Privacy Policy (Datenschutzerklärung)

This privacy policy explains how CodeChem GmbH processes your personal data when you visit our websites, contact us, or apply for a position — including through our online coding challenge.

CodeChem GmbH
Untermainkai 83 a
60329 Frankfurt am Main
Germany

Email: privacy@codechem.com
Phone: +49 151 40448842

We have not appointed a Data Protection Officer, as this is not currently required for our organization. You can direct any privacy question or request to the email address above.

When you visit codechem.com or challenge.codechem.com, our servers and the infrastructure providers that deliver our website automatically process some technical information, such as your IP address, the time of your visit, the page you requested, and information about your browser and device. We use this to keep our websites running, secure, and free of abuse. The legal basis is our legitimate interest in operating a reliable and secure website (Art. 6(1)(f) GDPR).

Our websites use third-party infrastructure providers to deliver content reliably, including cloud hosting and content delivery services. All of these providers process data exclusively within the EU/EEA.

If you use a contact form on our website, we process the information you provide (such as your name, email, phone number, and message) in order to respond to you. The legal basis is either Art. 6(1)(b) GDPR (steps you requested before a possible contract) or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We operate two application routes. The data we process depends on the route you use.

5.1 Direct application through a position page

If you apply directly through a position page on codechem.com, we process the information you provide in the application form, which may include your name, contact details, location, the position you're applying for, links to your portfolio or professional profiles, and your CV, cover letter, and certificates.

5.2 Application through the coding challenge

If you apply through our interactive coding challenge at challenge.codechem.com, we process the information you provide during registration, along with information generated as you complete the challenge. This includes your contact and background information, your code submissions and the results of automated tests, a screen recording of your challenge session (see Section 6), and — if you choose to use it — your conversation with the optional AI coding assistant (see Section 7).

5.3 Purpose, legal basis, and retention

We process your application data to evaluate your suitability for the position, communicate with you, and, where relevant, conduct interviews and reach a hiring decision.

For applications to CodeChem GmbH in Germany, the legal basis is § 26(1) BDSG (data processing necessary to decide whether to establish an employment relationship), together with Art. 6(1)(b) GDPR where relevant.

If you are not successful, we delete your application data 6 months after the process is complete, unless a legal obligation requires longer retention or you have separately and expressly agreed to be kept in a talent pool for future openings. This applies to both application routes, including the screen recording described in Section 6.

If you ask to be considered for future roles, we may keep your information for that purpose based on your separate, freely given consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

If you apply through the coding challenge, we record the visible content of your browser session while you solve the challenge, so that reviewers can better assess your problem-solving approach. This recording does not use your camera or microphone, and we do not log your keystrokes separately or create a full replay of every interaction.

The recording is necessary for us to assess your suitability for the position, in the same way as the rest of your application. The legal basis is § 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR — not your consent. This means the recording happens automatically as part of taking the challenge; you'll see a clear notice about it before it starts, but you are not asked to tick a separate consent box, because the recording is a required part of how this particular assessment works.

The coding challenge may offer an optional AI coding assistant. If you use it, your messages to the assistant and its responses are sent to our AI service providers to generate a response, and are stored so that reviewers can consider them as part of your application. Please do not include confidential information, credentials, or content that isn't yours in your messages to the assistant.

Our forms use a security check provided by a third-party service to distinguish genuine submissions from automated abuse. This check processes limited technical information (such as your IP address and browser signals) for that purpose. The legal basis is our legitimate interest in protecting our systems from abuse (Art. 6(1)(f) GDPR).

We use Google Analytics to understand how our websites and challenge platform are used, so we can improve them.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

No transfer of your personal data to countries outside the European Union or European Economic Area takes place. All service providers we use, including our hosting, content delivery, security, and AI service providers, process data exclusively within the EU/EEA.

Your data may be accessed by CodeChem staff involved in recruitment, and shared with service providers who help us operate our websites, deliver emails, run the coding challenge, and provide the AI assistant, each acting on our instructions and, where required, under a data processing agreement (Art. 28 GDPR). We may also disclose information where required by law, or to establish, exercise, or defend legal claims.

Subject to the conditions set out in the GDPR, you have the right to:

• access your personal data (Art. 15 GDPR);
• have inaccurate data corrected (Art. 16 GDPR);
• have your data erased (Art. 17 GDPR);
• restrict how we process your data (Art. 18 GDPR);
• receive your data in a portable format, where applicable (Art. 20 GDPR);
• object to processing based on our legitimate interest (Art. 21 GDPR); and
• withdraw any consent you've given, at any time, without affecting processing carried out before the withdrawal (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
https://datenschutz.hessen.de

To exercise any of these rights, contact us at privacy@codechem.com. We may ask you to verify your identity before responding.

We use appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access.

We may update this policy if our data processing activities or legal obligations change. The current version and its effective date will always be available on this page.

Effective date: 09/09/2026