Data protection

1. Contact Information

The controller responsible for processing your personal data when you visit this website within the meaning of the General Data Protection Regulation (GDPR) is:


Scout24 SE 

Invalidenstraße 65 

10557 Berlin 

Germany


Email: [email protected] 

Website: https://www.scout24.com


For all questions regarding data protection in connection with our website, you may contact our Data Protection Officer at any time at:


[email protected] 

(Subject: “FAO Data Protection Officer”)

2. Data Processing on Our Website

2.1 Accessing Our Website / Connection Data

Whenever you use our website, we collect connection data automatically transmitted by your browser. This includes in particular:

  • IP address of the requesting device
  • Date and time of the request
  • Requested URL and file path
  • Referrer URL
  • Browser information
  • Operating system information
  • HTTP status code
  • Amount of data transferred
  • Browser language settings

The processing of this data is necessary to enable your visit, ensure the security and stability of our systems, and administer the website technically.

Server log files are generally stored for up to seven days where necessary for detecting misuse and ensuring IT security. Thereafter, they are deleted or anonymized.

Legal basis: Art. 6(1)(b) GDPR where the website visit is related to contract initiation or performance; otherwise Art. 6(1)(f) GDPR. Access to terminal equipment information is based on Section 25(2) No. 2 TDDDG.

2.2 Contacting Us

If you contact us by email or via contact forms, we process the data you provide solely for handling your inquiry and communicating with you.

Legal basis: Art. 6(1)(b) GDPR where necessary for responding to your inquiry or initiating/performing a contract; otherwise Art. 6(1)(f) GDPR.

Data is deleted after your inquiry has been conclusively processed unless statutory retention obligations apply.

2.3 Applicants and actively approached talents


You may apply for open positions within the Scout24 Group via our careers portal. As part of the recruitment process, we process the following personal data in particular: 

  • First and last name, 

  • Contact details, 

  • Application documents, in particular CVs, cover letters and references, 

  • Information regarding qualifications, professional experience and availability, 

  • Information obtained through communications with us and job interviews, 

  • Where applicable, transcripts and summaries of interviews, 

  • Other information provided voluntarily, such as audio and video recordings of interviews. 

We process this data to review your application, communicate with you, prepare and conduct job interviews, and decide whether to establish an employment relationship. 

The legal basis for this processing is Art. 6(1)(b) GDPR and Art. 88 GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG), insofar as the processing is necessary to take steps prior to entering into a potential employment relationship. 

Support in the Initial Selection Process 

During the initial selection phase, we may use AI-supported technologies. Applications are structured and assessed against criteria that we define for the respective position. 

The AI-supported technology does not make any final decisions regarding your application. The final selection and any decisions regarding the further course of the recruitment process are always made by a recruiter or another responsible person at Scout24. No decisions regarding your application are made solely by automated means. 

AI-Supported Initial Interview 

Depending on the position and the recruitment process, we may invite you to participate in an AI-supported initial interview. Your responses will be processed to support our initial assessment of your qualifications and suitability for the respective position. 

Following the initial interview, we receive a transcript and an audio recording and, where applicable, a video recording if you have provided your consent. No final decision regarding your application is made automatically following the AI-supported initial interview. Such decisions are made by a recruiter or other responsible persons at Scout24. 

Documentation of Job Interviews 

For all interviews, whether AI-supported or conducted by a responsible person at Scout24, we may use technical tools to support the documentation of the interview. These tools may be used to generate a transcript and an AI-supported summary of the interview. 

You may object to this processing at any time. You can withdraw your consent via the relevant link in your interview invitation or by contacting your recruiting contact person directly, including during the interview. 

If you decline the use of these tools, the interview will take place or continue without such technical support. This will not result in any disadvantages for you in the recruitment process. 

The legal basis for this processing is Section 26(1) BDSG, as the processing is considered necessary for conducting a modern recruitment process. Nevertheless, you may object to this processing at any time. 

Sharing of Data with Other Scout24 Group Companies 

Where you have expressly given your consent, we may share your application documents and other information collected during the recruitment process with other companies within the Scout24 Group and consider you for other suitable positions. 

Such sharing is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR and Art. 88 GDPR in conjunction with Section 26(2) BDSG. Your consent is voluntary and may be withdrawn at any time with effect for the future. 

Active Sourcing 

As part of our active sourcing activities, we may process professional information obtained from publicly accessible profiles and other professional sources and networks, such as LinkedIn, to identify individuals whose qualifications may be suitable for open positions at Scout24. 

On this basis, we may contact you and provide you with information about a suitable position. If you do not respond, we will delete the data stored in our systems for this purpose within one month. 

If you agree to an initial interview regarding the position, the regular recruitment process will commence. From that point onwards, the information regarding the processing of applicant data set out in the preceding sections will apply. 

The legal basis for our active sourcing activities is our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR in identifying and recruiting the best talent for our company. 

Retention Period 

If your application is unsuccessful, we generally retain your application data for up to six months following the rejection of your application. After this period, the data will be deleted unless you have provided consent for further retention. 

We will contact you by email 30 days before the expiry of the six-month retention period to inform you of the upcoming deletion and give you the opportunity to remain in our talent pool for a further six months. 

Your application data may also be retained for a longer period without your consent if further retention is necessary for the establishment, exercise or defence of legal claims. 

If you are hired, the data required to establish and manage your employment relationship will be transferred to the relevant systems. This data will be subject to the applicable employee privacy information. Your application data will be deleted six months after the commencement of your employment. 

 
2.4 Cookies and Similar Technologies

We use cookies and similar technologies such as pixels, local storage and related technologies. These technologies help provide the website, ensure security and functionality, and analyze and improve the use of our services.

Necessary technologies are used on the basis of Art. 6(1)(f) GDPR and Section 25(2) No. 2 TDDDG. Analysis, convenience and marketing technologies are used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Detailed information about the technologies used, their storage duration, and the respective providers can be found at any time in our Privacy Manager. There, you can also withdraw or modify your consent with future effect.

If you have consented to the use of individual technologies, this may also involve the transfer of personal data to countries outside the European Economic Area. Further information can be found in the respective information on the services used within the Privacy Manager.

3. Scout24 Trust Center

We provide information on security measures and selected documentation at https://trust.scout24.com/. The Trust Center is technically operated by Vanta Inc.

When visiting the Trust Center, Vanta processes technical connection and usage data, including information about access to the website, device and browser information, IP address, timestamps of page visits, and other usage data required for the operation, security, analysis, and improvement of the service. Further information on Vanta’s processing of personal data can be found in Vanta’s Privacy Policy at https://www.vanta.com/legal/privacy.

Certain documents and evidence (e.g., certificates, audit reports, or security documentation) are made available only upon prior request. If you request access to such documents through the Trust Center, we process the information you provide, in particular your name, business email address, company, and any information submitted as part of your request. We use this data to verify your authorization, process your request, communicate with you, and manage access to the requested documents.

The processing is carried out on the basis of Art. 6(1)(b) GDPR for the purpose of providing the requested documentation and, where applicable, on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure and controlled provision of security-related information.

4. Disclosure of Data

Personal data is disclosed only:

  • With your consent
  • To fulfill contractual obligations
  • To comply with legal obligations
  • To establish, exercise or defend legal claims
  • To carefully selected service providers bound by contract

5. Transfers to Third Countries

Where personal data is transferred outside the European Economic Area, such transfers are carried out in compliance with Articles 44 et seq. GDPR, including adequacy decisions, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses or other appropriate safeguards.

6. Retention Period

We retain personal data only for as long as necessary for the relevant processing purposes or as required by law. Thereafter, data is deleted or anonymized.

7. Your Rights

You have the following rights under applicable law:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a supervisory authority.

Competent authority:


Berlin Commissioner for Data Protection and Freedom of Information 

Alt-Moabit 59–61 

10555 Berlin 

Germany

8. Right to Withdraw Consent and Right to Object

You may withdraw any consent given at any time with future effect. Where processing is based on legitimate interests, you may object for reasons relating to your particular situation.

9. Obligation to Provide Data

Where personal data is required for the use of specific functions or the performance of a contract, such information is marked as mandatory. Without it, services may not be available.

10. Automated Decision-Making

No automated decision-making, including profiling pursuant to Art. 22 GDPR, takes place.

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy from time to time, particularly in the event of changes to our website or legal requirements.


Version: October 2026