Privacy Information for applicants

The following text serves to inform you about the processing of your personal data, which is carried out by us when using our application process.

Data Controller

GK Software SE

Waldstrasse 7
08261 Schöneck
Germany

Tel.: +49 (0)3 74 64 84 - 0
Fax: +49 (0)3 74 64 84 - 15
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Chairman of the Supervisory Board: Nicholas Fraser
Management Board: Michael Scheibner (CEO), André Hergert (CFO), Michael Jaszczyk (CDXO)

Commercial Register Chemnitz HRB 31501
VAT ID: DE 141 093 347

ITC - Data Protection Team

If you have a data protection-related inquiry (contracts/inquiries about data protection, etc.), please send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.

Our team will take care of your request as soon as possible.

Please note: If you want to specifically contact the data protection officer (DPO), please send a message to This email address is being protected from spambots. You need JavaScript enabled to view it..

We process your personal data in the following cases:

Visit to Careersite

When you visit our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the retrieved file
• Website, as well as subpages, from which access is made (referrer URL)
• Browser used, the operating system of your computer, if applicable, and the name of your access provider

We process the aforementioned data for the following purposes:

• To ensure a reliable connection to the website
• To ensure a user-friendly experience with our website
• To evaluate the system security and stability
• For other administrative purposes

Legal basis of data processing: 

• The legal basis for processing data is Article 6, Paragraph 1, Item 1f, GDPR. Our legitimate interest results from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about you.

Duration of data processing:

• 14 days

Application Process:

Applications are accepted in both written and electronic form. Among other things, the following data is collected:

• Last name, first name
• Photo
• Date of birth
• Nationality
• Marital status
• Mother tongue and foreign languages
• Addresses
• Contact details (telephone, email), communication media
• Salary requirements (optional information)
• Education and qualifications
• Information on the status of residence and work permit (optional information)
• Application documents
• Earliest start date
• Status in the application process
• Data for planning recruitment interviews
• Correspondence

We process the aforementioned data for the following purposes:

• Performance of the application process
• Initiation of an employment relationship
• Filling a vacancy in the company

Legal basis of data processing: 

• Initiation of an employment relationship in accordance with Article 6, Paragraph 1b, GDPR, and Article 88 GDPR in conjunction with Section 26, Paragraph 1, BDSG
• Article 6, Paragraph 1a, GDPR for consent to be included in the applicant pool
• Article 6, Paragraph 1a, GDPR for consent to transfer data within the GK Group

Duration of data processing:

• For max. 6 months after completion of the application process
• If you have given your consent for your application to be included in the applicant pool, this data will be stored for a maximum of 2 years until revoked

Contact

It is possible to contact us on our website. By doing so, the following personal data will be processed on a voluntary basis:

• Email address
• Other voluntary information

We process the aforementioned data for the following purposes:

• This data is stored and used to respond to your request, to contact you, and for the technical administration required for this.

Legal basis of data processing: 

• The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR.

Duration of data processing:

• Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Categories of Recipients of Personal Data

Your personal data is not transferred to third parties other than for the purposes listed in the following.

We only disclose your personal data to third parties if:

• You have given your express consent in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR
• Disclosure in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• If there is a legal obligation to disclose the data in accordance with Article 6, Paragraph 1, Sentence 1c, GDPR
• It is permitted by law and is necessary to process contractual relationships with you in accordance with Article 6, Paragraph 1, Item 1b, GDPR

Data is only transferred to third countries if you have given us your consent.

Your Rights as a "Data Subject"

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Item 1f, GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation.

If you wish to exercise your right of revocation or to object, simply send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. or write to GK Software SE, Waldstrasse 7, 08261 Schöneck/Vogtland.

The right of access, rectification, erasure and restriction of processing

The data subject has the right of access to the personal data concerned and the right to rectification, erasure or restriction of processing. Furthermore, they have the right to object to the processing. We would like to point out that we will delete your data if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). Deletion will be replaced by blocking if there are legal or factual obstacles to this (for example, special retention obligations due to commercial and tax law requirements).

The right to data portability

The data subject has the right to data portability.

The right to complain to a supervisory authority

You have the right to complain to a supervisory authority. 

Provision of personal data

There is no legal obligation for you to provide personal data.

Automated decision-making including profiling

We do not use any profiling measures on our website.

Privacy Policy for Social Networks

The company operates profiles on the following networks. From our website, we only link to our profiles on the respective social networks:

Facebook: https://www.facebook.com/GKSoftwareSE/
Twitter: https://twitter.com/gk_software_se
Instagram: https://www.instagram.com/gksoftware/
LinkedIn: https://www.linkedin.com/company/gk-software
Xing: https://www.xing.com/company/gksoftware

The providers of the various platforms are primarily responsible for providing the data subject with information about the processing operations and enabling them to exercise their data protection rights. Irrespective of this, we would like to inform you about our appearance on social networks. We recommend that you do not send us any sensitive data via these profiles. Please use a direct communication channel for this purpose. 

All of the data that you enter on our social network profiles (e.g.: comments, pictures, private messages, etc.) are published by the platform operators and are used by us exclusively for the purposes stated below.

The legal basis for this is Article 6, Paragraph 1f, GDPR. The legitimate interest is based on public relations, on providing up-to-date information and on the possibility to interact with our visitors and contact applicants (Xing, LinkedIn) via GK accounts.

Data processing by the operators of social networks

When you call up our profiles, data is processed by the operator of the platform. The form in which this happens cannot be influenced by us, nor can we see it. However, the procedure usually depends on whether you yourself are registered with the platform. It is possible that the providers process the data outside the EU. This means that we cannot guarantee an approach that is in compliance with the GDPR.

You can find more information on the data processing performed by the individual platform operators in their privacy policies:

• Facebook: Social network; service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy;Opt-Out: Advertising settings: https://www.facebook.com/settings?tab=ads; Additional notes on data protection: Agreement on the joint processing of personal data on Facebook pages https://www.facebook.com/legal/terms/page_controller_addendum, data protection statement for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
• Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy: http://instagram.com/about/legal/privacy.
• Twitter: Social network; service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy: https://twitter.com/de/privacy, (Settings) https://twitter.com/personalization;
• LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• Xing: Social network; service provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany; Website https://www.xing.de; Privacy policy https://privacy.xing.com/de/datenschutzerklaerung.

Validity and Changes to this Privacy Policy

This privacy policy is currently valid and was updated in April 2023.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy from the website at any time.