Privacy Policy
In this privacy policy, we inform you about the processing of your personal data.
Responsible Party
Deyan7 GmbH Nettelbeckstr. 36 44797 Bochum Germany
Email: hello@deyan7.de
Hosting
Vercel
Our website is hosted by our processor Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.
For the purpose of providing and delivering the website, connection data is processed. For the sole purpose of delivering and providing the website, data is not stored beyond the request itself.
The legal basis for data processing is legitimate interest (absolute technical necessity for the provision and delivery of the service "website" expressly requested by you through your access) pursuant to Art. 6(1)(f) GDPR.
For the operation of the website, connection data and other personal data are additionally processed within the framework of various other functions or services. This is described in detail within this privacy policy for the individual functions or services.
Analytics Services
Google Analytics
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyze website usage.
Legal basis: Processing takes place based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Google Analytics is only activated after your explicit consent via the cookie banner.
Collected data: shortened IP address, pages visited, time spent, browser and operating system used, device type, referrer, and timestamp of the visit. Google Analytics 4 does not transmit full IP addresses by default; IP anonymization occurs automatically.
Data transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023). This currently provides an appropriate basis for the transfer of data to the USA within the meaning of Art. 45 GDPR.
Storage duration: Cookies set by Google Analytics are stored for a maximum of 2 months. Aggregated analytics data is retained according to Google Analytics' default settings.
Revocation of consent: You can revoke your consent at any time by deleting the cookies stored in your browser. On your next visit, the cookie banner will be shown again, and you can decline usage.
Use of the AI Service AVA
Description of the Service
AVA is an AI-powered chat that we use as part of our application process to learn about your approach to AI-related tasks. You access AVA via a personal invitation link that we send you as part of your application.
Type and Scope of Processed Data
We process the following data: the email address stored in your personal invitation link, your answers to the four tasks and the closing question, files you upload, as well as technical session data such as timestamps and processing time.
Please do not upload any files containing confidential information of third parties or special categories of personal data pursuant to Article 9 GDPR.
Purposes of Processing
- Handling your application and assessing your suitability for the advertised position. The legal basis is Article 6(1)(b) GDPR.
- Providing evidence and defending against potential claims, in particular under the German General Equal Treatment Act (AGG). The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in documenting a proper application process and in defending against unfounded claims.
Legal Bases
The legal basis is Article 6(1)(b) GDPR. Participation in AVA takes place as a pre-contractual measure carried out at your request as an applicant.
In addition:
- Art. 6(1)(f) GDPR (legitimate interest), to technically provide and further develop the challenge. Our legitimate interest lies in the secure and uninterrupted operation of our application.
- Art. 6(1)(a) GDPR (consent), if you give us your consent to retain your documents for a longer period
Recipients / Processors
To operate AVA, we use service providers who act on our behalf and in accordance with our instructions. Your input is processed by the language model at OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. Your answers are not used to train AI models. The application is operated at Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, where the files you upload are stored and where your answers and the technical session data are held in a database. For technical traceability of the session, your answers and the technical session data are additionally stored with our processor Langfuse GmbH, Oranienburger Straße 91, 10178 Berlin, Germany. In addition, we use Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA, as a processor. Data processing agreements pursuant to Article 28 GDPR exist with all of them. Insofar as data is processed outside the European Union, this takes place on the basis of the European Commission's standard contractual clauses or an adequacy decision.
Storage Duration
Your information from AVA will be deleted as soon as it is no longer required for the application process, at the latest six months after the process has been concluded. This period takes into account potential claims under the German General Equal Treatment Act (AGG). If you give us your consent, we will retain your documents for a longer period so that we can approach you again about suitable positions.
No Automated Decision-Making
No automated evaluation or selection of applications takes place through AVA. All results and information are reviewed exclusively by designated employees; no automated decision within the meaning of Art. 22 GDPR is made. The AI competence test AVA is part of the application process of Deyan7 GmbH. The decision on how an application proceeds is not taken solely on the basis of the results from AVA.
Right to Object
If the processing of your personal data is based on legitimate interest, you have the right to object to this processing.
If there are no compelling legitimate grounds for processing on our part, the processing of your data on this legal basis will be discontinued.
Additionally, you have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.
The lawfulness of data processed prior to the objection is not affected by the objection.
Right of Revocation
You have the right to revoke consent already given at any time by changing your privacy settings.
In the case of consent to receive electronic advertising, revocation of your consent can be made by clicking the unsubscribe link. In this case, processing will be discontinued unless another legal basis exists.
The lawfulness of data processed prior to the revocation is not affected by the revocation.
Data Subject Rights
You also have the right to information, correction, deletion, and restriction of processing of personal data.
Insofar as the legal basis for the processing of your personal data lies in your consent or in a contract concluded with you, you also have the right to data portability.
Furthermore, you have the right to lodge a complaint with the supervisory authority.
Contact
If you have questions about this privacy policy, please contact us at: hello@deyan7.de