Data Protection Statement of Career Management GmbH

Last revised: 10 May 2023

We thank you for your visit of our website and your interest in us. We take the protection and security of your Personal Data entrusted to us seriously and hope you will feel comfortable and safe while perusing our web pages and making use of our offers. It is important for us to let you know which Personal Data are collected when using our offers and services and how they will be used by us in the future.

 

Purpose of Data Processing

Whenever we process Personal Data, this is done exclusively for the purposes stated in this Data Protection Statement, in particular to operate our website and to provide you with our services.

 

Contact details of the person responsible:

Career Management GmbH (also referred to as “we” in this privacy policy), is the

responsible party in terms of the EU Data Protection Regulation (“GDPR”).

 

Our contact details are as follows:

Thurn-und-Taxis-Platz 6

60313 Frankfurt a.M.

frankfurt@career-management.de

+49 (0)69 67734345

 

If you have any questions or suggestions regarding data protection, please feel free to contact us or our data protection officer directly, whose contact details you will find below.

 

Visiting Our Website

To allow us to transmit the website contents accessed by you (e.g. text, images, files supplied for downloading, etc) to your computer, we need to log and record the IP address assigned to your device (cp. Art. 6 Subsec. 1 lit. f GDPR). We also process these data to detect and prosecute abuse; in this regard, the legal basis is Art. 6 Subsec. 1 lit. f GDPR. Our legitimate interest in the Personal Data is to ensure the proper functioning and improvement of our website and the transactions concluded on it.

When accessing this website, the following personal data are stored in a logfile:

  • Anonymized IP address
    (anonymization is performed by truncating the last 3 digits of the IP address)
  • Date and time of access
  • Called-up website or name of downloaded file Status report whether access to the website, webpage or the download of the file was successful
  • Data volume downloaded
  • Browser and operating system used

The log file is deleted automatically after 30 days.

 

APPLICATION PROCESS

The following applies accordingly to your applications for job offers available on our website or your unsolicited applications submitted to us via our electronic application form or e-mail.

 

What data is collected about you in the event of an application?

After you voluntarily submit your application to us, rather for a specific position or for future job opportunity, we will collect the following Personal Data from your application, if it is willingly provided by you (“Personal Data”):

  • Full name
  • Title
  • Email address
  • Date of birth
  • Family status
  • Home address
  • Telephone and mobile number
  • Curriculum vitae
  • Profile picture
  • Education
  • Working experience
  • Awards
  • Hobbies
  • Communication (e.g. email correspondence)

If you use our electronic application form and decide to upload your CV directly, the system will automatically fill in the contact form with your Personal Data, if you have entered them in the CV. However, the data will not be made available to us until you release the data by clicking the “Send application” button on the second page of the contact form.

For the processing of your Personal Data within the application process, we use the applicant management software “HR4YOU” of HR4YOU AG, Ulbarger Straße 52, 26629 Großefehn, which acts as our contracted data processor. More about the data protection of HR4YOU can be found under:

https://www.hr4you.de/datenschutz/.

If certain Personal Data which we or our client consider necessary for a successful application and for further proceeding the application process is missing, we will contact you and give you an opportunity to supplement the application. However, whether you do so is left at your discretion.

You are not obliged to provide us with any of your Personal Data. In the absence of any of your Personal Data, however, we may not be able to properly provide you with our services and support you in finding a suitable position.

 

Regarding the application process, for which Purposes and based on which legal basis are your Personal Data collected and processed?

Based on your consent (Article 6(1)(a) GDPR) given during your application process, we process your Personal Data for the following Purposes:

  • analyzing your profile and storing your profile in our candidate database;
  • proceeding your applications for job offers from our clients available on our website;
  • proposing you potential positions from our clients which you may be interested in;
  • proposing your profile to our clients who might be interested, regardless of whether they have any open positions.

After you find your suitable position at one of our clients, we base on our legitimate interests (Article 6(1)(f) GDPR) to keep a record of your new employer and the employment terms for our billing purposes with our clients. We may also ask you for your consent to contact you for future opportunities.

After the above mentioned Purposes have been fulfilled, we may process your Personal Data for statistical purposes in accordance with Article 89 GDPR.

 

Who can view my data?

Your application is processed by the respective contact parties at our firm and duly noted. All employees involved with data processing are under an obligation to preserve the confidentiality of your Personal Data. Other than our clients, no third party is granted access to your Personal Data unless we are legally obliged to disclose the Personal Data or unless you specifically request us to do so. When we appoint external service providers for administrative purposes, we do so only after

ensuring that these are subject to the same data confidentiality, have taken precautions against unlawful viewing by third parties and will treat your Personal Data only on our request and in accordance with our instructions.

 

How long is my data stored?

Upon your consent, your Personal Data will be processed and stored by us for as long as it is necessary for the Purposes listed in this Statement or otherwise required by law.

In general,, we will store your Personal Data for a period of maximum three (3) years from the date you give your consent. If necessary, we will contact you by the end of this three-year period to ask you whether you are still interested in having your Personal Data stored further so that we can inform you of any job offers that may be suitable for you.

In general, any extended processing of your Personal Data is undertaken only when permitted by law or if you have consented to the processing or use of your Personal Data. In the case of extended processing for purposes other than those for which the data were originally collected, you will be informed of these other purposes before any extended processing and receive further information as may be needed.

Once your Personal Data is no longer needed for the stated Purposes and there is no other legitimate purposes nor legal basis to extend the processing of your Personal Data, your Personal Data will be securely destroyed.

 

Transmission to Third Parties

Information may also be processed by other companies but only when this is necessitated by the Purposes stated in this Data Protection Statement or when the other company is a service provider or data processor subject to our right of instruction.

For this purpose, we employ selected service providers (based in Germany) who process the data on our behalf (e.g. support with the handling of customer enquiries).

In these cases, your data are transmitted to these third parties for further processing. External service providers are carefully selected and regularly vetted to ensure that your privacy is protected.

Service providers are contractors or data processors subject to our instructions and are accordingly obligated by us to process your data exclusively in line with our instructions and currently applicable data protection laws. In particular, they are required to treat your data strictly confidential and not to process your data for any purpose other than the approved one.

The transmission of Personal Data to data processors is made on the basis of Article 28 ( 1) GDPR.

We do not sell your Personal Data to third parties nor market them in other ways.

Your Personal Data may also, without your explicit consent, be transmitted to law enforcement agencies and possibly to victimized third parties when required to investigate the unlawful use of our services or for their prosecution. However, this happens only when there are concrete indications of unlawful or abusive conduct. A transmission may also take place when this is conducive to the assertion of the terms of use or other agreements. In addition, we are legally compelled to give certain public authorities information on demand. These are law enforcement agencies, government agencies which impose fines, and tax offices.

The transmission of these data is made on the basis of our legal obligations (Article 6(1)(c) GDPR) or our legitimate interest (Article 6(1)(f) GDPR) in combatting abuse, criminal prosecution and for the safeguarding, assertion and enforcement of claims except when your rights and interest in the protection of your data prevail.

Also, we may grant certain of our clients (potential employers) limited access to the information stored at our data bank system (HR4You). The access to the data by such third parties will be strictly limited and only be possible with an ID and a respective password that can only be obtained by us. The clients being granted access are under a strict obligation not to provide their login credentials to any third parties.

 

Planned Data Transmission to Non-Member States

A transmission to non-member states is not planned at present; if it is, the corresponding legal preconditions will first be created. In line with the statutory provisions you will in particular be informed of the respective data recipient or their category.

 

Security

We employ technical and organisational security measures to protect the data supplied by you from fortuitous or premeditated manipulations, loss, destruction or unauthorized access. This also applies to the supply of external services. The effectivity of our security measures is continuously reviewed and the measures improved as a function of technical progress. All entered Personal Data are transmitted only in encrypted form.

 

Cookies

To make our Internet presence more user-friendly and optimize it for your needs, we use cookies in some areas. A cookie is a small text file stored locally on your PC as soon as you visit a website. When returning to the website using the same terminal device, the cookie shows e.g. that this is a repeat visit. Moreover, the cookie allows analyzing website use. Cookies do not contain Personal Data that would allow identifying you on third-party websites including on sites of analytics suppliers.

We use the following types of cookies:

  • General / Indispensable Cookies

These cookies are elementary for the proper functioning of our website as e.g. the issue of anonymous session IDs for bundling several enquiries to a web server or to handle errors with log-ins and orders.

  • Functionality Cookies

These cookies help us store the settings selected by you or support other functions when navigating through our website. We note your setting preferences for your next visit or store your log-in data for selected websites.

  • Performance / Statistical Cookies

These cookies collect information how our website is used (e.g. the web browser you use, the number of visits or the time spent on the website). These cookies do not store any information that allows to personally identify a user. The information collected with the help of the cookies is aggregated and hence anonymous.

Consent to or refusal of cookies – also for web tracking purposes – can be modified through the settings of your browser. Your browser can be configured in such a way that the acceptance of cookies is in principle denied or you can be notified in advance whenever a cookie is stored. Please note, however, that in this case the functionality of the website may be compromised (e.g. with orders). Your browser also offers a function to delete cookies (i.e., to delete browser data).

More information on this point can be found in your browser manual or usually in the browser settings.

 

Website-Tracking by Google Analytics and its Advertising Functions

Our website employs the web analysis service Google Analytics supplied by Google Inc. („Google“). Google Analytics uses so-called cookies, text files which are stored on your PC and allow analyzing your website use. The data on your use of our website are as a rule transmitted to a Google server in the USA and stored there. When the IP anonymization is activated on this website, your IP address is truncated by Google prior thereto. Only in exceptions is the full IP address transmitted to a Google server in the USA and truncated there. On our instructions, Google uses these data to analyze your use of our website, to compile reports and to provide further services in connection with the access. The IP address transmitted by your browser during Google Analytics is not aggregated with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser. We point out, however, that in this case you will not be able to use all functions of this website.

We also point out explicitly that we have activated all advertising functions of Google Analytics. This causes the logging of additional access data when supplied by you. An advertising function sends us reports on performance based on demographic features and aspects or remarketing. This permits the aggregation of personal data with non-personal data when these are collected with the help of Google advertising products. You can, however, prevent the logging of cookie-generated data specific to your use (including your IP address) and their processing by Google by downloading and installing a browser plug-in available from the following link:

(https://tools.google.com/dlpage/gaoptout?hl=de).

You can prevent the data logging by Google Analytics in clicking on the following link. This places a so-called Opt Out cookie that bars the future collection of your data when visiting the website

 

Google Analytics Opt-Out

Further information on the terms of use and data protection can be found

under http://www.google.com/analytics/terms/de.html and/or

under https://www.google.de/intl/de/policies/.

Please note that the Google Analytics „anonymizeIp“ code was activated on this website to ensure the anonymization of IP addresses.

 

Online Presence in the Social Media

We maintain several websites in the social media and on platforms to permit us to communicate with users active there and to inform them of our range of services. To do this, we utilize the technical platforms and services offered by the operators. In the social media and on other platforms, the data protection regulations of the respective operators apply even though we maintain a web presence and dispense information there.

We point out that the services of social networks and platforms and their functions offered here are used at your own responsibility. This applies in particular to the use of interactive functions (e.g. comments, sharing, feedback etc). The data collected about you in this connection are provided by the operators of these platforms and possibly transmitted to non-EU states. Which information operators receive and how it is processed is generally described in the pertaining data protection statement. The various platforms also inform you on how to contact the operators and on possible ad settings.

For Facebook: https://de-de.facebook.com/privacy/policy/

For LinkedIn: https://de.linkedin.com/legal/privacy-policy

For YouTube: https://policies.google.com/privacy?hl=de

 In what manner the operators of the social networks use the data from visitors to their websites for their own purposes, to what extent activities on their sites are allocated to users, how long their data are stored and whether the user data are transmitted to third parties is not conclusively or unambiguously stated by the operators and is not known to us.

 

Facebook Insights

When visiting our Facebook page, Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) logs among other things your IP address and other information stored in the form of cookies on your PC. These data are used to supply us as the operators of the Facebook pages with statistical information on your use of our Facebook page. For further information, see the following Facebook link: http://de-de.facebook.com/help/pages/insights.

 

Facebook Pixel

In addition, Facebook uses the remarketing function „Facebook Pixel“, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This function serves to present visitors to the website with targeted advertisements (“Facebook ads“) as part of the social network visit. For his purpose, we activated the remarketing tag of Facebook on this website. Via this tag, a direct connection to the Facebook servers is created when visiting the website whereby these servers are informed that you have visited this website. Facebook then allocates this information to your personal Facebook user account.

https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3

&query=pixel

 

Facebook Pixel

In addition, Facebook uses the remarketing function „Facebook Pixel“, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This function serves to present visitors to the website with targeted advertisements (“Facebook ads“). For his purpose, we activated the remarketing tag of Facebook on this website. Via this tag, a direct connection to the Facebook servers is created when visiting the website whereby these servers are informed that you have visited this website. Facebook then allocates this information to your personal Facebook user account.

https://www.facebook.com/business/help/742478679120153?helpref=search&sr=3

&query=pixel

 

Twitter Analytics

This service is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Twitter Analytics stores and processes information on your user conduct on our social media websites. For this purpose, Twitter uses among other things cookies stored locally in the cache of the browser on your terminal device and which permit an analysis of your social media platform usage

https://twitter.com/personalization

 

Nielsen NetRatings

Nielsen NetRatings is an Internet tracking service for the measurement and analysis of consumer conduct supplied by Nielsen GmbH, Lindwurmstraße 10, 80634 Munich. You may object to the collection and/or evaluation of your data by this tool by downloading and/or by placing and storing an opt out cookie available from the following link:

http://www.nielsen.com/us/en/privacy-statement/digital-measurement.html

 

AppNexus

AppNexus is supplied by AppNexus Inc., 28 W 23rd Street, 4th floor, New York, NY – 10010, USA and is a tool for web analysis and targeted advertising. You may object to the collection and/or evaluation of your data by this tool at

https://www.appnexus.com/en/company/platform-privacy-policy-de.

 

Eloqua Tracking

Eloqua, a service of Oracle Corp., 500 Oracle Parkway, M/S 5op7, Redwood Shores, CA 94065, places a permanent cookie on the respective log-in page unless an Eloqua cookie is already stored on your device. If you have already visited a website that employs Eloqua, you may already have an Eloqua cookie on your PC. The Eloqua cookie may be used to analyse your use of the site and hence improve it. Emails sent involving Eloqua employ tracking technology of the above kind. If you wish to totally stop the use of Eloqua tracking technology for your device, you may do so on the Eloqua Opt Out page. Further information is found in Eloqua’s Data ProtectionStatement viewable at

https://www.oracle.com/marketingcloud/products/marketingautomation/index.html.

 

Youtube

We use the YouTube service on our website for the display and playback of videos. By activating YouTube, you also agree to the activation of the DoubleClick cookie, which may be triggered via YouTube. We use the extended data protection option provided by YouTube to protect your personal data. If you call up a page in which a YouTube video is embedded, a connection is established to the YouTube servers and the content is displayed on the website by informing your browser. According to YouTube's information, data is only transmitted to the YouTube server in "extended data protection mode" when you actively start the video. If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your member account on YouTube. You can prevent this by logging out of your member account before visiting our website.

As part of that, Google also uses certain data it has collected from users of the YouTube platform (such as which videos users watch) to create aggregated usage statistics (termed “YouTube Analytics”) and make them available to the YouTube profile’s operator. We also receives such aggregated usage statistics. The information we receive using YouTube Analytics does not permit identification of individual users. We does not have access to personal data that Google processes for YouTube Analytics. Google alone defines what data is processed for YouTube Analytics and in what way. We cannot influence processing of the data by Google legally or de facto.

Google alone is responsible for such data processing activities

Further information is found in YouTube’s Data Protection Policy viewable at:

https://www.youtube.com/static?gl=GB&template=terms

 

Links to Web Pages of Other Suppliers

Our website may contain links to other suppliers. We point out that the present Data Protection Statement applies only to the present website. Compliance with current data protection regulations by other suppliers is beyond our control or verification.

 

Protection of Minors

Children and persons below the age of 18 should not transmit any Personal Data to us without the consent of their parents or guardian. We do not request the Personal Data of children, do not collect them or transmit them to a third party.

 

Abuse Detection and Prosecution

Data on abuse detection and prosecution, in particular your IP address, are stored by us for a maximum of 7 days. The legal basis to do so is Art. 6 Subsec. 1 lit. f GDPR.

Our legitimate interest in a data storage of 7 days is to ensure the orderly functioning of our website and of transactions concluded on it, and to protect from cyberattacks or sim. Also, anonymous user data are utilized for the adequate design of our website.

 

Rights Governing Personal Data Processing

 

Right to Information

You have the right to demand at any time information on your Personal Data processed by us within the limits of Art.15 GDPR. To do so, you may submit an application by regular mail or email to the address given below.

 

Right to Correction of Incorrect Data

You have the right to demand the prompt correction of your Personal Data if these should be faulty (Art. 16 GDPR). To do so, please contact us at the address given below.

 

Right to withdraw consent

You have the right to withdraw your given consent at any time by contacting us at the address given below. However, we will not be able to provide you with our service and support you in finding your suitable position without your consent to our processing of your Personal Data.

 

Right to Deletion

You have the right to the prompt deletion (“right to be forgotten”) of your Personal Data in the event of a legal reason as per Art. 17 GDPR. This is the case, e.g., when the Personal Data are no longer required for the purposes for which they were originally processed or when you have revoked your consent and in the absence of another legal basis for the processing (assuming there are no peremptory reasons for the processing; does not apply to objections to direct mail).

To assert this right, please contact us at the address given below.

 

Right to Restriction of Processing

You have the right to the restriction of processing if the conditions and requirements of Art. 18 GDPR are met. Accordingly, a restriction of processing may be requested if the processing is unlawful and the person in question refuses the deletion of their Personal Data and instead demands a restriction on their use; furthermore, if the data subject lodges an objection against the processing under Art. 21 Subsec. 1 GDPR when it is not yet clear if our legitimate reasons prevail. To assert this right, please contact us at the address given below.

 

Right to Data Portability

You have a right to data portability as per Art. 20 GDPR. The right entails receiving your data previously supplied to us in a commonly used, structured and machine readable format and to transmit these data to another controller, e.g. another service provider. A precondition is that the processing rests on consent or a contract and is performed by way of an automated process. To assert this right, please contact us at the address given below.

 

Right to Objection

Under Art. 21 GDPR, you have the right for reasons inherent in your personal situation to raise an objection at any time to the processing of your Personal Data among others on the basis of Art. 6 Subsec. 1 lit. e or f GDPR . We will then suspend the processing of your data except if we can demonstrate valid protection-worthy reasons for the processing which prevail over your interests, rights or freedoms, or when the processing serves to assert, exercise or defend a legal claim. To assert this right, please contact us at the address given below.

 

Right of Complaint to Supervisory Authority

If you believe that our processing of your Personal Data is unlawful, you also have the right to submit a complaint to the competent supervisory authority you also have the right to lodge a complaint with the competent supervisory authority and to seek legal remedies. The supervisory authority with whom the complaint was lodged will notify the complainant about the status and result of their complaint, including the option of seeking a judicial remedy.

 

While you can lodge your complaint with any competent supervisory authority, the authority competent for our location can be reached as follows:

 

The Hesse State Data Protection Officer

P.O. Box 31 63

65021 Wiesbaden

Telephone: +49 (0) 611/1408-0

E-Mail: poststelle@datenschutz.hessen.de

 

Data Protection Officer

 If you have any further questions regarding the processing of your Personal Data, also for any information requests, applications or complaints, contact our Data Protection Officer directly under frank.becker@aplaw.de