Convenience Translation

Privacy Notice pursuant to Art. 13 GDPR for Applicants
With this information, we would like to inform you about the processing of your personal data in the context of the application process. We process your personal data in strict compliance with labor and data protection regulations. This includes the data you provide during the application process, in particular: name, address, date of birth, CV, photo, email address, phone number, and qualification certificates.

1. Controller for Data Processing and Data Protection Officer Contact
Getsafe GmbH
Waldhofer Straße 102
69123 Heidelberg
Germany
people@hellogetsafe.com

Data Protection Officer:
xDSB Datenschutz
datenschutzanfragen@xdsb.de
+49 721 828 0350

2. Purposes and Legal Basis for Processing Personal Data
We process personal data in compliance with data protection laws, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

a) In the context of fulfilling a contract or pre-contractual measures (Art. 6(1)(b) GDPR), in particular regarding the employment relationship (§ 26 BDSG)

The legal basis for processing is the necessity of processing data for pre-contractual measures or to initiate a contract (Art. 6(1)(b) GDPR, § 26 BDSG).

b) Based on consent (Art. 6(1)(a) GDPR)
You also have the option to give your consent for processing your data for purposes not required for the handling of your application for a specific position. This particularly includes:

In case of rejection, to consider you for future positions, or
To consider your application for affiliated companies.

This consent is voluntary. You may refuse it without consequences and can withdraw it at any time with effect for the future.

3. Recipients of Personal Data
Access to your data is only granted to roles that need to work with your data (“need-to-know principle”), i.e., access to fulfill contractual or legal obligations. Data will only be shared with third parties with your explicit consent or as part of pre-contractual measures.

4. Transfer of Data to Third Countries or International Organizations
Data will generally not be transferred to countries outside the European Union (third countries).

In certain situations, we may use service providers that may have their headquarters in a third country or use other service providers located in a third country.

A transfer to a third country is permitted under Art. 45 GDPR if the European Commission has decided that the third country provides an adequate level of protection. If no such decision exists, a transfer is permitted if the controller has provided appropriate safeguards (e.g., Standard Contractual Clauses issued by the European Commission) and enforceable rights and effective legal remedies are available to the data subject (Art. 46 GDPR).

We generally only work with third-country entities that meet these criteria.

5. Data Retention Period
We process and store your personal data as long as it is necessary for the purpose of initiating a contract. If storing personal data is no longer necessary for this purpose, the data will be deleted unless there are legal retention obligations, particularly for the preservation of evidence under statutory limitation periods, or you have given your explicit consent for continued storage.

6. Data Subject Rights
You have the following rights regarding your personal data:

Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to processing
Right to data portability

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

If you have given us consent (Art. 6(1)(a) GDPR), you can withdraw it at any time with effect for the future.

If the processing of your personal data is based on a legitimate interest (Art. 6(1)(f) GDPR), you can object to the processing. If you exercise this right, please provide reasons why your personal data should not be processed as we have done. If your objection is justified, we will either stop or adjust the processing or explain our compelling legitimate grounds for continuing the processing.

7. Obligation to Provide Data
You must provide the personal data required for initiating the employment relationship and related pre-contractual obligations. Without providing these data, we will not be able to enter into a contract with you.

8. Automated Decision-Making or Profiling
No automated decision-making or profiling takes place.

Strategy & Operations Praktikant (m/f/d)