Information obligation pursuant to Art. 13, 14 and 21 EU GDPR

Dear applicants, in accordance with the requirements of Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your related data protection rights. Which data are processed in detail and in what way they are used depends primarily on the services requested or agreed.

Data protection at a glance

Contact details of the controller:

everbay GmbH
Tassiloplatz 27, 81541 München

Managing Director:
Kay Ackermann
Tassiloplatz 27, 81541 München E-mail: kontakt@everbay.de

Managing Director:
Matthias Oden
Tassiloplatz 27, 81541 München E-mail: kontakt@everbay.de


Explanations of data categories

No personal data

Image recordings

Films, photographs, video recordings, digital photos.

Professional activities

Nature of the activities, goods or services used or provided by the data subject, business contacts.

Professional experience

Professional interests, research interests, study interests, specialization topics, teaching experience, consulting.

Educational background

Chronology of schools, institutions and universities attended, type of courses attended, diplomas obtained, examination results, other diplomas received, assessments of study progress.

Professional qualifications

Professional degrees and training, special licenses (pilots, ...).

Personal identification data

Name, title, (private and professional) address, previous addresses, (private, professional) telephone number, identification numbers assigned by the controller.

Personal details

Age, gender, date of birth, place of birth, marital status and nationality.

Professional assessment

Assessment of performance, potential.


General information on the purpose and legal basis of processing

Performance of a contract (Art. 6 (1) lit. b) GDPR

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for establishing, performing or fulfilling a contract and for taking pre-contractual measures. Where personal data are required for initiating or performing a contractual relationship or as part of pre-contractual measures, processing is lawful pursuant to Art. 6 (1) lit. b GDPR.

Consent (Art. 6 (1) lit. a) GDPR

If you give us express consent to process personal data for specific purposes (e.g. disclosure to third parties, analysis for marketing purposes or promotional contact by e-mail), the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Consent given may be withdrawn at any time with effect for the future.

Balancing of legitimate interests Art. 6 (1) sentence 1 lit. f)

Where necessary and legally permitted, we process your data beyond the actual contractual purposes to fulfil legal obligations pursuant to Art. 6 (1) lit. c GDPR. In addition, processing may take place to safeguard legitimate interests of ours or of third parties and to defend and assert legal claims pursuant to Art. 6 (1) lit. f GDPR. Where required by law, we will inform you separately of the legitimate interest concerned.


Placing job advertisements on social media

Purpose

We place job advertisements on social networks in order to generate applicants for our clients. Via the job advertisements, potential applicants are redirected to a funnel. On the social networks we cannot see which specific persons have clicked on our advertisements. Therefore, no processing of personal data takes place.

Data categories

No personal data

Legal bases

Performance of a contract (Art. 6 (1) lit. b) GDPR

Recipient categories


Collection and storage of applicant data

Purpose

Applicants who have been redirected via a social media job advertisement have the opportunity to provide the data required for the advertised position. These are classic applicant data such as language skills or qualifications. Depending on the posting, a CV may also be uploaded. These data are stored in the Perspective software.

Data categories

  • Professional activities Professional experience
  • Professional qualifications Image recordings
  • Personal details
  • Personal identification data
  • Educational background

Legal bases

Consent (Art. 6 (1) lit. a) GDPR

Recipient categories

  • Internal department

Transfer of applicant data to the client

Purpose

The collected data are then transferred via Integromat and Sendinblue to the client so that they can contact the applicant.

Data categories

  • Professional activities Professional experience
  • Professional qualifications Image recordings
  • Personal details
  • Personal identification data
  • Educational background

Legal bases

Consent (Art. 6 (1) lit. a) GDPR

Recipient categories

  • Client
  • Software manufacturer

Transfer of data to a digital Kanban board

Purpose

As an alternative to transferring applicant data by e-mail, created application profiles are transferred to a digital Kanban board. This enables better management of applications. The tool used is Meistertask by Meister Labs GmbH. This allows applications to be better organized and managed.

Data categories

  • Professional assessment
  • Professional activities
  • Professional experience Image recordings
  • Personal details
  • Personal identification data
  • Educational background

Legal bases

Consent (Art. 6 (1) lit. a) GDPR

Recipient categories

  • Software manufacturer

Contact

Purpose

Applicants are contacted using the means they have provided. This may, for example, be by e-mail, SMS, phone call or a message via a messenger.

Data categories

  • Personal identification data

Legal bases

  • Performance of a contract (Art. 6 (1) lit. b) GDPR
  • Consent (Art. 6 (1) lit. a) GDPR

Recipient categories

  • External participants
  • Internal department

Transfer to a third country

A transfer to a third country is not intended.


Duration of data storage

Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfilment of contractual purposes. This also includes, among other things, the initiation and performance of a contract.

In addition, we are subject to various retention and documentation obligations arising, among other things, from the German Commercial Code (HGB) and the Fiscal Code (AO). The retention or documentation periods prescribed therein range from two to ten years.

Finally, the storage period is also determined by the statutory limitation periods, which under Sections 195 et seq. of the German Civil Code (BGB) are generally three years, but in certain cases may be up to thirty years.


Your rights

Every data subject has the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR and the right to data portability pursuant to Art. 20 GDPR.

In addition, there is a right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you consider that the processing of your personal data is not lawful. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Where processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw consent to the use of your personal data at any time. Please note that withdrawal only takes effect for the future. Processing that took place before withdrawal is not affected. Please also note that we may be required to retain certain data for a specific period in order to fulfil legal requirements.

To exercise your rights, you can contact us using the contact details provided.


Right to object

Where the processing of your personal data is based on Art. 6 (1) lit. a GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.


Automated decision-making

Our application tool uses advanced profiling to optimize the application process. Through automated processing of data, patterns and information are analyzed.

This involves automated processing of personal data in order to evaluate and analyze certain personal aspects.

Our profiling algorithm makes it possible to efficiently analyze application documents and identify candidates with the best matches for a position.

It is important to us to point out that data protection and consent play a central role in our application tool. We strictly adhere to data protection regulations and ensure that the consent of applicants is obtained for the use of their data. In addition, applicants have the option to withdraw their consent at any time.

As of September 2025