Applicant privacy notice
1. Controller and contact
Digital Talents Group GmbH, Karlstraße 22, 36037 Fulda, Germany, represented by managing director Felix Aschenbrücker, is responsible for this careers page and your application. You can contact us at kontakt@digital-talents-group.de or +49 661 410854 50. You may also use these contact details to exercise your data protection rights.
2. Visiting this page
This page is hosted by ALL-INKL.COM – Neue Medien Münnich. When you visit it, connection data needed to deliver and secure the page is processed, including your IP address, the time of access, the requested address and technical browser information. Fonts, images and program files are loaded from our website.
The hosting account is configured to keep access logs containing full IP addresses and to generate server-side access statistics. Hosting logs are retained for 90 days. We use this data to provide the page, assess technical usage, identify errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, reliable operation and adapting the website to its use. Server-side analysis requires no analytics tags or additional cookies in your browser.
3. Data processed when you apply
When you submit the application form, we process your first and last name, email address, telephone number, selected salutation, CV and, if you complete the optional field, your message. You can select “Prefer not to say” for the salutation. We also process the relevant vacancy, form language, time of receipt and technical submission references.
We need the application information to review your application, contact you and decide on potential employment. The legal basis is section 26(1), first sentence, of the German Federal Data Protection Act (BDSG). Fields marked with an asterisk are required for submission through this form. You are not legally obliged to provide this data. Without the required details and a CV, the form cannot submit your application. The additional message is optional. Please limit your documents to information relevant to the role.
4. Transmission, checks and recipients
Your application is sent over an encrypted connection to our website at ALL-INKL and processed through our application server at Hetzner. File format and size are checked there, and ClamAV scans the upload for malware. The application is then assigned to the selected vacancy in the Candidate Flow of our Bitrix24 system. Your name, email address and telephone number are also held as contact details for internal matching. This association supports your application at DTG and does not authorise recruitment for other companies. The form only confirms receipt after successful intake has been verified.
To secure transmission and avoid duplicate applications, the application server processes technical submission identifiers, protected checksums, transmission status and references to the application record and file. A protected value derived from the IP address is also used to limit abusive requests. This processing protects the reliability and security of the application route under Article 6(1)(f) GDPR. Technical references can also be linked to an application and are not equivalent to anonymous data.
The technical providers involved are ALL-INKL.COM – Neue Medien Münnich for website hosting, Hetzner for the application server and Alaio Cloud Limited, Frema House, office 102, No. 9, Constantinou Paparigopoulou Str., 3106 Limassol, Cyprus, for application management using Bitrix24. Data processing agreements are in place with the processors used. Within DTG, people involved in the recruitment process receive access to the information required for their tasks.
For the European Bitrix24 region, the provider lists AWS data centres in Frankfurt and Dublin. Its subprocessor list also names Bitrix Distribution Ltd in Russia for technical support. Support-related access from a third country is therefore possible. The data processing agreement specifies EU standard data protection clauses under Article 46 GDPR as the safeguard for this access. You can request information and a copy of the relevant safeguards using our contact details above.
5. Technical session storage
Before uploading, the page stores a random submission identifier, the original vacancy page path and the language in your browser's sessionStorage. This allows a retry after an interruption to be matched to the same application. Your name, contact details, form text and CV are not stored there. The identifier is removed after receipt has been confirmed. Following an unconfirmed attempt, it remains available for retries in the same browser session; the browser may also restore it when restoring a session.
This storage supports the application service you request and prevents duplicate submissions. It is based on section 25(2), number 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG). Related personal data processing is based on Article 6(1)(f) GDPR, with the legitimate interest of reliable submission and duplicate prevention.
6. Retention
While the recruitment process is ongoing, we retain your information and documents to the extent necessary to handle your application. If your application is rejected or you withdraw it, we delete the application data and CV six months after the recruitment process has ended. This includes the associated technical submission and file references. Data you separately authorise for the talent pool is covered by the voluntary consent described below; applying alone does not add you to the talent pool.
During that period, limited retention may be necessary to establish, exercise or defend legal claims. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting our legal position. Longer retention takes place only on the basis of your separate talent pool consent or another specific legal basis. Any necessary longer retention is limited to the data and purpose concerned.
If you are hired, we transfer the information necessary for your employment to personnel administration. The relevant employment-related purposes and statutory retention requirements apply to that information.
Temporary CV files created on our application server for upload checks are removed after processing; the accepted CV is stored in Bitrix24. The application server keeps no regular HTTP access logs for the application API. Technical error logs are rotated daily, retaining up to 14 archived files in addition to the current file. Our application logs contain predefined technical event codes, not form contents or CVs. The 90-day period described above applies separately to hosting logs at ALL-INKL.
7. Optional talent pool for future positions at DTG
If you separately consent, Digital Talents Group GmbH will include your contact details, CV and the professional information in it in its talent pool for 24 months from the date you give consent. We use this data to consider you for suitable future positions at DTG and contact you about them. This consent does not cover recruitment for other companies or sharing your application with other employers.
Joining is voluntary and happens only if you actively select the separate checkbox, which is not selected by default. Choosing not to consent, or withdrawing your consent later, has no effect on the handling or assessment of your current application. The legal basis is your consent under Article 6(1)(a) GDPR in conjunction with section 26(2) BDSG.
You can withdraw your consent at any time with effect for the future, for example by emailing kontakt@digital-talents-group.de. We will then stop using your data for the talent pool and delete it from the pool unless another specific legal basis requires further retention. An ongoing application or legally necessary limited retention for that application remains separate. Withdrawal does not affect the lawfulness of processing before withdrawal.
Talent pool membership ends 24 months after consent without automatic renewal. Data stored for that purpose is then deleted unless another specific legal basis prevents deletion. We record your choice, the consent wording and its version, language and time, and any subsequent withdrawal so that we can demonstrate consent and respect your decision.
8. No automated applicant assessment
People make decisions about your application. This application route currently performs no AI-based CV parsing, automated suitability assessment or candidate rating. The technical upload checks do not assess your qualifications.
9. No analytics tags, advertising pixels or chat services on these vacancy pages
The German and English pages for this vacancy do not embed analytics tags, advertising pixels or live chat services. Server-side hosting logs and access statistics are described in section 2. This application route does not transmit application data to advertising networks.
10. Your rights
Subject to the legal conditions, you can request access to your personal data, its rectification or deletion, or restriction of processing. You also have a right to data portability where the legal conditions are met. If processing is based on consent, you can withdraw it for the future without affecting the lawfulness of processing before withdrawal.
You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.
You may complain to a data protection supervisory authority, particularly in the country of your habitual residence, place of work or place of the alleged infringement. The authority responsible for our location in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information.
Last updated: 1 November 2026. This notice covers the German and English “Senior AI Engineer” vacancy pages and the associated application service.