Processing of (personal) data by the entity in charge of the online application process
Last updated: October 2025
Privacy policy for the SafeLabs and SEF online application process
Your privacy is important to us. It is our policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, as part of the online application process through Ashby.
In this policy, "we", "us" and "our" refers to SafeLabs GmbH, a company incorporated in Germany with its registered address at Unter den Linden 10, 10117 Berlin, Germany. Any data protection related questions you might have about how we handle your personal data, please contact us by post or at dataprotection@safe.global.
In this Policy, “personal data” means any information relating to you as an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an online identifier or to one or more factors specific to your physical, physiological, genetic, mental, economic, cultural or social identity.
In this Policy, “processing” means any operation or set of operations which is performed on personal data (as defined in this Privacy Policy) or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data controller and responsible party
Responsible for data processing in the sense of data protection law is:
Safe Labs GmbH
Unter den Linden 10
10117 Berlin
Germany
Email address: privacy@safe.global
If you have any questions regarding data protection, please contact our data protection officer:
TechGDPR DPC GmbH
Willy-Brandt-Platz 2
12529 Berlin-Schönefeld
Germany
Email address: safelabs.dpo@techgdpr.com
Telephone: +49 (0)30 5490 8661
Applying to Safe Ecosystem Foundation vacancies
When applying for a position for the Safe Ecosystem Foundation, the responsible party for data processing in the sense of data protection law is:
Safe Ecosystem Foundation
Bahnhofstrasse 16
6300 Zug, Switzerland
CHE-295.207.842
Email: dataprotection@safe.global
How we use your personal data
For the purpose of reviewing and evaluating job applications, we process the following personal data:
- First and last name;
- CV and information contained therein, including: title, phone number; address, photo, education, professional experience;
- Information included in the cover letter/additional information section;
- Information provided in the how did you hear about this position open field;
- Pronouns;
- Salary expectation;
- Visa information e.g. right to work;
- Name of referee (if applicable).
The legal basis for all these activities is taking necessary steps, at the request of the data subject, prior to entering into a contract with you i.e. employment contract (GDPR Art.6.1b).
Your data will be stored for 6 months from the date of your application and then automatically deleted from the system.
In the instance of a successful application and acceptance of this offer by the data subject, we will store the personal data collected during the application process for at least the duration of the employment relationship.
Data subject rights
You have certain rights under applicable legislation, and in particular under Regulation EU 2016/679 (General Data Protection Regulation or ‘GDPR’). We explain these below. You can find out more about the GDPR and your rights by accessing the European Commission’s website. If you wish to exercise your data subject rights, please contact us at safelabs.dpo@techgdpr.com.
- Right Information and access
- Right to rectification
- Right to erasure (right to be ‘forgotten’)
- the personal information is no longer necessary for the purpose for which it was collected;
- you withdraw your consent to consent-based processing and no other legal justification for processing applies;
- you object to processing for direct marketing purposes;
- we unlawfully processed your personal information; and
- erasure is required to comply with a legal obligation that applies to us.
- Exercising the right of freedom of expression and information;
- Complying with a legal obligation under EU or other applicable law;
- The performance of a task carried out in the public interest;
- Archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, under certain circumstances; and/or
- The establishment, exercise, or defense of legal claims.
- Right to restrict processing and right to object to processing
- you contest the accuracy of the personal information;
- where processing is unlawful you may request, instead of requesting erasure, that we restrict the use of the unlawfully processed personal information;
- we no longer need to process your personal information but need to retain your information for the establishment, exercise, or defense of legal claims.
- Right to data portability
- Right to freedom from automated decision-making
- Right to request access
- Right to withdraw consent
- Raising a complaint about how we have handled your personal data
You have a right to be informed about the processing of your personal data (and if you did not give it to us, information as to the source) and this Privacy Policy intends to provide the information. Of course, if you have any further questions you can contact us on the above details.
You have the right to have any inaccurate personal information about you rectified and to have any incomplete personal information about you completed. You may also request that we restrict the processing of that information. The accuracy of your information is important to us. If you do not want us to use your Personal Information in the manner set out in this Privacy Policy, or need to advise us of any changes to your personal information, or would like any more information about the way in which we collect and use your Personal Information, please contact us at the above details.
You have the general right to request the erasure of your personal information in the following circumstances:
We will proceed to comply with an erasure request without delay unless continued retention is necessary for:
You have a right to restrict processing of your personal information, such as where:
You also have the right to object to processing of your personal information under certain circumstances, such as where the processing is based on your consent and you withdraw that consent. This may impact the services we can provide and we will explain this to you if you decide to exercise this right.
Where the legal basis for our processing is your consent or the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, you have a right to receive the personal information you provided to us in a structured, commonly used and machine-readable format, or ask us to send it to another person.
We do not use automated decision-making, but where any automated decision-making takes place, you have the right in this case to express your point of view and to contest the decision, as well as request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers.
You also have a right to access information we hold about you. We are happy to provide you with details of your Personal Information that we hold or process. To protect your personal information, we follow set storage and disclosure procedures, which mean that we will require proof of identity from you prior to disclosing such information. You can exercise this right at any time by contacting us on the above details.
Where the legal basis for processing your personal information is your consent, you have the right to withdraw that consent at any time by contacting us on the above details.
If you wish to raise a complaint on how we have handled your personal data, you can contact us as set out above and we will then investigate the matter.
Right to lodge a complaint with a relevant supervisory authority
We encourage you to contact us at privacy@cc0x.dev if you have any privacy-related concerns. Should you disapprove of the response we have provided you, you have the right to lodge a complaint with our supervisory authority, or with the data protection authority of the European member state you live or work in. The details of the supervisory authority responsible for Berlin, Germany, are:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
10555 Berlin
Germany
Phone: 030/138 89-0
http://www.datenschutz-berlin.de
You also have the right to lodge a complaint with the supervisory authority in the country of your habitual residence, place of work, or the place where you allege an infringement of one or more of our rights has taken place, if that is based in the EEA.
Final provisions
We reserve the right to adjust this privacy policy at any time to ensure that it always complies with current legal requirements or to reflect changes in the application process. The new data protection declaration will then apply to a renewed visit to this recruiting page or a renewed application.
Processing of (personal) data by the operator of the recruitment website
This recruitment website is operated by Ashby Inc., which offers a human resource and candidate management software solution (https://www.ashbyhq.com/resources/privacy). Data transmitted as part of your application is transferred to Ashby Inc. in accordance with a Data Processing Agreement between us and Ashby Inc, outlining security measures and instructions for safe transfer. The sole controller of this data within the meaning of Article 24 of the GDPR is the enterprise carrying out this online application process. Ashby’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In addition, Ashby Inc. processes further data, some of which may be personal data, to provide its services, in particular for operating its recruitment platform. We will refer to this in more detail below.
Ashby, Inc.
49 Geary Street, Suite 411, San Francisco, CA, 94108
Tel.: (925) 391-8292
e-mail: privacy@ashbyhq.com
Information on how Ashby Inc. processes your personal data as a controller can be found on its privacy notice: https://www.ashbyhq.com/resources/privacy
