V2 (022024)
ZETA GmbH uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by ZETA GmbH.
With regard to interaction within the company account of ZETA GmbH, ZETA GmbH and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with ZETA GmbH, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of ZETA GmbH in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to ZETA GmbH only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
With this privacy policy, ZETA GmbH and New Work SE fulfil their obligation to inform you about the processing of your personal data during the application process.
Joint controllers pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) are the
ZETA GmbH
Zetaplatz 1
8501 Lieboch
Tel: +43 (0) 3136 9010-1000
e-mail: office@zeta.com
New Work SE
Am Strandkai 1
20457 Hamburg
Tel: +49 40 419 131-0
e-mail: info@new-work.se
hereinafter uniformly referred to as "we" or "us".
Both companies have appointed a data protection officer. They can be contacted at datenschutz@zeta.com or datenschutzbeauftrager@new-work.se.
An agreement on joint data protection responsibility pursuant to Art. 26 GDPR has been concluded between the controllers. This can be found at the following link: https://www.xing.com/terms/onlyfy-bewerbungsmanager (point C)
Data subjects are individuals who apply via our application portal for a position advertised by ZETA GmbH or one of its affiliates.
We process all data that we request in the course of the application process via the applicant platform. These are
In addition, we process all data that you provide to us through your application documents and by answering the voluntary questions in our application form. This may include, among other things:
In addition, we store the written, electronic communication that takes place between you and us.
As part of your application, you can give us your consent to store your data for one year for the purpose of consideration for future vacancies. Two weeks before the end of this year, you will be informed that your data will soon be deleted. You will then have the opportunity to consent to your data being stored for a further year. If you do not give your consent, your data will be deleted automatically.
The following usage data is automatically collected by Onlyfy:
This data is technically necessary to provide the functions of the recruiting system and to ensure its stability and security.
The privacy policy of New Work SE can be found at:
Onlyfy uses cookies. These serve to make the online application more user-friendly and effective. The cookies are technically necessary to make this application platform available to you. It is not possible to operate the platform without the use of cookies.
Your personal data will be processed for the purposes of personnel selection and to fill vacancies.
The transmission of your data to us in the course of your application is based on a pre-contractual relationship.
Legal basis: Art. 6 (1)(b) GDPR (contract initiation and fulfilment)
Your data will only be processed for the purpose of keeping records of your application on the basis of your consent. We may contact you separately to obtain your consent.
Legal basis: Art. 6 (1)(a) GDPR (consent)
In certain cases, we process your data to protect our legitimate interests or those of a third party. A legitimate interest exists, for example, if your data is required for the assertion, exercise or defence of legal claims in the context of the application process (e.g. due to a legal dispute based on possible discrimination).
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest)
Applications that are sent to us by post or in person are transferred to Onlyfy and processed there. The original documents are destroyed or returned after digital capture, provided there are no statutory retention obligations.
In the event that you are not selected for a specific vacancy, we will store your data for a maximum of 7 months from receipt of your application documents on the basis of the national law of our company headquarters. Your personal data will then be deleted manually. If you consent to your application being kept on file for future job advertisements, we will generally store your data for 1 year from receipt of the application documents (see section 3).
You have the following rights with regard to your personal data:
Data protection authority of the company headquarters:
Austrian Data Protection Authority:
Hamburg Commissioner for Data Protection and Freedom of Information of the Free and Hanseatic City of Hamburg
If you are of the opinion that the processing of your data violates your national data protection law or European data protection law and that your rights have been violated as a result, please contact us so that we can clarify any questions you may have.
Send your enquiries and the exercise of your data subject rights by e-mail to datenschutz@zeta.com or datenschutzbeauftrager@new-work.se
If you have consented to the processing of your personal data, in particular in the course of consenting to the retention of your application documents, you can revoke this consent at any time. The revocation of your consent is effective for the future from the time of revocation. The legality of the processing of your personal data up to the time of revocation remains unaffected. Please send your cancellation to:
We reserve the right to make changes to our privacy policy from time to time. We will publish all changes to the privacy policy on this page. Please refer to the latest version of our privacy policy in this regard.
6/2025
