I. Name and Address of Controller
The controller as per the General Data Protection Regulation (GDPR) and other national data protection laws is:

five.degrees GmbH
Jahnstr. 5
78112 St. Georgen i. Schwarzwald
Germany

Represented by:
Zoran Kokolanski, Olivia Hupfeld

Contact:
Email: global@joinfivedegrees.com
Website: www.joinfivedegrees.com

II. Rights of the Data Subject
If your personal data is being processed, you are a data subject as per the GDPR and have the following rights:
Right to Information (Art. 15 GDPR): You may request confirmation as to whether your personal data is being processed and obtain information about the purposes, recipients, and storage duration.
Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate personal data or the completion of incomplete data.
Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR): You may request the deletion of your personal data if you revoke your consent or if the data is no longer necessary.
Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict the processing of your data under certain conditions.
Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests.
Right to Revoke Consent (Art. 7(3) GDPR): You may revoke your consent at any time with future effect.
Right to Lodge a Complaint (Art. 77 GDPR): You have the right to complain to a supervisory authority (e.g., Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

III. General Data Processing
Scope: We process personal data only to the extent necessary to provide our website, manage our talent pool, and organize events.
Legal Basis: Our primary processing is based on Consent (Art. 6(1)(a) GDPR) or the necessity to fulfill our contract with you (Art. 6(1)(b) GDPR).
Storage: Personal data is deleted as soon as the purpose for storage no longer applies or you revoke your consent.

IV. Job Matching & Talent Pool
Description:
To connect you with potential employers and include you in the five.degrees community, we collect data such as your name, contact details, CV/Resume, and job preferences via Tally forms.

Obligation to Provide Data (Art. 13(2)(e) GDPR):
The provision of your personal data via our Tally forms is a requirement to become part of the five.degrees community and to access our associated products and events. Consequence of failure to provide: If you do not provide this data, we cannot include you in the community, nor can we propose you for job vacancies or grant you access to our events.

Legal Basis:
The processing and distribution of your profile are based on your Consent (Art. 6(1)(a) GDPR) and the performance of our service (Art. 6(1)(b) GDPR).

Automated Decision-Making:
We do not use automated decision-making or profiling (as defined in Art. 22 GDPR). Your profile is reviewed by our team before being shared with potential employers.

Revocation:
You can revoke your consent at any time by contacting us. Upon revocation, we will delete your data from our active pool, provided no statutory retention obligations exist.

V. Website, Tools & Third-Party Providers
We use specialized service providers to operate our platform.

1. Website Hosting (Framer)
   Our website is hosted by Framer B.V. (Netherlands).
   Function: Technical delivery of the website.
   Transfer Safeguard: Framer may use sub-processors in the USA (e.g., AWS).

2. Data Collection (Tally)
   We use forms provided by Tally BV (Belgium) to collect your application data.
   Function: When you fill out our "Join as Talent" or other forms, the data is processed by Tally.
   Transfer Safeguard: Tally is an EU-based company but may use sub-processors (e.g., Google, AWS) in the USA.

3. Data Storage & Email (Google)
   We store applicant data and communicate via Google Workspace provided by Google Ireland Ltd. (Ireland).
   Function: Secure storage of CVs, profiles, and email communication.
   Transfer Safeguard: Data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework (DPF).

4. Event Management (Luma)
   We use Luma (Luma Inc., USA) to organize and manage registrations for our events.
   Function: Managing guest lists and event notifications.
   Transfer Safeguard: Data transfer to the USA is safeguarded by Standard Contractual Clauses (SCCs).
   
   

VI. Cookies
We do not use tracking or advertising cookies. We only use technical elements required for the basic functionality of the website (e.g., to load the site correctly via Framer).
Legal Basis: Legitimate Interest (Art. 6(1)(f) GDPR) in a functional website.

VII. Contact
When you contact us via email, the data provided is stored to process your inquiry.
Legal Basis: Consent (Art. 6(1)(a) GDPR)."