Processing of Personal Data by the Data Controller Responsible for the Online Application Process

General Information

We are providing you with this Privacy Policy, which applies exclusively to data collected as part of the online application process, to inform you about how we handle the personal data we collect from you during the application process.  

Data Controller

octonomy AI GmbH
Hansaring 61
50670 Cologne
Germany

Registration in the Commercial Register:
Registration number: HRB119283
Court of Registration: Cologne

Data Protection Officer:dpo@octonomy.ai

Personal Data in the Context of the Application Process

Personal data refers to information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as your name, address, phone number, and date of birth, as well as details about your specific career history, etc., which can be reasonably linked to a specific person. Information that is  not (directly or indirectly) linked to your actual identity, however, is not considered personal data.  

Legal Basis and Purposes for Processing Personal Data in Job Applications and during the Application Process

If you apply to us electronically – that is, via email or through our web form – we will collect and process your personal data for the purpose of handling the application process and carrying out pre-contractual measures.
The legal basis for this is Art. 6(1)(b) of the GDPR (conducting the application process as a pre-contractual or contractual measure). Providing the information marked as required fields is necessary for the conduct of the application process; without this information, we cannot consider your application. To the extent that you voluntarily provide us with special categories of personal data (such as information regarding a severe disability or health data), we will process this data exclusively to the extent permitted under Art. 9(2) of the GDPR. If processing is based on your consent, the legal basis is Art. 6(1)(a) of the GDPR; to the extent that we process data to assert, exercise, or defend legal claims (such as under the AGG), we base this on Art. 6(1)(f) of the GDPR.

By submitting an application on our recruiting page, you are expressing your interest in seeking employment with us. In this context, you provide us with personal data, which we use and store exclusively for the purpose of your job search or application.
In particular, the following data is collected:

Name (first and last name)
Email address
Phone number
Salary expectation
Starting date
LinkedIn profile (optional)
Channel through which you learned about us (optional)
Github profile (optional)

You also have the option to upload relevant documents such as a cover letter, your resume, and certificates containing additional personal information.
Only authorized employees from Human Resources or those involved in the application process have access to your data.
Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.
Your data will be stored for a period of 6 months following the conclusion of the application process. This is generally done to fulfill legal obligations or to defend against any claims arising from legal regulations. We will then delete your data. In this case, the data will only be available to us as so-called metadata – without any direct personal reference – for statistical analysis (for example, the proportion of female versus male applicants, the number of applications per time period, etc.).
In addition, we offer you the option to have your data stored in our “Talent Pool” for 12 months after the application process ends, in order to identify any other positions that may be of interest to you. This also applies, for example, to applications for an apprenticeship or internship.

Inclusion in our Talent Pool is based exclusively on your separate, voluntary consent (Art. 6(1)(a) GDPR), which we will obtain from you prior to inclusion. You may revoke this consent at any time with future effect; in the event of revocation, as well as upon expiration of the specified retention period, we will delete your data stored in the Talent Pool. If you do not give your consent, this will not result in any disadvantages for you.
If, as part of the application process, you receive and accept an offer of employment from us, we will store the personal data collected during the application process for at least the duration of the employment relationship.  

Disclosure of Data to Third Parties

The data you submit as part of your application is transmitted using TLS encryption and stored in a database. This database is operated by Personio GmbH, which provides human resources and applicant tracking software (https://www.personio.com/legal-notice/). In this context, Personio is our data processor pursuant to Art. 28 of the GDPR. The legal basis for this processing is a data processing agreement between us, as the data controller, and Personio.  

Use of External Service Providers in the Application Process

In addition to Personio, we sometimes use other external service providers to carry out and support the application process (such as specialized recruitment agencies that assist us with hiring). To the extent that these service providers process personal data on our behalf, we select them carefully and bind them to our requirements through a data processing agreement pursuant to Art. 28 of the GDPR; they process your data exclusively in accordance with our instructions and for the purposes specified in this Privacy Policy. To the extent that services are used that involve the transfer of personal data to a third country outside the EU or the EEA (in particular to the U.S.), such transfers take place only if an adequacy decision by the European Commission (such as the EU-U.S. Data Privacy Framework) is in place or if appropriate safeguards within the meaning of Art. 46 of the GDPR (in particular standard contractual clauses) exist. If we receive your data from such service providers or from publicly accessible professional networks, we process it for the same purposes as data collected directly from you.

Recording and Transcription of Conversations

If conversations (such as video or telephone interviews) are recorded or transcribed as part of the selection process, this is done exclusively on the basis of your prior, separate, and voluntary consent (Art. 6(1)(a) of the GDPR). We will inform you of this before the recording begins. You may refuse to give your consent and may withdraw it at any time with future effect without this resulting in any disadvantage to you in the application process.

Automated Decision-Making

No decision within the meaning of Art. 22 of the GDPR based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you will be made during the application process.

Data Subject Rights

To the extent that we, as the data controller, process personal data, you, as the data subject, have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing; these may include, in particular, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object (Art. 21 GDPR). If the processing of personal data is based on your consent, you have the right to withdraw this consent under Art. 7(3) GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR).
To exercise your rights as a data subject with regard to the data processed in this online application process, please contact our Data Protection Officer (see Section 2).  

Final Provisions

We reserve the right to amend this Privacy Policy at any time to ensure it always complies with current legal requirements or to reflect changes to the application process or similar matters. The new Privacy Policy will then apply to any subsequent visit to this recruiting page or any subsequent application.
In addition to this privacy policy, you can view our general privacy policy at Privacy - octonomy. Additional information regarding data processing by the operator of the recruiting page (Personio) can be found in the section below.

Talent Acquisition Manager (m/w/d)

Your application!

Documents