of JUST Open Source e.S., Schönhauser Allee 163, 10435 Berlin (also referred to as “JUST Open Source”; “JUST”; "company”; "the Foundation"; “we”; “our” or “us”) is the data controller of any information you submit in support of your application according to the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
Purpose of This Notice
This notice tells you how we use the data you submit when you apply for a job or submit to us an application for recruitment purposes. It also tells you how you can exercise your rights (including the right to object to some of the data handling we carry out). More information about your rights and how you can exercise them is set out in the “Your Rights” section below.
Why We Collect, Use and Store Personal Data
We use the information you supply in support of your application (e.g. name, birthday, email address, postal address, contact details, gender, nationality, education information, work history, photos, certificates, and references) to consider your application and assess your suitability. We use your data to our legitimate interests in managing our recruitment based on Art. 6 par. 1 s. 1 lit. f) GDPR and so that we can take steps upon your request prior to entering into an employment or services contract (Art. 6 par. 1 s. 1 lit. b) GDPR). If a position that is, or may be, of interest to you requires background checks, and we, therefore, need to perform such checks in accordance with applicable law, we will inform you about this.
In addition, we reserve the right to acquire supplementary data about you from various sources, including recruiters, employment research firms, identity verification services, the references you provide to us, websites and other publicly accessible data on the Internet. To the extent permitted by the applicable law and depending on your future role at our company, we may collect details of professional registrations and sanctions with professional bodies.
Upon applying for a position with our organization or submitting supportive information for your application, we shall duly inform you whether the requested information is indispensable for the processing of your application or if its provision remains optional.
Where necessary, we will also use this data to our legitimate interests in accessing appropriate professional advice (Art. 6 par. 1 s.1 lit. f) GDPR) and to ensure we comply with legal obligations to which our business is subject (Art. 6 par. 1 s.1 lit. c) GDPR).
How Long We Keep This Information for
We usually retain information supplied by job applicants for no longer than it is necessary to process your application within the recruitment decision. If your application is unsuccessful, we retain your personal data in accordance with the applicable retention period depending on the applicable law. We may also decide to retain your details for longer if we think you may be suitable for another position that may arise in the future, provided you give us your consent (Art. 6 par. 1 s.1 lit. a) GDPR).
If your application is successful, relevant information will be used to administer your subsequent employment and will be retained and used in accordance with our worker privacy notices (which we will make available to you when you take up your employment or begin to provide services).
How We Share Your Personal Data
Your data might be shared with other entities for the purpose of assessing your application only. In particular, we may share your personal information with JUST Beteiligungen GmbH (registered address Schönhauser Allee 163, 10435, Berlin, Germany), a third party with whom we are affiliated and cooperate with on a range of activities, for the purposes of assessing your application where necessary and appropriate for the purposes of our collaboration.
Where necessary for the management of our recruitment process, we will share your information with our service providers and professional advisers (e.g. recruitment agencies, providers who carry out candidate assessment programmes for us).
If we have a reasonable interest in verifying the data you have provided (e.g. if there are indications that they are incorrect) and we have no other means to check this, we will, in accordance with applicable law, also contact third parties whose details you have supplied for that purpose so that we can verify the information you have provided in relation to your previous employment history and qualifications.
Where the personal information you send us in support of your application is transferred by us or our service provider(s) outside the European Economic Area (EEA), and where this is a country which is not subject to an adequacy decision by the EU Commission, we protect your privacy adequately by entering into EU approved contractual clauses with service providers operating outside the EEA or a service provider’s Processor Binding Corporate Rules. For further information, including how to obtain a copy of the documents used to protect your information, please contact us as described in the “Contact Us” section below.
According to the GDPR, you may have the following rights pursuant to Art. 15-18 and 20-21 GDPR:
You may have the right to access your personal data and to obtain a copy of your personal data undergoing processing (Art. 15 GDPR); to correct, delete or restrict (stop any active) processing of your personal data (Art. 16- 18 GDPR); and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format, and to ask us to share (port) this data to another controller (Art. 20 GDPR);
You may be entitled to object to the processing of your personal data in some circumstances (where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing (Art. 21 GDPR);
In cases where we have asked for your consent, you may withdraw consent at any time (Art. 7 par. 3 GDPR). It is important to note that the withdrawal of consent will not impact any data processing activities that have already been carried out prior to the withdrawal.
However, there are some exceptions to these rights under the GDPR and applicable local laws. For example, it will not be possible for us to delete your data if we are required to keep it by law (e.g. where retention of your personal data is required by law for tax and bookkeeping obligations) or if we hold it in connection with a contract with you. Similarly, access to your data may be refused if making the information available would reveal personal information about another person or if we are legally prevented from disclosing such information.
To exercise any of the above-mentioned rights, you can get in touch with us using the details set out below. When addressing us, please always provide your name, address and/or email address, as well as detailed information about the change you require.
If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.
Updates to this document
This Notice may be updated periodically. We will update the date at the bottom of its last page accordingly and encourage you to check for changes that we have made, which will be available at justopensource.io/applicant-notice. On some occasions, we may also actively advise you of specific data handling activities or significant changes to this Notice, as required by applicable law.
Questions, comments or requests concerning this privacy notice are welcomed and should be addressed to email@example.com.
This notice was last updated on June 19, 2023