Privacy Policy

1. Data Controller

The data controller responsible for processing personal data under the EU General Data Protection Regulation (GDPR) is:

RookieSource
Kaskelstraße 46, 10317 Berlin, Germany
HRB 315237 B
Email: [email protected]
Phone: +49 30 49957826

To exercise your rights regarding personal data, please contact us via the email above or through our contact form.

Geographic scope: RookieSource provides services to clients and candidates across Germany, Europe, and India.

2. Scope of Application

This Privacy Policy applies to the processing of personal data when you:

• Visit the RookieSource website and related pages
• Submit candidate or employer registration forms
• Submit general contact forms on the Contact page
• Use features of the RookieSource platform (current or future)

This policy supplements our Terms of Use.

3. Data We Collect

Depending on how you interact with the Platform, we may process the following types of data:

• Identification data: full name, company name (if applicable)
• Contact data: email address, phone number
• Content data: messages, contact subject, job descriptions, skills and experience
• Usage data: type of form submitted (candidate / employer / general contact)
• Technical data: IP address, browser type, access time, device information (when necessary for website operation and security)

We do not knowingly collect data from children under 16. If we discover such data, we will delete it within a reasonable time.

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes, based on the corresponding legal basis under GDPR:

• Service provision — processing your registration, profile, and contact requests (basis: contract performance or pre-contractual steps, Art. 6(1)(b) GDPR)
• Communication — responding to questions and user support (basis: legitimate interest or contract, Art. 6(1)(f)/(b) GDPR)
• Security and abuse prevention — protecting the Platform from fraud and unauthorized access (basis: legitimate interest, Art. 6(1)(f) GDPR)
• Legal compliance — retaining records as required by law (basis: legal obligation, Art. 6(1)(c) GDPR)
• Consent — when you submit a form, you confirm you have read the Privacy Policy and Terms of Use (basis: consent, Art. 6(1)(a) GDPR, where applicable)

5. Data Sharing with Third Parties

We do not sell your personal data. Data may be shared in the following cases:

• Between users: profile information and messages may be shared between candidates and employers through the Platform, for recruitment purposes
• Service providers: cloud hosting, email, hosting or analytics tools — only to the extent necessary and under data processing agreements (DPA)
• Legal authorities: when legally required or to protect the legal rights of RookieSource

Providers are selected with appropriate security standards and, when processing data outside the EU/EEA, appropriate safeguards are applied (e.g., EU Standard Contractual Clauses).

6. Data Retention

We only retain personal data for as long as necessary for the stated purposes:

• Contact and registration form data: typically up to 24 months after the last interaction, unless the law requires longer retention
• Technical and security log data: typically up to 12 months
• Data related to disputes or legal obligations: according to the time limits set by applicable law

After the retention period expires, data will be deleted or anonymized.

7. Your Rights under GDPR

You have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of data in certain circumstances
• Right to restriction of processing — request suspension of processing in cases permitted by law
• Right to data portability — receive data in a structured, common format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — when processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal

To exercise these rights, send a request to [email protected]. We will respond within 30 days, as required by GDPR.

You also have the right to lodge a complaint with the competent data protection authority at your place of residence or in Germany (e.g., the supervisory authority of the state where RookieSource is registered).

8. Data Security

RookieSource applies appropriate technical and organizational measures to protect personal data from loss, unauthorized access, alteration, or disclosure, including:

• Encryption of connections (HTTPS/SSL) during data transmission
• Internal access controls based on the need-to-know principle
• Periodic security risk assessments and protection updates

No system is absolutely secure. If a data breach occurs that affects your rights, we will notify you in accordance with applicable law.

9. Cookies and Similar Technologies

The website may use cookies or similar technologies necessary for operation (e.g., session security, language preferences). Analytical or marketing cookies (if any in the future) will only be used with your appropriate consent, in accordance with EU cookie regulations.

10. Data Transfers Outside the EU/EEA

Data is primarily processed within the European Union. If data is transferred outside the EU/EEA, we ensure an equivalent level of protection through legal mechanisms such as the Standard Contractual Clauses (SCC) approved by the European Commission.

11. Changes to This Privacy Policy

We may update this Privacy Policy as the service or legal requirements change. The new version will be posted on this page with the update date. We encourage you to review it periodically.

12. Contact

For any questions about this Privacy Policy or the processing of personal data, please contact:

RookieSource
Kaskelstraße 46, 10317 Berlin, Germany
Email: [email protected]
Phone: +49 30 49957826

Or use our Contact page.

13. Geographic Scope

RookieSource operates in multiple regions, including Germany and India. This Privacy Policy applies to all users regardless of their location, in compliance with GDPR and applicable local laws.