Date: January 7th, 2026

Thank you for your interest in a career at Tools for Humanity. Protecting your personal data is very important to us. With this privacy policy we inform you about the processing of your personal data when using our application process in accordance with the provisions of the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 - hereinafter referred to as "GDPR")

If you wish to contact us for any reason other than an application, please refer to the general Tools for Humanity privacy policy.

In principle, we only collect personal data when you apply for a position with Tools for Humanity through our Job Portal, additionally we might obtain information about you from recruitment agencies with your consent and through our internal referral program.

When you apply for a position with Tools for Humanity, we will process the personal data or data categories listed below:

We adhere to the principle of purpose limitation and process your personal applicant data solely based on your explicit consent (Art. 6 (1) s. 1 a) GDPR). By submitting your application and related information, you provide your consent for us to process your data for the following purposes:

Per our general policy, all applicant information, including that of applicants whose applications are rejected, will be retained for a period of twenty-for (24) months from the conclusion of the application process unless you re-apply to another role, in which case your information will be retained for longer.

Following this 24-month retention period, your applicant profile and associated personal data will be anonymized. This anonymization process involves the deletion of all personal identifiers and personal information, while retaining only metadata that cannot be linked back to you personally and is used solely for statistical or analytical purposes.

This retention period is superseded if you exercise your right to request the deletion of your personal data through our Privacy Portal. In such cases, we commit to deleting your personal data no later than within thirty (30) days from the moment we receive your valid deletion request, unless specific legal obligations require us to retain certain data for a longer period.

We do not sell or share applicant information with unaffiliated third-party companies but we may share your personal data with various recipients, always ensuring appropriate safeguards are in place and based on your explicit consent for processing, as detailed in Section 5.

Your information will be processed by relevant personnel within Tools for Humanity Corp (based in United States) and Tools for Humanity Corp GmbH (based in Germany), involved in the recruitment process (e.g., Talent and IT Team, hiring managers and other team members) for the purposes of evaluating and managing your application.

Our applicant form and associated data are collected, stored, and processed by Ashby, a third-party service provider located in the U.S., on our behalf, this means that, independently of the location of the role or job posting, the information you submit will be collected, stored, and processed in the United States. To ensure the protection of your data, we transfer your information under U.S.-EU Data Privacy Framework parameters, additionally we have as data transfer mechanism a Data Processing Agreement (DPA) signed with Ashby as our sub-processor which outlines strict security measures to the information collected for application purposes, such as:

Encryption of data in transit using the industry standard for HTTPS security (TLS 1.2 and TLS 1.3) and Encryption at rest using industry-standard AES-256 algorithms.If you are referred by any of our employees your information (name, last name, phone number and email) might be processed by Boon App, a referral process service located in the U.S. Finally, we may also process information through our email provider, Google, if there are any communication exchanges during the application process.

We have signed Data Processing Agreements with the above-mentioned providers and in all transfers of personal data to third countries outside the European Union or the European Economic Area, we ensure that an adequate level of data protection is guaranteed either through an adequacy decision by the European Commission (Art. 45 GDPR), by implementing appropriate safeguards such as Standard Contractual Clauses (Art. 46 GDPR), or exceptionally, under the conditions of Art. 49 (1) GDPR.

You have important rights concerning your personal data. These include the right to access your data, request its rectification or erasure, restrict its processing, object to its processing, and the right to data portability. You also have the right to withdraw your consent at any time, which does not affect the lawfulness of processing based on consent before its withdrawal.

You can easily exercise any of these rights, including making a data deletion request, by visiting our dedicated Privacy Portal. All requests are handled free of charge. Additionally, you have the right to lodge a complaint with a competent data protection supervisory authority regarding our data processing practices.

We reserve the right to amend this privacy policy from time to time to reflect changes in our data processing practices, legal requirements (such as new laws or regulatory guidance), or technological developments.

Any updates to this policy will be published on our website, with the "Status" date revised accordingly. We encourage you to consult this privacy policy periodically to stay informed about how we are protecting your personal data. Your continued engagement with our application process following the publication of any changes will signify your acceptance of the updated terms.

If you live in the United States or any other country outside of the European Union, EFTA States, or the United Kingdom, the data controller responsible for your personal data is Tools For Humanity Corporation, with an address of 650 7th St, San Francisco, CA 94103, USA.

If you live in the European Union, EFTA States, or the United Kingdom, the data controller responsible for your personal data is Tools for Humanity GmbH, with an address of Marcel-Breuer Str. 6, 80807 Munich, Germany.

If you wish to raise a concern about data practices, you have the right to do so with your local supervisory authority or TFH GmbH’s lead supervisory authority, the Bavarian Data Protection Authority (“BayLDA”) using the contact details listed on their website.

TFHAPP20260107