Job Applicant Privacy Policy

Job Applicant Privacy Policy

Taxdoo GmbH, with its registered office located at Alter Wandrahm 13, 20457 ,Hamburg, Germany (“Taxdoo”, “us” or “we”) is committed to protecting your privacy. This policy explains how Taxdoo will:

  1. handle, process and store all personal information that you provide during the online application process;
  2. the legal basis for collecting your personal information; and
  3. your rights as a data subject.

Data Controller

Taxdoo, is the Data Controller, as defined by the EU 2016/679 General Data Protection Regulation (GDPR), for the purposes of collecting your personal data regarding your application and related documents.

 

Voluntary Consent

All personal data provided by you, regarding your personal information, is freely given. By ticking the “Submit Application” checkbox at the end of the registration form, you confirm that you have read, understood and consent to how we process and store your data.

 

Purpose of Processing

The purpose for processing your personal data is to manage your application and to match your data with the requirements of available career opportunities at Taxdoo.

If you have provided specific consent, we may share additional information regarding future career opportunities at Taxdoo, or we may request that you take part in anonymous surveys. Your participation in any survey is separate from the application process, and your participation will have no consequence on your application.

Taxdoo will not sell, rent, trade, share or otherwise disclose any personal data you provide to any third party, save for our sub-processors (see below). Access rights are only granted to the Taxdoo People Team or relevant individuals involved in the recruiting process. Such individuals are legally bound to privacy and confidentiality.

 

Third-party access to your data

To facilitate our internal recruitment process, we use third-party software and service providers who may have access to your personal data. Such third parties may be based outside the European Economic Area (EEA) and in such cases, we will not transfer your personal data without ensuring that adequate security measures are in place. All third parties who may have access to your data will be bound to GDPR-compliant Data Processing Agreements and will only process our data under our strict instructions. Our current provider is Greenhouse, you can access their privacy policy here.

 

Tracking

If you are directed to our job application site though third-party platforms such as LinkedIn or Xing, tracking information is transferred to us through cookies.

 

Electronic Signatures

During the application process, you may be asked to sign certain documents electronically before signing the employment contract. Although such signatures are not your original signature, such electronic signatures are legally recognized. Please note that we use DocuSign to process electronic signatures, and you can find their privacy policy here.

 

Retention period

If you do not withdraw your application or inform Taxdoo that you are no longer interested in the position applied for, we will keep your application data for a period of 6 (six) months. On expiry of this period, your data will be automatically deleted. You may, however, provide us with your consent to be contacted for future employment opportunities at Taxdoo, in which case, your application data will be retained for a period of up to 1 (one) year. If you are successful in the application process, your personal data will be transferred to the employee personal file.

 

Data Subject Rights

As a Data Subject, the GDPR grants you certain rights, which include:

  • Right of access (Art. 15 GDPR)
    You are entitled to request information regarding what personal data we have stored, for how long and for what purpose. You may also receive information regarding who has or to whom your data will be disclosed.
  • Right to rectification (Art. 16 GDPR)
    You are entitled to request that your personal data be corrected when an inaccuracy is found.
  • Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
    If you want to withdraw your application with us or if one of the grounds laid out in Art. 17 para. 1 GDPR is applicable, and no exclusions apply, you may have your data erased.
  • Right to restriction of processing, (Art. 18 GDPR)
    If one of the conditions set out in Art. 18 GDPR applies, you may restrict the processing of your data to mere storage.
  • Right to data portability, (Art. 20 GDPR)
    You may receive a copy of your personal data or possibly have your data transferred from one Data Controller to another.

To enforce your rights, please contact us at: privacy@taxdoo.com

 

Data Requests or Complaints

If you have any concerns regarding how your data is collected, processed or stored by Taxdoo, please contact us at: privacy@taxdoo.com and specify “Taxdoo Applicant” in the email subject line.

You may also file a complaint with the supervisory authority, if you believe that Taxdoo’s data processing infringes on the rights in terms of the GDPR. You may lodge your complaint at:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig Erhard Strasse 22, 7. OG
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de