Handling of Applicant Data
We offer you the opportunity to apply with us (e.g. by email, by post, or via an online application form). In the following, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data is carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated in strict confidence.
Responsibility in the Application Process
The responsible party within the meaning of the General Data Protection Regulation (GDPR) for the processing of your applicant data is exclusively the company to which you are specifically applying.
There is no unified or group-wide responsibility. Each company processes applicant data independently and under its own data protection responsibility.
Applications may be directed in particular to one of the following companies:
-
Magicline
-
PerfectGym
-
Finion Capital
-
MySports
-
Finion FairPay
The responsible company in the specific case is determined by the respective job posting and the communication context of the application (e.g. email address, application form, website).
The respective contact details of the responsible party, including the data protection officer's information (if appointed), can be found in the privacy notices on the website of the respective company.
Your applicant data will not be passed on to other companies unless this is explicitly stated in the job posting or covered by a separate consent.
Scope and Purpose of Data Collection
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes from interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is Art. 6(1)(b) GDPR (general contract initiation) and — if you have given consent — Art. 6(1)(a) GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in processing your application.
If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship.
Data Retention Period
If we are unable to make you a job offer, you reject a job offer, or you withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the conclusion of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. Retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the expiry of the 6-month period (e.g. due to an imminent or pending legal dispute), deletion will only occur once the purpose for the extended retention has ceased to apply.
Longer retention may also take place if you have given appropriate consent (Art. 6(1)(a) GDPR) or if statutory retention obligations preclude deletion.
Inclusion in the Applicant Pool
If we are unable to make you a job offer, there may be the possibility of including you in our applicant pool. If included, all documents and information from the application will be transferred to the applicant pool so that we can contact you in the event of suitable vacancies.
Inclusion in the applicant pool takes place exclusively on the basis of your explicit consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no bearing on the current application process. The data subject can revoke their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless statutory retention grounds exist.
Data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
Use of the Applicant Management Tool Lever
This website integrates the applicant management tool Lever. The provider is Lever, Inc., 1125 Mission Street, San Francisco, CA 94103, USA. When a page featuring a Lever form is accessed, a connection to the provider's servers is established. Lever receives, among other things, your IP address and processes the data from your application documents and log data to provide the application process.
We have configured the tool so that applicant data is processed and stored exclusively in Lever's EU data center (AWS region Frankfurt). Lever acts as a data processor under the GDPR and has no direct access to applicant data. Control remains with us. To secure data transfers, we have concluded a Data Processing Agreement with Lever pursuant to Art. 28 GDPR as well as the Standard Contractual Clauses approved by the EU Commission. In addition, Lever has joined the EU-US Data Privacy Framework.
The use of Lever is within our legitimate interest in the efficient processing of applications (Art. 6(1)(f) GDPR). If you give us your consent for the longer-term storage of your documents or for being contacted for future vacancies, the legal basis is Art. 6(1)(a) GDPR. You can revoke this consent at any time. Further information on data protection at Lever can be found at https://www.employinc.com/privacy/ and https://help.lever.co.
Use of the AI-Powered Applicant Management Tool Nova
We use the AI-powered applicant management tool Nova in the application process. The provider is DWEET LTD, Aston House, Cornwall Avenue, London, England, N3 1LF. As part of your application, Nova receives and processes the data from your application documents (e.g. CV, cover letter).
Nova automatically analyzes your application documents using artificial intelligence and creates an evaluation ranking (scoring) based on objective criteria established by us in advance. This is used to provide our hiring managers with an initial assessment and to speed up the selection process. The final decision on your application (e.g. invitation to a job interview, rejection) is made exclusively by our employees and is not automated by the software.
To carry out the AI analysis, Nova integrates the technologies of OpenAI (USA) and Google Gemini (USA). Your application data is temporarily transferred to servers in the USA. OpenAI and Google Gemini do not permanently store applicant data (zero data retention policy). The data itself is processed on systems hosted in the EU.
Nova acts as a data processor under the GDPR. To secure data transfers, we have concluded a Data Processing Agreement with DWEET pursuant to Art. 28 GDPR.
The use of Nova is within our legitimate interest in the efficient processing of applications (Art. 6(1)(f) GDPR). We draw your attention to your right to object pursuant to Art. 21 GDPR.
Further information on data protection at Nova can be found at: https://nova.dweet.com/docs/legal/privacy-policy
Use of the AI-Powered Interview Tool Metaview
With your consent, we use the AI-powered interview tool Metaview in the application process. The provider is Metaview Global Limited, Floor 3, 16 Blossom Street, London, E1 6PL, United Kingdom.
As part of your job interview, Metaview records your audio and/or video recording, automatically transcribes it using artificial intelligence, and creates structured interview notes in the format specified by us. The transcripts and structured notes are then transferred to our applicant management system Lever. This is used to provide our hiring managers with complete and consistent documentation and to improve the selection process. The final decision on your application (e.g. invitation to further interviews, rejection) is made exclusively by our employees and is not automated by the software.
To carry out the AI-powered transcription and structuring, Metaview integrates the technologies of OpenAI (USA) and Anthropic (USA). Your interview recordings and transcripts are temporarily transferred to servers in the USA. OpenAI and Anthropic do not permanently store applicant data (zero data retention policy). The data itself is stored on systems hosted in the EU.
Metaview acts as a data processor under the GDPR. To secure data transfers, we have concluded a Data Processing Agreement with Metaview pursuant to Art. 28 GDPR.
The use of Metaview is based on your consent (Art. 6(1)(a) GDPR in conjunction with Art. 9(2)(a) GDPR). You can revoke your consent at any time by informing us before or during the interview. Revocation has no negative impact on your application; in this case the interview will be documented manually.
Further information on data protection at Metaview can be found at: https://www.metaview.ai/privacy-policy
Our Social Media Presence
This Privacy Policy applies to the following social media presences
https://www.facebook.com/sportalliancecom
https://www.instagram.com/sportalliance_com/#
https://www.xing.com/pages/sportalliancegmbh
https://www.linkedin.com/company/sportalliance/
https://vimeo.com/user161717962
Data Processing by Social Networks
We maintain publicly accessible profiles on social networks. The specific social networks we use can be found below.
Social networks such as Facebook, X, etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, data collection takes place, for example, via cookies stored on your device or by capturing your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot trace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal Basis
Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6(1)(a) GDPR).
Responsible Party and Assertion of Rights
When you visit one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. You can generally assert your rights (access, rectification, deletion, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Retention Period
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions — in particular retention periods — remain unaffected.
We have no influence over the retention period of your data stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).
Your Rights
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, you can request the rectification, blocking, deletion, and, under certain circumstances, the restriction of the processing of your personal data.
Individual Social Networks
Facebook
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter "Meta"). According to Meta, the collected data is also transferred to the USA and other third countries.
We have concluded a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details, please refer to Facebook's Privacy Policy: https://www.facebook.com/about/privacy/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452
Instagram
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details on how your personal data is handled, please refer to Instagram's Privacy Policy: https://privacycenter.instagram.com/policy/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452
XING
We have a profile on XING. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. For details on how your personal data is handled, please refer to XING's Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.
LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how your personal data is handled, please refer to LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448
Vimeo
We have a profile on Vimeo. The provider is Vimeo, Inc., 555 West 18th Street, New York 10011, USA.
Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses and, according to Vimeo, on "legitimate business interests". Details can be found here: https://vimeo.com/privacy.
For details on how your personal data is handled, please refer to Vimeo's Privacy Policy: https://vimeo.com/privacy.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5711