Data Protection Information for Applicants

Data protection information for applicants
We are pleased that you are interested in us and that you are applying or have applied for a job in our company. In the following, we provide you with information regarding the processing of your personal data in relation to  your application.

Who is responsible for data processing?

The person responsible within the meaning of data protection law is :
Heartbeat Labs GmbH
Kronenstraße 63
10117 Berlin, Germany

You will find further information about our company, details of authorised representatives and other contact details in our imprint on our website: /imprint/

Which data of yours are processed by us? And for what purposes?
We process the data you have sent us in relation to your application in order to assess your suitability for the position (or any other open positions in our company) and to complete the application process.

What is the legal basis for this?
The legal basis for the processing of your personal data in this application procedure is primarily § 26 BDSG in the version applicable from 25 May 2018. Accordingly, the processing of the data required in connection with the decision on the establishment of an employment relationship is permissible.

Should the data be necessary for legal prosecution after completion of the application procedure, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO. Our interest then lies in the assertion or defence of claims.

How long is the data stored?
Applicant data will be deleted after two years in the event of rejection.
We store applications over this period of time, because we want to contact you for possible job offers at a later date, even in case of a rejection.
You can object to this storage period at any time by contacting us at:

In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after four years.

If you have been awarded a position as part of the application process, the data will be transferred from the applicant data system to our HR  information system.

Which recipients will the data be passed on to?
We use a specialized software provider for the application process:

Lever Inc.
155 5th St 6th floor
San Francisco, CA 94103
Lever Inc. is US privacy shield listed. To read more about the terms of privacy click here.

This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner.

Your applicant data will be viewed by the HR department after receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The rest of the process is then coordinated. In the company, only the persons who need your data for the proper course of our application procedure have access to them.

Where is the data processed?
The data is stored on servers of Lever Inc. in san Francisco.

Your rights as a “data subject”
You have the right to information about the personal data processed by us about your person.

In the case of a request for information which is not made in writing, we may then demand proof that you are the person you claim to be.

Furthermore, you have the right to correction or deletion or to restriction of the processing to the extent to which you are legally entitled to do so.

Furthermore, you have the right to object to the processing within the scope of the statutory provisions. The same applies to a right to data transfer.

Our data protection officer
We have appointed a data protection officer in our company. You can reach him under the following contact options:

– Data Protection Officer –
Landeckring 19
76831 Impflingen

Right of appeal

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.