Candidate Privacy Notice

Last updated: 22 July 2026

This notice explains how we process your personal data when you apply for a job at NetBird.

1. Who we are

NetBird GmbH, Brunnenstraße 196, 10119 Berlin, Germany ("NetBird", "we") is the controller for the personal data you share with us when you apply. Contact for privacy matters: hr@netbird.io .

2. What data we process

  • Application data you provide: name, contact details, CV/resume, links you share (e.g. GitHub, LinkedIn, portfolio), salary expectations, and your answers to application questions.
  • Data created during the process: interview notes, assessments, and correspondence with you.
  • Publicly available professional information where relevant to the role (e.g. your public GitHub profile for engineering roles).
  • If you were referred to us: the name of the person who referred you.

Please do not include special-category data (e.g. health, religion, ethnicity) in your application unless we specifically ask for it or you need an accommodation.

3. Why we process it and on what legal basis

  • To run the application process and decide on your application: Art. 6(1)(b) GDPR (in conjunction with § 26(1) BDSG).
  • To establish, exercise or defend legal claims, e.g. under the German General Equal Treatment Act (AGG): Art. 6(1)(f) GDPR.
  • To keep your profile on file for future roles (talent pool): only with your consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time with effect for the future.

4. Service providers and international transfers

We use service providers (processors) to run our recruiting, such as Ashby (our applicant tracking system), Google Workspace, communication and productivity tools (e.g. Slack, Notion), and AI assistants that support our team, for example by summarizing applications, drafting communication, and preparing interviews.

Some of these providers process data in the USA. Where personal data leaves the EU/EEA, the transfer is safeguarded by an EU adequacy decision (such as the EU-US Data Privacy Framework) or the EU Standard Contractual Clauses. You can contact hr@netbird.io for details on a specific provider or a copy of the safeguards.

5. AI and automated decision-making

AI tools support our recruiting team, but they do not make decisions. We do not use AI to score, rank or reject candidates. Every decision about your application is made by a human. There is no automated decision-making within the meaning of Art. 22 GDPR.

6. How long we keep your data

If your application is unsuccessful or you withdraw it, we keep your data for 6 months after the end of the application process (so we can respond to legal claims), then delete it. If you consent to joining our talent pool, we keep your profile for up to 2 years or until you withdraw your consent, whichever comes first. If you are hired, your application data becomes part of your personnel file.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, and data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time with effect for the future. Contact: hr@netbird.io . You can also lodge a complaint with a data protection supervisory authority; for us that is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI).

8. Do you have to provide your data?

No, but without the basic information we cannot process your application.