Thank you for your interest in our websites birkenstock-group.com and careers.birkenstock-group.com (both collectively referred to as the "Website" unless otherwise specified).

This privacy policy is intended to provide you with a clear overview of how we process your personal data.

1.       WHO IS RESPONSIBLE FOR PROCESSING MY DATA AND WHO IS THE DATA PROTECTION OFFICER?

2.       WHAT IS THE SUBJECT OF DATA PROTECTION?

3.       WHAT CATEGORIES OF DATA DO WE PROCESS?

4.       ON WHAT LEGAL BASIS IS THE PROCESSING OF MY DATA BASED?

5.       FOR WHAT PURPOSES IS MY DATA PROCESSED?

6.       WITH WHOM CAN MY DATA BE SHARED?

7.       WILL MY DATA BE TRANSFERRED TO A THIRD COUNTRY?

8.       HOW LONG WILL MY DATA BE STORED?

9.       WHAT DATA PROTECTION RIGHTS DO I HAVE AS A DATA SUBJECT?

10.     ARE THERE ANY AUTOMATED INDIVIDUAL DECISIONS OR PROFILING MEASURES?

1. WHO IS RESPONSIBLE FOR PROCESSING MY DATA AND WHO IS THE DATA PROTECTION OFFICER?

The controller for data processing within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (hereinafter "GDPR") is:

Birkenstock Group B.V. & Co. KG

Burg Ockenfels

53545 Linz

Germany

You can contact our data protection officer at:

Birkenstock Group B.V. & Co. KG

Data Protection Officer

Burg Ockenfels

53545 Linz

dpo@birkenstock.com

For general questions about data protection or inquiries from data subjects, please contact us using our online form.

2. WHAT IS THE SUBJECT OF DATA PROTECTION?

Data protection law regulates the handling of personal data. Personal data is information relating to an identified or identifiable natural person (hereinafter "data").

3. WHAT CATEGORIES OF DATA DO WE PROCESS?

When you use the features of our Website, we may process the following categories of data, depending on your use: browsing data, contact details, communication with you, application data.

When contacting us (e.g. via contact form or e-mail) or when opening an account on our application platform, you provide us with data. Which specific data you provide to us can be seen in the respective input forms. For example, this may include the following data: your name, email address, telephone number, other contact details including your address, or files uploaded by you, such as CVs or cover letters. You can see from the input form whether you are obliged to provide us with the relevant data. You can also find further information on this under Section 5 of this Privacy Policy.

4. ON WHAT LEGAL BASIS IS THE PROCESSING OF MY DATA BASED?

As a so-called controller of your data, we need a legal basis to  process your data lawfully (Art. 6 para. 1 GDPR). If:

• If you have given  us your consent to process your data for one or more specific purposes, the legal basis is Art. 6 para. 1 sent. 1 let. a) GDPR;
• the processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your  request, Art. 6 para. 1 sent. 1 let. b) GDPR;
• the processing is necessary for compliance with a legal obligation to which we are subject, Art. 6 para. 1 sent. 1 let. c) GDPR;
• the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail, the legal basis is Art. 6 para. 1 sent. 1 let. f) GDPR.
• data in connection with employment relationships, e.g. for job applications, recruitment, the implementation and termination of employment relationships, the legal basis for this is Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 sent. 1 or 3 of the German Federal Data Protection Act (hereinafter “BDSG”) or other applicable country-specific laws.

5. FOR WHAT PURPOSES IS MY DATA PROCESSED?

We may process your data for the following purposes:

5.1. Job applications

We process your data when you apply for a job or a freelancer position (e.g., your name, address, data included in your cover letter or CV). The data is processed to decide if a contract with you will be concluded, or, if you already have a contract with us, to perform our obligations under the contract or terminate the contract.

If we have decided not to hire you or if your employment with us has ended, your data will be stored to enable us to defend ourselves against potential claims based on applicable laws regarding equal treatment.

Legal basis when you apply and during your employment: Art. 6 para. 1 sent. 1 let. b) GDPR as well as applicable country-specific legal bases, such as Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 sent. 1 BDSG.

Legal basis if we have decided to not hire you, or if your employment with us has ended: Art. 6 para. 1 sent. 1 let. f) GDPR.

In certain cases, we might be obliged to retain certain data (e.g. business correspondence and receipts) for a period of time required by law. This data may only be deleted – even in the case of a request for deletion – after the expiry of the statutory retention periods.

Legal basis: Art. 6 para. 1 sent. 1 let. c) GDPR in connection with, in particular, § 257 para. 4 German Commercial Code (hereinafter “HGB”) or other applicable statutory retention obligations.

5.2. Account on our application platform (Talent Community)

When you create an account on our application platform, we process your email address.

The data we collect when you join the Talent Community can be seen in the respective input forms at the beginning of the creation process (e.g., name, telephone number, country, preferred place of work, interests, current job title, willingness to relocate).

Legal basis: Art. 6 para. 1 let. b) GDPR and Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 sent. 1 BDSG.

5.3. Job alerts

If you subscribe to our notifications about new job postings, we will use the data you provide to send you regular notifications about job postings that are relevant to you. By subscribing to the notifications, you consent to the necessary data processing. You can revoke this consent at any time with future effect by changing your settings in your Talent Community account or by contacting us at privacy@birkenstock.com or at the address specified in Section 1 of this privacy policy.

Legal basis: Art. 6 para. 1 let. a) GDPR

5.4. Cookies

In order to make visiting our Website attractive (e.g. by integrating videos), to enable the use of certain functions (e.g. provision of the Website) and to better understand the use of our site and its optimization (e.g. how the Website is used), we use so-called cookies or similar technologies (all collectively referred to as "Cookies") on our Website. Further information can be found in the cookie settings under the following links, where you can also change your cookie preferences at any time:

• For birkenstock-group.com: Cookie settings
• For careers.birkenstock-group.com: Cookie settings

Legal basis: Art. 6 para. 1 let. a) GDPR or Art. 6 para. 1 let. f) GDPR

5.5. Hosting

For the provision (hosting) of our Website and related services, data is processed to properly deliver and display the website and enable its functionalities. For this, we involve so-called hosting service providers, who provide us with storage space and processing capacities in their data centers.

Legal basis: Art. 6 para. 1 let. f) GDPR

5.6. Data protection requests

When you contact us to make use of your data subject rights, we process your name, email address and any additional information you provide us in your request, as well as personal data provided to verify your identity as legitimate data subject if needed.

The data provided in your request is processed for the purpose of responding to you, as well as ensuring our compliance with the GDPR by helping you as data subject exercise your rights as set out in the GDPR. This is also a legitimate interest of ours.

If we process additional data of yours to verify your identity, this is done to prevent cases of fraud, which is a legitimate interest of ours.

Legal basis for processing the data in your request is Art. 6 para. 1 sent. 1 let. c) in connection with Art. 12 GDPR, as well as Art. 6 para. 1 sent. 1 let. f) GDPR.

Legal basis for verifying your identity: Art. 6 para. 1 sent. 1 let. f) GDPR.

6. WITH WHOM CAN MY DATA BE SHARED?

We transfer your data to the following parties for the purposes stated in each case:

6.1. Job applications

When you contact us, your data may be processed by us through our use of office management software solutions that we use for our daily work, in particular software from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.

We use the Phenom service from Phenom People, Inc., 300 Brookside Ave, Bldg 18 Suite 200, Ambler, PA 19002, USA, to manage your application data.

If our personnel management software is used to manage your application, the recipient of your data is T.CON GmbH & Co. KG, Straubinger Straße 2, 94447 Plattling, Germany.

If your application relates to a position advertised by a parent, subsidiary, or sister company of Birkenstock Group B.V. & Co. KG, we will forward your application data to that company for further review.

6.2. Account on our application platform (Talent Community)

We use the Phenom service from Phenom People, Inc., 300 Brookside Ave, Bldg 18 Suite 200, Ambler, PA 19002, USA, to provide our application platform (Talent Community).

6.3. Job alerts

We use the Phenom service from Phenom People, Inc., 300 Brookside Ave, Bldg 18 Suite 200, Ambler, PA 19002, USA, for the technical processing of our job alerts.

6.4. Cookies

We use Cookies on our Website. Some of these Cookies are provided by third-party providers whose services we use. When using such a service, the provider may also be the recipient of the information collected by means of a Cookie. You can find further information about your settings options in Section 5.4 .

6.5. Hosting

We have commissioned a hosting service provider to host our website (birkenstock-group.com) and related services. For our career website (careers.birkenstock-group.com), we use the services of Phenom People, Inc., 300 Brookside Ave, Bldg 18 Suite 200, Ambler, PA 19002, USA.

6.6. Data protection requests

We use the services of otris software AG, Königswall 21, 44137 Dortmund, Germany, to respond to your data protection inquiries.

7. WILL MY DATA BE TRANSFERRED TO A THIRD COUNTRY?

Some of our service providers and group companies that might receive information of yours from us are based outside the European Union (EU). These countries may not have a level of data protection comparable to the GDPR. If a recipient of your data is based outside the EU, there are basically two possibilities to ensure that an adequate level of protection for your data is also provided outside the EU:

• If a recipient is located in a country for which the European Commission has determined an adequate level of data protection, we rely on this adequacy decision of the EU Commission. The EU Commission offers an overview of the countries for which adequacy decisions have been issued, which you  can access here.
• If a recipient is not located in a country that the EU Commission has deemed to provide an adequate level of data protection, we will either enter into a contract with that recipient in which we agree on rules to ensure that the recipient adequately protects your personal data (EU Standard Contractual Clauses developed by the EU Commission), or we will rely on binding corporate rules of a group of companies or a company,  approved by a supervisory authority. You can request further information by contacting us under the contact details provided in Section 1 of this Privacy Policy.

8. HOW LONG WILL MY DATA BE STORED?

Your data will be stored in accordance with Art. 5 para. 1 let. e) GDPR for as long as we are legally obliged to do so or as long as we use your data for the purposes stated in Section 5. Subsequently, the processing of your data will be restricted or your data will be deleted.

If you need more information regarding our retention periods, feel free to contact us anytime at the address stated in Section 1 of this Privacy Policy.

9. WHAT DATA PROTECTION RIGHTS DO I HAVE AS A DATA SUBJECT?

When we process your data, you have the following rights under the GDPR:

• Right to information: You have the right to receive information about the processing of your personal data by us (Art. 13 and 14 GDPR).
• Right of access: You have the right to obtain confirmation as to whether or not we are processing your personal data and, where that is the case, to obtain access to the personal data (Art. 15 GDPR).
• Right to rectification: You have the right to request the rectification of inaccurate or incomplete personal data concerning you (Art. 16 GDPR).
• Right to erasure ("right to be forgotten"): Under certain circumstances, you have the right to request the erasure of personal data concerning you (Art. 17 GDPR).
• Right to restriction: Under certain circumstances, you have the right to request the restriction of processing (Art. 18 GDPR).
• Right to data portability: Under certain conditions, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit this data to another controller or to have them transmitted to us (Art. 20 GDPR).
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).
• Right to withdraw consent: If the processing of your personal data is based on your consent (Art. 6 para. 1 sent. 1 let. a) GDPR or Art. 9 para. 2 let. a) GDPR), you have the right to withdraw your consent at any time (Art. 7 para. 3 GDPR). The revocation has no effect on the legality of the data processing carried out until the revocation.
• Right against a decision based on automated processing: You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you (Art. 22 para. 1 GDPR).

10. ARE THERE ANY AUTOMATED INDIVIDUAL DECISIONS OR PROFILING MEASURES?

We do not use automated processing of data (Art. 22 GDPR) to make decisions concerning you – including profiling – that have legal effects on you or similarly significantly impair you.

Last update: November 26, 2025

Version: 2.1