Effective Date: May 15, 2023
This EU Applicant Privacy Policy describes how we process personal data when you apply for a position within the Verve Group. Depending on which of the Verve Group companies you are applying to, the company you are applying to is referred to as “us”, “we” or “our” in this Policy.”
You can see all Verve Group companies and the contact details for data subject access requests below:
Verve Group Europe GmbH
Karl-Liebknecht-Str. 32, 10178 Berlin, Germany
[email protected]
Verve Group, Inc.
350 Fifth Ave. Ste. 7700, New York, NY 10118 USA
[email protected]
VGI CTV, Inc.
350 Fifth Ave. Ste. 7700, New York, NY 10118 USA
[email protected]
Dataseat Ltd.
Flat 2, 33 Hyde Park Square, London, United Kingdom, W2 2NW
[email protected]
Match2One AB
Stureplan 6, 11435 Stockholm, Sweden
[email protected]
Platform 161 B.V.
Weteringschans 89, 1017 RZ Amsterdam, The Netherlands
[email protected]
Smaato Inc.
350 Fifth Ave. Ste. 7700, New York, NY 10118 US
and
Barcastraße 5, 1st Floor, 22087 Hamburg, Germany
[email protected]
We are pleased that you are interested in us and are applying or have applied for a job with us. In this Applicant Privacy Policy, we would like to provide you with information on the processing of your personal data in connection with your application.
As part of the application process, it is regularly necessary to forward your personal data within the Verve Group to the relevant business department or affiliated group company. The legal basis of such data processing is Art. 88 para. 1 of the EU General Data Protection Regulation (“GDPR”) in connection with § 26 para. 1 German FDPA, i.e., you provide us with personal data for the purpose of deciding whether to establish an employment relationship.
Whenever we collect, process, and retain your personal data, the Verve Group company or affiliate to which you are applying for a job, or which will be your contract partner, will act as a data controller.
You, as an applicant, are responsible for ensuring that the data you submit to us is correct and true. You are under no statutory or contractual obligation to provide personal data to Verve Group during the recruitment process. However, if you do not provide the information, we may not be able to process your application properly or at all. Your personal data will be treated as strictly confidential.
This Applicant Privacy Policy may be subject to modification from time to time, notably in the event of changes to legislation or the introduction of new laws. Any changes will be published on our website. We therefore recommend that you check the Applicant Privacy Policy regularly. This Applicant Privacy Policy applies in addition to the general Privacy Policy and Cookie Policy for each Company website:
Verve Group Europe, GmbH; Verve Group, Inc.; VGI CTV, Inc. & Platform161, B.V.:
https://verve.com/product-privacy-policies/
https://verve.com/website-privacy-policy/
DataSeat Ltd.:
https://dataseat.com/privacy-policy
Match2One AB:
https://www.match2one.com/privacy-policy/
https://www.match2one.com/cookie-policy/
Smaato, Inc.:
https://www.smaato.com/privacy/
https://www.smaato.com/cookie-policy/
We may collect personal data from you through your online application via the Career Portal (as defined below), email, a third party such as a recruitment agency, or someone who recommended you. Applications are processed in collaboration between the Verve Group human resources department (hereinafter “HR Department”), the management, and the relevant business department of the Verve Group company which advertises the position. The responsible person of the business department concerned, the responsible manager, and the responsible person of the HR Department may belong to different legal entities within Verve Group. Therefore, it is possible that your personal data is exchanged between different legal entities within the Verve Group.
Our application process includes the following processing steps:
In some cases, we need to process your personal data to ensure that we are complying with our legal obligations. For example, it is mandatory to check a successful applicant’s eligibility to work in Germany before employment starts.
All personal data you submit to us in the framework of your application is collected, processed, and retained by Verve Group for processing your job application. This includes evaluating your qualifications and skills, verifying the information you have provided, carrying out reference checks, communicating with you, managing the recruitment process, and deciding on the establishment of an employment relationship for which you have applied.
If you give your consent or we deem this is in your interest, we may send you further job offers or invitations to surveys, e.g., an option for you to provide us with your opinion concerning the application process via a form. As a rule, no personal data will be gathered from you or processed in this form. Should you wish to remain anonymous, please ensure that you do not disclose any information in the free text field in the opinion survey that allows you to be personally identified.
Verve Group offers the possibility to join a talent pool (“Talent Pool”). When your application is uploaded through our online upload function without being linked to a specific job offer, or relates to a specific offer but you have provided your consent for further processing, then Verve Group may process your personal data as follows:
After completion of the application procedure whereas no employment contract was concluded your application documents will be stored for a maximum of twelve months, so that we can contact you again if necessary or respond to enquiries. After that period, your data will be anonymized. If you have registered in our Career Portal (Recruitee), your data will be stored there until you delete your profile.
Should the data be necessary for legal prosecution after completion of the application procedure, data processing may be carried out based on the requirements of Art. 6 GDPR, in particular to safeguard Verve Group’s legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the exercise or defense of legal claims.
When hired, your personal data will be transferred from the Career Portal to the HR administration system. Processing and storage of your personal data will then be governed by Verve Group’s internal data processing policies of which you will be informed when onboarding to your new job.
If you have incurred travel expenses for a personal interview, we will reimburse them. You will receive a form from us for this purpose. Your data will be processed exclusively for this purpose.
We store the information required for reimbursement of costs in accordance with commercial and tax law for the periods specified by law. For this period (usually ten years), the data will be reprocessed for the purpose of a review by the tax authorities, for economic and tax audit purposes, and to clarify possible criminal offenses.
If you have applied for a specific job offer, your application documents will only be considered for the filling of this position. Only those persons entrusted with filling vacancies will have access to your application data. In addition, only the IT administrators have access to the data in order to maintain the system and guarantee data security. Your data will not be passed on to third parties outside the Verve Group without your consent.
If you apply for a specific job offer at a Verve Group affiliated company, it may be necessary for us to forward your applicant data to the respective affiliated company when processing your application. In this case, we will act as a joint controller with the respective affiliated company and will process your application data exclusively in accordance with this data protection notice and the legal requirements for joint controllership.
For the processing of your application, we use a third-party service provided by Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (hereinafter “Recruitee”), to whom your data will consequently be transferred. If you use the Recruitee platform (the “Career Portal”) to manage or submit your application, the data privacy policy of Recruitee shall also apply. Recruitee will use personal data of applicants solely for processing the applications on behalf of Verve Group.
You can also apply in the Career Portal by connecting to third-party accounts (e.g., LinkedIn, Indeed, Recruitee). BY CONNECTING YOUR RECRUITEE ACCOUNT TO YOUR THIRD-PARTY ACCOUNT, YOU ACKNOWLEDGE AND AGREE THAT YOU ARE CONSENTING TO THE CONTINUOUS RELEASE OF INFORMATION ABOUT YOU TO OTHERS (IN ACCORDANCE WITH YOUR PRIVACY SETTINGS ON THOSE THIRD-PARTY SITES). IF YOU DO NOT WANT DATA ABOUT YOU, INCLUDING PERSONALLY IDENTIFYING INFORMATION, TO BE SHARED IN THIS MANNER, DO NOT USE THIS FEATURE. You may disconnect your account from a third-party account at any time. Users may disconnect their accounts from third-party websites by visiting their “Account Settings” page.
We may share your data with our service providers, such as Recruitee, within the framework of processing by a data processor. Our service providers were carefully selected by us and are obliged, in accordance with the statutory provisions of Art. 28 EU GDPR, to handle your data in a data protection compliant and trustworthy manner and to comply with our own data protection standards. Our partners are not permitted to use the data themselves for their own purposes.
If a transfer of personal data to a third country outside the European Economic Area becomes necessary, e.g. to other Verve Group companies or cooperation partners in third countries, we will ensure that there is a legal basis for this. These are usually
In addition, we may also be required to share your personal data with authorities or other competent bodies as a result of a legal obligation to which we are subject.
Occasionally we also have an interest in and need for competent applicants in other areas and would be happy to consider your application for other vacancies. We will only do this if you expressly consent to such processing when submitting your application (for example, by ticking the appropriate box).
In this case, you agree that other recruiters from Verve Group and/or its affiliated companies may also view your applicant data, including any sensitive data contained therein, and take it into account when filling vacancies.
Should you appear to be suitable for the vacancy, we would approach you to inquire whether you would be interested in participating in the selection process for the position to be filled. You can revoke your consent at any time in the Career Portal.
You have certain choices available to you when it comes to your personal data. Below is a summary of your rights, how to exercise them, and any limitations.
In addition to the right to withdraw your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:
You can assert the aforementioned rights to which you are entitled by sending an email to the privacy addresses listed in Section 1.
You can assert the right to data portability in your Career Portal (Recruitee) account.
You can also request information about your personal data stored by us by sending an email to the privacy addresses listed in Section 1.
Right to withdraw consent
Insofar as we process data on the basis of a consent given by you, you have the right to revoke the consent given at any time. The revocation of your consent does not mean that the data processing carried out based on your consent up to the time of revocation becomes invalid.
We offer you an SSL (secure socket layer) security procedure together with a 256-bit encryption on our Career Portal and Verve Group websites. You can recognize the transfer of encrypted data by the picture of a closed key or lock symbol at the top or bottom of your browser.
We apply the highest level of care and appropriate security standards in order to protect your personal data against unauthorized access or loss. We would like to point out that data transfer via the internet (for example, in the case of unencrypted communication by email) can pose security risks. It is not possible to fully protect the data against third-party access.
You have the possibility to contact us in several ways. By email, telephone, or mail. If you contact us, we will use the personal data that you voluntarily provide to us for the sole purpose of contacting you and processing your enquiry. In order to answer your request, it may be necessary to forward it together with your personal data to one of our affiliated companies. The legal basis for this data processing is Art. 6 para. 1 lit. b), Art. 6 para. 1 lit. c) GDPR and Art. 6 para. 1 lit. f) GDPR.
If you have any questions or complaints about our privacy practices, we encourage you to contact us at any one of the email addresses listed in Section 1, and we will work with you to resolve your issue. You may also contact your responsible European Data Protection Authority or the Swiss Federal Data Protection and Information Commissioner, respectively, with questions or complaints about our privacy practices. Under certain circumstances, the Privacy Shield provides for the election of binding arbitration for complaints not resolved through other means, more fully described on the Privacy Shield website.
You have the right to file a complaint with the competent data protection supervisory authority. Below are the supervisory authorities primarily responsible for each entity:
Verve Group Europe GmbH:
Berliner Beauftragte für Datenschutz und Informationsfreiheit, https://www.datenschutz-berlin.de
Dataseat Ltd.:
Information Commissioner’s Office
https://ico.org.uk/
Match2One AB:
Integritetsskyddsmyndigheten
http://www.imy.se/
Platform 161 B.V.:
Autoriteit Persoonsgegevens
https://autoriteitpersoonsgegevens.nl/
Smaato, Inc.
The Hamburg Commissioner for Data Protection and Freedom of Information / Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
https://datenschutz-hamburg.de/
Verve Group, Inc., & VGI CTV, Inc.:
You have the right to file a complaint with any competent data protection supervisory authority. Alternatively, you can also contact any other supervisory authority that is competent in your place of residence. An overview of the data protection supervisory authorities competent in your place of residence can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Fieldfisher Tech Rechtsanwaltsgesellschaft mbH
Am Sandtorkai 68
20457 Hamburg