General

We provide you with this privacy policy, which relates exclusively to the data collected in the course of the online application process, in order to inform you about how we handle your personal data collected during the application process.

Controller

The controller within the meaning of data protection law is:
The Jodel Venture GmbH
Wilhelmstraße 118
10963 Berlin

Entry in the commercial register
Registration number: 157037 B
Registration court: Berlin

Data Protection Officer:
Proliance GmbH
www.proliance.ai
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@proliance.ai

A. Data Processing in the Application Process

1. Description of Data Processing and Purpose

We process your personal data to the extent necessary to decide whether to enter into an employment relationship with us.

If you apply to us by email or via the online form, we process your personal data solely for the purpose of conducting the application process and carrying out pre-contractual measures. By submitting your application, you indicate your interest in a possible employment relationship.

We only process data that is related to your application. This includes in particular your basic personal data (e.g. name, contact details), information on education and professional qualifications, information on further training, and other data that you voluntarily provide us with as part of your application.

You also have the option of uploading meaningful documents such as a cover letter, your CV, and certificates. These may contain further personal data such as date of birth, address, etc.

Only authorised employees from the HR department or employees involved in the application process have access to your data.

The storage of personal data is generally carried out exclusively for the purpose of filling the vacant position for which you have applied.

If an employment relationship is established between you and us, we may continue to process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of employee representation under a law, collective agreement, or works or service agreement (collective agreement).

2. Legal Basis for Data Processing

The legal basis for data processing is Art. 88 GDPR in conjunction with § 26 para. 1 BDSG, or Art. 6 para. 1 sentence 1 lit. b GDPR for the purposes of the employment relationship, if this is necessary for the decision to establish an employment relationship.

If you give us your explicit consent to the processing of personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to § 26 para. 2 BDSG, insofar as German law applies, or pursuant to Art. 6 para. 1 lit. a GDPR. Consent that has been given may be revoked at any time with effect for the future.

The legal basis for further processing for the purpose of establishing or terminating the employment relationship is Art. 88 GDPR in conjunction with § 26 para. 1 BDSG, insofar as German law applies, or Art. 6 para. 1 lit. b GDPR.

3. Recipients

In the context of data processing, your data is transmitted to the following categories of recipients that we use in connection with data processing to achieve the purposes mentioned above:

Service providers that provide us with personnel or applicant management systems and software.

Service providers that support us with data processing in the area of Human Resources.

Software service providers that provide us with solutions for internal and external communication, for the creation and processing of documents, and for the management of databases.

IT support and administration service providers.

These are in particular the following recipients:
Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany,
Docusign Germany GmbH, Mies-van-der-Rohe-Straße 6, 80807 Munich, Germany,
Slack Technologies Limited, Salesforce Tower 60 R801, North Dock, Dublin, Ireland,
Slack Technologies LLC, a Salesforce company, 415 Mission St, 3rd Floor, San Francisco, CA 94105, USA,
Notion Labs Inc., 548 Market Street Suite, 74567 San Francisco, CA 94104, USA,
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

4. Storage Period

We store your personal data only for as long as is necessary to reach a decision on your application. After the conclusion of the application process – for example in the event of a rejection – your personal data and application documents will be deleted no later than 6 months after that point, unless longer statutory retention periods apply or further storage is necessary for the assertion, exercise, or defence of legal claims.

If the application process results in an employment, training, or internship relationship, the data collected in the course of the application process will – to the extent necessary and permissible – continue to be stored and transferred to the personnel file.

B. Storage of Applicant Data in the Talent Pool

1. Description of Data Processing and Purpose

If you give us your explicit consent to the processing of your data, we store your application beyond a specific ongoing or completed application process in order to consider you for future application processes for other open positions in the so-called talent pool.

The purpose of the data processing is to be able to consider applicants for other potentially suitable positions for which they have not directly applied.

2. Legal Basis for Data Processing

The data processing is carried out pursuant to § 26 para. 2 BDSG, Art. 6 para. 1 lit. a GDPR on the basis of your consent. If you specify special categories of personal data within the meaning of Art. 9 GDPR in your cover letter or other documents provided by you (e.g. a photograph that reveals your ethnic origin, information about a severe disability, etc.), the consent pursuant to Art. 9 para. 2 GDPR expressly also applies to this data.

Your consent is voluntary and may be revoked at any time with effect for the future. To exercise your right of revocation, please contact us using the contact details provided above under "Controller".

3. Recipients

In the context of data processing, your data is transmitted to the following categories of recipients or recipients that we use in the context of data processing to achieve the purposes mentioned above:

Service providers that provide us with personnel or applicant management systems and software

Service providers that support us with data processing in the area of Human Resources

Software service providers that provide us with solutions for internal and external communication, for the creation and processing of documents, and for the management of databases

IT support and administration service providers.

These are in particular the following recipients:Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany,
Docusign Germany GmbH, Mies-van-der-Rohe-Straße 6, 80807 Munich, Germany,
Slack Technologies Limited, Salesforce Tower 60 R801, North Dock, Dublin, Ireland,
Slack Technologies LLC, a Salesforce company, 415 Mission St, 3rd Floor, San Francisco, CA 94105, USA,
Notion Labs Inc., 548 Market Street Suite, 74567 San Francisco, CA 94104, USA,
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

4. Storage Period

We process the collected data for a period of 12 months. After that, we delete your data from our operational systems, unless the data processing is still permissible for another purpose mentioned in this statement and on a corresponding legal basis.

C. Processing of Applicant Data on Our Careers Website

Our careers website is provided by the provider of our HR software. For further information on the independent data processing by the operator of our recruiting page, please refer to the section below "Processing of (personal) data by the operator of the recruiting page".

D. Data Processing in Third Countries

Your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA).

For data transfers to certain third countries, an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR may exist. Such a decision establishes that an adequate level of data protection exists in the third country. A list of previous adequacy decisions can be found at the following link: Data protection adequacy for non-EU countries.

The scope of an adequacy decision may also be limited to a specific group of recipients or subject to the existence of further conditions.

For example, the adequacy decision for data transfers to the USA only applies to companies that are certified under the EU-US Data Privacy Framework. The certification status of a participating company can be viewed at the following link: Participant search (dataprivacyframework.gov).

If your data is transferred to recipients in third countries for which no adequacy decision exists, there is a risk that local authorities may access your data for security and surveillance purposes without you being informed or being able to take legal action.

In order to ensure an adequate level of data protection when transferring your data to recipients in such third countries, we therefore ensure that appropriate safeguards within the meaning of Art. 46 GDPR are in place.

Standard contractual clauses of the European Commission pursuant to Art. 46 para. 2 lit. c GDPR are therefore regularly concluded either by us or by the service providers we use. They oblige the recipient of the data in the third country to process it in accordance with the European level of protection. The clauses can be viewed at the following link: Publications on Standard Contractual Clauses (SCCs) – European Commission. Should you require further information on the modules of the standard contractual clauses or on supplementary measures that we have concluded in individual cases, we will be happy to provide you with a copy. In this case, simply contact us using the contact details provided above under "Controller".

For certain recipients, the data transfer may also be based on binding corporate rules (BCR) approved by the supervisory authorities pursuant to Art. 46 para. 2 lit. b GDPR. These can be viewed at the following link: Approved binding corporate rules | European Data Protection Board.

If the standard contractual clauses or the binding corporate rules are not sufficient to ensure the level of protection, additional technical, contractual, or organisational measures are taken to secure the data transfer. In addition, regular reviews and assessments are carried out to determine whether these additional measures continue to ensure an adequate level of data protection or whether further supplementary measures are required.

For data transfers to the USA, an adequacy decision of the EU Commission exists with regard to companies that are certified under the EU-US Data Privacy Framework. Slack Technologies LLC (via Salesforce), Notion Labs, Inc. and Google LLC are certified under the EU-US Data Privacy Framework.

E. Assertion or Defence of Legal Claims

Furthermore, we process your data in individual cases for the purpose and in the interest of asserting legal claims, for example to enforce our claims arising from unpaid invoices, insofar as your data is relevant to a legal dispute.

Furthermore, we process your data in individual cases for the purpose and in the interest of defending against legal claims asserted against us, for example in the case of claims arising from liability for defects, insofar as your data is relevant to a legal dispute.

1. Legal Basis for Data Processing

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.

2. Recipients

In the context of data processing, your data is transmitted to the following categories of recipients or recipients that we use in the context of data processing to achieve the aforementioned purposes:
Tax advisors,
Auditors,
Financial or investigative authorities,
Lawyers,
Experts,
Courts.

3. Storage Period

We store your data in individual cases for as long as is necessary to achieve the above-mentioned purpose. Thereafter, we delete your data, unless the data processing, possibly also in other systems, is still permissible on another legal basis or is mandatory for us (e.g. in the case of statutory retention obligations).

F. Your Rights

Below you will find information on the rights that applicable data protection law grants you against the controller with regard to the processing of your personal data:

a) Right of Access

You have the right to request information about your personal data processed by us pursuant to Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details.

b) Right to Rectification

You have the right to request the immediate rectification of inaccurate or incomplete personal data stored by us pursuant to Art. 16 GDPR.

c) Right to Erasure

You have the right to request the erasure of your personal data stored by us pursuant to Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defence of legal claims.

d) Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR, unless the accuracy of the data is contested by you, the processing is unlawful, you refuse its erasure and we no longer need the data, but you require it for the assertion, exercise, or defence of legal claims, or you have lodged an objection to the processing pursuant to Art. 21 GDPR.

e) Right to Data Portability

Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller.

f) Right of Revocation

You have the right to revoke your consent pursuant to Art. 7 para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.

g) Right to Object to Data Processing Based on Legitimate Interests

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, insofar as this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without having to specify a particular situation.

If you wish to exercise your right of revocation or objection, please contact us using the contact details provided above under "Controller".

h) Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which our registered office is located, as mentioned above, or, where applicable, the supervisory authority of your habitual place of residence or place of work. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.

i) Right to Judicial Review

If you assert your rights under the GDPR against us and we cannot or do not implement one of these rights, you have the right to request judicial review pursuant to Art. 79 GDPR.

G. Final Provisions

We reserve the right to adapt this privacy policy at any time so that it always complies with current legal requirements or in order to reflect changes to the application process or similar matters. For a renewed visit to this recruiting page or a new application, the new privacy policy will then apply.

In addition to this privacy policy, you can view our general privacy policy at https://jodel.com/privacy/.

Status of the Privacy Policy
This privacy policy was last updated on 30.04.2026.

Open Application

Your application at Jodel!

Documents