Privacy Policy

1. GENERAL INFORMATION

When you visit our website or apply for a job with us, we process personal data. In the following sections, you will find more information about how your data is processed.

2. WHO IS OFFICIALLY RESPONSIBLE FOR PROCESSING MY DATA?

Hetzner Cloud GmbH
Feringastraße 12A
85774 Unterföhring
Germany

You can find more information about our company on our legal notice: https://hetzner-cloud.de/en/impressum.

3. WHO CAN YOU CONTACT IF YOU HAVE QUESTIONS ABOUT DATA PROTECTION?

You can reach out directly to our data protection officer using one of these methods:

Email: data-protection@hetzner.com

Post:
Hetzner Cloud GmbH
Data Protection
Feringastraße 12A
85774 Unterföhring
Germany

Phone: +49 (0)9831 505216

4. HOW DOES HETZNER PROCESS PERSONAL DATA?

Note: Unless otherwise specified, your data will remain within the EU.

4.1 WEBSITE

WHAT DATA IS PROCESSED AND HOW DOES IT REACH HETZNER?
When you access our website, your browser automatically sends the following data: IP address, browser type and version, date and time of access, the website you came from, and the specific page accessed.

In addition, when you visit our website, our server sets a session cookie. The cookie is stored by your browser and sent to our server with each page request. The cookie contains a unique ID.

WHY DOES HETZNER PROCESS MY DATA AND WHAT IS THE LEGAL BASIS FOR IT?
We process this data to ensure the secure and stable operation of our website. (Art. 6 para. 1 lit. f GDPR)

WHO WILL HAVE ACCESS TO MY DATA AND WILL IT BE SENT TO ANY THIRD PARTIES?
Only the team responsible for the technical operation and maintenance of our website has access to your data.

We use Hetzner Online GmbH, a group company, to host our website.

HOW LONG IS THE DATA STORED?
The IP address is permanently stored in anonymized form only. Therefore, no personal data is stored permanently.

The session cookie is automatically deleted when you end your browser session.

4.2 APPLICATIONS

WHAT DATA WILL BE PROCESSED AND HOW DOES IT REACH HETZNER?
The type of data that we process may change a bit depending on the job you are applying for and its requirements. In general, we mainly process the following data: basic personal information, contractual details (e.g. notice period), education and work experience, professional knowledge, attached documents, if applicable, special categories of data (e.g. if you have a disability or special needs), information about your interview and notes on it, and additional information shared with us during the application process.

We will obtain this data directly from you or – if a recruitment agency is involved – directly from the agency.

WHY DOES HETZNER PROCESS MY DATA AND WHAT IS THE LEGAL BASIS FOR IT?

  • Recruitment process: Reviewing and processing your application in order to assess your suitability for a position. (Art. 6 para. 1 lit. b GDPR)
  • To fulfil obligations under employment and social protection law and to exercise related rights: Processing special categories of personal data to protect your legal rights. (Art. 9 para. 2 lit. b GDPR in connection with Art. 6 para. 1 lit. b GDPR)
  • Inclusion in our talent pool: Storage of your documents for future positions in the company on the basis of your voluntary consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time by reaching out to our HR team at: jobs@hetzner-cloud.de. Revoking your consent will not have any negative consequences for you in the current application process.
  • Legal obligations and legal claims: Storing the data to protect against potential legal claims or to assert them if necessary. (Art. 6 para. 1 lit. c and f GDPR)

HOW WILL MY APPLICATION DATA BE MANAGED?
All applications are entered into our applicant management system. To process your application, a candidate profile will be created in the system. You will not have direct access to this profile.
If you applied by post, we will digitize your documents and securely destroy the originals afterwards.

WHO WILL HAVE ACCESS TO MY DATA AND WILL IT BE SENT TO ANY THIRD PARTIES?

Internal
Your data may be accessed by our HR team and other internal persons involved in the recruitment process.

Group companies
If your application does not match a position at Hetzner Cloud, we may check whether another company in our group (Hetzner Finland Oy, Hetzner Online GmbH) might be interested in your profile and whether sharing your application would benefit your career opportunities. Your documents will only be shared if the position is equivalent or similar to the one you applied for. (Art. 6 para. 1 lit. f GDPR in conjunction with Recital 48 GDPR). If you do not agree to this, you can object at any time. Please contact our HR team: jobs@hetzner-cloud.de.
For more information, please see the privacy policy of the relevant parties:

Other third parties
Additionally, we use an external software provider for our applicant management system and its hosting. We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with this provider, which ensures that the data is processed only according to our instructions and in compliance with applicable data protection regulations.

HOW LONG WILL MY DATA BE SAVED?
The length of time your data will be stored can vary depending on the results of your application process:

  • Rejection or withdrawal of the application: Six months after the rejection or withdrawal of your application.
  • Storage in our talent pool: 12 months after we have received your permission. You can revoke your permission for this at any time. Please contact our HR team to do so: jobs@hetzner-cloud.de.
  • You become an employee: Your personal data will become part of your employee file.

Once the deadlines are reached, we will delete your data.

5. WHAT RIGHTS DO I HAVE WHEN IT COMES TO MY DATA?

The GDPR grants you the following rights regarding your data:

  • Right of access: You can request information at any time about whether and which personal data we process about you.
  • Right to rectification: If the data we have stored about you is incorrect or incomplete, you can request its correction or completion.
  • Right to erasure ("right to be forgotten"): You can request the deletion of your data if it is no longer required for its original purpose. However, please note that immediate deletion may not be possible in some cases due to legal or contractual retention obligations.
  • Right to restriction of processing: If, for example, you dispute the accuracy of your data or believe that the processing is unlawful, you can request that we restrict the processing of your data.
  • Right to data portability: You have the right to receive your data in a structured, commonly used, and machine-readable format. You can also request that we transfer the data directly to a third party, if technically feasible.
  • Right to object: You can object to the processing of your personal data unless there are compelling legitimate reasons for the processing.
  • Right not to be subject to a decision based solely on automated processing, including profiling: We do not make any automated decisions regarding your person.

If you would like to make use of any of these rights, please contact our data protection officer directly.

6. MAKING COMPLAINTS TO THE RELEVANT DATA PROTECTION AUTHORITY

If you believe that we are violating any data protection laws by processing personal data, you also have the right to make a complaint to the data supervisory authority who is responsible for our company.
However, we encourage you to first contact our data protection officer. We always strive to resolve any possible disagreements as quickly and smoothly as possible so that we can avoid conflicts.

7. GENERAL NOTE

We reserve the right to update this privacy policy from time to time. If you visit this page again, the updated privacy policy will apply.

Status: January 13, 2026