Skip to content

Privacy Policy

Data processing in the context of our application/ recruitment process –

We take the protection of your personal data seriously and we would like to inform you about the processing of your personal data according to Art. 13, 14 of the General Data Protection Regulation (hereinafter: GDPR).

I. Name and contact details of the controller 

Controller of the data processing is:

UP42 GmbH

Ohlauer Str.43

10999 Berlin

You can contact our recruitment team : (

II. Contact details of the data protection officer

The contact details of the data protection officer are:

ISiCO Datenschutz GmbH

Am Hamburger Bahnhof 4, 10557 Berlin

III.Data, scope, purposes, legal basis of data processing and storage duration 

In the following, we would like to give you an overview of the data which we process, the purpose and legal basis of data processing and the storage duration:

1.Data: We process your full name, email address, phone number, picture, CV, cover letter, résumé statuses, notes, planning related to your job application, certificates, LinkedIn profile, Indeed profile, email communication, which job you have applied for and further information which you provided with your application.

2. Purpose of processing: 

a. The purpose of the processing of the above mentioned data is for recruitment purposes and for performing the application process.

b. The purpose for storing your data for 360 days is also for recruitment purposes and for the possibility to contact you in case a position becomes available that fits your profile.

3. Legal basis of data processing: 

a. The legal basis for the data processing is your Art. 88 GDPR, Section 26 para. 1 sentence 1 of the Federal Data Protection Act.

b. The legal basis for the data processing is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

4. Storage duration: We will store your personal data until the purposes of data processing are achieved and no statutory retention periods exist. In case of rejection, we will delete your data after 360 days.

IV. Categories of recipients of your personal data

We only transfer your data to certain recipients if you have given your consent or on the basis of a legal and contractual legal basis. In the present case, we transfer your data to the following recipients: 

Keizersgracht 313

1016 EE Amsterdam

The Netherlands

V. Your rights in the context of data processing 

In particular, you have the following rights on the condition that the requirements are met:

  • Right of access (Art. 15 GDPR); right to obtain from us confirmation as to whether or not personal data concerning you has been processed, and, where that is the case about which data.

  • Right to rectification of your data (Art. 16 GDPR); 

  • Right to erasure (Art. 17 GDPR); 

  • Right to restriction of the processing of your data (Art. 18 GDPR);

  • Right to data portability (Art. 20 GDPR);

In the case of data processing based on Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest), you have the right to object at any time under the conditions of Art. 21 GDPR.

In the case of data processing based on your consent, you can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.