Applicant Privacy Policy

This notice explains how we process your personal data when you view our open roles and apply through this careers site, including the candidate portal, video questions and the live case. Personal data means any information that can identify you.

The controller responsible for processing your data is:

• Tomorrow Design Labs UG (haftungsbeschränkt)
• Gormannstr. 14, 10119 Berlin, Germany
• Phone: +49 30 86329271
• Email: md+jobs@launcharc.co

You can contact us at this address for any question about your data or to exercise your rights.

• Contact and profile details: first and last name, email, country, city, LinkedIn and portfolio links, earliest start date.
• Application content: CV, portfolio and other files you upload, and your answers to the application questions (for example expected rate).
• Video answers: recordings of you answering our video questions, including your image and voice.
• Live case: the time you started and submitted the case, your files, links and notes.
• Process data: stage in the process, ratings and notes from our hiring team, emails we send you, and the date of your consent.
• Technical data: IP address, browser and time of access, processed by our hosting provider to deliver the site securely. IP addresses are also used briefly to limit abuse.

Please do not include special categories of data (for example health, religion or ethnic origin) unless it is necessary. If you do, we process it only to the extent required for the application.

• Assessing your application and running the hiring process, including video questions, the live case and interviews: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and § 26 BDSG.
• Keeping your data in our talent pool for future roles, only if you opt in: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time with effect for the future.
• Secure operation of the site, preventing abuse and defending legal claims (for example under the German General Equal Treatment Act, AGG): Art. 6(1)(f) GDPR (legitimate interest).
• Retaining data where required by law: Art. 6(1)(c) GDPR.

Providing your data is voluntary, but without it we cannot consider your application. We do not use automated decision-making or profiling. Every decision is made by people.

Only members of our hiring team involved in the role can access your application. We use the following processors under data processing agreements (Art. 28 GDPR):

• Hosting, database and file storage: our cloud hosting provider, with data stored in the European Union.
• Website delivery: a content delivery network that processes technical connection data such as your IP address.
• Email delivery: an email service provider that sends process emails (for example invitations and status updates) on our behalf.

We do not sell your data or share it with other third parties unless we are legally required to.

Your application data is stored in the EU. Some service providers may process limited data, for example email addresses or connection data, in countries outside the EEA such as the USA. In that case we rely on an adequacy decision (for example the EU-U.S. Data Privacy Framework) or on the EU Standard Contractual Clauses (Art. 46 GDPR).

• If you are not hired or withdraw your application, we delete your data and files automatically 6 months after the final decision. This lets us respond to possible legal claims.
• If you agreed to join our talent pool, we keep your data for 12 months after the final decision, unless you withdraw consent earlier.
• If you are hired, relevant data becomes part of your personnel file.

After deletion we keep only anonymous statistics (for example how far in the process an application got), which cannot identify you.

After applying you receive a private portal link. Anyone with the link can open your portal, so please keep it to yourself. In the portal you can see your status, complete next steps, withdraw and request deletion of your application. For security, submitted content is not shown in the portal. To receive a copy of your data, email md+jobs@launcharc.co from the address you applied with and we will send it to you within one month.

We use only strictly necessary storage required for the site to work (for example to keep your progress while recording videos). We do not use analytics, advertising or tracking tools on this site. Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR.

Data is transmitted over encrypted connections. Files are kept in private storage and can only be accessed through short-lived links. Access for our team is protected by email-based sign-in. Please note that no transmission over the internet can be fully secure.

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• receive your data in a machine-readable format (Art. 20 GDPR),
• withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

RIGHT TO OBJECT (ART. 21 GDPR): WHERE WE PROCESS YOUR DATA ON THE BASIS OF LEGITIMATE INTEREST, YOU MAY OBJECT AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. WE WILL THEN STOP UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS OR THE PROCESSING SERVES LEGAL CLAIMS.

To exercise your rights, use your candidate portal or email us at the address above.

You may lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

We may update this notice when our process or the law changes. The version you agreed to is recorded with your application.