Dear applicants, we appreciate your interest in the open job vacancies at Lightcurve GmbH. Your privacy is important to us. We would therefore like to acquaint you with how we handle the information you send and provide us with.
I. Collection, processing and use of your personal data
1. Responsible entity and data protection officer
The entity responsible for collecting, processing and using your personal data in accordance with Art. 4 no. 7 of the EU General Data Protection Regulation (hereinafter referred to as "GDPR") is Lightcurve GmbH, ℅ WeWork, Eichhornstraße 3, 10785 Berlin (hereinafter referred to as “Lightcurve” or “Data Controller”).
The data protection officer of Lightcurve is Mr. Frederic Hannesen, Köpenicker Straße 126, 10179 Berlin, and can be reached at the following e-mail address: .
2. Scope of the data collected
Submitted application documents and other data collected in the course of the application process can personally relate to you as an applicant. As such, they are considered personal data in the meaning of Art. 4 no. 1 GDPR.
In principle, you yourself decide which data you want to send us with your application. However, we would like to point out that, the lack of information about your training and your career path means that we cannot evaluate your application sufficiently with regard to an advertised position with us. Therefore, where some crucial information might be missing from your application, we would not be able to consider it.
In addition, we collect personal data from you during job interviews, which can take place as part of the progress of the application process.
We do not advise you to send us any data that is considered to be sensitive personal data in the meaning of Art. 9 GDPR, i.e. information on your racial or ethnic origin, sexual orientation, marital status, political affiliation, religion or any other beliefs, health, criminal records or a trade union membership.
3. Legal basis for the processing of personal data and their retention periods.
The collection and processing of your personal data is necessary to reach a decision leading to a potential employment relationship. The legal basis for this is § 26 Abs.1 of the Federal Data Protection Act (BDSG) in combination with Art. 6 para. 1 sentence 1 lit. b GDPR.
Under this legal basis, these data will be kept for the duration of the recruitment process.
If your application is unsuccessful, we might retain your data beyond the recruiting time frame in Lightcurve’s legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR), e.g.: defense against legal claims, for a period not exceeding 6 months.
If you voluntarily provide us with sensitive personal data as part of your application process, the legal basis for the collection and processing is Art. 9 Para. 4 GDPR, § 26 Para. 3 BDSG.
4. Sharing your data with Third Parties
In the context of evaluating your application with the aim of recruiting you, your personal data might/can/will be shared with third parties we refer to as “Processors”. This disclosure of personal data (whether by active transfer or by granting access to the data) takes place exclusively for the performance of a contract (the assessment of your application) or in steps prior to entering into one (employment contract), as in the meaning of Art. 6.1.b. GDPR.
5. Cross-border data transfers and service providers in third countries.
The processing of data in a country outside the European Economic Area (EEA) or the use of third party services or the disclosure or transfer of data to third parties will only take place if it is carried out to fulfill (pre)contractual obligations (Art. 6 para. 1 sentence 1 lit. b DSGVO). Subject to legal or contractual permissions, we process or allow the data to be processed in a third country only if the special requirements of Art. 44 et seq. of the GDPR are met.
At present, we use service providers in the USA who have undertaken to comply with the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
We also transfer data to Switzerland which was found to have an adequate level of protection for personal data under the European Commission Decision 2000/518/EC (https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:02000D0518-20161217&from=en).
If you wish to receive a complete and exhaustive list of all companies to which your personal data is transferred to, please contact our data protection officer ().
II. Your rights and storage periods
1. Your rights
Aa a data subject you have the following rights under the legal provisions:
With regard to the processing of personal data, you may request information from the Data Controller (Art. 15 GDPR), have incorrect or incomplete personal data concerning you corrected or completed (Art. 16 GDPR) and, in particular, exercise your right to erasure ("right to be forgotten") (Art. 17 GDPR). In addition, you may request that the processing be restricted (Art. 18 GDPR) and that the data be preserved and transferred to another responsible party (Art. 20 GDPR).
You may also object at any time to the future processing of the personal data relating to you pursuant to Art. 21 GDPR, for the data we have collected in our legitimate interest. Provided that it was collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and there are no compelling legitimate reasons on our part to the contrary.
If you are of the opinion that we have in any way processed your data against data protection laws, please let us know how. You can, in any case, complain to a supervisory authority (Art. 77 GDPR). The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based, which is in our case Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstraße 219, 10969 Berlin, https://www.datenschutz-berlin.de/.
2. Storage periods
If the application procedure does not lead to your recruitment, we will regularly delete and destroy your data as soon as a period of 6 months has elapsed after your or our final rejection. The legal basis for the duration of this storage is Art. 6 para. 1 lit. f GDPR (“legitimate interest”), to protect us against legal claims in regard to the applicant’s rejection.
If your application procedure leads to an employment, we will include your application document in your personnel file on the legal basis of Art. 6 para. 1 sentence 2 lit. b GDPR, § 26 para. 1 BDSG.