01
Who is responsible
Full legal name of the individual operating Ikaros ResearchPublishable street address, postcode, city and countryEmail: [email protected]02
What we collect
We process the information you choose to provide, including:
- Your name and contact details.
- Your CV, education and work history.
- Work samples, links and your accompanying note.
- Correspondence and interview notes.
- Information you provide during the selection process.
Please do not send sensitive or unrelated personal information unless we specifically ask for it and it is necessary for the role.
03
Why we use it
We use applicant information to assess your suitability, communicate with you, arrange interviews, decide whether to offer employment and keep records needed to establish or defend claims relating to the recruitment process.
The primary legal basis is taking steps at your request before entering an employment contract under Article 6(1)(b) GDPR. Where necessary, we may rely on legitimate interests under Article 6(1)(f) GDPR for recruitment administration, security and the establishment or defence of legal claims.
04
Who sees it
Access is limited to the founders. Applications arrive in the [email protected] mailbox through Microsoft 365 Business Basic. Application material may also be stored in OneDrive or SharePoint and in the founders’ private work mailboxes.
Microsoft processes message content, attachments, sender and recipient details, files and technical metadata on our behalf under the Microsoft Products and Services Data Protection Addendum.
Microsoft and its approved subprocessors may process this information where necessary to operate and secure the service. Where personal data is transferred outside the EU or EEA, Microsoft applies the safeguards set out in that addendum, including the 2021 Standard Contractual Clauses. We do not sell applicant information.
- Microsoft subscription
- Purchased directly from Microsoft under a Microsoft Customer Agreement · the latest invoice is issued by Microsoft Deutschland GmbH, Walter-Gropius-Straße 5, 80807 Munich, Germany
- Microsoft data locations
- The Microsoft 365 admin centre currently lists Germany for Exchange Online, OneDrive and SharePoint
- Other providers
- Confirm whether the founders’ private work mailboxes use Microsoft 365 and whether any other recruitment or outbound-email provider is involved
05
How long we keep it
If we do not hire you, we delete or destroy the application and all copies we control from the careers mailbox, founders’ private work mailboxes and OneDrive or SharePoint no later than five months after the recruitment process ends. We do not currently keep unsuccessful applications in a general talent pool. If we want to keep an application for a future role, we will ask for separate, explicit consent and tell you the proposed retention period.
If you join Ikaros, we will give you separate employee privacy information before the information needed for employment becomes part of your personnel record.
06
Applying by email
The form on our careers pages only prepares an email draft. Nothing is uploaded to this website. Ikaros receives the information only after you send the email.
Ordinary email is not end-to-end encrypted. Please do not include sensitive information that is not needed for your application. Contact us first if you need another way to send confidential material.
07
Human decisions and your rights
We do not make hiring decisions solely through automated processing. Work samples and interviews are reviewed by people.
Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal data, or object to processing based on legitimate interests. Contact [email protected] to exercise a right.
You may also complain to the data protection authority responsible for your place of residence or for the operator. Add the operator’s competent authority after confirming the operator address