1. responsible person

indivHR GmbH (hereinafter referred to as "we", "us" or "indivHR") takes the protection of your personal data very seriously. We process your data exclusively in accordance with the General Data Protection Regulation (GDPR) and the applicable national data protection laws.

This data protection declaration informs you about the processing of your personal data within the scope of:

• the recruitment process via our applicant management system (e.g. Teamtailor),

• of sourcing activities by our recruiting team,

• and when using forms on our website, e.g. to request PDF documents (lead magnets).

2. processing of personal data

2.1 Application process (Teamtailor)

If you apply to indivHR via our application portal, we process the data you provide, such as

• Contact details (e.g. name, e-mail address, telephone number)

• Curriculum vitae, certificates, letter of motivation

• Information from public sources such as LinkedIn or GitHub

• Communication content via our applicant platform

Legal basis:
Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures)

Storage:
We store your data indefinitely for the purpose of filling current and future positions. We will obtain your active consent for further storage at least once a year. We will automatically delete your data after 30 days if you do not respond.

2.2 Sourcing & pre-qualification

As part of our recruiting activities, we process publicly accessible data from potential candidates, e.g. from LinkedIn, GitHub or Stack Overflow.

Legal basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest in the identification of skilled workers)

2.3 Dispatch of information material (e.g. PDF guides on forms)

If you request information material (e.g. our GitHub Sourcing Guide) via a form on our website, we process your e-mail address exclusively for the purpose of sending the requested document. It will not be processed for any other purpose.

Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)

Processors:
Technical processing is handled by Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin).
There is an order processing contract with Brevo in accordance with Art. 28 GDPR. Brevo stores data exclusively within the EU.

You can revoke your consent at any time, e.g. by e-mail to kontakt@indivhr.com.

2.4 Use of AI-supported tools

As part of our internal processes, we use AI-based analysis tools to support our content. However, this is done No automated decision-making within the meaning of Art. 22 GDPR.
The final decision on applications and recommendations is made exclusively by our employees.

2.5 Disclosure to third parties

We only pass on your personal data to:

• Applicant management systems (e.g. Teamtailor)

• Technical service providers (e.g. hosting, form processing)

• Customers to whom we refer you after consultation

• Authorities, courts or external consultants, if legally required

Data is only transferred to third countries in compliance with the provisions of Art. 44 et seq. GDPR.

3. your rights as a data subject

You have the right to:

• Information about your stored data (Art. 15 GDPR)

• Correction incorrect data (Art. 16 GDPR)

• Cancellation Your data (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Contradiction against data processing (Art. 21 GDPR)

• Revocation of your consent (Art. 7 para. 3 GDPR)

• Complaint to the supervisory authority (Art. 77 GDPR)

Please address your enquiries to:
📧 kontakt@indivhr.com

4. data security

We use suitable technical and organisational measures to protect your data from loss, unauthorised access or manipulation. Data transmission on the Internet (e.g. via forms) is encrypted, but can never be completely risk-free.

5. topicality and changes to this privacy policy

This privacy policy is currently valid (status: May 2025).
We reserve the right to update them in the event of legal or technical changes. You can find the current version at any time at www.indivhr.com/datenschutzerklaerung.