Privacy Policy for Applicants
Information pursuant to Articles 13 and 14 GDPR
We hereby inform you in accordance with the requirements of Articles 13, 14 of the General Data Protection Regulation (GDPR) about the processing of personal data collected about you and your related data protection rights. To ensure that you are fully informed about the processing of your personal data, please take note of the following information.
1. Controller and Data Protection Officer
The controller within the meaning of the GDPR for the processing of your personal data is:
SysEleven GmbH
Boxhagener Straße 80
10245 Berlin
Telephone: 030 233 2012 0
Fax: 030 616 755 50
Email: info@syseleven.de
You can also reach our Data Protection Officer for questions or complaints regarding data protection at:
Email: datenschutz@syseleven.de
2. Processing Operations
The following explanations describe what data we process for what purpose and on what legal basis the processing is based.
2.1. Online Applications
When you apply for an advertised position with us or submit an unsolicited application, we process the following personal data from you:
- First and last name
- Email address
- German language skills
- Curriculum vitae
In addition, you may also provide us with the following personal data or documents:
- Telephone number
- Salary expectations
- Notes as free text
- Other documents such as cover letters, certificates, etc.
We process this data for the following purposes:
- Personnel selection
The legal basis for this is Article 6(1)(b) GDPR. If you have given us consent to store your data for consideration in other job postings (“talent pool”), the legal basis is Article 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future.
We store your personal data for six months from receipt of the rejection. If you have consented to longer storage, we store your data until you revoke your consent or for a maximum of two years.
2.2. Video Conferences
When we invite you to a video conference (e.g., for a job interview), we process the following personal data from you:
- Email address
- The name you enter when joining
- Image and sound when you turn on your camera and participate in the conversation
- Meeting minutes
We process this data for the following purposes:
- Conducting job interviews, among others
The legal basis for this is Article 6(1)(b) GDPR when the conversation serves to initiate a contract or use our support.
We process your data until the purpose is achieved or as long as we are obliged to do so by statutory retention periods. We do not create recordings of video conferences unless we specifically notify you.
We use Google Meet for our video conferences. Google Ireland Limited processes your data on our behalf. Google is independently responsible for processing web logs (e.g., from which IP address you participate in the meeting). Please refer to the relevant section in Google’s privacy policy: https://policies.google.com/privacy?hl=en-US#europeanrequirements
2.3. Contact Inquiries
When you contact us by email or telephone with questions about a job posting or your application, we process the following personal data from you:
- Name
- Email address
- Telephone number
- Inquiry content
We process this data for the following purposes:
- Processing and responding to your contact inquiry
The legal basis for this is Article 6(1)(b) GDPR if your contact inquiry serves to initiate a contract. In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in responding to contact inquiries in order to conclusively process feedback or reports.
We process your data until the purpose is achieved or as long as we are obliged to do so by statutory retention periods.
Insofar as we have not already provided more specific information on the following topics, the following processing principles apply:
3. Disclosure of Personal Data and Recipient Categories
We only disclose personal data to internal and external recipients beyond the cases explicitly mentioned in this privacy policy when this is necessary for the stated purposes or legally required.
Categories of recipients: Our own service providers (e.g., communication service providers, IT service providers, auditors, tax advisors, or judicial authorities), social insurance providers, and tax authorities.
4. Transfer to Third Countries
We – or in the case of commissioned processing, our service providers – generally only process personal data in countries within the EU or the European Economic Area that are subject to the scope of the GDPR. Exceptionally, personal data is transferred to other countries (so-called “third countries”) when an adequate level of data protection according to Article 44 GDPR is guaranteed, such as:
- When a so-called “adequacy decision” of the European Commission exists
- Through use of “EU Standard Contractual Clauses” or
- Through other appropriate safeguards to ensure an adequate level of data protection according to Article 46 GDPR
For example, a transfer to a third country according to Article 49(1)(1)(a) GDPR may occur if you have expressly consented to the data transfer after being informed about the possible risks of such data transfers without an adequacy decision and without appropriate safeguards.
5. Storage Duration and Deletion of Personal Data
As soon as we achieve the pursued purpose of data processing, we delete your personal data.
Beyond this, we only store data when legal exceptions and obligations exist, such as according to Article 17(3) GDPR. This is particularly significant in connection with fulfilling statutory retention obligations (Article 17(3)(b) GDPR) and with asserting, exercising, or defending legal claims (Article 17(3)(e) GDPR). Sector-specific regulations are observed.
Legal provisions for storage result particularly from the retention periods of the Commercial Code (HGB) or the Tax Code (AO). The retention period is between 6 and 10 years after completion of the process
6. Data Subject Rights
You have, in principle and where applicable, the rights listed below when we process personal data about you. If you wish to exercise any of these rights, you can contact our Data Protection Officer at any time using the contact details provided.
6.1. Right of Access according to Article 15 GDPR
You have the right to receive information from us at any time free of charge about your personal data processed by us.
6.2. Right to Rectification according to Article 16 GDPR
You have the right to demand that inaccurate personal data concerning you be rectified immediately or completed.
6.3. Right to Erasure according to Article 17 GDPR
You have the right for us to delete personal data concerning you without undue delay.
In principle, personal data is only stored for the period of purpose limitation or to fulfill statutory retention periods.
6.4. Right to Restriction of Processing according to Article 18 GDPR
You have the right to request a restriction of processing of your personal data at any time.
6.5. Right to Data Portability according to Article 20 GDPR
You have the right for us to provide you with the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.
6.6. Right to Object according to Article 21 GDPR
You have the right in various situations (processing based on the legal basis according to Article 6(1)(e) or (f) GDPR, profiling, or direct marketing) to object to the processing.
6.7. Right to Lodge a Complaint
You have the right to lodge a complaint with the supervisory authority of your choice regarding the processing.
Date: August 2025