Privacy policy

Privacy policy applicants

1. Name and contact details of Controller

Responsible party under data privacy law, Controller is Chal-Tec GmbH, Wallstr. 16, 10179 Berlin E-Mail: info@chal-tec.com Phone: +49 (0) 30 - 408 173 810 Fax: +49 (0) 30 - 408 173 505

2. Contact details of data privacy officer

Andreas Hebestreit Data privacy officer E-Mail: privacy@go-bbg.com

3. Purpose of data processing

We process the data of your application to assess the establishment of a possible employment relationship. In doing so, we process your data in order to process the application and match it with our vacancies. This involves the following categories of data:

  • Identification data (including, for example, name, address, e-mail address)
  • Applicant information, including cover letter, name, email address, mailing address, applicant questionnaires, applicant interview, education, employment history, resume and other work experience information. The provision of personal data as part of the application process is required for participation in the application process. Without providing them, we cannot assess your suitability for the advertised position and consequently cannot establish a contractual relationship with you. For processing sensitive personal information, you provided (e.g. details of disabled status, Information on marital status, information on sex life or sexual orientation, information on health, etc.) within the meaning of Art. 9 GDPR, we do need your explicit consent also including Greenhouse as part of the application management at Chal-Tec and the processing of my personal data in the USA that may be associated with this. We do not request this kind of sensitive data unless it is required in accordance with the law for the job position. In general, we do urge you to not provide this sensitive personal information and therefore to refrain from providing it. You can revoke this consent at any time to Chal-Tec GmbH by mail, e-mail or fax to the contact data mentioned above. In case of revocation, your data covered by the consent will be deleted immediately. In the event of revocation of consent and if you have provided particularly sensitive personal data within the meaning of Art. 9 GDPR, your application already submitted cannot be considered further.

Legal basis for processing the provided application data including getting in touch with you is Art. 6 Para. 1 lit. b GDPR and § 26 Federal Data Protection Act.

5. Recipients of personal data

When carrying out the communication , the communication service providers used, in particular email providers, as well as our software-service providers Greenhouse Software, Inc. 18 West 18th Street, 11th Fl., New York, NY 10011 USA as processor receives your data. As the so-called Privacy-Shield is no longer suitable transfer mechanism, we have aggreed with Greenhouse on Eu Standard Data Protection clauses pursuant to Art. 26 Para. 2 of Directive 95/46/EC for data transfers to the U.S.; as well as additional safeguards to prevent access by U.S. government authorities and thus protect your rights.

6. Duration of storage

Applications from applicants with whom no employment relationship has been established will be deleted within 6 months of receipt of the rejection notice and thus after completion of the application process. If you on request will be interested on being part of our Talent Pool, we will ask you for your explicit consent to do so. When you join our Talent Pool, your data will be stored for additional 12 months. If an employment relationship is established with the applicant, application, if required for the implementation of the employment relationship, becomes part of the personnel file and is stored for the duration of the employment relationship. If an early deletion is required please contact us at privacy@go-bbg.com.

7. Your rights

You are entitled to the following rights if the legal requirements are met:

  • Right to withdraw consent to the processing of data, once given, at any time with effect for the future (Art. 7(3) DSGVO).
  • Right to information about personal data concerning you (Art. 15 DSGVO)
  • Right to have inaccurate personal data concerning you corrected (Art. 16 DSGVO)
  • Right to erasure of personal data (Art. 17 DSGVO)
  • Right to restrict the processing of personal data (Art. 18 GDPR)
  • Right to be notified to all recipients to whom your personal data has been disclosed, insofar as rectification, erasure or restriction of data has been carried out (Art. 19 DSGVO).
  • Right to object to the processing of personal data (Art. 21 GDPR).
  • Right to data portability (Art. 20 DSGVO)

In addition you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. For Chal-Tec GmbH this is the Berlin Comissioner of Data Protection and Freedom of Information.

8. Automated decision-making including profiling

We do not use.

Declaration of explicit consent for transfer of application data to the USA

1. Purpose of data processing

In order to carry out the application process, Chal-Tec GmbH, Wallstr. 16, 10179 Berlin, E-Mail: privacy@go-bbg.com; Fax:+49 (0) 30 - 408 173 505 processes my personal data that I provide as part of the application process. This includes the following categories of data:

  • Identification data (including e.g. name, address, e-mail, emergency contact details);
  • Electronical identification data (incl. e.g. login-data);
  • Information about applicant, incl., cover letter, name, email address, mailing address, applicant questionnaires, applicant interview, education, employment history, resume, and other work experience information;
  • Photographs of applicants, if submitted; and any other personally identifiable information uploaded or submitted by the applicant through the Services.

Chal-Tec GmbH works with a software service provider to carry out the application process, Greenhouse Software, Inc. 18 West 18th Street, 11th Fl., New York, NY 10011 USA („Greenhouse“). This company processes the applicant data according to the specifications of Chal-Tec GmbH by storing the personal data on servers in the USA. To secure the data processing, Chal-Tec GmbH and Greenhouse have concluded a data processing agreement, Art. 28 of the General Data Protection Regulation. Chal-Tec GmbH remains the master of my data.

2.Adequate level of data protection, appropriate safeguards

The EU Commission has currently not determined an adequate level of data protection for the USA, Art. 45 (3) of the General Data Protection Regulation, and the so-called Privacy Shield is invalid. The General Data Protection Regulation alternatively provides for appropriate safeguards for a data transfer to a third country, Art. 46 (1) General Data Protection Regulation. Between Chal-Tec GmbH and Greenhouse, the EU standard data protection clauses according to Art. 26 (2) of Directive 95/46/EC and additional safeguards have been agreed upon to prevent access by US government authorities and thus protect my rights.

3. Possible risks

The protection of my personal data is particularly important to Chal-Tec Even though there are are still potential risks, which cannot be completely ruled out at present, despite the existing data privacy an data security measures in connection with the aforementioned No. 1. And 2. These are in particular: my personal data could possibly be processed beyond the actual purpose of application management, e.g. by a US government agency. I may not be able to sustainably enforce my rights to information against Chal-Tec and against Greenhouse.

I consent to the transfer of my personal data mentioned in No. 1 to Greenhouse as part of the application process at Chal-Tec and to the associated processing of my personal data in the USA. I am not obliged to give this consent. If the consent is not granted, however, it is not possible for me to carry out the application process with Chal-Tec. I can revoke this consent at any time to Chal-Tec by mail, e-mail, or fax to the above contact details. In the event of revocation, my data covered by the consent will be deleted with no further delay. In the event of revocation of consent, my application that has already been submitted cant be considered further.