Privacy Policy
Privacy Policy GetYourGuide.Careers
The protection of your personal data is important to us. With this privacy policy, we would like to explain to you in more detail what personal data we collect and for what purposes this data is processed.
1. Controller and contact
The controller for purposes of processing your personal data when you browse this website is:
GetYourGuide Deutschland GmbH
Sonnenburger Strasse 73
10437 Berlin
Germany
If you submit an application, the data controller for processing this application is the respective GetYourGuide entity to which you apply, based on the location of the position advertised in the job post:
Positions based in Germany, except Customer Care:
GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany
Positions in Customer Care based in Germany:
GetYourGuide Global Services GmbH & Co. KG, Sonnenburger Straße 73, 10437 Berlin, Germany
Positions based in Austria:
GetYourGuide Austria GmbH, Gertrude-Fröhlich-Sandner Straße 2-4, Tower 9, Floor 7,8,9, Vienna 1100, Austria
Positions based in Australia:
GetYourGuide Australia Pty Ltd, Level 6, Spring Street, Sydney NSW 2000, Australia
Positions based in Brazil:
GetYourGuide Brazil Ltd, Travessa do Ouvidor, 50, Sala 501, Centro, Rio de Janeiro, RJ, CEP 20040-040, Brazil
Positions based in Canada:
GetYourGuide Canada Inc, 3200 - 650 West Georgia Street, Vancouver BC V6B 4P7, Canada
Positions based in Dubai:
GYG Middle East FZ LLC, Dubai Internet City, Building 1, Unit EO28, Dubai, United Arab Emirates
Positions based in France:
GetYourGuide France SASU, 28 Rue de Schweighaeuser, 67000 Strasbourg, France
Positions based in Hong Kong:
GetYourGuide Hong Kong Ltd, Unit 1112, 11/F, Wing on Plaza, 62 Mody Road, Tsim Sha Tsui East, Kowloon, Hong Kong
Positions based in Italy:
GetYourGuide Italy S.r.L, Via Antonio Salandra 18, Rome, CAP 00187, Italy
Positions based in Japan:
GetYourGuide Japan K.K., Level 2, Marunouchi Nijubashi Building, 2-2, Marunouchi 3-chome Chiyoda-ku, Tokyo 100-0005, Japan
Positions based in the Netherlands:
GetYourGuide Netherlands BV, Joop Geesinkweg 701, 1114AB Amsterdam - Duivendrecht, Netherlands
Positions based in Spain:
GetYourGuide Spain SL, Calle de Pallars 108, 08018 Barcelona, Spain
Positions based in Switzerland:
GetYourGuide AG, Stampfenbachstrasse 48, 1. Etage, 8006 Zürich, Switzerland
Positions based in the UK:
GetYourGuide UK Ltd, 7 Henrietta Street, WC2E 8PS London, UK
Positions based in the USA:
GetYourGuide Inc, 80 Pine Street, 24th Floor, New York, NY 10005, USA
If you have any questions or suggestions regarding data protection or would like to exercise your rights, please feel free to contact the Data Protection Officer. You can reach the Data Protection Officer of GetYourGuide Deutschland GmbH at:
.png)
2. Subject of data protection
The subject of data protection is personal data, i.e. all information relating to an identified or identifiable natural person. The GDPR only applies to personal data that is collected or otherwise processed by an entity in the European Union or which collects or uses your data in relation to offering of goods or services to data subjects in the European Union or the monitoring of data subjects’ behaviour in the European Union. Personal data is also referred to simply as data in the following.
3. Applications for employment
If you apply directly to a GetYourGuide entity listed above or, if applicable, via a headhunter, the respective entity will process your application documents and the information contained therein for the purpose of deciding on the establishment of an employment relationship. The respective entity will process further data within the context of any job interviews. During the hiring process GetYourGuide Deutschland GmbH will act as a data processor on behalf of the respective entity. The data processing is carried out on the legal basis of Art. 6 para. 1 lit. b GDPR and in accordance with any specific employee data protection legislation applicable (e.g. for Germany, Sec. 26 para. 1, 3 BDSG).
If the respective entity is unfortunately unable to offer you a position, your application documents will generally be retained for as long as necessary after the conclusion of the respective application process in order to be able to answer queries in connection with your application. Further storage may take place if this is necessary for the provision of evidence, in particular for the defence, assertion or enforcement of claims (Art. 6 para. 1 lit. f GDPR).
For our application management, GetYourGuide uses a service provided by Greenhouse Software, Inc, based in the USA. Please note that there is no EU Commission adequacy decision for the USA. We have therefore concluded the standard contractual clauses approved by the EU Commission with Greenhouse Software, Inc. pursuant to Art. 46 para. 2 lit. c GDPR. For conducting online interviews, GetYourGuide use the services provided by Zoom Video Communications, Inc., 55 Almaden Blvd, 6thFloorSan Jose, CA, USA. Please note that there is no EU Commission adequacy decision for the USA. We have therefore concluded the standard contractual clauses approved by the EU Commission with Zoom Video Communications, Inc. pursuant to Art. 46 para. 2 lit. c GDPR.
In some cases, the respective GetYourGuide entity might ask you for your express consent in order to record one or more interviews you participate in, as part of the recruiting process. This recording will be used solely for the purpose of training our recruitment coordinators and will be deleted after 60 days. For this, we use a service provided by Screenloop Ltd, a UK company with registered address at New Dover RoadCanterbury CT1 3DN, which is integrated with Zoom Video Communications, Inc. and Greenhouse Software, Inc. The legal basis for this processing is your express consent (Art. 6 para. 1 lit. a GDPR).
3.1. Contacting you for further positionsIf a GetYourGuide entity acting as a data controller based on the job location is unfortunately unable to offer you a position upon your application, and if you consent, the GetYourGuide entity will store your application to inform you about interesting positions relevant for you and might share this data for the same purpose with other GetYourGuide entities (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future. For this purpose, you can, for example, contact us using the contact details above. A withdrawal does not affect the processing that took place until your withdrawal.
3.2. Approaching via professional social networks
GetYourGuide also reserves the right to contact you via professional social networks with regard to vacancies with us if you have indicated via your profile settings that you are open to being contacted in this regard. Within this context, we also process your data deposited with this network. The processing is based on our legitimate interest in approaching suitable candidates (Art. 6 para. 1 lit. f GDPR).
3.3. Surveys
If applicable, GetYourGuide will invite you to participate in a survey after the application process has been completed. We process the data you provide within this context on the basis of our legitimate interest in improving our application processes (Art. 6 para. 1 lit. f GDPR). For this purpose, we use a service provided by Screenloop, a UK company with registered address at New Dover Road Canterbury CT1 3DN.
3.4. Coding tests
In order to determine the suitability of an applicant for certain positions in the coding field, GetYourGuide uses tests provided by Codility Limited, based in the UK, together with their infrastructure. The processing is necessary for the decision on the establishment of an employment relationship (Art. 6 para. 1 lit. b GDPR and in accordance with any specific employee data protection legislation applicable (e.g. for Germany, Sec. 26 para. 1, 3 BDSG).
4. Technical service providers
We use technical service providers for hosting and some of the services required for the website. Accordingly, the processing of data takes place on the servers of these service providers. These service providers only process the data according to our explicit instructions and are obliged to guarantee sufficient technical and organisational measures for data protection. Consequently, our service providers act for us as so-called processors within the meaning of Art. 28 GDPR.
4.1. Hosting of the website
For the hosting of our website, we use the services of Webflow, Inc. ("Webflow") based in San Francisco, CA 94103. Accordingly, when you interact with our website or provide personal data, it is processed on Webflow servers. There is no adequacy decision for the USA. We have therefore concluded the standard contractual clauses approved by the EU Commission pursuant to Art. 46 para. 2 lit. c GDPR with Weblfow.
5. New jobs notifications
You have the option on our website to sign up for notifications on new jobs we may post on our website. By signing up for such notifications for our newsletter, you therefore consent to us processing your name, email address, LinkedIn profile URL and the job location you are interested in for the purpose of sending the notifications. The legal basis for this processing is Art. 6 para. 1 lit a GDPR. You can withdraw your consent at any time by unsubscribing from our notifications. To do this, you can use the unsubscribe link contained in every email or send the DPO a message using the contact details above. To verify your e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). When you register for the notifications, we store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to prove your consent (Art. 6 para. 1 lit. c in conjunction with Art. 7 para. 1 GDPR).
6. Social media
You can find information about GetYourGuide’s social media pages in our Privacy Policy at https://www.getyourguide.com/c/privacy-policy.
7. Cookies
We use so-called "cookies" to offer certain functions of our website and to optimise the use of our website. "Cookies" are small files that are stored on your device with the help of your internet browser. Specifically, we use the following cookies (in addition to other cookies specified in this privacy policy or our cookie consent):
● Session cookies: These cookies are needed to store certain technical data during your visit to our website.
● Persistent cookies: These cookies are needed to store data beyond a browser session if you wish to do so.The legal basis for the use of these cookies is Sec. 25 para. 2 no. 2 of the German Act on Data Protection for Telecommunications and Telemedia (TTDSG) and Art. 6 para. 1 b GDPR, insofar as they are necessary for the use of our website and the functions you have accessed. Otherwise, we use cookies – as described below – on the basis of your consent. You can withdraw your consent at any time via our consent manager.
8. Hotjar
If you have consented, we use Hotjar, a web analytics services of Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta (“Hotjar”). Hotjar is a technology service that analyses how users use our website and services, e.g. which links users click, how much time they spend on which pages, which features and content they look at etc.). We use this information to evaluate and improve our website and services. Hotjar uses cookies and similar technologies to collect this information, including a device’s IP address processed during your session and stored in a de-identified form, device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. You can find further details at https://help.hotjar.com/hc/en-us/sections/115003204947 .The use of Hotjar is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time via our consent manager. This does not affect the lawfulness of the processing carried out until your withdrawal.
9. Google Analytics
If you have consented, we use Google Analytics, a web analytics services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Please note that this can lead to data processing by the Google LLC in the US. Google Analytics collects pseudonymous data from you about the use of our website. This data is transmitted to a Google server in the EU. Google will neither store IP addresses nor transfer them outside the EU. IP addresses are solely used to identify the city and region an IP address is coming from and then immediately deleted. Google uses cookies to identify your device and track the use of our website, including information on your device (such as operating system and browser) and which pages and links you have clicked on our website. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage on our behalf. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Your data will be stored by Google Analytics for a period of 14 months. After this period, the data is deleted and only aggregated statistics are kept.Basic information on the processing of your personal data by Google can be found here: https://policies.google.com/privacy?hl=en . The use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR).
You can withdraw your consent at any time and deactivate Google Analytics using a browser add-on. You can download this here: http://tools.google.com/dlpage/gaoptout. Alternatively, you can withdraw your consent as described here.
You can also withdraw your consent via our consent manager. This does not affect the lawfulness of the processing carried out until your withdrawal.
10. Evaluation of job advertising on the web and on social media platforms
We place job postings, advertisements,, paid links, etc. on third-party sites on the web and on social media platforms. In order to measure the success of our job postings and advertisements, cookies or similar technologies are set – insofar as you have consented – when you are redirected from the relevant third-party site to our website in order to use them to analyse click behaviour for billing purposes. The use of the cookies and the analysis of your click behaviour is based on your consent, which we obtain before the respective cookie is set (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time via our consent manager. This does not affect the lawfulness of the processing carried out until your withdrawal.Specifically, this concerns the following cookies or similar technologies:
● LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland – for more information, please see LinkedIn’s data protection guidelines at https://www.linkedin.com/legal/privacy-policy?trk=organization-guest_footer-privacy-policy
Please note that LinkedIn also transfers personal data to third countries outside the European Economic Area for which there is no EU Commission adequacy decision. Insofar as such a transfer occurs, LinkedIn will use the standard contractual clauses approved by the EU Commission.
Corresponding information can be found here.
● Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland - for more information, please see Facebook's data policy. Please note that this may also involve processing by Facebook Inc. based in the USA. There is no EU Commission adequacy decision for the USA. In this case, Facebook will use the standard contractual clauses approved by the EU Commission, which constitute a suitable guarantee within the meaning of Art. 46 para. 2 lit. c GDPR for the transfer to third countries.
● GoogleAds (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – for more information, please see here. ). Please note that this can lead to data processing by the Google LLC in the US. In this case, Google will use the standard contractual clauses approved by the EU Commission, which constitute a suitable guarantee within the meaning of Art. 46 para. 2 lit. c GDPR for the transfer to third countries.
11. Further processing and sharing of dataBeyond the cases described, your personal data will only be processed or further shared without your express prior consent in the following cases:
● If it is necessary for the clarification of an illegal use of our services or for legal prosecution, personal data will be processed and forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are specific indications of unlawful or abusive behaviour. A transfer may also take place if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities. This data is processed and disclosed on the basis of our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims and provided that your rights and interests in the protection of your personal data are not overridden, Art. 6 para. 1 lit. f GDPR or on the basis of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
● We disclose personal data to auditors, accounting service providers, lawyers, banks, tax consultants and similar bodies insofar as this is necessary for the provision of our services (Art. 6 para. 1 lit. b GDPR) or the proper operation of our business (Art. 6 para. 1 lit. f GDPR) or we are obliged to do so (Art. 6 para. 1 lit. c GDPR).
● We rely on contractually affiliated third-party companies and external service providers ("processors") to provide the services. In such cases, personal data is passed on to these processors to enable them to continue processing. These processors are carefully selected and regularly reviewed by us to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually obliged by us to treat your data exclusively in accordance with this privacy policy and the German data protection laws.The transfer of data to processors takes place on the basis of Art. 28 para. 1 GDPR.
● GetYourGuide Deutschland GmbH is a technical service provider and data processor for other GetYourGuide entities to provide the website and recruiting services.
12. Automated individual decisions or profiling measures
We do not use any automated processing processes to bring about a decision or profiling.
13. Erasure of your data
We delete or anonymise your personal data as soon as it is no longer necessary for the purposes for which we collected or used it in accordance with the above paragraphs. We also continue to retain your data if we are obliged to do so for legal reasons or if the data is needed for a longer period of time for criminal prosecution or to secure, assert or enforce legal claims. If data must be retained for legal reasons, processing will be restricted. The data is then no longer available for further use. Storage is based on our aforementioned legitimate interests according to Art. 6 para. 1 lit. f GDPR or on our legal obligations, Art. 6 para. 1 lit. c GDPR.
14. Your rights as a data subject
You have the rights described below with regard to the processing of your personal data. To exercise your rights, you can make a request here, by post or by email to the address above.
14.1. Right of access to information
You have the right to receive information from us at any time, upon request, about the personal data we process that concerns you, to the extent and subject to the conditions of Art. 15 GDPR and Sec. 34 BDSG.
14.2. Right to correct incorrect data
You have the right to request that we correct personal data relating to you without delay if it is inaccurate.
14.3. Right to erasure
You have the right to demand that we delete the personal data concerning you under the conditions described in Art. 17 GDPR and Sec. 35 BDSG. These conditions provide in particular for a right to erasure if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erasure under Union law or the law of the Member State to which we are subject.
14.4. Right to restriction of processing
You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the duration that the verification of the accuracy requires, as well as in the event that the data subject requests restricted processing instead of erasure in the case of an existing right to erasure; furthermore, in the event that the data is no longer required for the purposes pursued by us, but the user requires it for the assertion, exercise or defence of legal claims, as well as if the successful exercise of an objection is still disputed between us and the user.
14.5. Right to data portability
You have the right to receive from us the personal data relating to you that you have provided to us in a structured, commonly used, machine-readable format in accordance with Art. 20 GDPR.
14.6. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out, inter alia, on the basis of Art. 6 para. 1 lit. e or f GDPR, in accordance with Art. 21 GDPR. We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
14.7. Right of appeal
You have the right to contact a supervisory authority of your choice in case of complaints.
14.8. Data processing when exercising your rights
Finally, we would like to point out that we process the personal data provided by you when exercising your rights pursuant to Art. 15 to 22 GDPR for the purpose of implementing these rights and to be able to provide evidence thereof. This processing is based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and Sec. 34 para. 2 BDSG
.
15. Changes to this privacy policy
The current version of this privacy policy is always available at https://www.getyourguide.com/c/privacy-policy
