I. Name & Address of the Responsible Person

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Knowtion GmbH
Amalienbadstraße 41 Bau 52
D-76227 Karlsruhe
Deutschland

Website: www.shiratech-knowtion.com
Phone: +49 721 486 995-10
Email: team@knowtion.de

II. Legal Bases

1. Purposes and scope

We process personal data in connection with the operation of this website, handling enquiries, providing requested information materials, our email communications, scheduling appointments and recruitment procedures. We also use analytics and advertising services and external content. Details of the individual processing activities are provided in the sections below.

2. Legal bases

Depending on the purpose of the processing, the following legal bases apply in particular:

  • Article 6(1)(a) GDPR: processing based on your consent.
  • Article 6(1)(b) GDPR: processing necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
  • Article 6(1)(c) GDPR: processing necessary for compliance with legal obligations.
  • Article 6(1)(f) GDPR: processing necessary for the purposes of legitimate interests, except where those interests are overridden by your interests or fundamental rights and freedoms.

The legal bases for processing job applications and for subsequent retention for specified purposes are explained separately in Section VIII, “Job applications”.

The storage of information on your terminal equipment and access to information already stored on it are also subject to section 25 of the German Telecommunications and Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz — TDDDG). Unless a statutory exception applies, your consent is required. Any subsequent processing of personal data is governed by the applicable legal basis under the GDPR.

3. Recipients and processing outside the European Economic Area

Personal data may be disclosed to the employees responsible for the relevant purpose and to the technical service providers described in this notice. Depending on the service, providers process data on our behalf or as independent controllers.

International service providers may process data outside the European Union or the European Economic Area, in particular in the United States. Such transfers are additionally subject to the requirements of Articles 44 et seq. GDPR. An adequacy decision under Article 45 GDPR may serve as the basis for a transfer only within its respective scope. In particular, the adequacy decision concerning the EU–US Data Privacy Framework applies only to appropriately certified US recipients and to data covered by the scope of their certification. Where a transfer is not covered by an applicable adequacy decision, appropriate safeguards under Article 46 GDPR, in particular the European Commission’s Standard Contractual Clauses, may be used. Their use requires compliance with the other statutory requirements applicable to the transfer concerned; depending on the circumstances, supplementary measures may be necessary.

Service-specific information on recipients and the legal bases for transfers is provided in the relevant sections, including the provider documentation linked there.

4. Retention and erasure

Personal data are stored only for as long as necessary for the relevant purpose or for as long as a statutory retention obligation applies. Relevant criteria include, in particular, the completion of an enquiry, the performance and conclusion of a business relationship, the provision of a requested service and the need for time-limited retention for the establishment, exercise or defence of legal claims. Consent does not, in itself, justify indefinite storage. When consent is withdrawn, processing dependent on that consent ceases; further storage is permitted only on another applicable legal basis and for its separate purpose.

Where data are still required to comply with legal obligations or to protect legal claims after the original purpose no longer applies, further processing is restricted to those purposes. The relevant retention periods or criteria are explained for each processing activity. A distinction must be made between the lifetime of a cookie, the retention of personal usage data and separate records of consent or unsubscribing.

III. Provision of the Website & Hosting

1. Hosting and technical connection data

Our website is hosted by dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund, Germany.

When you access the website, technical connection data are processed. These include, in particular, your IP address, the date and time of access, the pages or files requested, HTTP status, the volume of data transferred and information about your browser and operating system. Depending on your browser settings, the previously visited page is also transmitted.

Access and error logs may be processed to diagnose technical problems and to detect and prevent abuse and attacks. The technical provision of the website requires your IP address to be transmitted to the servers involved.

2. Purpose and legal basis

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide our website reliably and securely, analyse errors and protect our information technology systems.

3. Retention period

The duration of processing of technical connection data depends on what is necessary to deliver the requested content. For technical logs, the relevant criteria include, in particular, the necessary diagnosis of errors and the detection and investigation of security incidents. In the event of a specific security incident, further retention of the relevant logs may be necessary to investigate the incident or defend legal claims.

4. Right to object

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will assess your objection in accordance with Article 21 GDPR. The connection data technically necessary to transmit the website you have requested cannot be avoided without impairing its provision.

Further information about the provider: https://www.dogado.de/legal/datenschutz

IV. Cookies, Similar Technologies & Consent Management

1. Cookies and comparable technologies

Our website may use cookies and comparable technologies. Cookies are small files stored in your browser. Other technologies may also store information on your terminal equipment or access information already stored on it.

Depending on their function, these technologies serve the technical provision of the website, the management of privacy choices, audience measurement, advertising purposes or the display of external content.

The storage of information on your terminal equipment and access to information already stored on it generally require your consent under section 25(1) TDDDG. Under section 25(2), point 1 TDDDG, consent is not required where the sole purpose is to carry out the transmission of a communication over a public telecommunications network. Under section 25(2), point 2 TDDDG, consent is also not required where the storage or access is strictly necessary to provide a digital service expressly requested by you. The classification depends on the specific purpose and actual implementation, not merely on whether a cookie is described as “necessary”. Any subsequent processing of personal data additionally requires a legal basis under the GDPR.

2. Pixelmate and your choices

We use Pixelmate to manage your choices regarding optional services. You can make and change your choices through the consent management interface. Optional analytics and advertising services depend on your consent; these services are described in the relevant sections.

Where storing and reading your choices is strictly necessary to respect your privacy decision, this access to your terminal equipment is based on section 25(2), point 2 TDDDG. Processing personal data to demonstrate that consent has been given is based on Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. Where the technical management and implementation of your choices do not serve compliance with this obligation to demonstrate consent, the processing necessary for that purpose is based on Article 6(1)(f) GDPR. Our legitimate interest is to operate functional consent management and respect your privacy choices.

Information about your choices is used for the period during which your decision remains valid and is needed to control the services. Records demonstrating consent must be distinguished from this information: their retention depends on the period during which the lawfulness of the processing based on that consent must be demonstrated. Following withdrawal, any remaining records are not used to continue the analytics or advertising processing for which consent has been withdrawn.

You can withdraw consent at any time with effect for the future through the consent management interface. You can also delete cookies already stored in your browser. Deleting a cookie alone does not, in every case, replace the withdrawal of consent previously given.

V. Analytics, Advertising & External Services

1. Google Analytics 4, Google Signals and the Google Ads link

We use Google Analytics 4 to analyse the use of our website. The provider for the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics processes, in particular, identifiers, page views, interaction and event data, times of use, device and browser information, referring pages and approximate location information. Cookies and comparable technologies may be used to recognise a browser.

We have enabled Google Signals and linked Google Analytics to Google Ads. Google Signals enables additional and, where applicable, cross-device analysis based on information available to Google about signed-in users with the relevant account settings. The Google Ads link serves to evaluate our advertising activities. Where data are used for personalised advertising, consent covering those purposes is required.

The legal basis is your consent under Article 6(1)(a) GDPR. Storage and access operations requiring consent are additionally based on section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future through the consent management interface.

According to Google, IP addresses of users in the EU are not logged or stored in Google Analytics 4. They are used to derive approximate location information and then deleted. This does not mean that all Analytics data are anonymous: identifiers and other usage data may still constitute personal data.

The retention of user-level and event-level data in our GA4 property is set to 14 months. This setting does not apply in the same way to aggregated standard reports and does not determine the lifetime of the cookies used. According to Google, different retention periods apply to certain categories of data; data relating to age, gender and interests are retained for two months regardless of this setting. Google Analytics also offers a reset function for the user identifier. If this function is enabled, its retention period starts again when new activity occurs. The 14-month setting must therefore not be understood as a uniform period for deleting all data processed by Google.

Data may be transferred, in particular, to Google LLC in the United States and to other companies within Google’s infrastructure. Google refers to certification under the EU–US Data Privacy Framework and, where necessary, Standard Contractual Clauses for these transfers. Reliance on the adequacy decision under Article 45 GDPR requires the relevant US recipient and the data concerned to be covered by the certification. Transfers not covered in this way are subject to the applicable safeguards under Article 46 GDPR and the other statutory requirements. The provider’s information on these mechanisms is linked below; for copies of safeguards, see Section II.3.

Further information:

2. Newsletter and Mailchimp

If you wish to subscribe to our newsletter, we obtain your separate, freely given consent. A contact enquiry or brochure download does not result in a newsletter subscription unless you separately choose to subscribe.

For registration and distribution, we use Mailchimp, a service provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, United States, which is part of the Intuit group.

After you choose to subscribe, the data required for registration are transmitted to Mailchimp. These include your email address and, depending on the form used, your surname and information about the selected topic or the source of the subscription. Subscription status and information about the confirmation process are also processed to administer registration.

Registration uses a double opt-in procedure. You receive an email asking you to confirm your newsletter subscription. You are added to the active newsletter distribution list only after confirmation. Email confirmation for a brochure download is separate and does not replace consent to receive the newsletter.

The legal basis for processing for newsletter distribution is Article 6(1)(a) GDPR. For sending email advertising, prior express consent is additionally obtained under section 7(2), point 2 of the German Act Against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb — UWG). You can withdraw your consent at any time with effect for the future using the unsubscribe link in the newsletter. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Performance measurement: Mailchimp offers the recording of opens and clicks using tracking pixels and personalised links. The time of an open or click and technical information such as IP address, device and browser information may be associated with the relevant newsletter contact. The purpose of this individual-level analysis is to assess and improve newsletter content. Where this personal-data-based performance measurement takes place, its legal basis is consent under Article 6(1)(a) GDPR expressly covering this analytical purpose as well. Consent to receive the newsletter alone does not automatically cover every form of individual-level performance measurement. Section 25(1) TDDDG additionally applies to storage and access operations requiring consent. You can withdraw the relevant consent at any time with effect for the future by sending a message to marketing@knowtion.de; the unsubscribe link allows you to unsubscribe from the newsletter altogether.

Mailchimp may also process necessary technical data for delivery, security and the prevention of abuse. Disabling individual-level analysis does not automatically exclude these technical operations.

Data used for active newsletter distribution are processed until you unsubscribe or withdraw consent. You are then removed from active distribution. Where evidence of consent is required to comply with the obligation to demonstrate consent, its separate retention is based on Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. Any additional retention necessary for the defence of legal claims may be based on Article 6(1)(f) GDPR. Information necessary to respect your unsubscribe request may also be retained for that specific purpose on the basis of Article 6(1)(f) GDPR; our legitimate interest is to prevent further unwanted communications. Such information is not used to continue the advertising distribution from which you have unsubscribed. The retention period for evidence depends on the relevant period for demonstrating compliance or defending legal claims, and the retention period for unsubscribe information depends on the need to respect the unsubscribe request. Unconfirmed registrations are needed only to administer the confirmation process and carry out any necessary technical follow-up; no active newsletter distribution takes place without confirmation.

Mailchimp processes data in the United States. According to the provider, The Rocket Science Group LLC d/b/a Mailchimp is covered by the Intuit group’s certification under the EU–US Data Privacy Framework. Within the scope of that certification, the adequacy decision under Article 45 GDPR provides the legal basis for transfers. The Mailchimp Data Processing Addendum also contains Standard Contractual Clauses which, according to the provider, are intended to serve as a contractual transfer mechanism, in particular if the Framework ceases to be valid. Where they are used, Article 46 GDPR and the other requirements for transfers to third countries apply. Further information and the data processing agreement are linked below; for copies of safeguards, see Section II.3.

Further information:

3. Links to social media profiles

Our website contains links to our profiles on LinkedIn and YouTube. If you open such a link, you leave our website and access the website of the relevant provider. Data processing there is governed by the provider’s privacy information. Embedded videos and the LinkedIn Insight Tag are described separately in this notice.

4. LinkedIn Insight Tag

We use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Ireland. The service is used to measure conversions and create website audiences for LinkedIn advertising, including retargeting. It may also record visits that did not originate from LinkedIn.

The data processed include, in particular, information about the page visited and the referrer, IP address, device and browser information, timestamps, identifiers and event data. LinkedIn may link these data to other information held by LinkedIn. Under its applicable terms, LinkedIn processes data for the relevant advertising products as a controller, including for its own purposes, such as providing and improving its services and analysing performance.

We receive, in particular, aggregated reports on campaigns and audiences. This does not mean that LinkedIn’s processing as a whole is anonymous.

The legal basis is your consent under Article 6(1)(a) GDPR. Storage and access operations requiring consent are additionally based on section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future through the consent management interface.

Data may be transferred to LinkedIn companies in the United States. For transfers not covered by an adequacy decision, LinkedIn’s relevant contractual terms provide, in particular, for the European Commission’s Standard Contractual Clauses, Module 1 for transfers between controllers. These constitute appropriate safeguards within the meaning of Article 46 GDPR, and their use must comply with the other statutory requirements. Information about the safeguards and how to obtain copies is provided in Section II.3 and in the Independent Controller Addendum linked below. Retention periods differ depending on the cookie, type of data and purpose; there is no uniform 90-day period for all data. LinkedIn explains cookie lifetimes and other retention criteria in the information below.

5. Google Maps

We use Google Maps to display our location on an interactive map. The provider for the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Loading the map establishes a connection to Google. In particular, your IP address, device and browser information, information about the page visited and cookies or comparable identifiers may be processed. For signed-in users, Google may associate information with a Google Account. Location information is processed where you use the relevant functions and grant permissions.

The legal basis for this optional integration is your consent under Article 6(1)(a) GDPR and, for storage and access operations requiring consent, section 25(1) TDDDG. You can withdraw your consent through the consent management interface. Our address is available in the contact information independently of the map.

Processing in the United States and other countries within Google’s infrastructure is possible. Google describes its transfer mechanisms in the information linked below. For certified US recipients, the adequacy decision concerning the EU–US Data Privacy Framework under Article 45 GDPR may apply within its scope; other relevant transfers are subject, in particular, to appropriate safeguards under Article 46 GDPR, such as Standard Contractual Clauses. The requirements and how to obtain copies of safeguards are explained in Section II.3. Google’s retention periods and further processing depend on the relevant types of data, functions, account settings and the criteria described in the provider’s information.

6. Embedded YouTube videos

We use embedded YouTube videos to provide content about our company and services. The provider for the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Loading embedded content establishes connections to Google. In particular, IP address, device and browser information, information about the page visited, interactions with the video and cookies or comparable identifiers may be processed. For signed-in users, information may be associated with their Google Account.

The legal basis for this optional integration is your consent under Article 6(1)(a) GDPR. Section 25(1) TDDDG additionally applies to storage and access operations requiring consent. You can withdraw your consent with effect for the future through the consent management interface.

Processing in the United States and other countries within Google’s infrastructure is possible. Google describes its transfer mechanisms in the information linked below. For certified US recipients, the adequacy decision concerning the EU–US Data Privacy Framework under Article 45 GDPR may apply within its scope; other relevant transfers are subject, in particular, to appropriate safeguards under Article 46 GDPR, such as Standard Contractual Clauses. The requirements and how to obtain copies of safeguards are explained in Section II.3. Further retention by Google depends on the relevant types of data, functions and account settings and the criteria described in the provider’s information.

7. Google reCAPTCHA v2

We use Google reCAPTCHA v2 to detect automated and abusive form submissions. This involves processing technical information and interaction data, in particular IP address, browser and device information and information about interaction with the security challenge. The service may process data and set the _GRECAPTCHA cookie as soon as the security challenge is loaded.

The purpose of the processing is to protect our forms and information technology systems against spam and abuse. Google reCAPTCHA is loaded only after you have given the relevant consent. The legal basis for processing personal data is Article 6(1)(a) GDPR. The storage of information on your terminal equipment and access to information stored on it are based on your consent under section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future through the consent management interface. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

According to Google, since 2 April 2026 Google has acted as a processor for Customer Data processed through reCAPTCHA under the Google Cloud Terms and the Cloud Data Processing Addendum. This change of role does not remove the requirements concerning the legal basis and access to terminal equipment. Data may be processed within Google’s international infrastructure. The Cloud Data Processing Addendum contains contractual provisions on processing on behalf of a controller and international transfers, including Standard Contractual Clauses for the cases specified in it. Transfers are subject to the requirements of Articles 44 et seq. GDPR; further information and how to obtain copies of safeguards are described in Section II.3 and in the provider information below.

VI. Contact, Downloads, Email & Appointment Scheduling

1. Contact enquiries and Fluent Forms

If you contact us using a form, by email or by other means, we process the data you provide, in particular your name, contact details and the content of your enquiry, to handle your request and communicate with you.

Our website forms are operated using Fluent Forms within our WordPress website. Form entries are stored in WordPress and transmitted to our ShiraTech-Knowtion email inbox for processing. The technical service providers used for hosting and email provision are also involved. A contact enquiry does not automatically result in a newsletter subscription.

Where your enquiry concerns a contract with you personally or steps taken at your request prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries, in particular from contact persons at companies, on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle business enquiries appropriately and communicate with prospective customers and business partners.

Information marked as mandatory is required to handle the enquiry. Without the relevant required information, it may not be possible to process an enquiry. Other information is voluntary.

The retention period depends on the handling of your enquiry. Once your matter has been conclusively resolved and no further communication is needed, the original processing purpose no longer applies. Further retention of individual items of information may be appropriate where they are required for a subsequent business relationship, compliance with statutory retention obligations or the establishment, exercise or defence of legal claims. Additional copies of form entries in WordPress must be assessed separately from business correspondence that is still required; retaining an email does not automatically establish a need to retain every additional copy of a form entry for the same period.

2. Brochures and requested information materials

If you request a brochure or other information materials, we process the information from the relevant form to provide the requested material. We use email confirmation through Fluent Forms to verify the email address provided. This confirmation serves the requested provision of materials and does not constitute a newsletter subscription.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to provide information materials expressly requested and prevent abusive requests. Where, in a specific case, the request concerns steps prior to entering into a contract with you personally, Article 6(1)(b) GDPR applies.

You are added to the Mailchimp newsletter only after separately and voluntarily choosing to subscribe and confirming your newsletter registration. Information about this processing is provided in the “Newsletter and Mailchimp” section.

For a request solely to download materials, retention depends on administering email confirmation, providing the requested material and carrying out any necessary technical follow-up. Once these steps have been completed, the original purpose of providing the material no longer applies. Longer storage requires an additional legal basis and a separate purpose, such as handling subsequent business correspondence. Requesting the material does not justify either automatic newsletter registration or indefinite storage for advertising purposes.

3. Email communications using Microsoft 365

We use Microsoft 365 with Exchange Online for our email communications. Microsoft provides the technical service. The data processed include, in particular, email addresses, message content, any attachments and technical communication data.

The purpose and legal basis depend on the reason for the communication: Article 6(1)(b) GDPR applies to a contract with you personally or to steps taken at your request prior to entering into a contract. Other business enquiries and communications with contact persons at companies are based on Article 6(1)(f) GDPR; our legitimate interest is to handle and manage business communications appropriately. Where statutory retention obligations apply, Article 6(1)(c) GDPR is the relevant legal basis. Retention depends on the completion and conclusion of the matter giving rise to the communication, applicable retention obligations and any evidence required for the defence of legal claims. Microsoft’s processing of business data is governed by the data protection terms applicable to the service.

In the course of service provision by Microsoft and its subprocessors, data may be processed outside the European Economic Area. The data protection terms for Microsoft enterprise services linked below govern processing on behalf of a controller and international transfers. In particular, they contain Standard Contractual Clauses as appropriate safeguards under Article 46 GDPR for the transfers specified in them. The other requirements of Articles 44 et seq. GDPR continue to apply. For further information and copies of the applicable safeguards, see Section II.3.

Data protection terms for Microsoft enterprise services: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

4. Microsoft Bookings

You can use “Book a Meeting” to schedule an appointment with ShiraTech-Knowtion through Microsoft Bookings. When you open the booking link, you leave our website and access the Microsoft booking page.

The booking process involves processing, in particular, your name, email address, the appointment selected and any other information you provide in the booking form. ShiraTech-Knowtion handles the booking; Microsoft provides the technical service. According to Microsoft, Bookings data are stored in an Exchange mailbox within the Microsoft 365 environment.

The purpose is to schedule, organise and conduct the requested appointment. Article 6(1)(b) GDPR applies to steps prior to entering into a contract or to a contract with you personally. We handle other business appointment requests, in particular those made by contact persons at companies, on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to organise the business communications you have requested efficiently.

Information marked as required in the booking form is needed to schedule the appointment. Other information is voluntary. Alternatively, you can schedule an appointment by emailing sales@knowtion.de.

The retention of booking data depends on the organisation, conduct and necessary follow-up of the appointment. If an appointment does not take place or is cancelled, the necessary handling of that change is the relevant criterion. Once these purposes have been completed, further storage of individual items of information requires a separate justification, such as subsequent business correspondence, statutory retention obligations or evidence necessary for the defence of legal claims. The information on Microsoft 365 and international transfers in the preceding section applies accordingly.

Further information about Bookings: https://learn.microsoft.com/de-de/microsoft-365/bookings/bookings-faq?view=o365-worldwide

VII. Your Rights

1. Access, rectification, erasure and other rights

Subject to the applicable statutory requirements, you have the right to:

  • access your personal data under Article 15 GDPR;
  • rectification under Article 16 GDPR;
  • erasure under Article 17 GDPR;
  • restriction of processing under Article 18 GDPR;
  • data portability under Article 20 GDPR.

In accordance with Article 19 GDPR, we notify recipients of rectification, erasure or restriction of processing unless this proves impossible or involves disproportionate effort. We will inform you about these recipients if you request it.

2. Right to object

Where processing is based on Article 6(1)(e) or (f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. This also applies to profiling based on those provisions.

We will then no longer process the data concerned unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

You may object to processing for direct marketing purposes at any time without giving reasons. This also applies to related profiling. The data concerned will then no longer be processed for those marketing purposes.

3. Withdrawal of consent

You can withdraw consent previously given at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

For website services that depend on consent, you can use the consent management interface. For the newsletter, you can also use the unsubscribe link in the relevant emails. You may also contact us at marketing@knowtion.de.

4. Automated decision-making

Under the conditions laid down in Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

5. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

For Knowtion GmbH, the following authority is particularly relevant:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart
Email: poststelle@lfdi.bwl.de

Information on complaints: https://www.baden-wuerttemberg.datenschutz.de/beschwerde/

VII. Job Applications

If you apply to Knowtion at career@knowtion.de, we process the contact details, application documents and information from communications that you provide, insofar as this is necessary to handle your application, assess your suitability and decide whether to establish an employment relationship. The legal basis is Article 6(1)(b) GDPR, as the processing serves to take steps at your request prior to entering into a contract. Providing your application data is voluntary and is not a statutory requirement. However, without the information necessary to assess your application, we may be unable to assess it, or may only be able to assess it in part.

Access is granted to the employees at Knowtion GmbH responsible for the recruitment procedure. Technical service providers, in particular those providing email services and, where applicable, hosting, are involved according to the method of transmission and processing. You will not be added to a talent pool.

If you are hired, the data required for the employment relationship are transferred to personnel administration. If no employment relationship is established, the original recruitment purpose generally ceases to apply once the recruitment procedure has been completed. Further retention for a limited period may be necessary to assess and defend potential legal claims. The legal basis in this case is Article 6(1)(f) GDPR; our legitimate interest is the defence of legal claims. The relevant criteria are the applicable time limits for asserting such claims and limitation periods and, in the event of a specific dispute, the period until its final resolution. Once this reason for retention no longer applies, the data concerned must be deleted unless another legal basis requires further retention. The data will not be reused for a talent pool.

Scroll to Top