Privacy Notice of ANTES International GmbH

for Recruitment and Personnel Placement
(last updated: 01 January 2026)

0. Introduction

This Privacy Notice (“Notice”) describes how ANTES International GmbH (“we”, “us”, “our” or “ANTES”) collects, uses, processes, stores and discloses personal data relating to individuals.

The categories of personal data collected are described in section 2. Your personal data and how we collect it.

We act as the data controller within the meaning of the General Data Protection Regulation (GDPR) and are responsible for the processing of personal data. This Notice explains how we protect your data and informs you of your data protection rights.

Please read this Notice together with any other privacy notices we may provide to you on specific occasions. This Notice supplements those notices and does not override them.

Table of Contents

  1. Contact details
  2. Your personal data and how we collect it
  3. How we use your personal data
  4. Change of purpose
  5. Disclosure within the ANTES Group
  6. Disclosure to third parties
  7. Security of your personal data
  8. Data retention
  9. Your data protection rights
  10. Legal bases for processing
  11. Links to other websites
  12. Feedback and complaints

1. Contact details

Data controller within the meaning of the GDPR:

ANTES International GmbH
Große Horst 37
22337 Hamburg
Germany

Phone: +49 (0)40 48 40 71 31
Email: datenschutz@antes-group.com

Data Protection Officer:
A data protection officer has not been appointed, as the legal requirements for such an appointment are not met.

2. Your personal data and how we collect it

2.1 How we collect personal data

We collect personal data:

  • directly from you
  • via job boards
  • via our website
  • via social media platforms (Xing, LinkedIn, Facebook, Twitter/X)
  • at job fairs, networking or training events
  • from CVs, references and online tests (“ANTES Profiles”)
  • from additional information provided by our clients during the recruitment process

2.2 Categories of personal data

We may collect, among others:

  • identification data (e.g. name, former names, marital status, date of birth)
  • proof of work authorization (including photo, nationality, driving licence, etc.)
  • contact details (email address, postal address, telephone number)
  • job search criteria and preferences
  • qualifications, professional experience and education
  • salary-related information
  • educational and professional history
  • emergency contact details
  • references
  • data from CVs or voluntarily provided information
  • health or criminal record data only where legally permitted and relevant

2.3 Job alerts

We may send you job alerts:

  • based on your stated criteria and preferences
  • occasionally including other suitable job opportunities

You may object to receiving job alerts at any time.

2.4 Data relating to third parties

If you provide us with personal data relating to other individuals, you confirm that those individuals have been informed accordingly and have consented where required.

3. How we use your personal data

We process personal data in order to provide recruitment and personnel placement services, including:

  • temporary employment
  • permanent placements
  • provision of consultants
  • project-based assignments
  • fixed-term and permanent employment
  • disclosure to clients in connection with specific job opportunities

We do not use automated decision-making or profiling without meaningful human involvement.

4. Change of purpose

We use personal data only for the purposes for which it was collected or for compatible purposes.

If we intend to use personal data for a different purpose, we will inform you in advance and explain the relevant legal basis. Further processing may occur without additional consent where permitted or required by law.

5. Disclosure of personal data within the ANTES Group

Personal data may be processed within the ANTES Group of companies via a shared candidate database, insofar as this is necessary for the provision of recruitment services.

Where two or more companies of the ANTES Group jointly determine the purposes and means of processing, such processing is carried out on the basis of a joint controllership agreement pursuant to Article 26 GDPR.

6. Disclosure to third parties

We may disclose personal data to external third parties, including:

6.1 Clients

  • for the purpose of placing candidates in temporary or permanent positions or providing consultants

6.2 Service providers

For example:

  • payroll processing
  • background and reference checks
  • cloud storage
  • hosting services
  • data analysis
  • legal and accounting services
  • sanctions and terrorism list screening

6.3 Public authorities

For example:

  • law enforcement authorities
  • tax authorities
  • regulatory bodies

6.4 Legal obligations

We may disclose personal data where necessary to:

  • comply with legal obligations
  • protect the rights of ANTES
  • prevent or investigate criminal offences or fraud
  • safeguard national security

6.5 Corporate restructuring

In the event of a sale, transfer or merger of parts of the business.

6.6 IT service providers outside the EEA

Transfers of personal data to third countries (e.g. the United States) take place only in compliance with applicable legal requirements, in particular on the basis of the EU Standard Contractual Clauses pursuant to Article 46 GDPR.

6.7 Safeguards for service providers

All service providers are contractually obliged to:

  • maintain confidentiality
  • comply with applicable data protection laws
  • delete or return personal data upon termination of the service agreement

7. Security of your personal data

We implement appropriate technical and organisational measures to protect personal data against:

  • loss
  • unauthorised access
  • misuse
  • unauthorised alteration

In the event of a personal data breach, we will notify affected individuals and the competent supervisory authority where required by law.

8. Data retention

8.1 General retention period

Personal data is retained only for as long as necessary for the respective processing purposes.

8.2 Applicants without placement

Retention for up to 2 years after the last contact.

8.3 Applicants with successful placement

Retention for up to 10 years after the last placement.

8.4 Statutory retention obligations

Core business records are retained for up to 10 years in accordance with statutory requirements.

8.5 Extended retention periods

Longer retention may apply, for example, to:

  • establish, exercise or defend legal claims

8.6 Anonymisation

We may anonymise personal data and use such anonymised data for statistical or research purposes without time limitation.

9. Your data protection rights

You have the right to:

  • access your personal data
  • rectify inaccurate personal data
  • erasure (“right to be forgotten”)
  • restriction of processing
  • object to processing based on legitimate interests
  • data portability in a machine-readable format
  • withdraw consent at any time

The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

We generally respond within one month. Fees are charged only in the case of manifestly unfounded or excessive requests.

10. Legal bases for processing

We process personal data on the basis of:

  • Article 6(1)(b) GDPR (performance of a contract / pre-contractual measures)
  • Section 26 German Federal Data Protection Act (BDSG) (processing of employee and applicant data)
  • Article 6(1)(c) GDPR (legal obligations)
  • Article 6(1)(f) GDPR (legitimate interests)
  • Article 6(1)(a) GDPR (consent)

Where processing is based on legitimate interests, we always assess whether those interests are overridden by the rights and freedoms of the data subjects.

11. Links to other websites

Our website may contain links to external websites. We are not responsible for the content or data protection practices of such websites.

12. Feedback and complaints

You have the right to lodge a complaint pursuant to Article 77 GDPR with a supervisory authority.

The competent authority is, in particular:

The Hamburg Commissioner for Data Protection and Freedom of Information
https://datenschutz-hamburg.de