With this information, Invia Flights Germany GmbH informs you about the collection and processing of personal data. Invia Flights Germany GmbH (hereinafter also: “we”/“us”) is the controller named below in section 1 with regard to the persons affected by our data processing (hereinafter also: “you” or “user”). This information is provided on the basis of the provisions of Art. 13 and 14 GDPR.
1. Controller
TC Flights Germany GmbH
Hainstraße 17–19
04109 Leipzig
Germany
2. Contact Details of the Data Protection Officer
You can contact our Data Protection Officer at:
TC Flights Germany GmbH
Attn. Data Protection Officer Frank Hillmer
Hainstraße 17–19
04109 Leipzig
Germany
datenschutz@fluege.de
3. Purposes for Which Personal Data Are to Be Processed and Legal Bases for the Processing
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and, where applicable, other data protection regulations.
3.1. Data Processing for the Decision on Establishing an Employment Relationship
a) When we receive an application, we process the following personal data:
- Salutation, first name, last name,
- a valid email address, where applicable other electronic communication data,
- address,
- telephone number (landline and/or mobile),
- CV/résumé (including date of birth),
- references, certificates,
- work permit,
- work samples, links to open source repositories,
- further applicant data and information, where applicable also data pursuant to Art. 9 GDPR.
b) The processing of personal data takes place in order to:
- be able to carry out an application process,
- potentially offer you an employment contract,
- process any existing liability claims as well as the assertion of any claims against you.
The data processing is carried out at your request and is necessary pursuant to Art. 88 GDPR in conjunction with Section 26 para. 1 sentence 1 BDSG for the stated purposes for the appropriate processing of the application.
3.2. Data Processing Based on Consent
It may occur that we may only process personal data on the basis of your consent. Such a case exists, among other things, if we would like to include your application in our talent pool. For this purpose, we ask you for consent to inclusion in the talent pool and for future contact within the consented period.
The legal basis for this processing is Art. 6 para. 1 lit. a GDPR.
3.3. Data Processing Based on Balancing of Interests
a) If the processing of the application takes place via our online application tool, we process the following personal data:
- IP address of the user,
- date and time of access to the website,
- the protocol, e.g. https,
- content of the request or indication of the retrieved file transmitted to the user,
- access status (successful transmission, error, etc.),
- the website from which the user accessed,
- browser used by the user, operating system, interface, browser language and version of the browser software.
b) The processing of personal data takes place for:
- ensuring a smooth connection setup of the website,
- ensuring comfortable use of our website,
- evaluation of system security and stability as well as for further administrative purposes.
The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
Our legitimate interest lies in providing a technically smoothly functioning platform.
In the event of the processing of personal data based on our balancing of interests, section 7 contains particularly highlighted information regarding your right to object.
4. Recipients or Categories of Recipients of the Personal Data
4.1.
Your personal data will be disclosed or transferred to third parties if this is necessary for the preparation and handling of the application process, for the processing of other business activities, or for the fulfillment of legal obligations, in particular obligations under tax law or social security law.
4.2.
Your personal data will be disclosed or transferred outside the cases of section 4.1 if:
- there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or
- the disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
Categories of recipients of personal data may include, for example: social and labor administration authorities, data destruction service providers, disposal service providers, tax and legal advisory service providers as well as IT service providers.
4.3.
Within our company, those persons receive access to your data who require it for the fulfillment of our pre-contractual and legal obligations.
4.4.
Recipients of the data are in particular our IT service providers and data/file destruction providers acting as processors, insofar as they must receive personal data or could gain knowledge of personal data within the scope of their service and maintenance activities. Processors may process personal data only on the basis of our instructions. Corresponding commitments and confidentiality agreements or data processing agreements secure their activities.
4.5.
We do not carry out the web hosting for the personal data received through the use of our websites under the internet address https://fluege.de ourselves. For this purpose, we use a processor based in Germany.
4.6. Transfer to Third Countries
A transfer of personal data to a third country (a country outside the European Union or the European Economic Area) is generally not intended.
5. Storage Period
5.1.
Your personal data will be stored upon receipt of the application. If we are unable to offer you employment, we will retain the transmitted data for up to six months after the position has been filled in order to be able to answer questions in connection with the application and rejection, provided there are no statutory or official retention obligations preventing this.
5.2.
If you have consented to inclusion in the talent pool, your personal data will be stored for the consented period after the decision regarding the job posting. This enables us to contact you regarding future job offers.
5.3.
If we offer you an employment contract or employment relationship, we will store your personal data in accordance with the applicable tax and commercial retention and documentation obligations.
5.4.
The expiry of the respective retention periods does not automatically result in an obligation to delete, as in individual cases there may continue to be a legitimate interest in archiving, for example for the safeguarding of legal claims.
5.5.
We have a deletion concept with which standard deletion periods are determined based on the respective data category.
6. Rights of the Data Subject
As a data subject, you generally have the following rights:
6.1. Right of Access
You may request information about your personal data pursuant to Art. 15 GDPR.
6.2. Right to Rectification
If your information is incorrect or no longer correct, you may request rectification.
6.3. Right to Erasure
Under the conditions of Art. 17 GDPR, you may request the deletion of your personal data.
6.4. Right to Restriction of Processing
In the cases of Art. 18 GDPR, you have the right to request restriction of the processing of your personal data.
6.5. Right to Lodge a Complaint
If you are of the opinion that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
6.6. Right to Object
You have a right to object on grounds relating to your particular situation pursuant to Art. 21 para. 1 GDPR.
6.7. Right to Data Portability
You have the right to receive personal data that we process automatically on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format.
6.8. Automated Decision-Making and Profiling
We do not use automated decision-making procedures, including profiling pursuant to Art. 4 para. 4 and Art. 22 GDPR.
7. Particularly Highlighted Information
Case-Specific Right to Object in the Event of Balancing of Interests
a)
You have the right, on grounds relating to your particular situation, to object to the processing of your personal data if the processing is based on Art. 6 para. 1 lit. f GDPR.
b)
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.
8. Withdrawal of Consent
If the processing of personal data is based on your consent, you have the right to withdraw this consent at any time with effect for the future.
9. Obligation to Provide Data
The provision of the data is neither legally nor contractually required, but is necessary for processing your application. Without the provision of the data, processing your application is not possible.
10. Amendment of This Privacy Information
These privacy notices do not require consent and are regularly reviewed for the need for amendments. Previous versions are archived.
Status: 27.05.2026