Privacy policy for applicants
As of: 12/2025
1. Responsible party and contact details
The person responsible for data processing on this career website is:
Migrando GmbH
Rudolf-Breitscheid-Straße 1
03046 Cottbus
Germany
Phone: [PLACEHOLDER: +49 XXX XXXXXXX]
Email: karriere@migrando.de
Managing Director: Sebastian Stein
Job vacancies for Migrando lawyers (sole proprietorships) are also published on this career website. The following is also responsible for applications for these positions:
Migrando Lawyers
Lawyer Fabian Graske
Rudolf-Breitscheid-Straße 1
03046 Cottbus
Phone: [PLACEHOLDER: +49 XXX XXXXXXX]
Email: karriere@migrando.de
The responsible entity is specified in each job posting.
Data Protection Officer:
Philipp Donath
Rudolf-Breitscheid-Straße 1
03046 Cottbus
Phone: +49 (0) 355 – 54788161
FAX: +49 (0) 3573 – 7056259
Email: datenschutz@migrando.de
2. Processing of applicant data
2.1 Scope and purpose of data processing
When you apply for a position via our career portal, we process the personal data you provide for the purpose of conducting the application process. This includes assessing your suitability for the advertised position and deciding whether to establish an employment relationship.
The following categories of data are processed:
- Master data: first and last name, title, date of birth
- Contact details: email address, phone number, address
- Application documents: cover letter, resume, references, certificates
- work samples
- Professional data: Professional career, qualifications
- language skills
- Job-related information: Salary expectations, earliest start date
- desired position
- Communication data: Correspondence during the application process
2.2 Special categories of personal data
If you provide us with special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., information on severe disability or equality) as part of your application, this data will be processed on the basis of Art. 9 (2) (b) GDPR in conjunction with § 26 (3) BDSG, insofar as this is necessary for the exercise of rights or the fulfillment of legal obligations under labor or social security law.
2.3 Legal basis
Your applicant data will be processed on the basis of Art. 6 (1) (b) GDPR (implementation of pre-contractual measures) in conjunction with Section 26 (1) BDSG (decision on the establishment of an employment relationship).
For the continued storage of your data in our talent pool, we ask for your separate consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 26 (2) BDSG.
The storage of application documents after completion of the application process for defense against possible legal claims is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in defending against any claims for damages under the General Equal Treatment Act (AGG).
2.4 Storage period
If your application is unsuccessful: Your application data will be deleted no later than six (6) months after completion of the application process. This period is based on the limitation periods for asserting claims and bringing legal action under the General Equal Treatment Act (Section 15 (4) AGG, Section 61b ArbGG). If legal claims are asserted, we will store your data until the proceedings have been legally concluded.
If you withdraw your application: If you withdraw your application, your data will be deleted immediately, provided that there are no legal retention obligations.
Upon inclusion in the talent pool: With your express consent, we will store your application data for up to twenty-four (24) months so that we can contact you about suitable job openings. You can revoke this consent at any time.
If your application is successful: Upon hiring, the data required for the employment relationship will be transferred to your personnel file. Documents that are no longer needed will be deleted.
2.5 Recipients of the data
Your application data will only be passed on to the following recipients:
Internal:
- human resources department
- Managers and decision-makers with technical responsibility for the advertised position
External:
- Personio SE & Co. KG as a processor (see section 3)
No data will be passed on to other third parties unless we are legally obliged to do so.
3. Personio applicant tracking system
We use software from Personio SE & Co. KG, Rundfunkplatz 4, 80335 Munich, Germany (hereinafter referred to as "Personio") to manage applications.
3.1 Type of processing
Personio provides us with cloud-based applicant tracking software that we use to record and manage your application and carry out the selection process. The data you enter is stored on Personio's servers.
3.2 Legal basis
The use of Personio is based on Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG (Federal Data Protection Act) for the purpose of conducting the application process.
3.3 Order processing
Personio is our data processor in accordance with Art. 28 GDPR. We have concluded a data processing agreement with Personio that ensures compliance with data protection requirements.
3.4 Storage location and security
All application data is stored exclusively on ISO 27001-certified servers in Frankfurt am Main, Germany (AWS). The data does not leave the European Union.
Data transmission is TLS-encrypted. When not in use, data is protected using AES-256 encryption.
3.5 Transfer to a third country
Your application data will not be transferred to countries outside the European Union or the European Economic Area.
Further information on data protection at Personio: https://www.personio.de/datenschutz/
4. Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This tool is used for the central management of website tags (code snippets for measuring traffic and behavior).
Google Tag Manager itself does not set any cookies or process any personal data, but merely triggers other tags (such as Google Analytics or Google Ads), which in turn collect data.
The use of Google Tag Manager is necessary for the provision of the services described below and is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the simple, efficient, and secure management of the required tags.
5. Web analysis with Google Analytics
On this website, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
5.1 Scope of processing
Google Analytics uses cookies that enable analysis of website usage. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The following data is collected:
- IP address (anonymized)
- Browser type and version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer
- Time of server request
- Dwell time, page views, and click behavior
5.2 Legal basis
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. Consent is obtained via our cookie consent tool. Without your active consent, no Google Analytics cookies will be set and no data will be transferred to Google.
5.3 IP anonymization
We use Google Analytics with IP anonymization enabled. This means that your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission.
5.4 Storage period
The data we send and link to cookies is automatically deleted after fourteen (14) months. Data that has reached its retention period is automatically deleted once a month.
Further information: https://policies.google.com/privacy
6. Google Ads (conversion tracking)
On this website, we use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
6.1 Scope of processing
Google Ads conversion tracking allows us to track which advertisements lead to applications. To do this, a cookie is set when you access our website via a Google ad. This cookie expires after thirty (30) days.
6.2 Legal basis
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.
6.3 Google Consent Mode v2
We use Google Consent Mode v2 in Basic Mode. This means that no tracking data will be transmitted to Google without your express consent.
Further information: https://policies.google.com/technologies/ads
7. General information about Google services (Google Analytics and Google Ads)
7.1 Order processing
We have entered into a data processing agreement with Google that regulates the processing of your data and ensures compliance with data protection requirements.
7.2 Third-country transfer to the USA
Google may transfer your data to the United States. The United States has an adequacy decision from the European Commission based on the EU-US Data Privacy Framework (DPF). Google LLC is certified under the DPF, ensuring an adequate level of data protection.
7.3 Withdrawal of consent
You can revoke your consent to the use of all Google services mentioned above at any time with future effect by adjusting the cookie settings via the corresponding link in the footer of our website.
8. Meta Pixel (conversion tracking and retargeting)
8.1 Provider
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
8.2 Scope of processing
Meta Pixel enables us to measure the effectiveness of our ads on Facebook and Instagram. To do this, a cookie is set that transmits information about your activities on our website (e.g., page views, clicks, start of an application) to Meta. This is used to create target groups (custom audiences) and to measure the success of our advertising campaigns.
8.3 Legal basis
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.
8.4 Third-country transfer
Your data may be transferred to Meta Platforms Inc. in the USA. The provisions on data transfer to the USA (EU-US Data Privacy Framework) set out in section 7.2 apply.
8.5 Revocation
You can revoke your consent at any time via the cookie settings in the footer.
9. LinkedIn Insight Day
9.1 Provider
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
9.2 Scope of processing
We use the LinkedIn Insight Tag to measure the effectiveness of our LinkedIn advertising campaigns (conversion tracking). It also enables us to show you relevant job ads on the LinkedIn platform (retargeting). The tag collects data such as your IP address (truncated), device characteristics, and page URLs.
9.3 Legal basis
Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.
9.4 Transfer to third countries
Data may be transferred to LinkedIn in the USA. The provisions on data transfer to the USA (EU-US Data Privacy Framework) set out in section 7.2 apply.
9.5 Revocation
You can revoke your consent at any time via the cookie settings in the footer.
10. Cookie consent tool
10.1 Scope of processing
We use [PLACHOLDER: NAME OF COOKIE CONSENT TOOL] to obtain and document your consent to the storage of cookies. When you visit our website, the following data is collected:
- Your IP address (anonymized)
- Date and time of your consent or refusal
- browser information
- Your consent preferences
10.2 Legal basis
The processing is necessary to fulfill our legal obligation to provide evidence of consent in accordance with Art. 7 (1) GDPR and is therefore carried out on the basis of Art. 6 (1) lit. c GDPR.
10.3 Storage period
Your consent preferences will be stored for twelve (12) months. After this period, you will be asked to give your consent again.
10.4 Necessity
The storage of consent cookies is technically necessary within the meaning of Section 25 (2) No. 2 TDDDG and therefore does not require consent.
11. SSL/TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as your application documents. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
12. Your rights as a data subject
You have the following rights with regard to your personal data:
12.1 Right of access (Art. 15 GDPR)
You have the right to request information about the personal data we have stored about you. This includes information about the purposes of processing, data categories, recipients, and storage periods.
12.2 Right to rectification (Art. 16 GDPR)
You have the right to request the immediate correction of inaccurate personal data or the completion of incomplete personal data.
12.3 Right to erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data, provided that the requirements of Art. 17 GDPR are met. This is particularly the case if the data is no longer necessary for the purposes for which it was collected or if you have revoked your consent.
12.4 Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR applies, for example if you dispute the accuracy of the data.
12.5 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You may transmit this data to another controller, provided that the processing is based on consent or a contract and is carried out using automated means.
12.6 Right to object (Art. 21 GDPR)
Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. To exercise your right to object, please contact: datenschutz@migrando.de
12.7 Revocation of consent (Art. 7 (3) GDPR)
You have the right to revoke your consent at any time with effect for the future. The revocation does not affect the legality of the processing carried out until the revocation.
You can revoke your consent to the use of cookies via the cookie settings in the footer. You can revoke your consent to be included in the talent pool by sending an email to karriere@migrando.de.
13. Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
Competent supervisory authority for Migrando GmbH:
The State Commissioner for Data Protection and the Right to Access Files Brandenburg
Access to files Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Telephone: 033203 356-0
Email: poststelle@lda.brandenburg.de
Website: www.lda.brandenburg.de
You can also contact the supervisory authority in your usual place of residence or workplace.
14. Necessity of data provision
The provision of your personal data as part of the application process is neither legally nor contractually required. You are not obligated to provide personal data.
However, it is not possible to carry out the application process without your application documents. Without the necessary information, we cannot assess your suitability for the advertised position and therefore cannot consider your application.
15. Automated decision-making
Automated decision-making, including profiling, in accordance with Art. 22 GDPR does not take place. Selection decisions in the application process are made exclusively by our employees.
16. Current status and changes to this privacy policy
This privacy policy is currently valid and was last updated in December 2025.
Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed at any time on this website.