Snapshot 50000
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Jetzt live: Die neue Jobbörse auf BILD.de/jobs powered by HeyJobs. Hier mehr erfahren! Ihr HeyJobs Geschäftskunden-Team +49 30 30 80 95 50 EN DeutschEnglish Recruiter Login | Job finden Privacy policy The aim of this privacy policy is to provide transparent information about the storage, processing and protection of personal data by HeyJobs. Version Information & Right to Make Changes Version Period Version 2.0 until 13.09.2026 (inclusive) View this version Version 2.1.0 (currently applicable) from 14.09.2026 View this version HeyJobs reserves the right to update this Privacy Policy at any time, for example due to changes in the law, regulatory requirements, or adjustments to our services. The currently valid version is always available at the following link: https://www.heyjobs.co/recruiting/en/data-protection-declaration-new/ In the event of material changes to this Privacy Policy, we will notify affected users by email or via an in-platform notice in advance of the changes taking effect. Where a change affects processing that is based on your consent, we will seek your renewed consent before the change applies to you. Notice in the sense of the Equal Treatment Act For reasons of easier readability, no gender-specific differentiation, e.g. applicant, is used here. Corresponding terms apply to all genders for the purpose of equal treatment. This privacy policy applies to all services and benefits that we offer our customers and applicants in Europe. Regardless of whether we do this via a website, an app, in stores, over the phone at events or via social networks. These data protection provisions apply without exception: – for all website visitors – as a supplement to the General Terms and Conditions – as the basis of all concluded cooperation agreements (companies that have a validly concluded cooperation agreement with HeyJobs are hereinafter referred to as “employers” or “clients”) – Users (hereinafter referred to as “applicants”) of the HeyJobs service and website who apply for open positions via the HeyJobs website. For the purposes of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations, the controller for all users, applicants and clients based in Germany is : The responsible body for all applicants is HeyJobs Germany. Heyjobs GmbH registered in the Commercial Register of the Berlin-Charlottenburg Local Court Register number HRB 175212 Paul-Linke-Ufer 39-40 10999 Berlin +49 (30) 51695855-2 datenschutz@heyjobs.de https://www.heyjobs.de The responsible body for companies based in Germany is HeyJobs Germany: Heyjobs GmbH registered in the Commercial Register of the Berlin-Charlottenburg Local Court Register number HRB 175212 Paul-Linke-Ufer 39-40 10999 Berlin +49 (30) 51695855-2 datenschutz@heyjobs.de https://www.heyjobs.de The responsible body for companies based in Austria is HeyJobs Austria: Heyjobs GmbH registered in the Commercial Register of the Commercial Court of Vienna Company register number FN 579225 b Gonzagasse 17 1010 Vienna +43 664 9301 0750 datenschutz@heyjobs.de https://www.heyjobs.at Our external data protection officers for Austria and Germany are DataCo GmbH Nymphenburger Str. 86 80636 Munich Germany datenschutz@heyjobs.de Your data will be collected, processed and used by HeyJobs GmbH (service provider within the meaning of national laws and the EU General Data Protection Regulation). This privacy policy applies to the use of all HeyJobs GmbH websites operated by HeyJobs (hereinafter referred to as “HeyJobs”, “we”, “our”), including all subpages, content and functions available there – both as passive users (visitors without registration – passive data collection) and as active users (visitors with registration – active data collection). Individual parts of HeyJobs are also referred to below as offers, services or online services. Overall, this refers to the HeyJobs service. Your right of access – you have the right to ask us for copies of your personal data. Your right to rectification – You have the right to ask us to rectify personal data that you believe is inaccurate. You also have the right to ask us to complete any information that you feel is incomplete. Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances. Your right to restrict processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances. Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances. Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances. Your right to lodge a complaint with a supervisory authority – without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. You do not have to pay any fees to exercise your rights. If you submit a request, we have one month to respond to you. The supervisory authority responsible for HeyJobs in Germany: Berlin Commissioner for Data Protection and Freedom of Information Alt Moabit 59-61 10555 Berlin Phone: +49 30 13889-0 Fax: +49 30 2155050 E-mail: mailbox@datenschutz-berlin.de The supervisory authority responsible for HeyJobs in Austria: Austrian Data Protection Authority Barichgasse 40-42 1030 Vienna Phone: +43 1 521 52-25 69 E-mail: dsb@dsb.gv.at Scope of the processing of personal data Visitors to the website https://www.heyjobs.co/de-de (Talent Website) have the opportunity to search for a suitable job. They can also view job advertisements from various companies. We collect the following data when you visit our website: Browser type Operating system Referrer Date and time IP address of the calling computer Internet provider Other similar data for the provision of the data Purpose of data processing The data is required during use in order to transfer the content of our website to your browser. Legal basis The legal basis for processing is the legitimate interest in accordance with. Art.6 Para.1 lit. f GDPR. Duration of storage The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. These data protection provisions apply without exception: – for all website visitors – as a supplement to the General Terms and Conditions – as the basis of all concluded cooperation agreements (companies that have a validly concluded cooperation agreement with HeyJobs are hereinafter referred to as “employers” or “clients”) – Users (hereinafter referred to as “applicants”) of the HeyJobs service and website who apply for open positions via the HeyJobs website. Scope of the processing of personal data Website visitors – mainly applicants – have the opportunity to register on our platform (“Talent Platform”). When you create your profile and use our platform, we process the following personal data: First and last name E-mail address Place of residence Phone / cell phone number Resume IP address of the calling computer Date and time of registration We use the double opt-in procedure for registration: After registration, you will receive an activation link by e-mail with a request for confirmation (“standard case of registration”). This link activates your profile. If you want to log in to your account in the future, we will send you a link to log in again, which is why we process your e-mail address. This is valid for 24 hours and can only be used once. Purpose of processing The purpose of processing is to create a profile on the Talent Platform in order to be able to use it. Subsequently, (quick) application processes can be carried out and HeyJobs services can be used. Legal basis for processing The legal basis for processing is the fulfillment of the user’s contract pursuant to Art. 6 para. 1 p. 1 lit. b) GDPR. Duration of storage We only store the data that is relevant for registration on our website. The personal data for registration will be deleted as soon as the contractual relationship as the basis for processing is terminated and legal retention periods no longer require the retention of personal data. Termination of data processing You can terminate the processing of your personal data at any time. You can terminate the contractual relationship by deleting your profile. You can easily do this in your profile. Registration options (Single-Sign-On – “SSO”) In addition to the standard registration process, we also offer users the option of registering on our Talent Platform via a so-called “Single-Sign-On”. Users can use simplified service providers with whom you are already registered. HeyJobs provides the services listed here on the basis of the simple use of the employer search platform. HeyJobs has concluded agreements on the transfer of personal data with the service providers listed below. The transmission takes place for the purpose of creating a user account for you and enabling you to use the platform. The legal basis is the legitimate interest of HeyJobs acc. Art. 6 para. 1 lit. f GDPR. The service providers: Google: The following categories of data are transmitted by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: First name, last name, email address. You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=de Meta: The following data categories are transmitted by Meta Inc., 4 Grand Canal Square, Dublin 2, Ireland. First name, last name, email address. You can find Meta’s privacy policy here https://www.Meta.com/about/privacy/update/printable. HeyJobs offers various innovative features to enable users to search for jobs easily and conveniently: Personalized job advertisements Scope of the processing of personal data HeyJobs offers job advertisements on its website that are accessible to both users and the general public. A core feature of our services is the suggestion of suitable job advertisements to our users, even outside HeyJobs, even if they are not actively looking for a job. Further information can be found in our GTCs. For this purpose, HeyJobs processes personal data that you have provided to us, including: E-mail address Phone number Name or surname and creates lists for individual job advertisements consisting of these aforementioned categories of user data. The lists contain the data of users who match the respective job advertisement. HeyJobs forwards these lists in pseudonymized form to providers of Internet applications, such as social media networks operated by Meta, (Facebook and Instagram), Google, or TikTok. These applications use this data to show you personalized job advertisements. HeyJobs can also create user and target group profiles based on your profile data in order to display suitable job advertisements on the Internet applications. Further information can be found in our GTCs. Purpose of data processing The purpose of the processing is to display job offers tailored to you in the Internet applications and to create profiles of users and target groups. Legal basis for the processing of personal data The legal basis for the processing of your data is the fulfillment of the contract pursuant to Art. 6 para. 1 lit. b) GDPR. Duration of storage The personal data in the form of the aforementioned lists will be deleted as soon as the respective job advertisement is deleted and legal retention periods no longer require the retention of personal data. Termination of data processing You can stop the processing of your personal data at any time. You can terminate the contractual relationship by deleting your profile. You can easily do this in your profile. Scope of the processing of personal data HeyJobs can organize some quizzes that are offered on the HeyJobs website. Such quizzes can include various topics related to the work topics, e.g. “Which job suits you best” or “Are you prepared for the job interview” (hereinafter “quizess”) In order to offer you our quizzes, we use the services of Kinsta Inc. 8605 Santa Monica Blvd #92581. West Hollywood, CA 90069. USA (hereinafter “Kinsta”) to host the quizzes. By using our quizzes, you acknowledge that your personal data will be stored by the service provider. The following personal data is processed as a result: First and last name E-mail address Place of residence Phone / cell phone number IP address of the calling computer Purpose of data processing The purpose of the processing is to provide quizzes on the HeyJobs website on various job-related topics for HeyJobs users and potential users who may be interested in registering with HeyJobs. Legal basis for the processing of personal data Thelegal basis for the processing of your personal data is our legitimate interest Art. 6 para. 1 p. 1 lit. f) GDPR, to offer you the best possible service and the fulfillment of the contract Art. 6 para. 1 p. 1 lit. b) GDPR. Duration of storage We only store the data that is relevant for registration on our website. The personal data for registration will be deleted as soon as the contractual relationship as the basis for processing is terminated and legal retention periods no longer require the retention of personal data. Scope of the processing of personal data All job advertisements that HeyJobs publishes for companies refer to an application form that can be used for electronic applications. If applicants make use of this option, the data entered in the input mask will be transmitted to the respective company by HeyJobs and stored. This data can be: First name Last name Address Telephone / mobile phone number E-mail address Information on education and schooling Language skills Resume Testimonials Screening questions from companies, if available Other data that the applicant provides voluntarily at their own discretion. HeyJobs advises against providing sensitive data according to Art. 9 GDPR in the application. In addition, depending on the job advertisement, individual data may be requested from the responsible employer, which can be found in the respective questionnaire. When your application is transferred from HeyJobs to the employer’s applicant management system, the employer adds the respective application status. HeyJobs synchronizes this application status in the Recruiter Portal available to the employer. In some cases, companies engage external agencies to work with us on their behalf to publish and distribute job advertisements and other recruitment processes. Alternatively, you can also send us your application by e-mail to arbeitgeberservice@heyjobs.de. In this case, we collect your e-mail address and the data you voluntarily provide in the e-mail and forward it to the desired company. After submitting your application, you will receive confirmation of receipt of your application documents by e-mail from us. Purpose of the processing We process your personal data to process your application using the application form or the e-mail you send us. Legal basis of the processing The legal basis for the processing is the concluded contract pursuant to Art. 6 para. 1 lit. b) GDPR by creating a profile and accepting our GTC. We will therefore send your application on your behalf. Duration of storage The personal data of the data subject will be deleted or blocked as soon as the purpose of the legal basis for processing no longer exists and legal retention periods no longer require the retention of personal data or if the account is deleted or the right to deletion is exercised. Applications for positions are automatically deleted from HeyJobs after six months from receipt of the application, unless you agree to store your data as a user on our talent platform for a further 6 months. You can ask us to delete your data or withdraw your consent at any time by sending an email to datenschutz@heyjobs.de. Please note that this will end all current application processes. Right of revocation and removal You can contact the employer you have applied to at any time and ask them to delete your data. You will receive the contact information either in the job advertisement itself or after submitting your application. Please note that this will end all current application processes. In addition, there may be legal obligations to retain data. Scope of Processing Personal Data When using HeyAssessment, we process the following personal data: – First name – Last name – Email address – Telephone / Mobile number – Information on professional qualifications (e.g., education, work experience, certificates) – Language skills – Company screening questions (if applicable) – Answers to questions asked in the assessment (e.g., preferences, availabilities, additional qualifications) – Resume and other provided documents (e.g., testimonials) – Results from interaction with the chatbot (e.g., additional information or clarifications) Purpose of Processing The personal data is processed for the following purposes: – Supporting and optimizing the application process by providing detailed, job-relevant information to recruiters. – Creating a structured report based on the provided data, which is appended to the application documents. – Improving the platform through analysis and further development of the services offered. – The transfer of HeyAssessment results to the potential employer occurs exclusively on behalf of the user as part of the application process. Legal Basis for Processing The legal basis for processing is legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. By processing HeyAssessment data, HeyJobs pursues a legitimate interest in making the application process more efficient and transparent for applicants. Additionally, we rely on legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR for the improvement and analysis of our services. HeyAssessment is a function supported by artificial intelligence. The use of HeyAssessment does not involve automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR. Duration of Storage The personal data of the data subject will be deleted as soon as the purpose of processing ceases to exist and no legal retention periods remain. Right to Revocation and Erasure You can request the deletion of your data at any time by contacting us at datenschutz@heyjobs.de. Furthermore, you can directly contact the employer to whom you have applied to request the deletion of your transmitted data. The contact details can be found in the respective job advertisement or in the application documents. You also have the right to object to the processing of your personal data based on Art. 6 para. 1 lit. f) GDPR (e.g., for the improvement of our services) at any time for reasons arising from your particular situation. Please contact us at datenschutz@heyjobs.de for this purpose. Scope of the processing of personal data An application form for jobs at HeyJobs is available on our website(www.heyjobs.co), which can be used for electronic applications. If you use this option, the data entered in the input mask will be transmitted to us and stored. This data can be Salutation First name Last name Address Telephone / mobile phone number E-Mail address Alternatively, you can also send us your application by e-mail. In this case, we collect your e-mail address and the data you voluntarily provide in the e-mail. After submitting your application, you will receive confirmation of receipt of your application documents by e-mail from us. Purpose of data processing The processing of personal data from the application form or e-mail is solely for the purpose of processing your application to HeyJobs. The other personal data processed during the sending process is used to prevent misuse of the application form and to ensure the security of our information technology systems. You can find more information under “Error tracking” in this privacy policy. Legal basis for data processing The legal basis for the processing of your data is Art. 88 para. 1 GDPR in conjunction with. § Section 26 para. 1 BDSG (data processing for the purposes of the employment relationship). Duration of storage After completion of the application process, the data will be stored for up to six months. Your data will be deleted after six months at the latest, unless you consent to your data being stored as a user on our talent platform for a further 24 months. You can ask us to delete your data or withdraw your consent at any time by sending an email to datenschutz@heyjobs.de. Please note that this will end all current application processes. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions. Possibility of objection and removal You have the option to object to the processing of your personal data at any time. Send an informal e-mail to datenschutz@heyjobs.de. In such a case, the application can no longer be considered. All personal data stored in the course of electronic applications will be deleted in this case. Other recipients We use Ashby to handle the application process (see below). Online search for applicants Occasionally, our recruiting team searches online for candidates for our vacancies. We may include or automatically store personal data (such as name, contact details, link to the corresponding profile) from sources such as LinkedIn, XING or other professional networks on which you have publicly published your profile in our recruiting process. We have a legitimate interest (Art. 6 para. 1 lit. f GDPR) in searching for potential candidates for our vacancies in job-oriented networks, provided that your legitimate interests do not outweigh the legitimate interest in processing. If there is no suitable position at the time of storage, your data may be stored in our internal talent platform with your prior consent as a user so that we can contact you in the future regarding open positions. In order to store your public profiles from the aforementioned sources in our internal recruiting systems, we use the service provider Ashby mentioned below. Use of Ashby Scope of the processing of personal data We use functionalities of the Ashby application plugin from Ashby, Inc. USA (hereinafter referred to as: Ashby). Ashby offers you the functionality to apply directly to us via our website. The following personal data is processed by Ashby: Contact information Details of previous activities Educational information CVs Feedback on job interviews Communication data Other personal data that you provide voluntarily in your application. If you provide special categories of personal data within the meaning of Art. 9 para. 1 lit. a GDPR as part of the application process or in your application documents. 1 GDPR, these will also be transmitted to Ashby and processed by Ashby. Data is transmitted to Ashby servers in the USA. To ensure appropriate safeguards to protect the transfer and processing of personal data outside the EU, so-called EU standard contractual clauses (Art. 46 para. 2 sentence 1 lit. c GDPR) have been concluded with Ashby. Other recipients of the data may be other processors. Further information on the processing of data by Ashby can be found here: https://www.ashbyhq.com/resources/privacyhttpsy Purpose of data processing We use Ashby to provide a web-based application process at HeyJobs. Legal basis for the processing of personal data The legal basis for the processing of your data is Art. 88 para. 1 GDPR in conjunction with. § Section 26 para. 1 BDSG (data processing for the purposes of the employment relationship). Duration of storage After completion of the application process, the data will be stored for up to six months. Your data will be deleted after six months at the latest, unless you agree to store your data as a user on our talent platform for a further 24 months. You can ask us to delete your data or withdraw your consent at any time by sending an e-mail to datenschutz@heyjobs.de. Please note that this will end all current application processes. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions. Right of revocation and removal You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can address your revocation by sending an informal e-mail to datenschutz@heyjobs.de . You can prevent the collection and processing of your personal data by Ashby by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(https://noscript.net/) or Ghostery(https://www.ghostery.com) in your browser. You can find further information on objection and removal options vis-à-vis Ashby at: https://www.ashbyhq.com/resources/privacy Scope of the processing of personal data Visitors to the website (mainly “employees of companies”) https://www.heyjobs.co/recruiting/ (Employer Website) have the opportunity to find out more about working with HeyJobs. The website provides various information about the HeyJobs service. It is also possible to contact us for personal advice. Company employees also have the option of registering in the Recruiter Portal. We collect the following data when you visit our website: IP addresses Browser information Usage data Date and time of the visit Location information Cookie ID Die Daten werden während der Nutzung benötigt, um Inhalte unserer Webseite an Deinen Browser zu übertragen und unser Produkt zu verbessern. Purpose of data processing The data is required during use in order to transfer the content of our website to your browser and to improve our product. Legal basis The legal basis for processing is the legitimate interest in accordance with. Art.6 Para.1 lit. f) GDPR. Duration of storage The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The Recruiter Portal is a platform where customers (companies) who work with HeyJobs can access and use the services of HeyJobs. Scope of the processing of personal data Customers of Heyjobs GmbH have the opportunity to use the functionalities of the Recruiter platform to create job advertisements, communicate via the HeyJobs platform and manage incoming applications. Customers can only log into the Recruiter Portal using their own employer login and may grant authorized personnel (e.g. Recruiter, Hiring Manager or HR Manager) access to applications. If you use our Recruiter platform, the following personal data will be processed by you: First and last name Login data Salutation E-Mail address Company affiliation Position in the company IP address of the calling computer Date and time of registration and access Other information that you send us voluntarily, e.g. your photo or your telephone number. Purpose of the processing of personal data The processing serves to provide the platform, the registration process and the use of functionalities for the creation and management of job advertisements. Legal basis for the processing of personal data The legal basis here is Art. para. 1 lit. f) GDPR applies because the legitimate interests are to fulfill the contract and the associated services to the company (customer). Data erasure and storage duration The personal data of the data subject will be deleted or blocked as soon as the contractual relationship as the basis for processing is terminated and legal retention periods no longer require the retention of personal data. On the Employer website and in the Recruiter Portal, we use the “Dreamdata” service for analytical and statistical evaluations. Dreamdata is operated by Dreamdata Købmagergade 22, 2nd Floor, 1150 Copenhagen, Denmark. Scope of the processing of personal data The following data is processed by Dreamdata: IP addresses Browser information Usage data Date and time of the visit Location information Cookie ID Purpose of data processing With the help of Dreamdata, we can determine how visitors to our website and customers interact with our website, which channel they used to reach our website and which pages are of particular relevance to them. Legal basis for data processing The legal basis for this processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR to improve our product and adapt it to the needs of our users. Duration of storage The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. You can find more information about Dreamdata here. HeyJobs uses the Intercom service for communication in the Recruiter Portal between companies and the HeyJobs Customer Success Team. Intercom is operated by INTERCOM R&D UNLIMITED COMPANY, 2nd Floor, Stephen Court 18 – 21, Stephen’s Green Dublin 2, Ireland. Scope of the processing of personal data When using the chat function in the Recruiter Portal, the following data is processed by Intercom: Content of all sent and received chat messages Context information (e.g. page on which the chat was used) IP address Purpose of data processing The processing of Intercom and use of the service leads to smooth communication between HeyJobs and the users of the Recruiter Portal. Legal basis for data processing The legal basis for this processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in order to be able to offer proper communication. Duration of storage The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Further information on data protection at Intercom can be found here. As part of our continuous efforts to optimize the quality of our services, we rely on the recording of online meetings held via platforms such as Google Meet, Zoom or Microsoft Teams. This measure helps us to ensure that no important details are lost and that we can fulfill your requirements as precisely as possible. Scope of the processing of personal data The following personal data is processed during the recordings: Image recordings Audio recordings This data is stored in our Salesforce database. Further information on Salesforce’s privacy policy can be found here. Purpose of data processing The records are used to improve our services and ensure a high quality of customer care. The recordings allow us to draw conclusions about potential for improvement and adapt our services accordingly. Legal basis for data processing The legal basis for the recording and storage of meetings is the consent of the persons involved in accordance with Art. 6 para. 1 lit. a GDPR. This consent is obtained by e-mail before the first recording and can be revoked at any time. Duration of storage The data is only stored for as long as the purpose of improving our services exists or until an objection to the storage is raised. Further information For further information on the data protection practices of the platforms used, please refer to the corresponding privacy policies: Google Meet: Privacy policy Zoom: Privacy policy Microsoft Teams: Security information Scope of the processing of personal data Each time our platform is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected: Information about the browser type and version used The user’s operating system The IP address of the user Date and time of access This data is stored in the log files of our system. This data is not stored together with other personal data of the user. Purpose of data processing The temporary storage of the IP address by the system is necessary to enable delivery of the platform to the user’s computer and support. Legal basis for data processing The legal basis for the temporary storage of data and log files is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2. Duration of storage Data is stored in log files to ensure the functionality of the platform. We also use the data to optimize the platform and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. 9.1 SSL/TLS encryption We take precautions to protect your data and to prevent misuse from outside. HeyJobs uses measures such as encryption (SSL encryption) of user data. SSL encryption is active if the address begins with “https://”. Data transfer is then protected via SSL (Secure Socket Layer) with at least 128-bit encryption, which prevents third parties from reading your data in an unauthorized manner. If encryption is not active, you should think carefully about whether you want to send personal or sensitive information over the Internet. We secure our website and other systems through economically appropriate technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. 9.2 External hosting We host our website on AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter: AWS). When you visit our website, your personal data is processed on the servers of AWS. Personal data may also be transferred to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses, additional safeguards or TIA. Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/. Further information can be found in AWS’s privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr. The use of AWS is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. The platform’s server is geographically located in Frankfurt am Main, Germany. HeyJobs GmbH (“we” or “us” or “our”) may use cookies, tracking pixels and other tracking technologies when you visit our website www.heyJobs.co and https://www.heyjobs.co/de-de/jobs (“Talent Website”) and www.heyjobs.co/recruiting/,(“Employer Website”), including other media forms, media channels, mobile websites or mobile applications related or linked thereto (collectively, the “Website”) to customize the Website and improve your experience. We use cookies to make our platform more user-friendly. Cookies help us to understand how the website is used and help us to improve your user experience. Some elements of our platform require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies: – Language settings – Log-in information – Search terms entered – Frequency of page views – Use of platform functions – Cookie consent information The data is not stored together with other personal data of the users. Details about the cookies used on the website, the providers of these cookies, the specific purpose of the cookies can be found in the cookie settings (Talent website), cookie settings (Employer website). You can withdraw your consent to data processing at any time without affecting the lawfulness of processing based on consent before its withdrawal. It is also possible to change the cookie settings at a later date. 10.1 Consent Tool This website uses Usercentrics’ cookie consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger 7, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter “Usercentrics”). When you enter our website, the following personal data is transmitted to Usercentrics: – Consent(s) or revocation of your consent(s). the withdrawal of your consent(s) – IP address – information about your browser – information about your end device – time of your visit to the website Usercentrics also stores a cookie in your browser in order to be able to assign the consents given or their withdrawal to you. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected. Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR. 10.2 Control of cookies Most browsers are set to accept cookies by default. However, you can remove or reject cookies in your browser settings. Please note that this may affect the availability and functionality of the website. For more information on how you can control cookies, please refer to the settings of your browser or device or follow the links below: Apple Safari Google Chrome Microsoft Edge Microsoft Internet Explorer Mozilla Firefox Opera Android (Chrome) Blackberry Iphone or Ipad (Chrome) Iphone or Ipad (Safari) Purpose of data processing If faults or error messages occur during the visit to the website or the application process (e.g. when filling out the application form), user and applicant data that has already been recorded is stored temporarily. Data is temporarily stored in the error tracking tools used exclusively for the purpose of correcting errors and ensuring the proper functioning of the website and the HeyJobs service. The personal data stored when faults/errors occur will not be stored after the fault has been rectified and will be automatically deleted. By using error tracking tools, HeyJobs ensures that the website and online services can be used smoothly and securely by all users and applicants at all times. Services HeyJobs uses the following third-party providers (error tracking tools) to detect and rectify errors and faults on the website: Sentry: We use the Sentry service as an error management tool to improve the technical stability of our service by monitoring system stability and detecting code errors. The service provider is the American company Sentry Inc, 1501 Mariposa St #408, San Francisco, CA 94107, USA. Further information on this can be found in Sentry’s privacy policy: https://sentry.io/privacy/. DataDog: We use Datadog as a security monitoring tool to allow us to constantly monitor the security and performance of the website so that we can quickly identify potential cyber attacks and act accordingly. We use the Datadog analysis technology from DataDog, Inc. 620 8th Avenue, 45th Floor, New York, NY 10018, USA (“Datadog”). Further information on this can be found in DataDog’s privacy policy: https://www.datadoghq.com/legal/privacy/. Legal basis for data processing The legal basis for this processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Duration of storage The personal data stored when faults/errors occur will not be stored after the fault has been rectified and will be automatically deleted. 12.1 Data transfer to a company affiliated with HeyJobs (in the group) We only transfer or process data to a company affiliated with HeyJobs if you consent to this processing, if this is required by law or if it is contractually necessary. HeyJobs GmbH has locations in several countries (current status 2022: Germany and Austria) to cooperate with the companies or employers. Further information can be found above under “Name and address of the controller“. 12.2 Data transfer to third countries outside the EU We only transfer or process data to countries outside the EU (third countries) if you consent to this processing, if this is required by law or contract and in any case only to the extent that this is generally permitted. For more information on the principle of data transfer in accordance with the GDPR, please refer to Chapter 5, Art. 44 et seq. GDPR. Further information can be found in the respective data processing. 13.1 E-mail forwarding to companies Description of data processing When users use our internal messaging system to apply for a job or contact a company or recruiter, this message is forwarded by our system to the receiving person by email. In order to protect the privacy of users and to avoid having to disclose their e-mail address to the company, a HeyJobs e-mail address appears in the address field of the recipient of the message. This consists of the full name provided by the user during registration, a unique ID and our domain “hey.jobs” (“vorname.nachnameID@hey.jobs”). The same process takes place in reverse when users receive a reply to their message or a message from recruiters via our platform. In this case, the e-mail address displayed to users consists of the name of the company or recruiter, a unique ID and our domain (“company[/recruiter]ID@hey.jobs”). In principle, our messaging system replaces any sender e-mail addresses sent to recipients with the ending “@hey.jobs” with an @hey.jobs address according to the pattern described above. This also applies if the message is sent via a separate e-mail client. In this context, we process the name and e-mail address of the user, the receiving person (including the recipients copied) or the sender of the message, as well as the content of the message for the purpose of enabling communication between the sender and the recipient. In order to provide this service, we use Amazon’s AWS (to store the data; servers are located in the EU) and Mailchimp Transactional from Mailchimp (to send the emails; servers are located in the USA), to which the personal data required to provide our messaging service is transmitted. Purpose of data processing Secure communication between the parties involved in order to create a fast and applicant-friendly application process. In addition, the HeyJobs e-mail address protects the applicant’s privacy by not disclosing their personal e-mail address to the company. Legal basis for data processing The legal basis for this processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to enable convenient communication between applicants, companies and recruiters, to protect the privacy of our users and to offer a consistent user experience. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is terminated when the application was successful and recruitment has taken place or the application has failed and recruitment has not taken place. 13.2 HeyJobs internal chat function Description of data processing When Recruiter uses our internal messaging system to contact an applicant, this message is forwarded from our system to the applicant. The applicant will see the full name given by the recruiter during registration. The same process takes place in the opposite direction when the recruiter receives a message from applicants via our platform. In this context, we process the names of the applicant, the responsible person from the employer and only the content of the messages from the responsible person from the employer. To offer this service, we use AWS from Amazon (server location Frankfurt am Main). Purpose of data processing To create simple communication between the parties involved and a fast, applicant-friendly application process and to simplify communication. Legal basis for data processing The legal basis for this processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to enable convenient communication between applicants and recruiters and to offer a consistent user experience. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. The respective recruiters can transmit the messages to their own systems. HeyJobs has no influence on the systems of the respective recruiters. 13.3 E-mail contact with HeyJobs Description and scope of data processing It is possible to contact us on our platform via the email address provided(support@heyjobs.de). In this case, the user’s personal data transmitted with the email is stored. The data is used exclusively for processing the conversation. Purpose of data processing If you contact us by email, this also constitutes the necessary legitimate interest in processing the data. Legal basis for data processing The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion or execution of a contractual relationship, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Objection and removal options You can object to the processing of your personal data at any time. To do so, please send an informal email to datenschutz@heyjobs.de. In such a case, the conversation cannot be continued. 13.4 WhatsApp business platform We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called “business version” of WhatsApp for this purpose. If you contact us via WhatsApp for a specific application, we will store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. f GDPR. 1 lit. b GDPR to process and respond to your request. If you use our WhatsApp contact for general inquiries (e.g. for initial contact, questions about applications, etc.), we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) GDPR. 1 lit. a GDPR on the basis of consent for the efficient and timely provision of the requested information. Your data will only ever be used to respond to your request via WhatsApp. No additional disclosure to third parties takes place. Please note that WhatsApp Business receives access to the address book of the mobile device used by us and automatically sends telephone numbers stored in the address book to a server of the parent company Meta Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp. This ensures that every person whose WhatsApp contact details are stored in our address book can consent to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. 1 lit. a GDPR has consented. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect. For the purpose and scope of data collection and the further processing and use of the data by WhatsApp as well as your rights in this regard and setting options for protecting your privacy, please refer to WhatsApp’s data protection information: https://www.whatsapp.com/legal/?eea=1#privacy-policy Information on data transmission at WhatsApp, which complies with the standard contractual clauses, can be found at https://www.whatsapp.com/legal/business-data-transfer-addendum-20210927. 13.5 Chatbot from Drift on our website Scope of the processing of personal data On our website – www.heyjobs.co/recruiting/ – a chatbot is available for you to communicate with in order to exchange questions or general comments. For this we use the services of Drift: Drift.com, Inc. 222 Berkeley Street, Suite 600 Boston, MA 02116 Phone: +1 855-266-1567 Email: privacy@drift.com Representative in the EU: Lionheart Squared Ltd 2 Pembroke House Upper Pembroke St 28-32, Dublin DO2 EK84 Ireland drift@lionheartsquared.eu Data Protection Officer: Mike Parent Data Protection Officer, Senior Tech Lead 222 Berkeley Street, Suite 600 Boston, MA 02116 DPO@drift.com Further information can be found here. The following personal data is processed: IP address Metadata Purpose of processing The purpose of processing is to provide the chatbot. Legal basis for processing You are required to give your consent before using the chatbot. The legal basis is therefore Art. 6 para. 1 lit. a GDPR. Duration of storage The data is generally stored for only stored for as long as is necessary to achieve the purpose. Right to object You can object to the processing of your personal data at any time. To do so, please send an informal e-mail to datenschutz@heyjobs.de. In such a case, communication cannot be continued. We use the HubSpot service to make the following online forms available. For this purpose, we forward the data you have entered in the respective form to HubSpot, which processes the data exclusively on our behalf. See the privacy policy for “HubSpot” – Location: 25 First Street, Cambridge, MA 021341, USA. 14.1 Events (HeyDays & webinars) for companies HeyJobs requires personal data of the participants for the planning and implementation of events. Scope of the processing of personal data We process the following personal data: Business e-mail Last name First name Title Job title Telephone number Company or employer Purpose of processing The processing serves the purpose of invitation management by e-mail, sending registration confirmations by e-mail, sending reminders before the event by e-mail, sending further information or short-term changes to the registered event participants, optimization of event planning, general contract initiation. Legal basis for processing The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. Duration of storage The data is generally stored for only stored for as long as is necessary to achieve the purpose. Revocation option You can revoke the processing of your personal data at any time. To do so, please send an informal e-mail to datenschutz@heyjobs.de or click on the unsubscribe button at the end of each e-mail. 14.1.1 Use of Trendence Scope and purpose of the processing of personal data In the course of conducting a webinar, we may use the services of Trendence in relation to the joint realization of webinars and events. It will be clearly marked and communicated if the services of Trendence are used. The joint processing of your personal data takes place on the basis of a joint responsibility agreement in accordance with Art. 6 para. 1 lit. a GDPR. Article 26 para. 1 sentence 1 GDPR. Your data will be processed by us and Trendence. Our contact information can be found above in 2. Name and address of the person responsible. Trendence Institut GmbH Friedrichstraße 67-70 10117 Berlin https://www.trendence.com/datenschutz We are jointly responsible for the processing of your personal data in the course of the event and for the technical implementation and provision of the webinar platform solution. We are also responsible for the consent and opt-in management of participants and the provision of technical support. The following data will be processed by you as part of the collaboration: Usage data Protocol data / Technical data Contact and user data / registration data Content data / communication data Profile data As part of the joint responsibility, Trendence is responsible for processing the contact information of participants transmitted by HeyJobs. In the course of the cooperation, Trendence processes personal data in the transmission process as the recipient (reception) and through participation in the event. The subject of the processing are the data types/categories Contact details of participants in their company position, surname, first name, company telephone numbers and e-mail addresses. Data is not transferred to third countries. Legal basis for data processing The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR and processing in the performance of a contract pursuant to Art. 6 para. 1 p. 1 lit. b) GDPR. As a participant, you have the option of asserting your data subject rights against any controller. Duration of storage We only store personal data for as long as is necessary for the purpose for which it is processed. We take appropriate technical and/or organizational measures to ensure compliance with this obligation; this also includes the deletion or anonymization of the data at the end of the storage period. 14.1.2 Use of soft guards Scope and purpose of the processing of personal data In the course of conducting a webinar, we may use the services of Softgarden in relation to the joint realization of webinars and events. It will be clearly marked and communicated if the services of Softgarden are used. The joint processing of your personal data takes place on the basis of a joint responsibility agreement in accordance with Art. 6 para. 1 lit. f GDPR. Article 26 para. 1 sentence 1 GDPR. Your data will be processed by us and Softgarden. Our contact information can be found above in 2. Name and address of the person responsible. softgarden e-recruiting GmbH Tauentzienstraße 14 10789 Berlin https://softgarden.com/de/datenschutz-webseite/ We are responsible for the processing of your personal data in the course of the event as well as for the technical implementation and provision of the webinar platform solution within the scope of joint responsibility. We are also responsible for the consent and opt-in management of participants and the provision of technical support. The following data will be processed by you as part of the collaboration: Usage data Protocol data / Technical data Contact and user data / registration data Content data / communication data Profile data As part of the joint responsibility, Softgarden is responsible for processing the contact information of the participants transmitted by HeyJobs. In the course of the cooperation, Softgarden processes personal data in the transmission process as the recipient (receipt) and through participation in the event. The subject of the processing are the data types/categories Contact details of participants in their company position, surname, first name, company telephone numbers and e-mail addresses. Data is not transferred to third countries. Legal basis for data processing The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR and processing in the performance of a contract pursuant to Art. 6 para. 1 p. 1 lit. b) GDPR. As a participant, you have the option of asserting your data subject rights against any controller. Duration of storage We only store personal data for as long as is necessary for the purpose for which it is processed. We take appropriate technical and/or organizational measures to ensure compliance with this obligation; this also includes the deletion or anonymization of the data at the end of the storage period. 14.1.3 Use of Cammio Scope and purpose of the processing of personal data In the course of conducting a webinar, we may use the services of Cammio in relation to the joint realization of webinars and events. It will be clearly marked and communicated if the services of Cammio are used. The joint processing of your personal data takes place on the basis of a joint responsibility agreement in accordance with Art. 6 para. 1 lit. f GDPR. Article 26 para. 1 sentence 1 GDPR. Your data will be processed by us and Cammio. Our contact information can be found above in 2. Name and address of the controller. Cammio GmbH Gehrtsstr. 14 40235 Düsseldorf https://cammio.com/de/datenschutzerklaerung/ We are responsible for the processing of your personal data in the course of conducting the event and for the technical implementation and provision of the webinar platform solution within the scope of joint responsibility. We are also responsible for the consent and opt-in management of participants and the provision of technical support. The following data will be processed by you as part of the collaboration: Usage data Protocol data / Technical data Contact and user data / registration data Content data / communication data Profile data As part of the joint responsibility, Cammio is responsible for processing the contact information of the participants transmitted by HeyJobs. In the course of the cooperation, Cammio processes personal data in the transmission process as the recipient (receipt) and through participation in the event. The subject of the processing are the data types/categories Contact details of participants in their company position, surname, first name, company telephone numbers and e-mail addresses. Data is not transferred to third countries. Legal basis for data processing The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR and processing in the performance of a contract pursuant to Art. 6 para. 1 p. 1 lit. b) GDPR. As a participant, you have the option of asserting your data subject rights against any controller. Duration of storage We only store personal data for as long as is necessary for the purpose for which it is processed. We take appropriate technical and/or organizational measures to ensure compliance with this obligation; this also includes the deletion or anonymization of the data at the end of the storage period. 14.2 E-learning course – “SuperRecruiter” for companies The online course offering of HeyJobs is based on the “Thinkific” platform of the service provider Thinkfic Labs Inc. #400 – 369 Terminal Ave, V64 4C4 Vancouver, BC Canada. Thinkific’s privacy policy can be found here. The responsible data protection officers can be contacted at info@thinkific.com. By clicking on the “Register” or “Learn more” button on the “Hire HeyJobs” subpage of HeyJobs, you will be redirected to pages hosted by Thinkific. Scope of data processing Participation in SuperRecruiter’s fee-based online course offering requires registration and the provision of personal data. The data is entered into an input mask and transmitted to us and stored. At our request, Thinkific can also access this data. The following data is collected as part of the registration process: First name and surname Title/position/grade Organization/employer E-mail address The following data is also stored at the time of registration: The user’s IP address Date and time of registration Payment data As part of the registration process, the user’s consent to the processing of this data is obtained. Purpose of data processing The purpose of data processing is the registration, participation and confirmation of the “SuperRecruiter” course. Once the contract has been concluded, the e-mail address and password selected from the registration screen will serve as login information each time you log in to the SuperRecruiter course. We also use the data entered during registration to contact you by email as part of a course you have registered for. Legal basis for data processing The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. 1 lit. b GDPR. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. For users who opt for a one-off payment for a course, this is the case 4 weeks after successful completion of the course. Other recipients We use Stripe to handle the payment process 14.2.1 Use of Stripe We use the payment service provider Stripe Inc, 510 Townsend St., San Francisco, CA 94103 (Stripe) for the payment process. In this context, we pass on the following data to Stripe insofar as it is necessary for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR): Name of the cardholder(s) E-mail address Customer number Order number Bank details Credit card details Period of validity of the credit card Credit card verification number (CVC) Date and time of the transaction Transaction amount Name of provider Location Stripe has implemented compliance measures for international data transfers. These apply to all global activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). You can find further information on objection and removal options vis-à-vis Stripe at: https://stripe.com/privacy-center/legal. Your data will be stored by us until the payment processing is completed and only stored for as long as is necessary to achieve the purpose. This also includes the period required for the processing of refunds, receivables management and fraud prevention. 14.3 Web demo for companies If you request an appointment for a web demo, we will use your data to contact you and arrange and carry out an appointment with you. Scope of the processing of personal data We process the following personal data: Email Last name First name Telephone number Company Purpose of processing The purpose of processing is to coordinate and carry out the requested web demo and to prepare and follow up on the web demo. Legal basis for processing The legal basis for the processing of personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract pursuant to Article 6 (1) GDPR. 1 p. 1 lit. b GDPR. Duration of storage The data is generally only stored for as long as is necessary to achieve the purpose. The data is stored for as long as is necessary to prepare, follow up and carry out the appointment. 14.4 Competitions We regularly hold competitions. For this purpose, we only use personal data that we have collected specifically in the context of the competition and with the express consent of the person concerned. The respective privacy policy applies to the implementation of competitions and the processing of personal data in the context of competitions. 15.1 Newsletter Description and scope of data processing On our platform, users have the option of registering for our newsletter. We process the following personal data: First name and surname Email address IP address of the accessing computer Browser type Operating system Date and time of registration Purpose of data processing The purpose of data processing is to send the newsletter. Legal basis for data processing The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. The user’s e-mail address is therefore stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, you will find a corresponding link in every newsletter. Other recipients We use Mailchimp and Braze to send newsletters and push notifications. 15.1.1 Use of Mailchimp / Mandrill Description and scope of data processing This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service that can be used to organize and analyse the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g. e-mail address), it will be stored on MailChimp’s servers in the USA. Purpose of data processing With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp’s servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you do not wish to be analyzed by MailChimp, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. Legal basis for data processing Data processing is based on your consent. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https: //mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses. Duration of storage After you unsubscribe from the newsletter distribution list, your e-mail address will be deleted by us or the newsletter service provider in order to prevent future mailings. This serves both your interest and our interest in complying with legal requirements when sending newsletters. You can object to the storage if your interests outweigh our legitimate interest. For more information, please refer to MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/. 15.1.2 Use of Braze Description of data processing We use the services of Braze, Inc, 318 West 39th Street, 5th Floor New York, NY 10018 for newsletter marketing and push notifications. Users of our website can sign up to receive push notifications from HeyJobs via their browser. Users of our website can sign up to receive push notifications from HeyJobs via their browser. Purpose of data processing Braze processes user data such as email, push tokens, interaction data and IP address in order to control the sending of newsletters and push messages and to analyze user interactions. For non-registered users of the HeyJobs website, only the following data is processed: IP address, push tokens, date and time of access, location Legal basis for data processing Data processing is carried out on the basis of our legitimate interest (Art.6 Abs. 1 lit. f GDPR) to optimize our newsletter content and push notifications. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.braze.com/company/legal/scc Duration of storage Newsletter After you unsubscribe from the newsletter distribution list, your e-mail address will be deleted by us or the newsletter service provider in order to prevent future mailings. This serves both your interest and our interest in complying with legal requirements when sending newsletters. If you do not wish to be analyzed, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can find more details in Braze’s privacy policy at: https://www.braze.com/company/legal/privacy///. Push messages We only collect personal data for the purpose of push-up notifications if you accept this in your browser. Notifications can be deactivated at any time in the browser settings. For more information, please refer to Braze’s privacy policy at: https://www.braze.com/company/legal/privacy///. Objection and removal options You can object to the processing of your personal data at any time. To do so, please send an informal e-mail to datenschutz@heyjobs.de. In such a case, communication cannot be continued. 15.2 Postal advertising for companies Scope and description of data processing We use your address to send postal advertising (postal advertising). Purpose of data processing We use postal advertising to maintain contact with existing customers, but also to acquire new customers. Legal basis for data processing The legal basis for postal advertising is our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f GDPR. The legal basis for maintaining contact with existing customers is consent; processing is carried out exclusively on the basis of Art. 6 para. 1 lit. f GDPR in conjunction with. § 7 para.2 UWG. Duration of storage Your address will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to postal advertising, your data will be deleted unless we have other legally permissible reasons for storing your personal data; in the latter case, deletion will take place after these reasons no longer apply. Objection and removal options You can object to the processing of your personal data at any time. To do so, please send an informal e-mail to datenschutz@heyjobs.de. In such a case, communication cannot be continued. 16. web analysis tools (statistics) Our website uses so-called tracking or web analysis tools, with the help of which we can evaluate the user behavior of website visitors and optimize our service accordingly. With the help of these tools and the cookies used, we can, for example, analyze how and from where visitors come to our site, which areas of a website are visited particularly often and how often and for how long which subpages and categories are viewed. We can also determine which search terms and websites the user has entered and evaluate which information or offers are most in demand. The aim is to use the knowledge gained to make our offers and our website more user-friendly and to tailor our offers more specifically to our customers, visitors and interested parties. The legal basis in this respect is Art. 6 para. 1 lit. a) GDPR. You can also withdraw your consent to data processing at any time without affecting the lawfulness of processing based on consent before its withdrawal. In the area of web and user analysis, we work together with professional service providers who create user statistics on our behalf (and with your consent). The basis of this contractual relationship is, among other things, the obligation of the providers to have taken special precautions to protect your data and to process all personal data only in accordance with our instructions (Art. 28 GDPR, or on the basis of the so-called standard contractual clauses of the EU). The details of the providers in this processing procedure can be found in your cookie settings.(Talent Website) The details of the providers in this processing procedure can be found in your cookie settings.(Employer Website) So-called remarketing tools are used on our website. With the help of these tools, we can display or have displayed individual job advertisements on our websites that are selected on the basis of the visitor’s preferences. Technically, advertising tracking is usually carried out via advertising IDs, in which user profiles are created by the providers of advertising networks using cookies, among other things, and the advertisement is displayed on the basis of the cookie profile when a website is accessed. Such remarketing offers can be used to display individual job advertisements to a user. In many cases, tracking is also carried out via so-called browser fingerprints, in which information such as the individual setting of screen resolution, colour depth, time zone and installed plug-ins are used to recognize users or user groups. With the help of remarketing tools, we can better target our offer to our customers, visitors and interested parties. In addition, we can use user behavior to determine which areas of our website may be of particular interest to visitors in order to display targeted advertising. The legal basis for the use of the necessary cookies is Art. 6 para. 1 lit. a) GDPR, which is why we also obtain your consent in advance here. The details of the providers in this processing procedure can be found in your cookie settings.(Talent Website) The details of the providers in this processing procedure can be found in your cookie settings.(Employer Website) The use of social media platforms with server locations in the USA means that personal data may be processed outside the EU. In order to ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data transfer to and data processing by social media operators outside the EU is carried out on the basis of suitable guarantees in accordance with Art. 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. Our company presence on social networks is used for communication and information exchange with (potential) customers. The publications about the company presence may contain the following content: Information about products Information about services Competitions Advertising Customer contact Users are free to publish personal data through activities. This includes the following providers: Meta Meta Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland To Meta Privacy Policy Instagram Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA To Instagram privacy policy Twitter Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA To Twitter privacy policy/Twitter opt-out LinkedIn LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland To LinkedIn privacy policy XING XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany To Xing privacy policy YouTube: Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland To YouTube privacy policy TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland TikTok data protection 18.1 Agreement with Meta pursuant to Art. 26 GDPR We operate our fan pages (on Meta) in so-called joint responsibility with the social media platform. As part of the interaction via our fan page, we receive statistical data from Meta on the use of our fan pages. This includes, for example, information about interactions, likes, comments or summarized information and statistics (e.g. on the age or origin of our followers) that help us to learn something about the interactions with our page. For more information on the type and scope of these statistics, please refer to the Meta page statistics notes and the respective responsibilities in the Meta page insights supplement. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We have no influence on data that is processed by the provider (Meta) under its own responsibility in accordance with Meta’s own terms of use. We would like to point out that when you visit the fan page, data about your usage behavior is transferred from Meta and the fan page to Meta. Further information on this can be found in Meta’s privacy policy. Further information on data processing by Meta can be found at https://www.Meta.com/about/privacy. Responsible Responsible within the meaning of Art. 26 GDPR are Meta Ireland LTD. and HeyJobs. Details on the delimitation of responsibility can be found in the following agreement: https://www.Meta.com/legal/terms/page_controller_addendum 1. Meta Ireland LtD. Grand Canal Square Grand Canal Harbour D2 Dublin Ireland 2 HeyJobs GmbH Paul-Lincke-Ufer 39/40 10999 Berlin Germany Data processing by Meta Meta collects tracking data about the interaction on the Meta page. The collection and provision of Insights data (https://www.Meta.com/business/a/page/page-insights) is the responsibility of Meta. Meta is responsible for fulfilling the rights under the GDPR. As the fan page operator, HeyJobs GmbH has no influence on the collection and provision of this data. The associated personal data processing takes place exclusively at Meta. The type and scope of the information you provide to Meta, the associated purposes of the data processing, its lawfulness and information on exercising your rights can be found in the Data Policy, as well as other information provided by Meta on the processing of “Insights Data”. The Data Policy is available at https://www.Meta.com/policy.php. Your rights to information, correction, deletion, restriction of processing and data portability of your stored data must be asserted against Meta. You can contact Meta’s data protection officer at https://www.Meta.com/help/contact/540977946302970. Data processing by HeyJobs HeyJobs uses the Meta corporate website to provide content and communicate with Meta users. We receive statistical data from Meta about visitors to our Meta pages via the “Insights” function(https://www.Meta.com/business/a/page/page-insights) and use the anonymized data provided on the basis of Art. 6 para. 1 lit. a GDPR. 1 lit. f GDPR. With the help of this function, we can better analyze our pages and adapt them to the needs and interests of our visitors. 19.1 Amazon CloudFront and Cloudflare Description and scope of data processing We use functions of the Content Delivery Network on our website: Amazon CloudFront of Amazon Web Service Inc410 Terry Avenue North, Seattle, WA 98109, USA (hereinafter: Amazon CloudFront). Cloudflare Inc. with its registered office at 101 Townsend Street, San Francisco, California 94107, USA, (hereinafter referred to as CloudFlare). A content delivery network (CDN) is a network of regionally distributed servers connected via the Internet that is used to deliver content – especially large media files such as videos. Amazon CloudFront and CloudFlare offer web optimization and security services that we use to improve the loading times of our website and to protect it from misuse. When you visit our website, a connection is established to the Amazon CloudFront and CloudFlare servers, e.g. to retrieve content. This allows personal data to be stored and analyzed in server log files, in particular the user’s activity (in particular which pages have been visited) and device and browser information (in particular the IP address and operating system). Further information on the collection and storage of data by Amazon CloudFront available here: https://aws.amazon.com/de/privacy/ Further information on the collection and storage of data by CloudFlare available here: https://www.cloudflare.com/privacypolicy/ Purpose of data processing The use of Amazon CloudFront and CloudFlare functions serves to provide and accelerate online applications and content as well as to protect the website from bots and to ensure security. Legal basis for data processing This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose. Duration of storage Your personal data will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Possibility of objection and removal Information on objection and removal options vis-à-vis Amazon CloudFront and Cloudflare can be found at: https://aws.amazon.com/de/privacy/ and https://www.cloudflare.com/privacypolicy/ A copy of this privacy policy can be requested at any time via datenschutz@heyjobs.de or by post to the address given under point 2. Version: 1.2.3 This privacy policy applies to all services and benefits that we offer our customers and applicants in Europe. Regardless of whether we do this via a website, an app, in stores, over the phone at events or via social networks. These data protection provisions apply without exception: for all website visitors as a supplement to the General Terms and Conditions as the basis of all concluded cooperation agreements (companies that have a validly concluded cooperation agreement with HeyJobs are hereinafter referred to as „employers” or „clients”) Users (hereinafter referred to as „applicants”) of the HeyJobs service and website who apply for open positions via the HeyJobs website. The controller within the meaning of the GDPR for the services described in this Privacy Policy is: HeyJobs GmbH Paul-Lincke-Ufer 39/40 10999 Berlin, Germany support@heyjobs.co For users in Austria, the controller is HeyJobs GmbH acting through its Austrian operations. Further details can be found in our Imprint. Our external data protection officers for Austria and Germany are: DataCo GmbH Sandstraße 33 80335 Munich Germany dataprivacy@heyjobs.co Your data will be collected, processed and used by HeyJobs GmbH (service provider within the meaning of national laws and the EU General Data Protection Regulation). This privacy policy applies to the use of all HeyJobs GmbH websites operated by HeyJobs (hereinafter referred to as „HeyJobs”, „we”, „our”), including all subpages, content and functions available there – both as passive users (visitors without registration – passive data collection) and as active users (visitors with registration – active data collection). Individual parts of HeyJobs are also referred to below as offers, services or online services. Overall, this refers to the HeyJobs service. Your right of access – You have the right to ask us for copies of your personal data. Your right to rectification – You have the right to ask us to rectify personal data that you believe is inaccurate. You also have the right to ask us to complete any information that you feel is incomplete. Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances. Your right to restrict processing – You have the right to ask us to restrict the processing of your personal data in certain circumstances. Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances. Your right to data portability – Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You may also request that we transmit that data directly to another controller where technically feasible. Please note that this right does not apply to processing activities carried out on the basis of legitimate interest (Art. 6(1)(f) GDPR). Your right to lodge a complaint with a supervisory authority – Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. You do not have to pay any fees to exercise your rights. If you submit a request, we have one month to respond to you. The supervisory authority responsible for HeyJobs in Germany: Berlin Commissioner for Data Protection and Freedom of Information Alt Moabit 59-61 10555 Berlin Phone: +49 30 13889-0 Fax: +49 30 2155050 E-mail: mailbox@datenschutz-berlin.de The supervisory authority responsible for HeyJobs in Austria: Austrian Data Protection Authority Barichgasse 40-42 1030 Vienna Phone: +43 1 52 152-0 E-mail: dsb@dsb.gv.at Scope of the processing of personal data When you visit our website https://www.heyjobs.co/de-de, we automatically collect the following technical data: Browser type and operating system Referring URL Date, time and duration of the visit IP address Internet provider Purpose of data processing This data is processed to ensure the technical delivery of our website to your browser, to maintain the security and stability of our systems, and to improve our services. Legal basis for the processing of personal data Art. 6(1)(f) GDPR — legitimate interest in the secure and functional operation of our website. Retention period This data is stored only for as long as necessary to fulfil the stated purpose and is deleted once it is no longer required. Where statutory retention obligations apply, data is retained for the legally required period. Scope of the processing of personal data Website visitors — mainly applicants — can register on our Talent Platform. When you create your profile and use our platform, we process the following personal data: First and last name E-mail address Place of residence Phone number CV / résumé IP address Date and time of registration We use a double opt-in procedure for registration: after registering, you will receive an activation link by email to confirm your account. This link is valid for 24 hours and can only be used once. Where you provide information on our platform that we need to verify, we may carry out a verification process to confirm that the information belongs to you. The personal data collected is limited to the information you actively provide and is stored as part of your profile data in accordance with the retention periods described under ‘Duration of storage’ below, regardless of whether verification is completed. Unverified information will be marked accordingly. Any one-time verification codes (OTPs) sent for this purpose are deleted immediately after use or expiry. For verification, we may use third-party service providers with whom we have concluded data processing agreements pursuant to Art. 28 GDPR. Where these providers are located outside the EU/EEA, data transfers are safeguarded by appropriate transfer mechanisms pursuant to Art. 46 GDPR. Information collected for verification purposes will not be used for marketing purposes without your separate and explicit consent. Purpose of data processing To create and maintain your profile on the Talent Platform and to enable you to use HeyJobs services, including the application process. Legal basis for the processing of personal data Art. 6(1)(b) GDPR — performance of a contract. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You can terminate the contractual relationship at any time by deleting your profile directly in your account settings. Registration via Single-Sign-On (SSO) In addition to standard registration, you can register using an existing Google or Meta account. HeyJobs has concluded data transfer agreements with the providers listed below. The legal basis is Art. 6(1)(b) GDPR — performance of the contract to create your user account. Google: Transmitted by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: first name, last name, email address. Privacy policy: https://policies.google.com/privacy?hl=de Meta: Transmitted by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland: first name, last name, email address. Privacy policy: https://www.Meta.com/about/privacy/update/printable HeyJobs offers various innovative features to enable users to search for jobs easily and conveniently: 6.3.1 Personalized job advertisements Scope of the processing of personal data A core feature of HeyJobs is suggesting relevant job advertisements to users, including outside the HeyJobs platform and even when users are not actively job-seeking. Further information can be found in our GTCs. For this purpose, HeyJobs processes personal data you have provided or that arises from your use of our platform, for example contact details (name, email address, telephone number), profile information (such as occupation, skills, career level, education, and location preferences), and usage data (e.g. search and click behaviour). HeyJobs may combine these categories to determine which job advertisements are most relevant to you. Where you have given your consent, HeyJobs forwards this data in pseudonymised form to providers of internet applications, including social media networks operated by Meta (Facebook and Instagram), Google, TikTok, and LinkedIn. These platforms use the data to display personalised job advertisements to you. HeyJobs may also create user and target group profiles based on your profile data for this purpose. Purpose of data processing To display job advertisements tailored to you on third-party internet applications and to create the user and target group profiles required for this purpose. Profiling information HeyJobs compares your profile data (including professional field, location, and experience level) with the requirements of active job advertisements to identify relevant opportunities for you. As a result, you may be shown relevant job advertisements on third-party platforms such as Meta, Google, TikTok, or LinkedIn. This profiling does not produce any legal effect or similarly significant decision affecting you. It is used solely to present relevant job opportunities. Legal basis for the processing of personal data The legal basis for transmitting your profile data to third-party platforms (Meta, Google, TikTok, LinkedIn) for personalised job advertisements is your consent pursuant to Art. 6(1)(a) GDPR, which you may give or withdraw at any time via your profile settings or cookie preferences. Where personalised advertisements are delivered using cookies or similar tracking technologies, your prior consent is additionally required pursuant to § 25(1) TDDDG. Processing strictly necessary to match your profile to relevant job advertisements within the HeyJobs platform is carried out on the basis of Art. 6(1)(b) GDPR (contract performance). For the matched-audience step, HeyJobs and the respective platform operator act as joint controllers within the meaning of Art. 26 GDPR, limited to the audience-creation process. The key terms of these arrangements are published in Meta’s, Google’s, TikTok’s, and LinkedIn’s respective controller addenda. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may withdraw your consent to the display of personalised job advertisements on third-party platforms at any time via your profile settings or cookie preferences. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. To terminate the contractual relationship entirely, you may delete your profile at any time directly in your account settings. 6.3.2 Personalised Job Recommendations via SMS/RCS Scope of the processing of personal data Where you have given your consent, we will send you personalised job recommendations by SMS or RCS (Rich Communication Services) to the phone number you have provided. Consent can be given in two ways: by ticking the checkbox in your profile settings, or during the application process. In both cases, a two-step process (double opt-in) applies: after giving your initial consent, you will receive a confirmation SMS to confirm it. The following personal data is processed: Phone number Profile data (e.g. professional field, location, experience level) for personalisation of recommendations Purpose of data processing To send you job recommendations tailored to your profile via SMS or RCS. Legal basis for the processing of personal data The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. To send messages, we use third-party messaging service providers with whom we have concluded data processing agreements pursuant to Art. 28 GDPR. Where these providers are located outside the EU/EEA, data transfers are safeguarded by appropriate transfer mechanisms pursuant to Art. 46 GDPR. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required, at the latest upon withdrawal of your consent. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may withdraw your consent at any time by sending STOP to +491771787073 or by deactivating SMS/RCS notifications in your profile settings. Following withdrawal, your phone number and associated profile data will no longer be used for this purpose. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. 6.3.3 Push notifications via the PWA Scope of the processing of personal data Where you have granted permission, we will send you push notifications via our Progressive Web App (PWA) or as web push notifications through your browser, containing personalised job recommendations and application updates. The following personal data is processed: Push subscription: a unique endpoint and security keys generated by your browser, used to deliver notifications to your specific browser or installed PWA. The endpoint is provided by your browser vendor’s push service (such as Google, Mozilla, or Apple) Profile information (e.g. professional field, location, experience level) for personalisation of messages Purpose of data processing To send you personalised job recommendations and application updates via push notification. Legal basis for the processing of personal data The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. Consent is collected in two steps: you are first asked within our website or PWA whether you wish to receive notifications. Only if you agree will the browser or operating system permission prompt be triggered. Your push token is stored with a third-party customer communication provider with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. Where this provider operates outside the EU/EEA, data transfers are safeguarded by appropriate transfer mechanisms pursuant to Art. 46 GDPR. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required, at the latest upon withdrawal of your permission. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may withdraw your permission for push notifications at any time via your device’s OS settings or by uninstalling the PWA. Following withdrawal, your push token will be deleted and no further push notifications will be sent. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. 6.3.4 Personalised Job Recommendations via WhatsApp Scope of the processing of personal data Where you have given your consent, we will send you personalised job recommendations via WhatsApp to the phone number you have provided. Consent can be given by ticking the checkbox in your profile settings or during the application process. In both cases, a two-step process (double opt-in) applies: after giving your initial consent, you will receive a confirmation WhatsApp message to confirm it. The following personal data is processed: Phone number Profile data (e.g. professional field, location, experience level) for personalisation of recommendations To send messages, we use Braze, Inc. (28 East 28th Street, 12th Floor, New York, NY 10016, USA) as our WhatsApp Business API provider, with whom we have concluded a data processing agreement pursuant to Art. 28 GDPR. Your data is stored on Braze’s EU servers in Frankfurt. Any access from the USA is safeguarded under the EU-US Data Privacy Framework and Standard Contractual Clauses. Messages are delivered via WhatsApp, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, which processes data as an independent controller under its own privacy policy, available at: https://www.whatsapp.com/legal/privacy-policy-eea Purpose of data processing To send you job recommendations tailored to your profile via WhatsApp. Legal basis for the processing of personal data The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. Where data is transferred outside the EU/EEA, transfers are safeguarded by appropriate mechanisms pursuant to Art. 46 GDPR. Duration of storage Your phone number and associated profile data are stored only for as long as necessary to fulfil the stated purpose and deleted once no longer required, at the latest upon withdrawal of your consent. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may withdraw your consent at any time by clicking the unsubscribe link included in the WhatsApp messages you have subscribed to or deactivating WhatsApp notifications in your profile settings. Following withdrawal, your phone number and associated profile data will no longer be used for this purpose. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. 6.3.5 Email Notifications and Communication Preferences Scope of the processing of personal data Where you have given your consent during registration, we process your email address and profile data (such as job field, location, and experience level) to send you emails supporting your job search. These may include job recommendations and other job-search related content. You can manage your preferences and opt out of specific email types at any time via your account settings. Purpose of data processing To send you relevant job-search related content by email, tailored to your profile and preferences. Legal basis for the processing of personal data The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Where emails relate to services similar to those you have already used, sending may additionally be based on the existing customer relationship pursuant to § 7(3) UWG. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required, at the latest upon withdrawal of your consent or opt-out. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may withdraw your consent or adjust your email preferences at any time via your account settings. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. 6.3.6 Quizzes from HeyJobs Scope of the processing of personal data HeyJobs offers quizzes on its website on job-related topics (e.g. “Which job suits you best?” or “Are you prepared for your job interview?”). To offer our quizzes, we use the services of Kinsta Inc., 8605 Santa Monica Blvd #92581, West Hollywood, CA 90069, USA (hereinafter “Kinsta”) as a data processor within the meaning of Art. 28 GDPR to host the quizzes. Kinsta hosts content on the Google Cloud Platform. HeyJobs selects the data centre location, and EU-based data centres are available. Where personal data is nonetheless transferred to a third country outside the EEA, such transfers are safeguarded by the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, for transfers from the United Kingdom, by the International Data Transfer Addendum issued by the UK ICO, each concluded between HeyJobs and Kinsta. The following personal data is processed as a result: First and last name E-mail address Place of residence Phone / cell phone number IP address of the calling computer Purpose of data processing To provide job-related quizzes on the HeyJobs website and, where applicable, to support your registration with HeyJobs. Legal basis for the processing of personal data For users without a HeyJobs account, the legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR, specifically, to promote our platform and engage potential users through interactive job-related content. For registered users, the legal basis is additionally the performance of our contract with you pursuant to Art. 6(1)(b) GDPR. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may object to processing based on legitimate interests at any time. If you are a registered user, you may also request deletion of your data via your account settings or by contacting us at datenschutz@heyjobs.de. Scope of the processing of personal data All job advertisements that HeyJobs publishes for companies include an application form for electronic applications. If you use this option, the data entered in the form will be transmitted to the relevant company by HeyJobs and stored. This data may include: First name Last name Address Telephone / mobile phone number E-mail address Information on education and schooling Language skills CV / résumé References and testimonials Screening questions from companies, where applicable Depending on the job advertisement, additional data may be required due to specific operational or regulatory requirements of the role. HeyJobs advises against including special category data within the meaning of Art. 9 GDPR (such as health information, disability status, or religious beliefs) in your application materials. Where you voluntarily include such data despite this notice, you thereby give your explicit consent pursuant to Art. 9(2)(a) GDPR to HeyJobs forwarding that data to the relevant employer as part of your application. HeyJobs processes such data solely for this forwarding purpose and does not use it for any other purpose. The employer is independently responsible for all further processing of such data following receipt. Your application may be forwarded to the employer’s own applicant tracking system (ATS). Where data is transferred outside the EU/EEA, EU Standard Contractual Clauses are in place. For the technical conversion of application documents (e.g. PDF processing), we use a document processing provider based in the EU. When your application is transferred from HeyJobs to the employer’s ATS, the employer updates the application status. HeyJobs synchronises this status in the Recruiter Portal made available to the employer. In some cases, companies engage external agencies to work with us on their behalf to publish and distribute job advertisements and manage recruitment processes. Alternatively, you may submit your application by e-mail to arbeitgeberservice@heyjobs.de. In this case, we collect your e-mail address and any data you voluntarily provide and forward it to the relevant company. After submitting your application, you will receive a confirmation of receipt by e-mail from HeyJobs. Use of Textkernel To process and structure your application documents submitted through our platform, we use Textkernel B.V., Nieuwendammerkade 26A-5, 1022 AB Amsterdam, Netherlands (“Textkernel”). Textkernel’s AI-powered parsing technology extracts and structures relevant information from CVs and application documents — such as work history, qualifications, and skills — to support the application forwarding and matching process. Where data is transferred outside the EU/EEA, it is protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis for this processing is the performance of our contract with you pursuant to Art. 6(1)(b) GDPR. Further information can be found in Textkernel’s privacy policy: https://www.textkernel.com/privacy-policy/ Use of Kombo Where your application is transmitted to an employer’s ATS, we use Kombo Technologies GmbH, Brunnenstraße 19, 10119 Berlin, Germany (“Kombo”) as a technical integration platform and data processor pursuant to Art. 28 GDPR. A Data Processing Agreement is in place. Kombo routes your application data from HeyJobs to the employer’s ATS in real time. No data transfers outside the EU/EEA take place via Kombo. The legal basis for this processing is the performance of our contract with you pursuant to Art. 6(1)(b) GDPR. Further information can be found in Kombo’s privacy policy: https://kombo.dev/privacy Purpose of the processing To process your application submitted via the application form or by e-mail and to forward it to the relevant employer on your behalf. Legal basis for the processing of personal data The legal basis for processing your application data is the performance of our contract with you pursuant to Art. 6(1)(b) GDPR. Where you voluntarily include special category data in your application materials, the additional legal basis is your explicit consent pursuant to Art. 9(2)(a) GDPR, as described in the Scope section above. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. Applications are automatically deleted from HeyJobs six months after receipt, unless you agree to store your data on our talent platform for a further six months. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may request deletion of your application data at any time by contacting us at datenschutz@heyjobs.de. Please note that this only covers data stored in HeyJobs’ systems. We are unable to delete data that has already been transferred to and is held by the employer. To request deletion of that data, you must contact the employer directly; contact details are available in the job advertisement or in the confirmation e-mail following submission. Please note that deletion requests will end all active application processes. Statutory retention obligations may apply to the employer’s processing following receipt of your application. Scope of personal data processing In certain cases, HeyJobs operates dedicated application forms on behalf of specific employers. If you submit an inquiry or application through such a form, the data you enter is forwarded directly to the relevant employer. The categories of data typically processed include: first name, last name, email address, phone number, date of birth, postal code, and any other information you provide. Purpose of the data processing The forwarding is carried out exclusively for the purpose of establishing contact between you and the relevant employer. HeyJobs does not use the data transmitted as part of this service for its own tracking, advertising, or sales purposes. HeyJobs may additionally, with your consent, record pseudonymous conversion events (e.g. form submissions) for its own internal marketing measurement purposes. Legal basis for the processing of personal data In this context, HeyJobs acts solely as a technical service provider (processor) on behalf of the employer. The employer is the controller within the meaning of the GDPR and is responsible for determining the legal basis for processing your data. Information on the applicable legal basis and the employer’s data protection practices can be found in the employer’s privacy policy. Section 25 TDDDG additionally applies to the use of cookies and similar technologies on these pages. For channel/campaign tracking using these cookies, HeyJobs acts as an independent controller on the basis of your consent (Art. 6(1)(a) GDPR). Recipients The recipient of your data is the relevant employer. HeyJobs processes the data submitted through this form exclusively on behalf of the employer under a data processing agreement pursuant to Art. 28 GDPR and in accordance with the employer’s documented instructions. The employer is the controller within the meaning of the GDPR and is responsible for all further processing of your data. Further information can be found in the employer’s privacy policy. Storage period HeyJobs stores your data only for the period technically necessary to forward and confirm the submission, for a maximum of 7 days. After this period has elapsed, your data will be deleted by HeyJobs, unless statutory retention obligations apply. Termination of data processing Since HeyJobs acts as a processor in this context, any request to withdraw consent or delete your data must be directed to the relevant employer as the controller. The employer’s contact details are available in the respective job posting or the form confirmation. HeyJobs deletes any data still stored in its systems after the 7-day retention period has elapsed or upon notification from the employer Scope of the processing of personal data Where you use HeySubmit, HeyJobs automatically completes and submits your application on your behalf on the relevant employer’s career website. To do so, HeyJobs temporarily processes the personal data you have provided as part of your application on the HeyJobs platform. Categories of data processed typically include: First name, last name Email address Phone number Address / postcode CV and work experience data Responses to screening questions Any further information you have provided as part of your application Purpose of data processing To submit your application to the relevant employer on your behalf via automated form completion on the employer’s career website or applicant tracking system. HeyJobs does not use the data transmitted for its own tracking, advertising or distribution purposes within the scope of this service. HeyJobs may additionally measure anonymised conversion events (e.g. form submissions) for its own internal marketing measurement purposes. Legal basis for the processing of personal data The legal basis for this processing is the performance of our contract with you pursuant to Art. 6(1)(b) GDPR, as the automated submission is a core part of the HeySubmit service you have requested. Where you additionally give your explicit authorisation at the point of application, this also constitutes consent pursuant to Art. 6(1)(a) GDPR. Recipients The recipient of your application data is the relevant employer, via their career website or applicant tracking system. Where HeyJobs uses a third-party technical service provider to perform the automated submission, that provider acts as a processor pursuant to a Data Processing Agreement under Art. 28 GDPR and processes your data solely on HeyJobs’ instructions. Where such providers are located outside the EU/EEA, data transfers are safeguarded by appropriate mechanisms pursuant to Art. 46 GDPR, in particular EU Standard Contractual Clauses. The employer is independently responsible for all further processing of your data following receipt. Please refer to the employer’s privacy notice for further information. Note on automated processing HeySubmit uses an automated system to map and complete application fields on third-party websites on your behalf. This system does not evaluate your application or make any assessment of your suitability for a role. It performs technical form completion only. HeySubmit does not involve automated individual decision-making within the meaning of Art. 22 GDPR. Duration of storage HeyJobs retains your application data for six months from the date of submission, in line with the retention period applicable to all applications made via the HeyJobs platform. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may cancel the application process at any time prior to submission. Once your application has been successfully submitted to the employer, your data is retained by HeyJobs for six months in accordance with the duration described above. Please note that withdrawal does not reverse a submission already made to the employer — to request deletion of data held by the employer, you must contact them directly. To withdraw or request deletion of data held by HeyJobs, please contact us at datenschutz@heyjobs.de or cancel directly within the platform. Scope of the processing of personal data When using HeyAssessment, we process the following personal data: First name Last name Email address Telephone / Mobile phone number Information on professional qualifications (e.g., education, work experience, certificates) Language skills Company screening questions, where applicable Answers to assessment questions (e.g. preferences, availabilities, additional qualifications) CV and other provided documents (e.g. references and testimonials) Results from interaction with the chatbot (e.g. additional information or clarifications) Purpose of data processing Personal data is processed for the following purposes: Supporting the application process by providing detailed, job-relevant information to recruiters, Creating a structured report based on the provided data, which is appended to the application documents and forwarded to the employer as part of your application, Improving the platform through analysis and further development of our services, using anonymised or aggregated data only. Legal basis for the processing of personal data The legal basis for processing your HeyAssessment data to support your application and create a structured report for the employer is the performance of our contract with you pursuant to Art. 6(1)(b) GDPR. Where HeyJobs uses anonymised or aggregated HeyAssessment data to improve and develop its platform, the legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. You may object to processing based on legitimate interest at any time by contacting datenschutz@heyjobs.de. Note on automated processing and AI Act disclosure HeyAssessment is supported by artificial intelligence. The use of HeyAssessment does not involve automated individual decision-making within the meaning of Art. 22 GDPR. All decisions regarding your application remain with the employer. In accordance with Art. 26(11) of the EU AI Act, HeyJobs informs you that HeyAssessment uses an AI system that falls within the category of high-risk AI systems under Annex III of the EU AI Act, as it is used in the context of recruitment and candidate assessment. Human oversight is maintained throughout: the structured report generated by HeyAssessment is provided to the employer as an informational tool only and does not replace human review of your application. You have the right to request an explanation of how this system has been applied in your specific case by contacting datenschutz@heyjobs.de. AI providers The AI capabilities within HeyAssessment and related product features (including CV analysis and automated matching) are powered by the following providers: OpenAI: We use models provided by OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA (“OpenAI”), to process and analyse applicant responses and application documents. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Further information: https://openai.com/policies/privacy-policy Amazon Bedrock: We use Amazon Bedrock, provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg, on behalf of Amazon Web Services, Inc., USA (“Amazon Bedrock”), to host and run large language model-based product features including assessment analysis. Data is processed within EU infrastructure (Frankfurt region) where selected by HeyJobs; where transfers outside the EU occur, they are protected by EU Standard Contractual Clauses and additional safeguards pursuant to Art. 46 GDPR. Further information: https://aws.amazon.com/privacy/ HeyAssessment Performance Evaluation After your assessment session is completed, HeyJobs uses an AI-assisted internal quality assurance tool (the “Quality Evaluator”) to evaluate the technical quality and accuracy of HeyAssessment outputs. This tool uses a large language model to check whether the platform produced correct, consistent, and high-quality results, for example, that the questions reflected the job requirements, your answers were captured faithfully, and the PDF report sent to the employer correctly summarises your answers. The Quality Evaluator is used for internal quality assurance purposes only, is not visible to you as a candidate, and does not affect the content of your application or any decisions made about you by employers. Evaluation results are accessible only to HeyJobs’ engineering and product teams. The data processed includes your assessment session responses and related metadata in pseudonymised form. Structured personal fields such as name and contact details are excluded from the evaluation payload. Free-text responses are included as the evaluator must verify answers were captured faithfully, and may incidentally contain personal data. No model training on your personal data takes place. The legal basis for this processing is HeyJobs’ legitimate interest pursuant to Art. 6(1)(f) GDPR, specifically, ensuring the technical reliability and quality of its platform to protect both candidates and clients from platform errors. You may object to this processing at any time by contacting datenschutz@heyjobs.de. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. In line with section 6.4, assessment data linked to your application is deleted six months after submission, unless you have agreed to extended storage on our talent platform. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may request deletion of your HeyAssessment data held by HeyJobs at any time by contacting us at datenschutz@heyjobs.de. Please note that this only covers data held in HeyJobs’ systems. Data already transmitted to the employer must be deleted by contacting the employer directly. Contact details are available in the relevant job advertisement or application confirmation. You also have the right to object at any time to processing based on legitimate interest (e.g. platform improvement) by contacting datenschutz@heyjobs.de. Please note that deletion requests will end all active application processes. Scope of the processing of personal data To support employers in reviewing applications, HeyJobs automatically compares screening question responses and HeyAssessment results against the job requirements defined by the employer. This includes a deterministic criteria comparison and an AI-assisted summary. The employer is shown a structured fit indication in the Recruiter Portal reflecting how well the stated qualifications match the advertised requirements. All decisions regarding the further course of the recruitment process are made independently by the employer. Purpose of data processing To provide employers with a structured informational basis that facilitates and accelerates the review of applications. This also benefits applicants, as suitable applications can be identified more quickly and prioritised accordingly. Profiling information The automated fit analysis constitutes profiling within the meaning of Art. 4(4) GDPR, as it involves the automated processing of personal data to evaluate certain aspects of your professional qualifications in relation to a specific role. The result is a structured fit indication displayed to the employer in the Recruiter Portal. This indication does not constitute automated individual decision-making within the meaning of Art. 22 GDPR and does not determine the outcome of your application. All hiring decisions are made exclusively by the employer. The practical consequence is that applications assessed as a strong match may receive faster attention from recruiters. Legal basis for the processing of personal data The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The legitimate interest lies in the efficient support of the recruitment process for employers and in the effective operation of HeyJobs’ platform. Since the fit indication does not make a decision on your application but serves solely as an informational basis for a human decision-maker, and since the data used is limited to information you have already provided as part of your application, this interest outweighs the interests of applicants warranting protection. Duration of storage The fit indication is retained for the duration of the recruitment process and deleted no later than when the associated application materials are deleted, generally six months after receipt of the application. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may object to the processing of your personal data for the purposes of the automated fit analysis at any time on grounds relating to your particular situation by contacting us at datenschutz@heyjobs.de. Where an objection is raised, HeyJobs will cease this processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. Scope of the processing of personal data An application form for jobs at HeyJobs is available on our website (www.heyjobs.co) for electronic applications. If you use this option, the data entered in the form will be transmitted to us and stored. This data may include: Salutation First name Last name Address Telephone / mobile phone number E-mail address Alternatively, you can also send us your application by e-mail. In this case, we collect your e-mail address and any data you voluntarily provide. After submitting your application, you will receive a confirmation of receipt by e-mail from us. Online sourcing of applicants Occasionally, our recruiting team searches online for candidates for our vacancies. We may include personal data (such as name, contact details, and a link to the relevant profile) from publicly available sources such as LinkedIn, XING, or other professional networks in our recruiting process. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR, specifically, identifying and approaching suitable candidates for our open positions. If no suitable position exists at the time of storage, your data may be stored in our internal talent platform with your prior consent so that we can contact you in the future regarding open positions. To store personal data from public profiles in our internal recruiting systems, we use the service providers described in section 7.2 below. Purpose of data processing To process your application to HeyJobs and to manage the application process. Data processed during the sending process is additionally used to prevent misuse of the application form and to ensure the security of our IT systems (see also “Error tracking” in this privacy policy). Legal basis for the processing of personal data The legal basis for the processing of your data is Art. 88(1) GDPR in conjunction with § 26(1) BDSG (data processing for the purposes of the employment relationship). Duration of storage After completion of the application process, your data will be stored for up to six months and deleted thereafter, unless you consent to your data being stored on our talent platform for a further 24 months. Where statutory retention obligations apply, data is retained for the legally required period. You may request deletion of your data at any time by e-mailing datenschutz@heyjobs.de. Please note that this will end all current application processes. Termination of data processing You may object to the processing of your personal data at any time by contacting datenschutz@heyjobs.de. Please note that in such a case your application can no longer be considered and all personal data stored in connection with your application will be deleted. Scope of the processing of personal data As part of your application process, we may invite you to participate in an AI-powered interview conducted by Madita (https://madita.ai/), a product of HeyJobs GmbH. Processing takes place in three steps: Step 1 Preparation: Your application documents (name, contact details, application materials) are read using AI to generate role-specific interview questions. No evaluation takes place. Step 2 AI interview: Participation is voluntary. Data processed includes your contact details, voice recording, and transcript of the interview. In accordance with Art. 50(1) of the EU AI Act, we inform you that you are interacting with an AI system, not a human. Madita is classified as a high-risk AI system under Annex III No. 4 of the EU AI Act. All hiring decisions are made by a human; no solely automated decision-making within the meaning of Art. 22 GDPR takes place. Step 3 Anonymisation: Following the interview, all personal identifiers are fully removed. The anonymised data no longer falls within the scope of the GDPR. Purpose of data processing Step 1 serves structured interview preparation. Step 2 serves to assess your suitability for the advertised role. Step 3 serves to minimise the volume of personal data stored. Legal basis for the processing of personal data Step 1: Art. 6(1)(b) GDPR in conjunction with § 26 BDSG Step 2: Art. 6(1)(a) GDPR (consent, voluntary, withdrawable at any time without disadvantage) Step 3: Art. 6(1)(f) GDPR (legitimate interest in data minimisation) Duration of storage Personal data will be deleted no later than six months after receipt of your application, unless statutory retention obligations apply. Termination of data processing You may withdraw your consent (Step 2) and object to processing in Steps 1 and 3 at any time by contacting datenschutz@heyjobs.de. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. Scope of the processing of personal data We use Ashby, provided by Ashby, Inc., USA (“Ashby”), to manage our web-based application process. The following personal data is processed by Ashby: Contact information Details of previous activities Educational information CV and application documents Feedback on job interviews Communication data Any further information you voluntarily provide in your application Where you provide special category data within the meaning of Art. 9(1) GDPR as part of your application, this data will also be transmitted to and processed by Ashby. Data is transferred to Ashby servers in the USA and is protected by EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. Purpose of data processing To provide a web-based application process for HeyJobs and to manage applications submitted to us. Legal basis for the processing of personal data The legal basis for the processing of your data is Art. 88(1) GDPR in conjunction with § 26(1) BDSG (data processing for the purposes of the employment relationship). Duration of storage After completion of the application process, your data will be stored for up to six months and deleted thereafter, unless you agree to store your data on our talent platform for a further 24 months. Where statutory retention obligations apply, data is retained for the legally required period. You may request deletion of your data at any time by e-mailing datenschutz@heyjobs.de. Please note that this will end all current application processes. Termination of data processing You may withdraw your consent or object to the processing of your personal data at any time by contacting datenschutz@heyjobs.de. The withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Further information on data subject rights vis-à-vis Ashby can be found at: https://www.ashbyhq.com/resources/privacy To support our internal talent acquisition processes and application management, we may use third-party AI-powered and skills assessment tools. These include tools used for candidate sourcing, outreach sequencing, recruitment workflow automation, and pre-employment skills assessments for specific technical roles. These providers act as processors on HeyJobs’ behalf pursuant to Data Processing Agreements under Art. 28 GDPR and process your data solely on HeyJobs’ instructions. Where providers are located outside the EU/EEA, appropriate transfer safeguards pursuant to Art. 46 GDPR are in place, in particular EU Standard Contractual Clauses. Where providers are located in the United Kingdom, data transfers are covered by the EU adequacy decision for the UK pursuant to Art. 45 GDPR. No model training on your personal data takes place. The legal basis for this processing is Art. 88(1) GDPR in conjunction with § 26(1) BDSG (data processing for the purposes of the employment relationship), and where sourcing is carried out prior to an application, our legitimate interest pursuant to Art. 6(1)(f) GDPR in identifying suitable candidates for our open positions. For further information on the specific providers used, please contact us at datenschutz@heyjobs.de. Scope of the processing of personal data Visitors to our Employer Website https://www.heyjobs.co/recruiting/, primarily employees of companies, can find out more about working with HeyJobs, access information about our services, contact us for advice, and register in the Recruiter Portal. We collect the following data when you visit our website: IP addresses Browser information Usage data Date and time of the visit Location information Cookie ID Purpose of data processing To transmit the content of our website to your browser, to ensure the technical operation of the website, and to improve our product and services. Legal basis for the processing of personal data The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in operating and improving our Employer Website. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. Where statutory retention obligations apply, data is retained for the legally required period. Termination of data processing You may object to the processing of your personal data based on legitimate interest at any time by contacting us at datenschutz@heyjobs.de. The Recruiter Portal is a platform through which HeyJobs’ clients can access and use HeyJobs’ services, including creating job advertisements, communicating via the platform, and managing incoming applications. Access is restricted to authorised personnel (e.g. recruiters, hiring managers, or HR managers) using employer login credentials. Scope of the processing of personal data The following personal data of authorised Recruiter Portal users is processed: First name Last name Login data Salutation E-mail address Company affiliation and position IP address Date and time of registration and access Any further information provided voluntarily (e.g. phone number or photo) Purpose of data processing To provide and operate the Recruiter Portal, manage the registration process, and enable the creation and management of job advertisements. Legal basis for the processing of personal data The legal basis for this processing is the performance of our contract with the employer client pursuant to Art. 6(1)(b) GDPR and our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing and maintaining the Recruiter Portal and fulfilling our contractual obligations to clients. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required, at the latest upon termination of the contractual relationship, unless statutory retention obligations require further retention. Termination of data processing You may object to processing based on legitimate interest at any time by contacting us at datenschutz@heyjobs.de. Where processing is based on contract performance, data will be deleted upon termination of the contractual relationship in accordance with the retention period above. Recruiter Portal support chat HeyJobs uses a third-party customer support chat service in the Recruiter Portal to facilitate communication between companies and the HeyJobs Customer Success team. The following data is processed: content of sent and received chat messages, context information (e.g. the page on which the chat was used), and IP address. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing effective customer support. Personal data is deleted as soon as it is no longer required for the support purpose and in accordance with our standard retention periods. Website and Employer Website communications For customer and visitor communications on our website and Employer Website, we use the following categories of third-party providers: (i) a chatbot and messaging platform for automated visitor engagement on the Employer Website; (ii) a managed live chat provider for real-time visitor support; and (iii) a customer communication platform (shared inbox) used internally by our team to manage inbound communications. These providers act as processors on HeyJobs’ behalf pursuant to Data Processing Agreements under Art. 28 GDPR. Where providers are located outside the EU/EEA, data transfers are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in managing customer and visitor communications effectively. As part of our continuous efforts to improve the quality of our services, we may record online meetings held via platforms such as Google Meet, Zoom, Microsoft Teams, Demodesk, Cisco Webex, or Crowdcast. Recordings help ensure that no important details are lost and that we can fulfil client requirements as precisely as possible. You will always be informed before a meeting is recorded and participation is never conditional on consent to recording. Scope of the processing of personal data The following personal data may be processed during recordings: Image recordings (video of participants) Audio recordings First and last name (as displayed in the meeting platform) Job title and company affiliation (where provided in the platform profile) Chat messages exchanged during the meeting Content of any screen-shared materials that contain personal data Meeting recordings and related data are stored in our Salesforce CRM system (see section 8.5). Where recordings are transcribed or processed, we may use a third-party transcription and audio processing provider. Personal data contained in recordings is processed solely for internal quality review purposes. Where such providers are located outside the EU/EEA, data transfers are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Purpose of data processing To improve our services and ensure a high quality of customer care, and to draw conclusions about potential improvements to our service offering. Legal basis for the processing of personal data The legal basis for the recording and storage of meetings is your consent pursuant to Art. 6(1)(a) GDPR. Consent is obtained prior to the first recording and may be withdrawn at any time by contacting datenschutz@heyjobs.de. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. Duration of storage Personal data is stored only for as long as necessary to fulfil the stated purpose and deleted once it is no longer required. You may object to or withdraw consent to storage at any time by contacting datenschutz@heyjobs.de. Further information For further information on the data protection practices of the platforms used, please refer to the corresponding privacy policies: Google Meet: Privacy policy Zoom: Privacy policy Microsoft Teams: Security information Demodesk: Privacy Policy Cisco Webex: Privacy Statement Crowdcast: Privacy Policy We use Salesforce, a customer relationship management (CRM) platform provided by Salesforce, Inc., 415 Mission Street, San Francisco, CA 94105, USA (“Salesforce”), to manage our employer sales pipeline, customer success activities, and contact data of employer representatives. The following personal data of employer contacts is processed: name, e-mail address, telephone number, job title and company affiliation, as well as communication and interaction history. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in managing our business relationships and fulfilling our contractual obligations to clients. Further information can be found in Salesforce’s privacy policy: https://www.salesforce.com/company/privacy/ For multi-step contact and enquiry forms on our website, we use HeyFlow, a form builder platform provided by HeyFlow GmbH, based in the EU (“HeyFlow”). When you submit a contact request or enquiry via a HeyFlow-powered form, the data you enter (including name, e-mail address, company, and message) is processed via HeyFlow before being forwarded to HeyJobs. No data transfers outside the EU/EEA take place. A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with HeyFlow. The legal basis for this processing is our legitimate interest in managing inbound contact requests pursuant to Art. 6(1)(f) GDPR, or the performance of pre-contractual measures pursuant to Art. 6(1)(b) GDPR. Further information can be found in HeyFlow’s privacy policy: https://heyflow.com/privacy-policy. Scope of the processing of personal data Each time our platform is accessed, our system automatically collects the following technical data from the accessing device: Browser type and version Operating system IP address Date and time of access This data is stored in system log files and is not linked to any other personal data of the user. Purpose of data processing To deliver platform content to the user’s device, ensure technical functionality, optimise the platform, and maintain the security of our IT systems. Legal basis for the processing of personal data Art. 6(1)(f) GDPR — our legitimate interest in operating a stable, secure, and optimised platform. Duration of storage Data is deleted as soon as it is no longer required for the purposes stated above. Log files are not used for marketing purposes. Termination of data processing You may object to the processing of your personal data based on legitimate interest at any time by contacting us at datenschutz@heyjobs.de. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims. Additional infrastructure and service providers The following categories of providers support platform delivery and backend operations. All act as processors under Data Processing Agreements pursuant to Art. 28 GDPR. Where providers are located outside the EU/EEA, data transfers are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Website building and hosting platforms: Used to host certain web pages and landing pages; visitor IP addresses and technical data are processed for content delivery. Content delivery networks (CDNs): Used to optimize loading times and protect the platform against misuse; technical data (IP address, browser information, operating system) is processed in server log files. Map and location services: Used to render map features within the platform; IP addresses and location data are processed for this purpose. Workflow automation and data integration platforms: Used for internal system integrations and backend data flows; data subjects do not interact with these tools directly. HeyJobs uses SSL/TLS encryption (minimum 128-bit) to protect data in transit. An active encrypted connection is indicated by “https://” in the address bar. We also implement appropriate technical and organisational measures to protect our systems against unauthorised access, loss, or modification of data. We host our website on Amazon Web Services, provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (“AWS”). Our primary server location is Frankfurt am Main, Germany. Personal data may be transferred to AWS’s US parent entity. Such transfers are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR and additional transfer safeguards. Details are available in AWS’s Data Processing Addendum: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/. Further information can be found in AWS’s privacy policy: https://aws.amazon.com/de/privacy/?nc1=f_pr. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in reliable website operation. We use Google Cloud Platform, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google Cloud”), to support core API services, mapping features, and other cloud-based platform functionality. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR and the Data Processing Amendment concluded with Google. Further information: https://cloud.google.com/privacy We use cookies and similar tracking technologies on our Talent Website www.heyjobs.co and https://www.heyjobs.co/de-de/jobs and Employer Website www.heyjobs.co/recruiting/ to ensure platform functionality, understand how our websites are used, and improve your experience. The following data may be stored and transmitted via cookies: Language settings Login information Search terms entered Frequency of page views Use of platform functions Cookie consent information This data is not stored together with other personal data. Details on the specific cookies used, their providers, and their purposes are available in the cookie settings (Talent Website and Employer Website). You can withdraw or adjust your consent at any time via the cookie settings without affecting the lawfulness of prior processing. We use the consent management platform Usercentrics, provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich (https://usercentrics.com/de/), to obtain and document cookie consent in accordance with applicable data protection law. When you visit our website, the following data is transmitted to Usercentrics: Consent status (granted or withdrawn) IP address Browser and device information Time of visit Usercentrics stores a cookie in your browser to associate consent records with your session. This data is retained until you request deletion, delete the cookie yourself, or the storage purpose no longer applies. Statutory retention obligations remain unaffected. Legal basis: Art. 6(1)(c) GDPR — compliance with a legal obligation to document consent. Most browsers accept cookies by default. You can manage or reject cookies at any time via your browser settings. Note that disabling certain cookies may affect platform functionality. Browser-specific guidance: Apple Safari | Google Chrome | Microsoft Edge | Microsoft Internet Explorer | Mozilla Firefox | Opera | Android (Chrome) | Iphone or Ipad (Chrome) | Iphone or Ipad (Safari) Scope of data processing This section applies to visitors of our website, applicants using the application process, and authorised users of the Recruiter Portal. The following categories of personal data may be processed: IP address Browser type, version, and device information URL and page context at the time of the error Technical log data, which may incidentally include user input User or session identifiers (where applicable) Session interaction data, including mouse movements, clicks, and page navigation (where Real User Monitoring is active) Purpose of data processing To detect and rectify technical errors, monitor system performance and security, and ensure the stable and secure operation of the HeyJobs platform and services. Legal basis Art. 6(1)(f) GDPR — our legitimate interest in operating a stable, secure, and functional platform. Duration of storage Data is deleted as soon as it is no longer required for the purpose for which it was collected, and at the latest once the relevant fault or issue has been resolved. Termination of data processing You may object to the processing of your personal data based on legitimate interest at any time by contacting us at datenschutz@heyjobs.de. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims. Service providers Sentry: We use Sentry for error monitoring and code stability analysis, provided by Sentry Inc., 1501 Mariposa St #408, San Francisco, CA 94107, USA. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Further information: https://sentry.io/privacy/. DataDog: We use Datadog, provided by Datadog, Inc., 620 8th Avenue, 45th Floor, New York, NY 10018, USA, for security and performance monitoring and, where active, for session-level user interaction analysis within our platform. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis is Art. 6(1)(f) GDPR. Further information: https://www.datadoghq.com/legal/privacy/. Personal data is only transferred to affiliated companies within the HeyJobs group where one of the following conditions is met: You have consented to the transfer pursuant to Art. 6(1)(a) GDPR The transfer is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR The transfer is required by law pursuant to Art. 6(1)(c) GDPR HeyJobs GmbH currently operates in Germany and Austria. For controller details, see the “Name and address of the controller” section of this privacy policy. Personal data is only transferred to recipients in third countries outside the EU/EEA where an adequate level of data protection is ensured in accordance with Chapter V, Art. 44 et seq. GDPR. The primary safeguard used by HeyJobs for such transfers is EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. Where other transfer mechanisms apply, these are identified in the relevant sections of this privacy policy. Scope of the processing of personal data When users send or receive messages via our internal messaging system, HeyJobs forwards these messages by email while masking the sender’s personal email address. Messages sent by users appear to recipients under a HeyJobs proxy address following the pattern firstname.lastnameID@hey.jobs. Replies from companies or recruiters are displayed to users under a corresponding proxy address (companyID@hey.jobs or recruiterID@hey.jobs). This also applies where messages are sent via a separate email client. The following data is processed: name and email address of the sender and recipient (including copied recipients), and message content. Purpose of data processing To enable secure, privacy-preserving communication between applicants, companies, and recruiters, without disclosing users’ personal email addresses to third parties. Legal basis for the processing of personal data Art. 6(1)(f) GDPR — our legitimate interest in facilitating convenient, privacy-protective communication and a consistent user experience. Duration of storage Data is deleted when the relevant conversation has ended, i.e. once the application process has concluded, whether successfully or not. Termination of data processing You may object to this processing at any time by contacting datenschutz@heyjobs.de. We will cease processing unless we can demonstrate compelling legitimate grounds, or the processing is necessary for the establishment, exercise, or defence of legal claims. Scope of the processing of personal data When recruiters contact applicants via the HeyJobs internal chat, the message is forwarded through our system. The following data is processed: names of the applicant and the responsible recruiter, and message content. To provide this service, we use AWS (Amazon Web Services EMEA SARL, Luxembourg, server location Frankfurt am Main, Germany). Purpose of data processing To enable simple, efficient communication between applicants and recruiters as part of the application process. Legal basis for the processing of personal data Art. 6(1)(f) GDPR — our legitimate interest in facilitating convenient communication and a consistent user experience. Duration of storage Data is deleted as soon as it is no longer required for the purpose for which it was collected. Recruiters may transfer messages to their own systems; HeyJobs has no influence over how such systems handle the data. Termination of data processing You may object to this processing at any time by contacting datenschutz@heyjobs.de. Scope of the processing of personal data You may contact us by email at support@heyjobs.de. The personal data transmitted with your email is stored and used exclusively for processing your enquiry. Purpose of data processing To process and respond to your enquiry. Legal basis for the processing of personal data Art. 6(1)(f) GDPR — where the contact is for general enquiries, or Art. 6(1)(b) GDPR — where the contact relates to the conclusion or performance of a contractual relationship. Duration of storage Data is deleted once the conversation has ended and the matter has been conclusively resolved. Termination of data processing You may object to processing based on legitimate interest at any time by contacting datenschutz@heyjobs.de. Note that in such cases the conversation cannot be continued. We offer the option to contact us via WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Scope of data processing The following data is processed where you contact us via WhatsApp: your WhatsApp phone number and, where provided, your first and last name. Data is used solely to respond to your enquiry and is not disclosed to third parties. Purpose of data processing To process and respond to your enquiry via WhatsApp in a timely and efficient manner. Legal basis Art. 6(1)(b) GDPR — where contact relates to a specific application or pre-contractual matter Art. 6(1)(a) GDPR — where contact relates to a general enquiry (e.g. initial contact, questions about the platform); processing is based on your consent. Address book and data transfers to the USA WhatsApp Business automatically transmits phone numbers stored in the address book of the device used to operate the account to Meta Inc. servers in the USA. HeyJobs ensures that only the WhatsApp contact data of users who have actively contacted us via WhatsApp is stored in the relevant device’s address book, thereby limiting the scope of any such transmission. Data transfers are covered by WhatsApp’s standard contractual clauses: https://www.whatsapp.com/legal/business-data-transfer-addendum-20210927 Further information on WhatsApp’s data processing practices: https://www.whatsapp.com/legal/?eea=1#privacy-policy Where online forms are used in this section, they are powered by “HubSpot” (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA), which processes form data exclusively on HeyJobs’ behalf as a processor under a Data Processing Agreement pursuant to Art. 28 GDPR. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Scope of the processing of personal data We process the following personal data of event participants: First and last name Title and job title Business e-mail Telephone number Company name Purpose of data processing Invitation and registration management, sending confirmations and reminders, communicating short-notice changes, and optimising event planning. Legal basis for the processing of personal data Art. 6(1)(a) GDPR — your consent. Duration of storage Data is deleted as soon as it is no longer required for the purposes stated above. Termination of processing You may withdraw your consent at any time by contacting datenschutz@heyjobs.de or clicking the unsubscribe link in any event-related email. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. Joint controllership with event partners For certain webinars and events, HeyJobs collaborates with third-party partners under a joint controllership arrangement pursuant to Art. 26(1) GDPR. Where a partner is involved, this will be clearly communicated to participants in advance. The following partners may be involved: Trendence Institut GmbH Friedrichstraße 67-70 10117 Berlin https://www.trendence.com/datenschutz softgarden e-recruiting GmbH Tauentzienstraße 14 10789 Berlin https://softgarden.com/de/datenschutz-webseite/ Cammio GmbH Gehrtsstr. 14 40235 Düsseldorf https://cammio.com/de/datenschutzerklaerung/ In each case, HeyJobs and the respective partner are jointly responsible for the processing of participant data in connection with the event, including consent management and technical implementation. Each partner is additionally responsible for processing the participant contact data transmitted by HeyJobs in the course of the collaboration. The following categories of data are processed under the joint controllership arrangement: Contact and registration data (name, job title, company, phone number, email address) Usage and protocol data Content and communication data Profile data No data transfers to third countries take place in this context. Legal basis for the processing of personal data Art. 6(1)(a) GDPR (consent) and, where applicable, Art. 6(1)(b) GDPR (contract performance). As a participant, you may exercise your data subject rights against any of the joint controllers. The SuperRecruiter online course is hosted on the Thinkific platform, provided by Thinkific Labs Inc., #400 – 369 Terminal Ave, Vancouver, BC V6A 4C4, Canada. Contact: info@thinkific.com. Scope of the processing of personal data Registration requires the following personal data: First and last name Title, position, and organisation Email address IP address and date/time of registration Payment data Purpose of data processing To process registration, provide access to the course, and communicate with participants in connection with their enrolled course. Legal basis for the processing of personal data Art. 6(1)(b) GDPR — for data necessary to register for and access the course. Art. 6(1)(a) GDPR — for any optional data voluntarily provided. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. For users making a one-off payment, data is deleted 4 weeks after successful course completion. Payment Processing Stripe: For payment processing, we use Stripe, Inc., 510 Townsend St., San Francisco, CA 94103, USA. The following data is transmitted to Stripe to the extent necessary for contract performance pursuant to Art. 6(1)(b) GDPR: Name, email address, customer and order number Bank and credit card details (including card number, expiry date, CVC) Transaction amount, date, time, and location Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Data is retained for the period necessary to complete payment processing, including refunds, receivables management, and fraud prevention. Further information: https://stripe.com/privacy-center/legal. FastSpring: For subscription and payment management in connection with certain HeyJobs products, we use FastSpring, provided by Bright Market, LLC d/b/a FastSpring, 801 Garden Street, Suite 201, Santa Barbara, CA 93101, USA. The following data is processed: name, email address, billing address, payment details, and transaction information. Data transfers to the USA are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis is Art. 6(1)(b) GDPR. Further information: https://fastspring.com/privacy/ If you request an appointment for a web demo, we will use your data to contact you and arrange and carry out an appointment with you. Scope of the processing of personal data We process the following personal data: First and last name Email address Telephone number Company name Purpose of data processing To coordinate, prepare, conduct, and follow up on the requested web demo. Legal basis for the processing of personal data Art. 6(1)(b) GDPR — pre-contractual measures taken at the request of the data subject. Duration of storage Data is deleted as soon as it is no longer required for the preparation, conduct, and follow-up of the appointment. We occasionally hold competitions. Personal data is collected solely in the context of the specific competition and on the basis of the participant’s express consent. The applicable competition-specific privacy information is provided at the point of data collection. For multi-step contact and enquiry forms on our website, we use HeyFlow, provided by HeyFlow GmbH, based in the EU. Data entered via HeyFlow-powered forms (name, email address, company, and message) is processed by HeyFlow before being forwarded to HeyJobs. No data transfers outside the EU/EEA take place. A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with HeyFlow. Legal basis for the processing of personal data Art. 6(1)(f) GDPR (legitimate interest in managing inbound contact requests) or Art. 6(1)(b) GDPR (pre-contractual measures), depending on the nature of the enquiry. Further information: https://heyflow.com/privacy-policy For personalising outreach communications, we use GenderAPI, a name-based gender inference service provided by GenderAPI.io, operated from Germany. First names from our B2B contact datasets are processed to infer an appropriate salutation. No data transfers outside the EU/EEA take place. A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded with GenderAPI. Legal basis for the processing of personal data Art. 6(1)(f) GDPR — our legitimate interest in sending professionally personalised outreach communications. Termination of data processing You may object to this processing at any time by contacting datenschutz@heyjobs.de. In connection with our sales and marketing activities directed at business contacts, we use the following categories of providers, all of which process professional contact data of company representatives: B2B sales prospecting providers, B2B data enrichment and automation providers, cold email outreach providers, email validation providers, B2B contact data verification providers, social media outreach providers, email signature and branding providers, event scheduling providers, web scraping and automation providers, content creation and development platforms, and personalisation and landing page platforms. Where providers are located outside the EU/EEA, data transfers are protected by EU Standard Contractual Clauses in accordance with Art. 46 GDPR. The legal basis is our legitimate interest in business development pursuant to Art. 6(1)(f) GDPR. Scope of the processing of personal data On our platform, users have the option of registering for our newsletter. We process the following personal data: First name and surname Email address IP address of the accessing computer Browser type Operating system Date and time of registration Purpose of data processing The purpose of data processing is to send the newsletter. Legal basis for the processing of personal data The legal basis for the processing of personal data is your consent in accordance with Art. 6(1)(a) GDPR. Duration of storage The data is deleted as soon as it is no longer required for the purpose for which it was collected. The user’s e-mail address is therefore stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be canceled by the user concerned at any time. For this purpose, you will find a corresponding link in every newsletter. Other recipients For the sending of newsletters and push notifications, we use third-party email and customer communication providers with whom we have concluded data processing agreements in accordance with Art. 28 GDPR. Termination of data processing You may unsubscribe at any time via the unsubscribe link in any newsletter or by contacting datenschutz@heyjobs.de. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. 15.1.1 Email delivery For the sending of newsletters and transactional emails, we use third-party email service providers with servers located in the USA. Data transfers are based on EU standard contractual clauses in accordance with Art. 46 GDPR. Processing covers the email address and technical usage data (e.g. open and click rates). The legal basis is your consent in accordance with Art. 6(1)(a) GDPR. 15.1.2 Newsletter marketing and push notifications For newsletter marketing and push notifications, we use third-party customer communication providers with servers located outside the EU. Data transfers are based on EU standard contractual clauses in accordance with Art. 46 GDPR. Data processed includes email addresses, push tokens, interaction data and IP addresses. The legal basis is your consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time by unsubscribing from the newsletter or disabling push notifications in your device settings or by sending an e-mail to datenschutz@heyjobs.de. In such a case, communication cannot be continued. Scope of the processing of personal data We use your address to send postal advertising (postal advertising). Purpose of data processing We use postal advertising to maintain contact with existing customers, but also to acquire new customers. Legal basis for the processing of personal data The legal basis for postal advertising is our legitimate interest pursuant to Art. 6(1)(f) GDPR. For existing customers, the legal basis for postal advertising is our legitimate interest pursuant to Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG, which permits direct marketing to existing customers without prior consent where the communication relates to similar products or services. For prospective customers, postal advertising is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may object to postal advertising at any time by contacting datenschutz@heyjobs.de. Duration of storage Your address will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to postal advertising, your data will be deleted unless we have other legally permissible reasons for storing your personal data; in the latter case, deletion will take place after these reasons no longer apply. Termination of data processing You may object to the processing of your personal data for postal advertising purposes at any time by contacting us at datenschutz@heyjobs.de. Following receipt of your objection, we will cease processing your data for this purpose without delay. We use web analysis tools to evaluate visitor behaviour on our website and platform in order to improve our services, content, and user experience. All providers in this section act as processors under Data Processing Agreements pursuant to Art. 28 GDPR. Where providers are located outside the EU/EEA, data transfers are protected by EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Google Analytics We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Scope of data processing The following personal data is processed: IP address (anonymised — truncated within the EU/EEA prior to transmission) Date and time of visit Browser type, version, and operating system Pages visited and time spent Referrer URL Purpose of data processing To analyse website usage and user behaviour in order to improve the performance and content of our website. Legal basis Art. 6(1)(a) GDPR — your consent, obtained via our cookie settings. Duration of storage Data is retained for as long as necessary for the stated purpose and deleted thereafter in accordance with Google’s standard retention periods. Termination of data processing You may withdraw your consent at any time via the cookie settings (Talent Website and Employer Website). You may also prevent data collection by installing the Google Analytics opt-out browser plug-in: https://tools.google.com/dlpage/gaoptout. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal. Further information: https://policies.google.com/privacy We also use additional analytics and feedback tools on our website and platform. For in-product feedback surveys, we use an in-app survey and feedback provider; session recording features are not active. For A/B testing and feature experiments, we use an experimentation platform that processes pseudonymous session identifiers. For product and website surveys, we use a further survey and feedback provider that processes survey responses. The legal basis for each of these processing activities is your consent pursuant to Art. 6(1)(a) GDPR. So-called remarketing tools are used on our website. With the help of these tools, we can display or have displayed individual job advertisements on our websites that are selected on the basis of the visitor’s preferences. Technically, advertising tracking is usually carried out via advertising IDs, in which user profiles are created by the providers of advertising networks using cookies, among other things, and the advertisement is displayed on the basis of the cookie profile when a website is accessed. Such remarketing offers can be used to display individual job advertisements to a user. In many cases, tracking is also carried out via so-called browser fingerprints, in which information such as the individual setting of screen resolution, colour depth, time zone and installed plug-ins are used to recognize users or user groups. With the help of remarketing tools, we can better target our offer to our customers, visitors and interested parties. In addition, we can use user behavior to determine which areas of our website may be of particular interest to visitors in order to display targeted advertising. The legal basis for the use of the necessary cookies is Art. 6(1)(a) GDPR, which is why we also obtain your consent in advance here. The details of the providers in this processing procedure can be found in your cookie settings (Talent Website and Employer Website). The use of social media platforms with server locations in the USA means that personal data may be processed outside the EU. In order to ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data transfer to and data processing by social media operators outside the EU is carried out on the basis of suitable guarantees in accordance with Art. 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Art. 46(2)(c) GDPR. Our company presence on social networks is used for communication and information exchange with (potential) customers. The publications about the company presence may contain the following content: Information about products Information about services Competitions Advertising Customer contact Users are free to publish personal data through activities. This includes the following providers: Meta: Meta Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland – To Meta Privacy Policy Instagram: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland – To Instagram privacy policy X (formerly Twitter): X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA – To X privacy policy LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland – To LinkedIn privacy policy XING: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany – To Xing privacy policy YouTube: Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland – To YouTube privacy policy TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland – TikTok data protection We operate our fan pages (on Meta) in so-called joint responsibility with the social media platform. As part of the interaction via our fan page, we receive statistical data from Meta on the use of our fan pages. This includes, for example, information about interactions, likes, comments or summarized information and statistics (e.g. on the age or origin of our followers) that help us to learn something about the interactions with our page. For more information on the type and scope of these statistics, please refer to the Meta page statistics notes and the respective responsibilities in the Meta page insights supplement. The legal basis for this data processing is Art. 6(1)(f) GDPR. We have no influence on data that is processed by the provider (Meta) under its own responsibility in accordance with Meta’s own terms of use. We would like to point out that when you visit the fan page, data about your usage behavior is transferred from Meta and the fan page to Meta. Further information on this can be found in Meta’s privacy policy. Further information on data processing by Meta can be found at https://www.Meta.com/about/privacy. Responsible Responsible within the meaning of Art. 26 GDPR are Meta Ireland LTD. and HeyJobs. Details on the delimitation of responsibility can be found in the following agreement: https://www.Meta.com/legal/terms/page_controller_addendum 1. Meta Ireland Ltd. Grand Canal Square Grand Canal Harbour D2 Dublin Ireland 2. HeyJobs GmbH Paul-Lincke-Ufer 39/40 10999 Berlin Germany Data processing by Meta Meta collects tracking data about the interaction on the Meta page. The collection and provision of Insights data (https://www.Meta.com/business/a/page/page-insights) is the responsibility of Meta. Meta is responsible for fulfilling the rights under the GDPR. As the fan page operator, HeyJobs GmbH has no influence on the collection and provision of this data. The associated personal data processing takes place exclusively at Meta. The type and scope of the information you provide to Meta, the associated purposes of the data processing, its lawfulness and information on exercising your rights can be found in the Data Policy, as well as other information provided by Meta on the processing of “Insights Data”. The Data Policy is available at https://www.Meta.com/policy.php. Your rights to information, correction, deletion, restriction of processing and data portability of your stored data must be asserted against Meta. You can contact Meta’s data protection officer at https://www.Meta.com/help/contact/540977946302970. Data processing by HeyJobs HeyJobs uses the Meta corporate website to provide content and communicate with Meta users. We receive statistical data from Meta about visitors to our Meta pages via the “Insights” function (https://www.Meta.com/business/a/page/page-insights) and use the anonymized data provided on the basis of Art. 6(1)(f) GDPR. With the help of this function, we can better analyze our pages and adapt them to the needs and interests of our visitors. A copy of this privacy policy can be requested at any time via datenschutz@heyjobs.de or by post to the address given under point 2. Version: 2.1.0 HeyJobs About us Career ATS interface Customers recruit customers Recruiting Blog For employers Post a job ad Find employees Select job exchange Recruiter Portal Login January boom 2025 For employees Find jobs Full-time jobs Career changer jobs Trainee jobs Home Office Jobs Service Imprint General terms and conditions for companies Privacy policy Compliance & Security Cookie settings Your HeyJobs- Business customer team +49 30 30 80 95 50 © 2026 HeyJobs x Helfen Sie uns dabei, Sie optimal zu beraten In welchem Land ist Ihr Unternehmen registriert? Wie viele Mitarbeitende hat Ihr Unternehmen? 1-10 Mitarbeitende 10-250 Mitarbeitende 250+ Mitarbeitende Warum fragen wir das ab? Ihre Unternehmensgröße hat Auswirkungen auf die richtige Recruiting-Strategie. Deswegen wollen wir Ihnen anhand Ihrer Unternehmensgröße das optimale Beratungsangebot zeigen. x