EEA

Where any of the above data transfers are to a recipient outside the EEA ("third countries"), appropriate security measures ensure that data transferred to third countries is subject to an adequate level of protection.
For data transfers within the PwC network, the member firms of the PwC network have, among other things, entered into an internal data protection agreement, which requires compliance with the EU standard contractual clauses adopted by the European Commission within the meaning of Article 46(2)(c) GDPR when personal data is transferred from EU/EEA countries to member firms of the PwC network outside the EU/EEA.
If you have any questions about these data protection agreements based on the EU standard contractual clauses or you would like further information about other safeguards and security measures applicable to data transferred to third countries, please do not hesitate to contact our data protection officer, including by e-mail at DE_Datenschutz@pwc.com.


10. Social plugins/links to social media

Our careers page gives you the option of using social media buttons. To protect your data, we use "Shariff" social media buttons. This means that these buttons on the careers page are integrated only as an icon containing a link to the relevant careers page of the button provider. If you click on the icon, you will therefore be redirected to the services of the relevant provider. Only then will your data be sent to the respective provider. If you do not click on the icon, there will be no exchange between you and the providers of the social media buttons. For information about the collection and use of your data by social networks, please see the relevant provider's terms of use.

We have integrated the social media buttons of the following companies on our website:

Facebook, Instagram, X, YouTube, LinkedIn and TikTok (linked by social media buttons). 



Google AdWords
Our website uses Google conversion tracking. The provider of the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you land on our careers page by clicking on a Google ad, Google AdWords will place a cookie on your computer. Conversion tracking cookies are placed when a user clicks on an ad displayed by Google.
If users visit certain pages of our website and the cookie has not yet expired, we and Google are able to identify that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Cookies therefore cannot be tracked across the websites of AdWords customers. The information obtained using conversion cookies helps to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users that clicked on your ad and were redirected to a page on which a conversion tracking tag was set up. You will not, however, receive any information that would enable you to personally identify users.
For more information about the data Google processes, please see Google's Privacy Policy at https://policies.google.com/privacy. From there you can also change your personal privacy settings in the privacy centre.

Revocation of consent:
The provider does not currently offer the option of a simple opt-out or the option to block the transfer of data. If you wish to prevent your activity on our website being tracked, please use the cookie consent tool to revoke your consent to the relevant type of cookie or reject all except strictly necessary cookies and data transfers. However, if you do this, you may not be able to use our website, or only to a limited extent.


11. Links

Our websites may contain links to third party websites not covered by this privacy policy. To the extent that the use of third party websites involves the collection, processing or use of personal data, please refer to the privacy policy of the relevant third party.


12. SSL encryption

To ensure the security of your data when it is transferred, we use state-of-the-art encryption technologies (e.g. SSL) via HTTPS.