Data privacy policy

In addition to our general data protection regulations, which can be found at, here we will give you more information about data protection in application proceedings.

PTV Planung Transport Verkehr AG (PTV) collects and processes personal data from applicants for the purpose of executing an application process in PTV and its associated companies, depending on the classification of the advertised position. Data may be processed electronically. This is the case particularly if applicants have sent us their application documents electronically, for example by email, or via these career pages.

External service provider
The current job offers and their applications are hosted by our external service provider rexx systems GmbH based in Hamburg. Therefore, we have concluded an agreement on data processing with them in accordance with Article 28 of the GDPR.
Further information about data protection with our external service provider can be found in the rexx systems GmbH data privacy statement at:

Data security for applications
Once your data has been entered and sent, it goes directly to the servers of our external service providers via an encrypted connection. All data is encrypted based on the TLS method. If you log on after you have registered using the user data provided, the TLS encryption method is also used.
Both PTV Planung Transport Verkehr AG and the external service provider use technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security measures are constantly being improved in accordance with technological developments.

Processing of data at the end of the application process
If PTV Planung Transport Verkehr AG or one of its associated companies offers an applicant a contract of employment, data sent for the purposes of executing the employment relationship is stored in compliance with statutory regulations. If no contract of employment is offered, application documents will be deleted automatically three months after rejection has been notified unless deletion is contrary to other legitimate interests of the data controller for the processing. Other legitimate interest in this sense means a burden of proof in proceedings in accordance with the German General Equal Treatment Act (AGG) for example.

The basis for data processing is Article 6 (1) (b) GDPR, which permits the processing of data in order to fulfil a contract or take steps prior to entering into a contract.