Last updated: 9 October 2026
Legal OS GmbH (trading as Flank), Köpenickerstraße 145, 10997 Berlin, Germany, is responsible for the personal data you give us when you apply for a job with us. You can reach our Data Protection Officer at dpo@flank.ai.
This notice covers every applicant, however you reach us. Our Website Privacy Policy and Product Privacy Policy do not apply to applications. If you join Flank, our employee privacy notice applies from your start date.
| Data | Purpose | Legal basis |
|---|---|---|
| Contact details, CV or LinkedIn profile, cover note, your answers to our questions, interview notes and feedback, our correspondence with you | Assessing your application and communicating with you | Art. 6(1)(b) GDPR, §26(1) BDSG |
| Right-to-work status, where relevant to the role | Legal checks before hiring | Art. 6(1)(c) GDPR |
| Application records after the process ends | Responding to any discrimination claim under the AGG | Art. 6(1)(f) GDPR, our legitimate interest in defending legal claims |
| Your details after the process ends (talent pool) | Contacting you about future roles | Art. 6(1)(a) GDPR, your consent, withdrawable at any time |
Almost all of this comes from you; interview notes come from the people you meet. If someone refers you, we tell you when we first get in touch. Please do not send us special-category data such as health or religious information. You are not obliged to give us anything, but without contact details and something about your experience we cannot consider you.
People at Flank make every hiring decision. We use Anthropic's Claude as a drafting and summarising tool; no decision about you is made solely by automated means.
Inside Flank, only the people involved in hiring for the role see your application. To run the process we use Google Workspace (email, calendar, documents), Slack (team messaging), Granola (note taking), Anthropic (Claude) and Linear (tracking the process). Each is our processor under a data processing agreement, data may be processed in the United States, and transfers are protected by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Beyond that, we share your data only where the law requires it or with our legal advisers if a dispute arises.
If your application is unsuccessful or you withdraw, we delete your data six months after we tell you the outcome or the role closes, whichever is later; this covers the claim period under §15(4) AGG. If we hire you, your application moves to your personnel file. If a legal claim is pending, we keep what we need until it is closed.
You can ask us at any time for access to your data, to correct or delete it, to restrict or object to our processing, to receive it in a portable format, or to withdraw any consent you have given (Art. 15 to 21 and Art. 7(3) GDPR). Email dpo@flank.ai; we respond within one month and will never treat you less favourably for exercising a right. You can also complain to the Berliner Beauftragte für Datenschutz und Informationsfreiheit or the supervisory authority where you live or work.
The version of this notice published on flank.ai when you apply is the one that applies to your application.