Candidate Privacy Policy
Last reviewed: 01.06.2026
Prestatech GmbH (doing business as Prestatech) (‘we’, ‘us’, or ‘our’), registered at Rosenthaler Straße 46/47, 10178 Berlin, Germany, is committed to protecting the privacy of individuals who apply for positions with us. This Policy explains what personal data we collect from candidates, how and why we use it, with whom we share it, and the rights you have regarding the data.
This Policy applies to all candidates who apply for roles at Prestatech.
1. Personal Data We Collect
During the course of our recruitment process, we collect and process personal data that you provide to us directly, as well as data we obtain from third parties such as recruitment agencies or professional networking platforms (LinkedIn, etc..)
The categories of personal data we may collect include:
Name, email address, telephone number;
Curriculum vitae, cover letter, and any other supporting documents you choose to submit;
Details of your employment history, qualifications, professional qualifications, and relevant skills;
Responses to any application questions or assessments we ask you to complete;
Notes and evaluations arising from interviews or technical assessments;
Details of references and, where applicable, the outcome of reference checks; and
Information about your right to work in the relevant jurisdiction, where legally required.
You may also voluntarily share additional information, such as salary expectations or preferred working arrangements.
We do not seek to collect special category data, such as health information, racial or ethnic origin, religious beliefs or biometric data, as part of our recruitment process. If you choose to include any such information in your application materials, it will be treated with the additional safeguards under the applicable privacy laws and deleted where it is not strictly necessary for the assessment of your application. Where special category data is processed, such processing will occur only where permitted under Article 9 GDPR.
2. How and Why We Use Your Personal Data
We use the personal data you provide in order to assess your suitability for the role to which you have applied, to communicate with you throughout the recruitment process, and to make and record our hiring decisions.
We process your personal data on the following legal bases:
Article 6(1)(b) GDPR / § 26 BDSG – Pre-contractual measures: processing is necessary to assess your application and take steps prior to potentially entering into a contract of employment with you.
Article 6(1)(c) GDPR – Legal obligation: where required by law, we process certain data to comply with our legal obligations (e.g., verification of right to work).
Article 6(1)(a) GDPR – Consent: if you are unsuccessful but consent to us retaining your details for future roles, we may add you to our talent pool. You may withdraw that consent at any time by contacting us at privacy@prestatech.com, and we will delete your data promptly upon receipt of your request.
Article 6(1)(f) GDPR – Legitimate interests: we may also process your data where we have a legitimate interest in doing so, for example to prevent fraud, to defend legal claims, or to detect dishonest applications, provided that such interests are not overridden by your own rights and interests.
We do not use your personal data for marketing purposes, and we do not sell your data to any third party.
3. Sharing Your Personal Data
Within Prestatech, access to your data is limited to the members of the recruitment team and hiring managers involved in the relevant process.
We may also share your data with the following categories of third-party service providers who process data on our behalf under appropriate data processing agreements:
Factorial HR (HR Platform and Applicant Tracking System, Spain) – our ATS provider through which applications are submitted and managed;
Amazon Web Services (cloud hosting, Frankfurt, Germany) – data is hosted within the European Economic Area;
Recruitment agencies or search firms that referred you to us, where relevant;
Reference checks are conducted only with your knowledge and, where required by applicable law, with your consent.; and
Legal, regulatory, or law enforcement authorities where we are required to do so by applicable law or in connection with legal proceedings.
We do not share your personal data with any other third parties without your explicit consent.
4. International Data Transfers
We take care to ensure that your personal data is stored and processed within jurisdictions that provide an adequate level of data protection. Factorial platform is hosted by Amazon Web Services in Frankfurt, Germany (EU-West region), within the European Economic Area. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place in accordance with applicable law, including the use of Standard Contractual Clauses approved by the European Commission.
5. How Long We Retain Your Data
We retain your personal data only for as long as is necessary for the purposes for which it was collected. If your application is unsuccessful, your data will be deleted from our active systems within six months of the final decision in the recruitment process, unless you have provided consent for us to retain it for a longer period as part of our talent pool, in which case we will retain it for up to twelve months from the date of your consent.
We may retain certain data for longer periods where required by law or where it is necessary for the establishment, exercise, or defence of legal claims.
6. Automated Decision-Making
We do not make decisions about candidates based solely on automated processing where those decisions produce legal or similarly significant effects. Where automated tools form part of our recruitment workflow, a member of our team will always review the outcome and make the final decision.
7. Your Rights
Depending on where you are based, applicable data protection law may grant you a number of rights in relation to your personal data. These include:
The right to be informed about the personal data we process about you (Art. 13–14 GDPR);
The right to request access to the personal data we hold about you and to receive a copy of it (Art. 15 GDPR);
The right to request to rectify or update the personal data you have provided (Art. 16 GDPR);
The right to request that we delete your personal data where there is no longer a reason for us to retain it (Art. 17 GDPR);
The right to ask us to restrict our processing of your data in certain circumstances (Art. 18 GDPR);
The right to object to our processing of your data, including where we rely on legitimate interests (Art. 21 GDPR);
The right to withdraw any consent you have given at any time without affecting the validity of processing carried out prior to that withdrawal (Art. 7(3) GDPR); and
The right to receive your data in a portable, machine-readable format (Art. 20 GDPR).
To exercise any of these rights, please contact us at privacy@prestatech.com.
8. Right to Lodge a Complaint
If you believe that our processing of your personal data does not comply with applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority. You may do so in the Member State where you are domiciled, at your place of work, or at the place of the alleged breach.
9. Use of Cookies
If you access our careers page or submit an application through our website, cookies and similar tracking technologies may be used in accordance with our general Cookie Policy available on our website at www.prestatech.com. Please refer to that policy for full details of the cookies we use and how to manage your preferences.
Applications submitted through third-party recruitment platforms may also be subject to the privacy and cookie notices of those platforms
10. Changes to This Notice
We review this notice and may update it from time to time to reflect changes in our processing activities, applicable legislation, or data protection best practice. Where changes are material, we will take reasonable steps to bring them to the attention of active candidates.
11. Contact
For any questions relating to this notice or to the way in which we handle your personal data, please contact us at:
Prestatech GmbH
Rosenthaler Straße 46/47,
10178 Berlin,
Germany
Email: privacy@prestatech.com
Email: dpo@prestatech.com
The DPO is an external service provider appointed pursuant to Art. 37 GDPR:
Spirit Legal - Rechtsanwaltsgesellschaft mbH