Data Privacy Statement

Processing of (personal) data by the entity in charge of the online application process


We are providing you with this data protection notice which relates solely to the data collected within the scope of the online application procedure to inform you about how we handle your personal data, collected as part of the application procedure, in our company.


The Controller pursuant to data protection law is:

Humans & Machines GmbH
Wollankstraße 101
13187 Berlin

Managing directors: Sebastian Schäfer, Raffael Stüken
VAT ID number of the company: DE296480613
Register court: Amtsgericht Charlottenburg, HRB 160830 B

Personal data within the scope of the application procedure

Personal data is information about personal or material circumstances of an identified or identifiable individual person. This includes information such as your name, your address, your telephone number and your date of birth, but also data about your specific career, etc. which can be matched to an identified person with reasonable effort. However, information that cannot be associated (in)directly with your actual identity is not personal data. Within the scope of personal data, Humans & Machines reserves the right to conduct simple searches for generally accessible information on the Internet (e.g. Google) if this is necessary for the decision regarding recruitment. This also includes the retrieval of information from professional networks.

Bases and purposes for the processing of personal data in the case of applications and in the application procedure

If you apply to our company by electronic means, i.e. by email or via our web form, we collect and process your personal data for the purposes of handling the application procedure and to carry out any pre-contractual measures.

By sending an application via our webform, you declare your interest in wanting to take up employment at our company. In this context, you transmit personal data to us that we use and store solely for the purposes of your job search/application.

In doing so, the following data is collected in particular:

  • name (first name and surname)
  • email address
  • location
  • telephone number
  • website
  • language levels
  • salary expectation
  • other information about how you would like to work

You also have the option to upload compelling documents, such as a cover letter, your CV and certificates. These may include further personal data, such as date of birth, address, etc.

Only authorised employees from the HR department or employees involved in the application procedure have access to your data. The personal data is in principle only stored for the purposes of filling the vacant position, for which you have applied. Your data will be saved over a period of 90 days beyond the end of the application procedure. This is usually done to fulfil legal obligations or to defend against any claims arising from statutory obligations. We are then obligated to delete or anonymise your data. In this case, the data is then only available to us for statistical evaluation purposes as “metadata” without any direct reference to a specific person (for example, number of applications per period of time, etc.).

By applying via the webform you can optionally to consent to further storage of your data and inclusion in our talent pool. We will then store the personal data collected as part of the application procedure for the next five years at the most.

If you receive an offer for employment from us within the scope of the application procedure and if you accept such offer, we will store the personal data collected as part of the application procedure for at least the duration of the employment relationship.

Forwarding data to third parties

The data transmitted within the scope of your application will be transferred with TLS encryption and stored in a database. This database is operated by Notion Labs, Inc. which offers project management software ( In this context, Notion Labs, Inc. is our Processor pursuant to Article 28 GDPR. The basis for the processing here is a contract for processing between us as the Controller and Notion Labs, Inc.

Data Subject rights

If personal data is processed by us as the Controller, you, as the Data Subject, depending on the legal basis and the purpose of the processing, have certain rights from Chapter III of the EU General Data Protection Regulation (GDPR), if applicable in particular, the right to information (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restrict processing (Article 18 GDPR), the right to data portability (Article 20 GDPR), and the right to object (Article 21 GDPR). If the processing of personal data is based on your consent, you have the right pursuant to Article 7 III GDPR to withdraw this consent under data protection law. To assert your Data Subject rights with regard to the data processed in this online application procedure, please contact us at (for contact details, see “Controller” section or

Final provisions

We reserve the right to adjust this data protection notice at any time so that it meets current legal requirements at all times or in order to illustrate changes in the application procedure or similar. The new data protection notice then applies when you visit this recruiting site again or submit a new application. In addition to this data protection notice, you can view our general data protection notice at