Order Data Processing softgarden e-Recruiting GmbH Career Portal

The protection and confidentiality of your data are highly important to Hypoport SE. The collection and use of your personal data is performed solely within the terms of the statutory provisions of the applicable data protection law. This Data Protection Statement will tell you about the personal data we collect in the course of your application process and the purpose for which this data will be used. Hypoport SE collects and uses your personal data solely in accordance with the provisions of the data protection laws that apply in the Federal Republic of Germany and the European Union. Information concerning the type, scope and purpose of collection and use of personal data is set out in the following.

This privacy policy applies to the entire Hypoport Group (you can find a list of the companies belonging to the Group at https://www.hypoport.com/company-profile/)

Data Controller

Data Controller in terms of data protection laws is:

Hypoport SE
Heidestraße 8

D-10557 Berlin


If you have any questions or comments concerning data protection, please feel free to contact us by email at datenschutz@hypoport.de

Order data processing

Softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin, provides a software for processing the application data. softgarden processes the data on behalf of Hypoport SE. Data protection officer within the meaning of the data protection laws is:

Marco Tessendorf
procado Consulting, IT – & Medienservice GmbH
Warschauer Str. 58a
10243 Berlin
email: eDSB@procado.de

Location of the data processing

softgarden operates an IT infrastructure at its office locations in Berlin and Saarbrücken, as well as in the data processing centres operated by the following service providers

  • myLoc managed IT AG
  • PlusServer GmbH

All data processing centers are based in Germany.

Object of the data protection

The object of the data protection is personal data. According to Art. 4 no. 1 GDPR, this means any information relating to an identified or identifiable natural person (“data subject”). This includes information such as name, postal address, email address and telephone number, and can, in certain circumstances, include usage data. Usage data is data that is required to use our website, such as information about the start, end and scope of use of our website and login data.

This Data Protection Statement applies to the career portal and the applicant management system of Hypoport SE.

Collection and use of your data

Automated data collection

For operational and maintenance purposes, softgarden and the services of third parties can collect files that record the interaction taking place via this application (system logs), or use other personal data (e.g. IP address) for this purposes. When accessing softgarden products, your internet browser will automatically transfer data due to technical reasons. The following data is stored separately from other data that you might transmit to us:

  • date and time of access
  • browser type and version
  • applicable operating system
  • URL of the previously visited website
  • quantity of data transferred
  • IP address of the access

This data is stored solely for technical reasons and is never assigned to a specific person. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

Data entered by the user

In general

You can sign up to make the application process transparent to you. To do this, you must enter your name and email address and a password. This information is required to create and manage an account in the career portal for you. Last but not least, we also need this and possibly other data in order to be able to respond to requests, questions and criticism.

Other optional data are:

  • Contact details (address, telephone number)
  • CV information, e.g.
    o school education
    o vocational education
    o professional experience
    o language skills
  • Profiles in social networks (e.g. XING, LinkedIn, Facebook)
  • Documents related to applications (application photos, cover letters, certificates, job references, work samples etc.)

Legal basis of data processing: § 26 para. 1 of German Federal Data Protection Act (BDSG- „new“)

Processing of biographical documentation

In order to extract CV data, softgarden processes and analyzes documents uploaded by the applicant. Processing takes place within the softgarden infrastructure. No transmission proceeds to third parties. The legal basis is § 26 para. 1, German Federal Data Protection Act – „new“.

Transfer of personal data

As part of the ongoing development of our business activities, it is possible that the structure the softgarden e-recruiting GmbH Company will change, whereby its legal form is amended, subsidiaries, units or parts thereof are formed, acquired or sold. In the event of such transactions the customer information will be transferred along with the part of the company being transferred. softgarden will ensure that every such transfer of personal data to third parties to the extent described above takes place in conformity with this Data Protection Statement and with the applicable data protection legislation. Legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. During the course of the application process, your data may be forwarded to Hypoport SE employees by email.


softgarden stores so-called „cookies“ to offer you a comprehensive range of functions, and to design our website to be more user-friendly. Cookies are small files stored on your computer with the aid of your internet browser. If you prefer to block the use of cookies, you can use your browser’s settings to prevent them from being stored on your computer. Please note that this may restrict the functionality and the range of functions of our website. This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient Cookies

Transient cookies are automatically deleted when you close your browser. This particularly includes session cookies. They store what is known as a session ID, which allows for various queries made by your browser to be assigned to one shared session. This helps to identify your computer when you return to a the website. Session cookies are deleted once you log out or close the browser.

Persistent cookies

Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie in question. You may delete any cookie using the security preferences in your browser at any time.

Use of the collected data

User data is collected to enable softgarden to deliver the services. In addition, data is collected for the following purposes: analytics, interaction with live chat platforms, interaction with support and evaluation platforms, administration of support and contact requests, administration of user databases, management of contacts and sending messages, contacting the user, advertising, access to third-party profiles, displaying content from external platforms, and remarketing and behavioral targeting. The personal data used for the purposes listed here, is described in the applicable sections of this document. Various systems are used to improve the services offered and to assist customers when they submit support requests.

Improvement of softgarden services

softgarden uses various systems in order to improve the services offered, and to assist customers with support inquiries.

Google Analytics

softgarden uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics employs cookies, i.e. text files that are stored on your computer and enable an analysis to be made of your use of websites. The information generated by the cookie about your use of this website will normally be sent to a Google server in the United States and stored there. If IP anonymization is activated on this website, however, your Google IP address will beforehand be truncated (shortened) from within member states of the European Union or from within other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for purposes of evaluating your use of the website, compiling reports on website activity and for providing the website operator with other services relating to website and internet usage. The IP address transmitted by your browser within the Google Analytics process will not be linked to any other Google data. You can block the the storage of cookies by setting your browser software accordingly; however we would like to point out that by doing so you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) as well as from processing this data by Google, provided you download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. softgarden uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in a shortened form, to exclude any reference to a particular person. If a reference to a person ever occurs on the basis of the data collected from you, this will be excluded immediately, and the personal data therefore deleted without delay. softgarden uses Google Analytics to analyse the use of the website and the products of softgarden, in order that these can be improved regularly. The statistics obtained enable us to improve our range of services and design it to be more interesting to you personally as a user. For the exceptional cases in which personal data is transferred to the USA, Google has committed itself to the EU-U.S. Privacy Shield Framework, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) para. 1 sentence 1 lit. f GDPR. Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms and Conditions of Use: https://www.google.com/analytics/terms/us.html, Data protection overview: https://www.google.com/analytics/learn/privacy.html, as well as the Privacy Policy: https://policies.google.com/privacy.

Platforms for online surveys

This type of service enables users to interact directly via the application with online survey platforms operated by third parties. If a corresponding service is installed, it may be possible to collect navigation and usage data on the pages on which it is installed even if users are not actively using the service. Legal basis is Art. 6 (1) para. 1 sentence 1 lit. f GDPR. The SurveyMonkey widget is a service for interacting with the SurveyMonkey platform for online surveys operated by SurveyMonkey Inc. Personal data collected: cookies and usage data. Processing location: US – https://www.surveymonkey.com/mp/policy/privacy-policy/

Support tools 

softgarden uses the Zendesk support platform and its associated Zopim chat software for the purpose of delivering end-user support. With this type of service, users can interact directly with live chat platforms from third-party providers via this application in order to contact or be contacted by the support team responsible for this application. With this type of service, users can interact directly with live chat platforms from third-party providers via this application in order to contact or be contacted by the support team responsible for this application. The Zopim widget is a service for interacting with the Zopim live chat platform operated by Zendesk Singapore Pte. Ltd., based in Singapore. Personal data collected: cookies and usage data. Zendesk is a service provided by Zendesk Inc to manage support and contact requests. Personal data collected: various types of data, as described in the privacy policy of the service. The Zendesk privacy policy is available at https://www.zendesk.com/company/customers-partners/privacy-policy/

The legal basis for the use of Zendesk and Zopim is Art. 6 para. 1 sentence 1 lit. f GDPR.

Additional information concerning the collection and processing of data

Legal measures

The Data Controller may use the personal data of the user for legal purposes in court proceedings or in advance of possible law suits resulting from the fact that softgarden products or the associated services were not used properly. The user is aware that softgarden could be requested by the authorities to disclose personal data. The legal basis is Art. 6 para.1 sentence 1 lit. e GDPR.

Information not contained in this Data Protection Statement

Further information on the collection or processing of personal data can be requested at any time from the Data Controller using the contact details provided.

Rights of users

Users are entitled to be provided with information at any time, revealing whether their personal data has been stored, and they may contact the Data Controller to find out the content and origin of the stored data, to check their accuracy, to demand that it be supplemented, deleted, updated, corrected or converted into an anonymised format or the blocking of unlawfully stored data, and to object to processing for legitimate reasons. To do this, please send an email to datenschutz@softgarden.de or send a letter by regular mail to the address given above. You can also exercise your right of objection at any time without stating any reasons, and to modify or wholly withdraw your declaration of consent, taking effect for the future. You can communicate your withdrawal of consent to the contractual party by regular mail, by email or by fax. You will not incur any costs other than the postage costs or the transmission costs according to the existing basic tariff. However, please note that you will no longer be able to use the software in this case.

Duration of storage

After completion of the application process, your data will be kept for 6 months if you are offered a post and 6 months if your application is rejected. After the expiration of this deadline, the data will be anonymized in order to be available for later statistical evaluations. softgarden’s products support Do Not Track requests from web browsers. To find out whether applicable third-party providers follow the Do Not Track protocol, please read the privacy policy of the service in question.


Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged violation, if you consider that the processing of your personal data violates the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy under Art. 78 GDPR.


Changes to this Data Protection Statement

softgarden reserves the right to make changes to this Data Protection Statement at any time while informing its users accordingly on this page. Therefore, users are advised to visit these pages regularly, so as to check the date of the most recent amendment as specified at the bottom of the screen. If a user objects to an amendment to this Data Protection Statement, he may no longer be permitted to use the services offered by softgarden, and may request softgarden to delete his personal data. Unless otherwise stated, the currently valid Data Protection Statement shall apply to all the user’s personal data as stored by the controller.