Controller and contact
Berk Kuzgun controls the recruitment data processed through this portal.
August-Bebel-Straße 53/4, 15234 Frankfurt (Oder), Germany
business@gamingcenterwork.com
Information and sources
We process the contact details, country and time zone, education or employment status, availability, work authorisation, declared academic-placement route and institution where relevant, professional profiles, answers, CV or résumé, and optional information you submit. Do not upload identity, immigration or academic certificates with the application unless we provide a specifically approved secure channel.
During recruitment we also create an application reference, timestamps, consent records, status, internal assessments and notes, placement-eligibility decisions and their documented basis, communication history, email-delivery status, security data and audit records. Information comes mainly from you; information on professional profiles you link is used only to assess the application.
Information under Article 13 GDPR
This page provides, at the time data is collected, the controller’s identity and contact details, purposes and legal bases, data categories, recipients, possible international transfers, retention periods, required and optional fields, your rights, and information about automated decisions.
We use the information to receive and assess applications, communicate with you, arrange interviews or tasks, record decisions, prevent abuse, and establish or defend legal claims.
Legal bases include steps at your request before entering into a contract under Article 6(1)(b) GDPR, legitimate interests in fair, accountable and secure recruitment and legal defence under Article 6(1)(f), legal duties under Article 6(1)(c), and — where applicable — section 26 of the German Federal Data Protection Act. Separate, withdrawable consent under Article 6(1)(a) is used if you ask to be considered for unrelated future roles.
Required fields and sensitive data
Fields marked as required are needed to assess the specific application. Without them, we cannot process the application completely. Optional fields may be left blank without an automated disadvantage.
Do not submit identity-document numbers, a full home address, bank details, health information or other special-category data unless we later request it expressly and provide a separate explanation.
Access, providers and transfers
Access is limited to authorised administrators, recruiters and relevant decision-makers on a need-to-know basis. CV files are not attached to HR notification emails.
We use Vercel for hosting and private file storage, Railway for database and malware-scanning infrastructure, and Resend for transactional email. Where transfers outside the EEA require safeguards, we use mechanisms permitted by the GDPR, such as adequacy decisions or standard contractual clauses. You may request relevant details through the contact address.
Retention and deletion
Active process: We retain application data while the selection process is active. At submission, the system assigns a maximum review and retention marker of 12 months from submission. If a process exceptionally takes longer, we review and document why continued retention is necessary.
Rejection or withdrawal without talent-pool consent: The deletion date is set to 6 months after the final decision or withdrawal. This limited period supports accountable record-keeping and the establishment or defence of possible legal claims.
Optional talent pool: If you select the separate optional checkbox, we may consider the application for suitable future roles for up to 12 months after the final decision. You may withdraw this consent prospectively at any time. We will then stop talent-pool use and delete or anonymise the data unless another limited legal basis requires continued retention.
What happens at expiry: CV files are deleted from private storage. Your name, email address, phone number, profile links, free-text answers and other identifying application content are irreversibly removed or anonymised. Minimal non-identifying statistics and an audit record confirming deletion may remain longer.
Successful application: Necessary information may be transferred to a separate personnel record. Employment, tax and commercial-law retention requirements and a separate employee privacy notice then apply.
File safety and security
CV files are automatically malware-scanned before storage and kept in private, access-controlled storage. Suspicious files are rejected or isolated.
Additional controls include transport encryption, role-based access, mandatory two-factor authentication for administrators and recruiters, audit records and signed email webhooks.
Your rights
Subject to data-protection law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent prospectively at any time. We may request proportionate identity verification before acting.
Write to business@gamingcenterwork.com. You may also complain to the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg or another competent data-protection authority.
Decisions and changes
GamingCenter does not use solely automated decision-making to accept or reject candidates. People make recruitment decisions; technical systems support storage, security, communication and organisation only.
Material changes to this notice are published with a new version. We will provide prior information and use an appropriate legal basis before processing recruitment data for an incompatible new purpose.