Applicant privacy notice

This notice explains how Maison du Chat processes your personal information during recruitment.

1 Controller and contact

The controller is Maison du Chat GmbH (MDC), Nidderauer Straße 10, 60388 Frankfurt am Main, Germany. For privacy questions and your rights: notifications@maisonduchat.de.

2 Information and sources

We receive your application, contact and interview information, including name, date of birth, address, work authorisation, transport, availability, employment preferences and history, languages, qualifications, and experience with cats and medication. We also keep necessary interview and selection notes and technical usage and security information. This includes the CV you upload with your application.

Required information is marked. Without necessary information we may be unable to assess your application; additional information is voluntary. Where possible, we check references you nominate and explain the scope before contacting them.

3 Purposes and legal bases

We assess applications, arrange interviews and make hiring decisions (Article 6(1)(b) GDPR and section 26(1) BDSG, as applicable). Statutory checks rely on Article 6(1)(c) GDPR and the relevant law. System security and necessary legal defence serve our legitimate interests (Article 6(1)(f) GDPR). The voluntary candidate pool relies on consent (Article 6(1)(a) GDPR). Acknowledging this notice is not blanket consent.

4 Health information and specific checks

Please provide only practical support needs in the general form, without diagnoses, treatment details or medical documents. Necessary health information is handled separately and confidentially under Article 9(2)(b) GDPR and section 26(3) BDSG for employment and social-law duties, or Article 9(2)(f) GDPR where necessary for legal claims.

A criminal-record certificate is requested only after selection for hiring, where lawful and necessary for the role. Before any request, we explain its specific purpose and legal basis, including the applicable authority under Article 10 GDPR. We retain no copy or unrelated entries, only a restricted record of the date, reviewer and necessary job-related result.

5 Recipients and transfers

Access is limited to responsible staff and, where necessary, legal advisers or authorities. We use Replit for the application, Microsoft 365 including OneDrive through GoDaddy for email, system emails and documents, Google Ireland Limited for address suggestions and the WhatsApp Business app provided by WhatsApp Ireland Limited for agreed communications. Providers receive information needed for their services. Email open and click tracking is off. Until 6 October 2026, system emails were sent through Postmark (AC PM LLC); Postmark may still hold records of those emails until they are deleted.

Providers process data outside the EEA, including in the USA. Applicable adequacy decisions cover eligible transfers; otherwise we use appropriate safeguards, in particular EU standard contractual clauses under the providers’ data-protection terms. Details and copies of applicable safeguards are available from notifications@maisonduchat.de.

Provider privacy information: Replit · Microsoft · GoDaddy · Postmark · Google · WhatsApp

6 Retention and candidate pool

For unsuccessful or withdrawn applications, necessary application and selection records are normally deleted within six months after you receive the rejection or we receive your withdrawal. These records include uploaded CVs. Only necessary records remain longer for specific claims or legal duties. On hiring, required information moves into personnel administration.

A voluntary candidate pool is agreed separately after selection, covering necessary contact, experience, skills and availability details for twelve months from agreement. Declining has no disadvantage. Withdrawal ends pool use; renewal requires fresh affirmative agreement.

7 Calls and decisions

Calls use telephone or WhatsApp, without routine recording or automatic transcription. Necessary written notes may be kept. People make selection decisions; hiring and rejection are not decided solely by automated processing.

8 Your rights

Subject to legal conditions, you may request access, correction, erasure, restriction and portability. You may withdraw consent at any time without affecting earlier lawful processing. Contact notifications@maisonduchat.de. You may complain to a data-protection authority, including the Hessian authority: Complaint to the Hessian authority.

Right to object: You may object to legitimate-interest processing for reasons relating to your particular situation. We stop unless demonstrated compelling legitimate grounds override your interests and rights, or processing is needed to establish, exercise or defend legal claims.