Data Protection Information for Applicants

Information on data protection regarding our processing of applicant data according to Art. 13, 14, and 21 of the General Data Protection Regulation (GDPR)

Dear Applicant,

We are pleased about your interest in our company. In accordance with the provisions of Art. 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you have provided during the application process, as well as any data we may have collected from you, and your related rights. To ensure that you are fully informed about the processing of your personal data in the context of the application process, please take note of the following information:

1. DATA CONTROLLER ACCORDING TO DATA PROTECTION LAW: WeAreDevelopers GmbH Liechtensteinstraße 111-115, 1090 Vienna WeAreDevelopers Germany GmbH Wattstrasse 11, 13355 Berlin www.wearedevelopers.com

2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER: WeAreDevelopers GmbH Sead Ahmetovic Liechtensteinstraße 111-115, 1090 Vienna privacy@wearedevelopers.com

3. PURPOSES AND LEGAL BASIS FOR PROCESSING: We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for Germany or the Data Protection Act (DSG) for Austria, to the extent necessary for deciding on the establishment of an employment relationship with us.

   The legal basis for this is Art. 88 GDPR in conjunction with the respective national law (for DE or AT) for employment purposes when the decision on the establishment of an employment relationship is necessary. Furthermore, we may process your personal data if this is necessary to fulfill legal obligations (Art. 6 (1) lit. c GDPR) or to defend against legal claims (Art. 6 (1) lit. f GDPR). The legitimate interest in this case is, for example, the obligation to provide evidence in a proceeding under the General Equal Treatment Act (AGG). If you grant us explicit consent to process personal data for specific purposes, the lawfulness of such processing is based on your consent under Art. 6 (1) lit. a GDPR. Any consent given can be revoked at any time with effect for the future (see Section 9 of this data protection information). If an employment relationship is established between you and us, we may further process the personal data already received from you for employment purposes, in accordance with Art. 88 GDPR in conjunction with the respective national law, to the extent necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of rights and obligations arising from a law or a collective agreement (for AT) of the employee representation.

4. CATEGORIES OF PERSONAL DATA: We only process data that is relevant to your application. This may include general information about you (name, address, contact details, etc.), details of your professional qualifications and education, details of professional development, and any other data you provide to us in connection with your application.

5. SOURCES OF DATA: Most of your personal data comes directly from you. We also collect personal data about you as part of the application process (e.g., during interviews or job evaluations). Additionally, we use information that applicants make publicly available on job and career portals (e.g., LinkedIn).

6. RECIPIENTS OF DATA: We only disclose your personal data within our company to the departments and individuals who require such data for fulfilling contractual and legal obligations or for pursuing our legitimate interests. We may transmit your personal data to affiliated companies to the extent permitted by the purposes and legal bases outlined in Section 3 of this data protection information. The categories of recipients in such cases include internet service providers and providers of applicant management systems and software. Data transfer to recipients outside the company will only occur where permitted or required by law, for the fulfillment of legal obligations, or with your consent.

   In the context of the application process, we use Recruitee (www.recruitee.com), HR software developed by Recruitee B.V., Keizersgracht 313, 1016 E Amsterdam. For this purpose, we have concluded a data processing agreement according to Art. 28 GDPR to ensure that your data is processed strictly in accordance with our instructions and protected according to the highest security standards. Recruitee may use cookies. Please refer to https://recruitee.com/de/privacy-policy#7 for all information on cookies related to Recruitee.

   Your personal data may also be processed by LinkedIn and Indeed to offer the functionalities "Apply with LinkedIn" and "Apply with Indeed." LinkedIn and Indeed may use cookies. You can find their respective privacy policies on the following websites: www.indeed.com/legalwww.linkedin.com/legal/privacy-policy

7. TRANSFER TO A THIRD COUNTRY: Transfer to a third country is not intended.

8. DATA RETENTION PERIOD: We will store your personal data for as long as necessary to decide on your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g., notification of rejection decision), unless a longer retention period is required or permitted by law. Furthermore, we will only store your personal data to the extent necessary and permissible by law or in specific cases for the assertion, exercise, or defense of legal claims for the duration of a legal dispute. If you have given consent for longer storage of your personal data, we will store it according to your consent declaration. If an employment, training, or internship relationship is established following the application process, your data will be initially stored to the extent necessary and permissible, and then transferred to the personnel file. If you receive an invitation to join our talent pool following the application process, we will store your application data in our talent pool based on your consent or any future consents.

9. NECESSITY OF PROVIDING PERSONAL DATA: The provision of your personal data in the context of application processes is voluntary. However, we can only make a decision regarding the establishment of an employment relationship or establish such a relationship with you if you provide personal data that is necessary for the application process.

10. AUTOMATED DECISION-MAKING: The decision regarding your application is not based solely on automated processing. Therefore, no automated individual decision-making as referred to in Art. 22 GDPR takes place. We process personal data that we receive from you in the context of contact or your application, as well as data that you transmit to us through our career website or other external providers.

11. YOUR RIGHTS: Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR, and the right to data portability under Art. 20 GDPR. Furthermore, there is a right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR if you believe that the processing of your personal data is not lawful. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy. If the processing of data is based on your consent under Art. 6 (1) lit. a GDPR, you have the right to revoke the consent for the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation will only take effect for the future. Processing that occurred before the revocation is not affected. Please also note that we may be required to retain certain data for a certain period of time to comply with legal requirements (see Section 8 of this data protection information).

RIGHT TO OBJECT: To the extent that the processing of your personal data is based on Art. 6 (1) lit. f GDPR for the purpose of safeguarding legitimate interests, you have the right, under Art. 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. In such a case, we will no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims. To exercise your rights, please contact us using the contact details provided in Section 1 or 2.