1. General Information
We provide you with this privacy notice, which relates exclusively to the data collected as part of the online application process, to inform you about how we handle your personal data submitted in the course of your application.

2. Personal Data within the Application Process
Personal data means any information relating to an identified or identifiable natural person. This includes details such as your name, address, telephone number, and date of birth, as well as information about your professional background and career history that can reasonably be linked to a specific individual.

Information that cannot be directly or indirectly associated with your real identity is not considered personal data.

3. Legal Basis and Purpose for Processing Personal Data in Applications
If you apply to us electronically, for example via email, LinkedIn, or other job portals, we collect and process your personal data for the purpose of managing the application process and carrying out pre-contractual measures. The legal basis for this processing is Art. 6 (1) lit. b GDPR in conjunction with Section 26 BDSG.

By submitting your application, you express your interest in entering into employment with us. In this context, you provide personal data, which we use and store exclusively for the purpose of your job application.

In particular, we collect the following data:

First and last name
Email address
Telephone number
Salary expectations
Earliest possible starting date
CV / résumé
LinkedIn profile (optional)
Information on how you became aware of us (mandatory fields in the application form)

Uploading a CV is mandatory as part of your application. You may also voluntarily upload additional meaningful documents such as a cover letter, references, or certificates. These documents may contain further personal data, such as date of birth, address, nationality, marital status, language skills, hobbies, details regarding education and professional experience, or other qualification-related information.

Access to your data is restricted to authorized employees within the HR department and employees involved in the application process (e.g., hiring managers).

Your personal data is generally stored solely for the purpose of filling the position for which you have applied.

Based on Art. 6 (1) lit. f GDPR, your data will be stored for a period of six months after the completion of the application process. This is typically done to comply with legal obligations or to defend against potential legal claims. After this period, we are required to delete or anonymize your data. In such cases, the data will only be available as anonymized metadata without direct personal reference for statistical purposes (e.g., ratio of female/male applicants, number of applications per period, etc.).

If you withdraw your application, your data will be deleted immediately.

If you explicitly consent pursuant to Art. 6 (1) lit. a GDPR, we will store your data in our “talent pool” after the application process has ended in order to identify other potentially suitable positions for you. Your data will be stored there for a period of two years.

If you receive and accept an offer of employment during the application process, the personal data collected as part of the application process will be transferred to your personnel file. This data will then be processed for the purpose of establishing, performing, and terminating the employment relationship.

After termination of the employment relationship, your data will be deleted in accordance with statutory retention obligations, unless it is required for the assertion, exercise, or defense of legal claims.

4. Transfer of Data to Third Parties
The data you submit as part of your application is transmitted using TLS encryption and stored in a database. This database is operated by Personio GmbH, a provider of HR management and applicant tracking software. Hosting takes place on servers located within the European Union.

In this context, Personio acts as our data processor pursuant to Art. 28 GDPR. The processing is based on a data processing agreement concluded between us as the controller and Personio.

5. Data Subject Rights
If we process your personal data as the controller, you are entitled—depending on the legal basis and purpose of the processing—to certain rights under Chapter III of the GDPR. These may include in particular:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time pursuant to Art. 7 (3) GDPR.

To exercise your data subject rights regarding the data processed in this application process, please contact our Data Protection Officer (see Section 2).

6. Final Provisions
We reserve the right to amend this privacy notice at any time to ensure it complies with current legal requirements or to reflect changes in the application process. In the event of a renewed visit to this recruiting page or a new application, the updated privacy notice shall apply.

Open positions

Engineering - 3 positions

Full-Stack Engineer (Human)

Senior Full-Stack Engineer (Human)

Web Support Engineer (Human)

IT - 1 position

Lead DevSecOps Engineer (Human)

Marketing & Content - 1 position

Content Administrator - Working student or Part-time (Human)