Privacy

1. Controller and contact

Digital Talents Group GmbH, Karlstraße 22, 36037 Fulda, Germany, represented by managing director Felix Aschenbrücker, is responsible for this website. You can contact us at kontakt@digital-talents-group.de or +49 661 410854 50. You may also use these contact details to exercise your data protection rights.

2. Hosting and technical delivery

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Visiting it involves processing your IP address, time of access, requested address, response status and technical browser information. Fonts, images and program files are loaded from our website. Animations run in your browser.

The hosting account is configured to keep access logs containing full IP addresses and to generate server-side access statistics. Hosting logs are retained for 90 days. We use this data to provide the website, assess technical usage, identify errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, reliable operation and adapting the website to its use. Server-side analysis requires no analytics tags or additional cookies in your browser.

ALL-INKL.COM privacy information

3. Enquiries

If you contact us through the contact form, by email or by telephone, we process the contact details you provide and the content of your enquiry. The contact form requires your name, email address and message; the company field is optional. We also process the selected topic, language and technical submission data. We use this information to respond and prepare potential cooperation. The form cannot submit your enquiry without the required details.

Submitted form enquiries are recorded as an enquiry or lead in our Bitrix24 system. The form confirms receipt only after successful intake has been verified. Processing to prepare potential cooperation is based on Article 6(1)(b) GDPR. For other enquiries, it is based on Article 6(1)(f) GDPR; our legitimate interest is responding to your enquiry.

We retain enquiries for as long as needed to handle them and any resulting cooperation. We then delete them unless a statutory retention requirement or a specific need to establish, exercise or defend legal claims prevents deletion. Access is provided to the people handling the enquiry and the technical providers involved.

4. Applications at DTG

The following sections explain how we process your data when you apply to DTG through an application form offered on this website.

4.1. Data processed when you apply

When you submit the application form, we process your first and last name, email address, telephone number, selected salutation, CV and, if you complete the optional field, your message. You can select “Prefer not to say” for the salutation. We also process the relevant vacancy, form language, time of receipt and technical submission references.

We need the application information to review your application, contact you and decide on potential employment. The legal basis is section 26(1), first sentence, of the German Federal Data Protection Act (BDSG). Fields marked with an asterisk are required for submission through this form. You are not legally obliged to provide this data. Without the required details and a CV, the form cannot submit your application. The additional message is optional. Please limit your documents to information relevant to the role.

4.2. Transmission, checks and recipients

Your application is sent over an encrypted connection to our website at ALL-INKL and processed through our application server at Hetzner. File format and size are checked there, and ClamAV scans the upload for malware. The application is then assigned to the selected vacancy in the Candidate Flow of our Bitrix24 system. Your name, email address and telephone number are also held as contact details for internal matching. This association supports your application at DTG and does not authorise recruitment for other companies. The form only confirms receipt after successful intake has been verified.

To secure transmission and avoid duplicate applications, the application server processes technical submission identifiers, protected checksums, transmission status and references to the application record and file. A protected value derived from the IP address is also used to limit abusive requests. This processing protects the reliability and security of the application route under Article 6(1)(f) GDPR. Technical references can also be linked to an application and are not equivalent to anonymous data.

The technical providers involved are ALL-INKL.COM – Neue Medien Münnich for website hosting, Hetzner for the application server and Alaio Cloud Limited, Frema House, office 102, No. 9, Constantinou Paparigopoulou Str., 3106 Limassol, Cyprus, for application management using Bitrix24. Data processing agreements are in place with the processors used. Within DTG, people involved in the recruitment process receive access to the information required for their tasks.

For the European Bitrix24 region, the provider lists AWS data centres in Frankfurt and Dublin. Its subprocessor list also names Bitrix Distribution Ltd in Russia for technical support. Support-related access from a third country is therefore possible. The data processing agreement specifies EU standard data protection clauses under Article 46 GDPR as the safeguard for this access. You can request information and a copy of the relevant safeguards using our contact details above.

4.3. Technical session storage

Before uploading, the page stores a random submission identifier, the original vacancy page path and the language in your browser's sessionStorage. This allows a retry after an interruption to be matched to the same application. Your name, contact details, form text and CV are not stored there. The identifier is removed after receipt has been confirmed. Following an unconfirmed attempt, it remains available for retries in the same browser session; the browser may also restore it when restoring a session.

This storage supports the application service you request and prevents duplicate submissions. It is based on section 25(2), number 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG). Related personal data processing is based on Article 6(1)(f) GDPR, with the legitimate interest of reliable submission and duplicate prevention.

4.4. Retention

While the recruitment process is ongoing, we retain your information and documents to the extent necessary to handle your application. If your application is rejected or you withdraw it, we delete the application data and CV six months after the recruitment process has ended. This includes the associated technical submission and file references. Data you separately authorise for the talent pool is covered by the voluntary consent described below; applying alone does not add you to the talent pool.

During that period, limited retention may be necessary to establish, exercise or defend legal claims. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting our legal position. Longer retention takes place only on the basis of your separate talent pool consent or another specific legal basis. Any necessary longer retention is limited to the data and purpose concerned.

If you are hired, we transfer the information necessary for your employment to personnel administration. The relevant employment-related purposes and statutory retention requirements apply to that information.

Temporary CV files created on our application server for upload checks are removed after processing; the accepted CV is stored in Bitrix24. The application server keeps no regular HTTP access logs for the application API. Technical error logs are rotated daily, retaining up to 14 archived files in addition to the current file. Our application logs contain predefined technical event codes, not form contents or CVs. The 90-day period described above applies separately to hosting logs at ALL-INKL.

4.5. Optional talent pool for future positions at DTG

If you separately consent, Digital Talents Group GmbH will include your contact details, CV and the professional information in it in its talent pool for 24 months from the date you give consent. We use this data to consider you for suitable future positions at DTG and contact you about them. This consent does not cover recruitment for other companies or sharing your application with other employers.

Joining is voluntary and happens only if you actively select the separate checkbox, which is not selected by default. Choosing not to consent, or withdrawing your consent later, has no effect on the handling or assessment of your current application. The legal basis is your consent under Article 6(1)(a) GDPR in conjunction with section 26(2) BDSG.

You can withdraw your consent at any time with effect for the future, for example by emailing kontakt@digital-talents-group.de. We will then stop using your data for the talent pool and delete it from the pool unless another specific legal basis requires further retention. An ongoing application or legally necessary limited retention for that application remains separate. Withdrawal does not affect the lawfulness of processing before withdrawal.

Talent pool membership ends 24 months after consent without automatic renewal. Data stored for that purpose is then deleted unless another specific legal basis prevents deletion. We record your choice, the consent wording and its version, language and time, and any subsequent withdrawal so that we can demonstrate consent and respect your decision.

4.6. No automated applicant assessment

People make decisions about your application. This application route currently performs no AI-based CV parsing, automated suitability assessment or candidate rating. The technical upload checks do not assess your qualifications.

5. Live chat, where offered on the page you visit

If a page offers live chat and you open it, our own chat interface checks its availability. The website does not load an external chat widget. A random identifier in a technically protected cookie (__Host-dtg-chat-live) associates the session for up to 24 hours. Messages you send and contact details you voluntarily provide are forwarded to our Bitrix24 communication channel so our team can answer your enquiry. Technical storage for the chat you request is based on section 25(2), number 2, TDDDG; the legal bases and retention criteria in section 3 apply to handling the enquiry.

This chat function currently includes neither AI assistance nor automated appointment booking. You can use our contact page regardless of chat availability. This service is not loaded on pages without a chat function.

6. Bitrix24 and technical providers

We use Bitrix24 from Alaio Cloud Limited, Frema House, office 102, No. 9, Constantinou Paparigopoulou Str., 3106 Limassol, Cyprus, to handle enquiries, applications and any chat conversations offered. ALL-INKL.COM provides website hosting; the application route also uses our application server at Hetzner. Data processing agreements are in place with the processors used. Submitting an enquiry or application does not itself disclose the information you provide to advertising networks.

The information in section 4.2 about Bitrix24 data centres, possible support-related access from a third country and EU standard data protection clauses also applies to enquiries and chat conversations processed there. You can request information and a copy of the relevant safeguards using our contact details above.

7. Browser storage, analytics and advertising measurement

We load Google Analytics, Google Ads, Meta Pixel and LinkedIn Insight Tag only after you consent to the relevant category: Statistics for Google Analytics; Marketing for Google Ads, Meta and LinkedIn. Without consent, no optional tags or cookieless measurement pings are sent to these providers. The contact form, applications and chat remain available independently. Analytics and advertising measurement are not activated on careers or application pages. Microsoft UET (Bing) is currently inactive.

The legal bases are your consent under section 25(1) TDDDG for storing and accessing information on your device and Article 6(1)(a) GDPR for the associated processing of personal data. You can change your consent through Cookie settings in the footer or withdraw it by choosing Necessary only. Withdrawal applies to future processing and does not affect the lawfulness of processing before withdrawal.

We manage consent with Cookiebot, provided by Usercentrics A/S, Denmark, using its European CDN. Cookiebot processes technical connection data, your consent decision, time, browser information, the visited URL and a consent ID. Your choice is stored in the necessary CookieConsent cookie for up to twelve months and logged as evidence of consent. The legal bases are section 25(2)(2) TDDDG and Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. Consent sharing with other brand websites is disabled. To prevent repeated conversion measurements, after consent we store protected hashes of confirmed transactions locally for up to 90 days. These hashes are not sent to measurement providers.

After consent, the respective providers receive technical connection data including your IP address, browser and device information, cookie identifiers and defined usage events. We do not send names, email addresses, phone numbers, form messages, CVs or CRM record numbers to these services. URL parameters are not forwarded indiscriminately; advertising click identifiers are made available only to the respective provider after consent to that provider. An enquiry conversion is recorded only after confirmed receipt of the enquiry.

7.1. Google Analytics and Google Ads

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse website use. This includes page categories, language, navigation and confirmed enquiries. The analytics cookies dtgana_ga and dtgana_ga_2H963PD8B3 last for up to 90 days. Our Analytics property retains event and user data for two months. Google Signals, enhanced automatic event measurement and user-provided data collection are disabled.

Google Ads loads only after your corresponding consent. We use it to measure whether an advertising interaction leads to a confirmed enquiry. After your renewed consent to personalized Google advertising, we also use visits to our marketing pages for retargeting and successfully received enquiries to exclude visitors from that advertising. The visitor audience covers the last 30 days; confirmed enquiries are used for exclusion for up to 180 days. Each further corresponding event restarts the relevant window. Career and application pages are excluded. Google receives general visit or completion signals and necessary technical identifiers and connection data, but no enquiry contents, contact details, free text, CRM IDs or receipt IDs. Advertising click identifiers and cookies whose names include _gcl may be used for attribution; our integration limits these cookies to 90 days. We do not use enhanced matching of your contact details. Audience inclusion and exclusion depend on the relevant event being collected with consent and attributed by Google to an eligible user; complete recognition across different devices and browsers is not guaranteed.

For renewed consent to personalized Google advertising, we additionally store a local confirmation marker with the approved purpose version for no more than 30 days. It contains no enquiry contents and is not sent to advertising providers. Without a valid marker and corresponding Cookiebot consent, this purpose remains disabled. On withdrawal, we remove the marker and stop further personalized measurement in our integration. Withdrawal does not retrospectively recall data already transmitted.

7.2. Meta Pixel

After your consent, the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, measures page visits and confirmed enquiries. Meta may associate these events with a Facebook or Instagram account and use them for advertising measurement and audiences. The _fbp and _fbc cookies may last up to 90 days. Automatic advanced matching and automatic form-value collection are disabled.

Collection and transmission of event data to Meta are subject to joint controllership under Article 26 GDPR within Meta’s contractual terms. In particular, Meta handles data-subject rights relating to data stored by Meta. You can also exercise your rights with us. Meta is independently responsible for its subsequent processing.

7.3. LinkedIn Insight Tag

The LinkedIn Insight Tag is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. After your consent, it attributes page visits and confirmed enquiries to LinkedIn advertising and supports audience analysis. LinkedIn may associate this data with your member account. The first-party cookie li_fat_id lasts 30 days; additional cookies may apply on LinkedIn domains. We do not submit contact details for Enhanced Matching.

7.4. Withdrawal and international processing

When you withdraw consent, we stop the relevant measurement components and remove the cookies of this integration that our website can access. We cannot directly delete cookies on third-party provider domains; you can manage them in your browser settings or with the respective provider. Deleting a cookie does not automatically erase data already transmitted to providers.

Providers may also process data outside the EU or EEA, particularly in the United States. Depending on the recipient, providers identify adequacy decisions and EU standard contractual clauses as transfer mechanisms. The information below explains recipients, safeguards, provider retention periods and your settings options. You may request a copy of relevant safeguards through our contact details above.

8. Your rights

Subject to the legal conditions, you can request access to your personal data, its rectification or deletion, or restriction of processing. You also have a right to data portability where the legal conditions are met. If processing is based on consent, you can withdraw it for the future without affecting the lawfulness of processing before withdrawal.

You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.

You may complain to a data protection supervisory authority, particularly in the country of your habitual residence, place of work or place of the alleged infringement. The authority responsible for our location in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information .

Last updated: 1 November 2026. This notice applies to the public website. Additional notices linked from an individual vacancy page may apply to its application route.

Cookie settings and declaration

You can change your selection or withdraw all optional consent here at any time.

Cookiebot: Privacy

Language choice

When you enter through the homepage, we select the language using the country identified by our hosting server: German for Germany, Austria and Switzerland, and English for other countries. If no country is available, we use your browser language. Direct links to subpages remain unchanged. When you select DE or EN, we remember only this language choice in the __Host-dtg-language cookie for up to 180 days. The language choice is not used for analytics or advertising, and your IP address is not additionally sent to a geolocation service.