Privacy Notice on Commercial Communications

As Gen-Z Entertainment GmbH (”Pickaseat”), ”Controller"), we value the protection of your personal data, so we expect you to show the same attention. For this reason, it is very important for us that you read this text detailing which personal data we use for what purpose and to clearly understand the obligations of Pickaseat, who is responsible for the administrative and technical security of your personal data as “Controller”.

With this privacy notice we aim to inform data subjects, persons whose personal data is processed (used), as the “Controller” who uses their data. As a Controller, we have to prove that you have been informed about your personal data we will process by explaining:

1. What personal data we collect about you and how we obtain them 

2. How we use your personal data 

3. Who we share your personal data with 

4. Which countries we transfer your personal data to 

5. How long we keep your personal data 

6. What rights you have in relation to your personal data and how to contact us 

8. How we will update this Privacy Notice 

1. What personal data we collect about you and how we obtain them

As Pickaseat, we obtain your name and surname, current location and company, the role you are applying for, your contact information and your CV while you apply for a job.

During your application, we obtain your personal data through your resume and cover letter if you wish to upload via digital means for the legal reason that processing is necessary to fulfill our legally valid interests without harming your fundamental rights and freedoms. We process information which might be included in your CVs and cover letters, including but not limited to your:

• Identity Data category: Year of birth, signature, name and last name of your reference persons, age, gender
• Contact Data category: Your home address (only city, district, and neighborhood), phone number, email address, and your reference person's email address and phone number,
• Personnel Data category: The content of your cover letter and letter of intent, your job qualifications, the salary you are requesting and the date you can start work,  information about any travel restrictions, name of the department/position you wish to work for, date you can start work, salary expectations, whether you have any travel restrictions, reason for leaving your last job, salary and benefits at your last job,
• Professional Experience Data category: Your education level, information about the school you graduated from, your school start and graduation years, your diploma grade, your foreign language skills, information about your foreign language level, your work experience (company name, job title and position, date of joining and leaving the company, working hours and type, Country where you worked), Seminars and courses you attended (Program name, Date, Duration, Institution issuing the certificate/course, Information about the certificate/course result), Information about your professional skills, Scholarships and achievements you received during your education and work life, Information about the clubs you are a member of, and Information about the institution where your reference person works and their position, spoken languages,
• Visual and Audio Recording Data category: “Your photograph(s)”

The above mentioned information is obtained through Pickaseat job application e-mail address and Linkedin pages. Legal basis for obtaining them is that it is necessary for the performance of a contract to which the data subject is party to.

Important Notes: * If you indicate one or more persons as your reference, you accept that we may contact your reference(s) for the purpose of obtaining information about you and that their personal data may be processed for this purpose.

• Unless specifically requested, please do not share any personal and/or special personal data that requires explicit consent within the scope of your resume and interview processes.

If you share personal and/or special personal data that requires your explicit consent in your resume and during the interview process, it will be assumed that your data will be processed for the purpose of objective evaluation for employment processes.

2. How we use your personal data

We will only use your personal data where we are permitted to do so by applicable law. Each personal data processing purpose is matched with the categories of personal data and the relevant legal reason relating to the purpose.

We process your personal data based on our legitimate business interests, provided that such processing does not override your fundamental rights and freedoms. These interests include:

• To enable us to plan human resources processes,
• To gather CVs regarding open job postings and to find candidates who are more suitable for the job posting,
• To enable us to make an objective assessment for the position which employment is required,
• To facilitate communication regarding the employment process,

We process your personal data for these purposes and never use it for any other purpose.

3. Who we share your personal data with

We only share your personal data where necessary to provide our services, comply with legal obligations, and operate our business efficiently. Below is an overview of who we share your data with.

a. Pickaseat Suppliers

We may share your personal data within Pickaseat and its affiliated companies, including:

• Business Partners: To facilitate our human resources processes and manage recruitment operations, to support the organization of employment-related procedures and assessments
• Regulatory and Compliance Teams: To fulfill our legal obligations and respond to requests from authorized regulatory bodies and public authorities.
• Legal and Advisory Professionals: To manage legal processes, ensure regulatory compliance, and protect our legal rights and interests.

All such sharing is conducted under strict confidentiality agreements and in full compliance with applicable data protection regulations and internal policies.

These third parties operate independently under their own privacy policies; however, we ensure that appropriate data protection and confidentiality standards are upheld through binding agreements.

All international data transfers are conducted with appropriate safeguards in place to ensure an adequate level of data protection, including the use of Standard Contractual Clauses or equivalent legal mechanisms where required. 

4. Which countries we transfer your personal data to 

If we process data in third countries (meaning countries outside the European Union or the European Economic Area ) or this occurs in the process of utilising the services of third parties or transmitting data to third parties, this will only be done for the purpose of fulfilling our contractual obligations, on the basis of your consent, due to a legal obligation or based on our legitimate interests.

In doing so, we ensure that your personal data is processed in compliance with the European level of data protection, based on special guarantees or due to corresponding contractual obligation including adequate technical and organisational measures.

When transferring your data internationally, we implement strict safeguards to ensure your privacy and security, including:

 

• Standard Contractual Clauses (SCCs) – We use legally binding agreements approved by the European Commission to ensure that data recipients outside the EU/EEA adhere to strict privacy standards.
• Binding Corporate Rules (BCRs) – If we transfer data within our corporate group, we enforce internally regulated policies that guarantee strong data protection across all entities.
• Binding Corporate Processor Rules – When working with third-party service providers, we require them to comply with contractual obligations ensuring high data security standards.
• Localized Data Storage – Whenever feasible, we process and store data within the EU/EEA to minimize cross-border transfers.
• Encryption & Security Measures – All transferred data is protected using advanced encryption protocols, access controls, and cybersecurity safeguards.

If you require further information or a copy of the relevant documentation regarding data transfers, please contact us at privacy@pickaseat.com .

5. How long we keep your personal data

We will retain your personal data for as long as is necessary to fulfil the purpose for which this data was collected and any other permitted linked purpose (for example your correspondence and any information we provide in return may be retained until the time limit for claims in respect of the communication or in order to comply with regulatory requirements regarding the retention of such data).

If your personal data is used for two purposes we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period once that period expires.

Once your data is no longer needed, we:

• Securely delete the information; or
• Anonymize the information, ensuring that it cannot be linked back.

6. What rights you have in relation to your personal data and how to contact us

You have different rights listed under General Data Protection Regulation and if you wish to confirm processing of your personal data or to have access to your personal data we may have about you, you may contact us through the contact methods listed below.

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Pickaseat might have received the data from Pickaseat; what the source of the information was (if you didn’t provide it directly to Pickaseat); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Pickaseat if it is inaccurate. You may request that Pickaseat erase that data or cease processing it, subject to certain exceptions.

You may also request that Pickaseat cease using your data for direct marketing purposes. When technically feasible, Pickaseat will—at your request—provide your personal data to you or transmit it directly to another controller.

You also have a right to lodge a complaint with the a competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the German Federal Data Protection Act, BDSG) if you have concerns about how Pickaseat processes your personal data. A list of supervisory authorities (for the non-public sector) with addresses can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have questions about this statement or about data protection at Pickaseat, you can contact our data protection officer directly:

Contact details for our data protection officer:

Gen-Z Entertainment GmbH

Schillingstr. 24 13403 Berlin Germany

info@pickaseat.de

Customer Service: +49 30 46699885

WhatsApp Hotline: +49 30 46699885

7. What rights you have in relation to your personal data and how to contact us

You have different rights listed under General Data Protection Regulation and if you wish to confirm processing of your personal data or to have access to your personal data we may have about you, you may contact us through the contact methods listed below.

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Pickaseat might have received the data from Pickaseat; what the source of the information was (if you didn’t provide it directly to Pickaseat); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Pickaseat if it is inaccurate. You may request that Pickaseat erase that data or cease processing it, subject to certain exceptions.

You may also request that Pickaseat cease using your data for direct marketing purposes. When technically feasible, Pickaseat will—at your request—provide your personal data to you or transmit it directly to another controller.

You also have a right to lodge a complaint with the a competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the German Federal Data Protection Act, BDSG) if you have concerns about how the Pickaseat processes your personal data. A list of supervisory authorities (for the non-public sector) with addresses can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have questions about this statement or about data protection at Pickaseat, you can contact our data protection officer directly:

Contact details for our data protection officer:

Gen-Z Entertainment GmbH

Schillingstr. 24 13403 Berlin Germany

info@pickaseat.de

Customer Service: +49 30 46699885

WhatsApp Hotline: +49 30 46699885

8. How we will update this Privacy Notice

We may change the content of our websites and how we use cookies without notice and consequently our Privacy notice and Cookie Policy may change from time to time in the future. We therefore encourage you to review them when you visit the website to stay informed of how we are using personal data.

This Privacy notice was last updated in July 2025.