Privacy Policy

I. General Information

Below, we inform you about the types of personal data processed by SIXT and the purposes of this data processing. You will also receive information about your rights under data protection law.

If you have any questions about data protection, please contact:

• gdpr-pm@sixt.com, Sixt SE, Zugspitzstraße 1, D-82049 Pullach

• For Sixt Leasing SE and its subsidiaries: datenschutz@sixt-leasing.com, Sixt Leasing SE, Zugspitzstraße 1, D-82049 Pullach

You can also contact the Data Protection Officer of SIXT SE, Sixt Leasing SE, as well as the German SIXT companies at the above addresses.

II. Application Procedure

The SIXT company you apply to is responsible for processing your personal data during the application process (Controller).

For job postings on www.sixt.jobs, the responsible company can be found under → JOB KEY FACTS of the respective listing. For unsolicited applications, the company you contact is considered the Controller.

Categories of Data Processed:

• Master data: e.g. first name, last name, address (private/business), date of birth, marital status

• Contact data: e.g. phone number, email address (private/business), fax number if applicable, communication content (e.g. emails, letters)

• Education and professional data: e.g. schooling, further education, career history

• Voluntary information: Data you provide to us voluntarily

• Special categories of data: e.g. nationality

• Account access data (if an account is created): e.g. login information, social login provider link

• Personalization data: e.g. chosen language, user preferences for job alerts, newsletters, or saved searches

Purposes of data processing at SIXT:

• Administration, selection, and conducting of interviews

• Documentation purposes and communication with applicants

• Reimbursement of costs (e.g. travel expenses)

• Sending employment or rejection letters

• Return or destruction of application documents after rejection

• Creating an applicant account to manage applications (optional). If you create an applicant account, we also store your access data as well as information on your applications, preferences (e.g. job alerts), and uploaded documents. Using the account is voluntary and enables you to save applications, check their status, and reuse them. You can delete the account at any time on your own.

• Registration for the applicant account can also be done via social login (e.g. Google, Apple, or LinkedIn). In this case, we receive certain information from your provider, such as name, email address, and possibly profile picture.

• You can use optional features in your account, such as setting job preferences, activating personalized job alerts, or receiving our career newsletter. These settings can be managed or revoked at any time.

• Use of an automated resume parser to pre-fill application fields (see Section V)

• Personalized job notifications as requested by users

III. Job Portal

Controller: Sixt SE, Zugspitzstraße 1, 82049 Pullach (hereinafter “SIXT”, “we”, or “us”)

When you visit www.sixt.jobs, you submit your application documents along with your personal data (see Section II), which are processed by the respective SIXT company.

Cookies: Our website uses cookies (small text files). These cannot execute programs or transmit viruses. They do not contain personal data. Further information can be found in our cookie policy below on this page.

Technical service provider: The technical implementation and operation of the platform are carried out by a commissioned processor. Hosting, database, and email dispatch are carried out exclusively in data centers of Amazon Web Services (AWS), Region Frankfurt (Germany).

Tracking information in career newsletters: If you subscribe to our optional career newsletter, your opening and click activities are recorded in anonymized form for performance measurement. You can unsubscribe from the newsletter at any time.

IV. Legal Basis

• Art. 6(1)(a) GDPR – Consent

• Art. 6(1)(b) GDPR – Fulfillment of contract / pre-contractual measures (e.g. applications)

• Art. 6(1)(f) GDPR – Legitimate interests of the controller or third parties (e.g. internal administration), unless your rights override these interests

V. Data Sharing

Recipients:

• The SIXT company to which the application is addressed (see Section II)

• Service providers (processors) used for the application process

• Within the SIXT Group: Disclosure is permitted if allowed under data protection law

• Smartrecruiters Inc. as an external service provider for applicant management (in the case of an active application). Applications transmitted to Smartrecruiters are stored there for a maximum of 6 months and then automatically deleted. Further information can be found in the privacy policy of Smartrecruiters: https://www.smartrecruiters.com/legal/candidate-privacy-policy/

• Apilayer Data Products Gmbh: If you use the optional resume parser, your resume file will be temporarily transmitted to Apilayer Data Products Gmbh (Vienna, AT). The service automatically processes the file to extract relevant information and deletes both the file and extracted data no later than 15 seconds afterwards. There is no storage or transfer to third parties by API Layer. Further information: https://apilayer.com/privacy

• Social login providers (e.g. Google, Apple, LinkedIn): When using social login, login is handled by the respective provider. Certain data (e.g. name, email address) is transmitted to us. The privacy policies of the respective service apply.

Transfer to third countries:

• Based on an adequacy decision of the EU Commission or appropriate safeguards pursuant to Art. 46(2) GDPR

• Alternatively, based on exceptions according to Art. 49 GDPR

Definition of “third countries”: Countries outside the European Economic Area (EU + Norway, Iceland, Liechtenstein)

WhatsApp communication:

• Voluntary use of WhatsApp (Provider: WhatsApp Ireland Ltd., subsidiary of Meta/Facebook Inc.)

• Processing your master data for contact purposes

• WhatsApp privacy information: https://www.whatsapp.com/legal/#privacy-policy

• No advantage or disadvantage when choosing this application method compared to others (e.g. application form)

VI. Storage Duration

• In case of rejection: Deletion at the latest 6 months after the rejection letter is sent

• If there is ongoing interest from SIXT: longer storage only with your explicit consent

• If hired: Storage for the duration of the employment relationship

• If using an applicant account: Data is stored until the account is deleted by the user or a deletion request is made.

VII. Your Rights (under the GDPR)

• Right of access (Art. 15 GDPR)

• Right to rectification, erasure, restriction (Art. 16–18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

VIII. No Obligation to Provide Data

There is no legal or contractual obligation to provide your data. However, without providing the data required for the application, it cannot be processed (see Section II).

IX. Right of Withdrawal for Consents

If processing is based on your consent, you can withdraw your consent at any time with effect for the future. Processing carried out before withdrawal remains lawful.

X. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. (Art. 77 GDPR)

COOKIE POLICY

SIXT has implemented technical and organizational measures to protect your personal data, especially against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. These security measures are continuously adapted in line with technological developments.

COOKIE

When you visit our websites, information in the form of a "cookie" may be placed on your computer. "Cookies" are small text files copied from a web server to your hard drive. Cookies contain information that can later be read by a web server in the domain that assigned the cookie to you. Cookies cannot execute programs or place viruses on your computer. The cookies we use do not contain any personal information and are not combined with such data.

Most of the cookies we use are so-called session cookies, which are required to maintain consistency during your visit, i.e. to ensure that, for example, your preferences or other information entered during the application process remain throughout the session. These cookies have a lifespan of one year and are then automatically deleted. Finally, for billing with our advertising partners, we use cookies that record from which site or campaign an applicant was referred. We also collect this information only in abstract, non-personalized form. Such a cookie has a lifespan of 31 days. You can accept or decline cookies. Most web browsers automatically accept cookies. However, you can usually set your browser to decline cookies. If cookies are declined, you may not be able to use some features of the website. If cookies are accepted, you can later delete them. For example, in Internet Explorer 8 you can delete cookies by selecting "Tools" > "Delete browsing history" and clicking the "Delete cookies" button. If you delete cookies, all settings controlled by these cookies, including advertising settings, will be deleted and may not be restorable.