Data protection

ACTIEF Personnel Management GmbH

Data protection information

Below you will find information on which personal data we process, for what purpose, on what basis and for how long:

Overview / Table of contents

You will find the following information in our privacy policy:

A. Our contact details and general information on data processing by us

  • Name and contact details of the controller
  • Contact details of the data protection officer
  • Legal basis for the processing of personal data
  • Data erasure and storage duration
  • Our sources of personal data
  • Specific categories, purposes and legal bases for the processing of personal data
  • Recipients or categories of recipients of the personal data
  • Contact via e-mail, fax, telephone call and newsletter

 

B. Scope of the processing of personal data via our website

  • Provision of the website and creation of log files
  • Contact form and e-mail contact
  • Contact forms and data processing in the application process
  • Application by e-mail or by post
  • Use of the recruiting software persoprofiler.6
  • Use of cookies by us and third-party providers
  • Use of the analysis tool Google Analytics
  • Use of the Google Maps map service
  • Use of reCAPTCHA
  • Use of YouTube videos on the website
  • Encryption of the website
  • Transfer of personal data to a third country (other EU countries)

 

C. Your rights as a data subject

 

  • Right to information
  • Right to rectification
  • Right to erasure
  • Right to object to processing based on legitimate interest
  • Right of revocation if consent has been given
  • Right to restriction of processing
  • Right to information
  • Right to data portability
  • Right to object to processing based on legitimate interest
  • Right of revocation if consent has been given
  • Automated decision-making including profiling
  • Voluntary nature of the provision of data
  • Right to lodge a complaint with a supervisory authority

A. Our contact details and general information on data processing by us

Name and contact details of the controller

Responsible within the meaning of data protection law for the collection and use of personal data is

ACTIEF Personalmanagement GmbH
Bahnhofplatz 12
D-76137 Karlsruhe
Phone: (0721) 83 17 19 0
Fax: (0721) 83 17 19 81
E-mail: [email protected]
Web: www.actief-personal.de

Managing directors authorized to represent the company: Patrick Heinig and Martin Kästner

Register court: Mannheim Local Court
Register number: HRB 105204
VAT ID no.: DE143598117

Further information about our company can be found in the imprint of our homepage at https://www.actief-personal.de/impressum/.

Contact details of the data protection officer of the controller

You can contact our data protection officer as follows:

Mr. Rudi Michel
ACTIEF Personalmanagement GmbH
Bahnhofplatz 12
D-76137 Karlsruhe
E-Mail: [email protected]

Legal basis for the processing of personal data

In general, the following applies to the processing of personal data by us:

  • Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
  • When processing personal data that is necessary for the performance of a contract with you, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies if the processing is necessary to carry out pre-contractual measures.
  • Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 (1) (c) GDPR serves as the legal basis.
  • In the event that your vital interests or those of another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
  • If the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party and your interests, fundamental rights and freedoms do not override these interests, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

 

Data erasure and storage duration

The personal data will generally be deleted or blocked by us as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Specifically, this means:
If we process the personal data on the basis of consent to data processing (Art. 6 (1) (a) General Data Protection Regulation, GDPR for short), the processing ends with your revocation, unless there is another legal basis for processing the data, which is the case if we are still entitled to process your data for the purpose of fulfilling the contract at the time of revocation or if the data processing is necessary to safeguard our legitimate interests (see below in each case).

If, in exceptional cases, we process the data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR) in the context of a prior assessment, we will store it until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted "Reference to special right of objection" under C.).

If we process the data to fulfill the contract, we store the data until the contract has been finally fulfilled and processed and no more claims can be asserted from the contract, i.e. until the statute of limitations has expired. The general limitation period according to § 195 BGB is three (3) years. However, certain claims, such as claims for damages, only become time-barred after 30 years (see Section 197 BGB). If there is justified reason to assume that this is relevant in individual cases, we will store the personal data for this period. The aforementioned limitation periods begin at the end of the year (i.e. on December 31) in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence.

We would like to point out that we are also subject to statutory retention obligations for tax and accounting reasons. These oblige us to retain certain data, which may also include personal data, for a period of six (6) to ten (10) years as proof of our bookkeeping. These retention periods take precedence over the aforementioned deletion obligations. The retention periods also begin at the end of the relevant year, i.e. on December 31.

Source of the personal data

The personal data processed by us originates primarily from the data subjects themselves, for example by them

  • As a user of our website, you transmit information such as your IP address to our web server via the web browser and your end device (e.g. a PC, smartphone, tablet or notebook),
  • interested parties can request information material or an offer from us,
  • as customers place an order with us or conclude a contract with us,
  • request information material, press releases, statements, etc. as a representative of the press,
  • as suppliers supply us with goods or provide us with services and the like as agreed.

Only in very exceptional cases can the personal data processed by us also originate from third parties, for example if a person is acting on behalf of a third party.

Specific categories, purposes and legal bases for the processing of personal data

We process the following categories of personal data:

  • Users of our website,
  • Interested parties,
  • Representative of the press,
  • customers, as well as
  • Suppliers.

Depending on the category of data involved, we process personal data for the following purposes and on the basis of the respective legal basis of the General Data Protection Regulation (GDPR):

User data: Data from users of our website is collected and processed by us on a non-personal basis. It is not possible for us to identify specific persons. The IP address is processed exclusively in anonymized form. If, in exceptional cases, personal data is involved, we process it to protect our legitimate interests on the basis of Art. 6(1)(f) GDPR. Our legitimate interests in this sense are our interest in the security and integrity of our website and the data on our web server (in particular fault and error detection, as well as tracking unauthorized access), as well as marketing interests and interests in statistical surveys (to improve our website and our services and offers). As part of a balancing of interests, we have come to the conclusion that the data processing is necessary to safeguard the aforementioned legitimate interests and that your interests or fundamental rights and freedoms, which require the protection of personal data, do not prevail.

Data of interested parties/data of press representatives: Insofar as we process data of interested parties of our services or of press representatives, this only takes place if you enter this data in an input field or by e-mail for the purpose of the request and send it to us. These entries are voluntary for you. We then process this data exclusively for the purpose of processing your request to us. The processing of this data voluntarily transmitted to us for the purpose of providing information about our services is carried out as pre-contractual processing in accordance with Art. 6 (1) (b) GDPR and/or on the basis of the consent you have given by transmitting it in accordance with Art. 6 (1) (a) GDPR.

Customer data: We process our customers' data for the purpose of contract performance in accordance with Art. 6(1)(b) GDPR and/or on the basis of consent given in accordance with Art. 6(1)(a) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers).

Supplier data/business partner data: We process the data of our suppliers and business partners for the purpose of contract processing in accordance with Art. 6(1)(b) GDPR and/or on the basis of consent granted in accordance with Art. 6(1)(a) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures (e.g. in the context of the preparation and negotiation of offers).

Recipients or categories of recipients of the personal data

Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing (e.g. for processing an order) or for billing purposes (e.g. for processing a payment transaction when purchasing goods or services), if there is a legitimate interest in the disclosure/transmission and your interests or fundamental rights and freedoms do not outweigh this or if you have given your prior effective consent.

Categories of recipients can be

  • Service providers (recruiting companies, etc.)
  • Companies with suitable vacancies
  • Job exchanges
  • Payment service providers, banks
  • Tax consultant

 

Contact via e-mail, fax, telephone call and newsletter

You can contact us via various channels if you wish. You will also find an e-mail address, telephone number and fax number on the website. Even if you send us an e-mail, call us or send us a fax, we will inevitably process your personal data. This is because at least the personal data transmitted with the e-mail, fax or your telephone will be stored by us or our systems. You also have the option of subscribing to a newsletter. In this case, your necessary personal data will also be stored by our system.

The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Purposes of data processing: The processing of personal data transmitted by e-mail, fax, telephone or newsletter serves us to process your contact and your request. We need your e-mail address, your fax number or your telephone number in order to be able to reply at all. This is also the legitimate interest in processing the data.

Legal basis for data processing: The legal basis for the processing of data is Art. 6 (1) (a) GDPR if consent has been given, which can be seen in the establishment of contact, and otherwise our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.
If the contact or your request is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR (implementation of pre-contractual measures).

Duration of storage: The data will be deleted as soon as it is no longer required for the purpose for which it was collected. If you have subscribed to our newsletter, you can unsubscribe at any time via the corresponding link in the newsletter and your data will then be deleted.

For the personal data sent by e-mail, this is the case when the respective conversation with you has ended and we have waited for a waiting period of up to 3 months to see whether we may need to revisit your request or the details of the communication. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Fax data is stored separately from print data in the fax machine's memory. After the fax has been printed, the occupied memory space is released again so that the next fax can be received and stored there. Parts of the fax can remain temporarily in the device memory after printing until they are overwritten by the next fax received. As a rule, this leads to automatic deletion of the data after 1-2 weeks. If it is a computer fax, we will receive your fax as an e-mail and the information on e-mails applies accordingly.

When you make an incoming telephone call or an outgoing call to us, your telephone number or your name/company name stored with your telephone provider as well as the date and time of the call are stored in our telephone system in a so-called ring buffer, which overwrites the oldest data with new data. As a rule, this leads to automatic deletion of the data in the telephone system after approx. 3-4 months.

Possibility of objection and removal: You have the possibility at any time to revoke your consent to the processing of personal data or to object to further data processing due to legitimate interest (see the reference to the special right of objection under C. of this data protection information). In such a case, the conversation cannot be continued.
The revocation of consent or the objection to further data processing is made possible by informal notification to us (e.g. by e-mail).
All personal data stored in the course of establishing contact will be deleted in this case.

B. Scope of the processing of personal data via our website

We only collect and use users' personal data when they use our website insofar as this is necessary to provide a functional website and our content and services. The collection and use of our users' personal data generally only takes place with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and/or the processing of the data is permitted by law.

Provision of the website and creation of log files

For technical reasons, our system automatically collects data and information each time the website is accessed. This data is stored in the server log files. These are

  • Date and time of access,
  • URL (address) of the referring website (referrer),
  • Web pages that are accessed by the user's system via our website,
  • Screen resolution of the user,
  • Retrieved file(s) and message about the success of the retrieval,
  • Amount of data sent,
  • the user's Internet service provider,
  • Browser, browser type and browser version, browser engine and engine version,
  • Operating system, operating system version, operating system type, and
  • the anonymized IP address and the Internet service provider of the user.

This data is processed separately from other data. This data is not processed together with other personal data of the user. It is not possible for us to assign this data to a specific person.

Purposes of data processing: The temporary processing of data by the system is necessary to enable the content of our website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize our offer and the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

Legal basis for data processing: The temporary storage of data and log files is based on the legal basis of Art. 6(1)(f) GDPR. Our overriding legitimate interest in this data processing lies in the aforementioned purposes.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after fourteen days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

Objection and removal option: The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object to this. However, the user can stop using the website at any time and thus prevent the further collection of the aforementioned data.

Contact form and e-mail contact

There is a contact form on our website which can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored.

These data are:

  • Salutation (mandatory field)
  • Last name (mandatory field)
  • First name (mandatory field)
  • Street and house no. (optional)
  • Zip code (optional)
  • Location (optional)
  • E-mail (optional)
  • Telephone (optional)
  • Cell phone (optional)
  • Select office (mandatory field)

The mandatory fields are data that we absolutely need in order to process your request adequately and to be able to address you by name.

The following data is also stored at the time the message is sent:

  • The IP address of the user,
  • Date and time of dispatch.

As part of the sending process, you will be informed again about data processing and referred to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

No data will be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Purposes of data processing: The processing of the personal data from the input mask serves us solely to process the establishment of contact and to process your request. If you contact us, this also constitutes our legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing: The legal basis for data processing is our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR. The legitimate interest lies in the fact that we need to process your data in order to be able to process and, if necessary, respond to your inquiry or contact.
If the contact or your inquiry is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 letter b) GDPR (implementation of pre-contractual measures).
The legal basis for the processing of other personal data processed during the sending process is our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR, which in this case is to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
For the personal data from the input screen of the contact form and that sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Objection and removal option: You have the option to object to further data processing at any time on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection information). In such a case, the conversation cannot be continued.
The objection to further data processing is made possible by informal notification to us (e.g. by e-mail).
All personal data stored in the course of establishing contact will be deleted in this case.

Contact forms and data processing in the application process

Special contact forms are also used on our website, which can be used to contact us electronically for the purpose of an application. If you use this option, the data entered in the input mask will be transmitted to us and stored.

The application process requires applicants to provide us with the applicant data. The necessary applicant data is marked in our contact forms and can otherwise be found in the job descriptions. In principle, this includes personal details, postal and contact addresses and the documents relating to the application, such as cover letter, CV and references. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 letter b) GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 letter a) GDPR (e.g. health data if this is necessary for the exercise of the profession).

The data is transmitted to us in encrypted form in accordance with the state of the art.

If you wish to send us an application or unsolicited application, we collect the following data in addition to the application documents (CV, application photo, certificates, diplomas, supporting documents, etc.) that you may voluntarily submit to us by uploading them:

  • Salutation
  • First name
  • Surname
  • Street
  • ZIP CODE
  • Location
  • Marital status
  • Nationality
  • e-mail
  • Telephone
  • Application documents provided by the user by uploading them (e.g. cover letter, CV, certificates, salary expectations, starting date, photo)

The following data is also stored at the time the message is sent:

  • The IP address of the user,
  • Date and time of dispatch.

As part of the sending process, you will be informed again about the processing of the data and referred to this privacy policy.

Data transfer to relevant companies in the event of an application: Your personal data may be transferred to third parties as part of the application process, namely to Compana GmbH due to the use of the persoprofiler.6 recruiting software (see the explanations below) or to a company that may be interested in your application, depending on the specific position for which you have applied or depending on the job interests you have indicated and any future job advertisements that may be suitable. In these cases, the data will be forwarded for the purpose of processing and checking your application documents and, if necessary, contacting you regarding your application. The data will be used exclusively for processing the application.

Purposes of data processing: We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The applicant data is processed to fulfill our (pre-)contractual obligations as part of the application process.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 (1) (a) GDPR, as the transmission of your application documents to us is to be regarded as consent to the specific data processing.
The legal basis is also Art. 6 (1) (f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.
The legal basis is also Art. 6 (1) (b) GDPR, as we process your application data in a contractual relationship concluded between you and us through your submission of the application documents to us and our service requires the corresponding disclosure and forwarding of your application data to interested companies.
The legal basis for the processing of the other personal data processed during the sending process is our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR, which in this case consists of preventing misuse of the contact form and ensuring the security of our information technology systems.

Duration of storage: The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the application phase has ended, the vacant position has been filled and there is no other opportunity to make you other offers in response to your application.
Subject to a justified revocation by the applicant, the data will be deleted after a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Objection and removal option: You have the option to object to further data processing at any time on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection information). In such a case, your application can no longer be considered. You can object to further data processing by sending us an informal message (e.g. by e-mail). All personal data stored in the course of the application will be deleted in this case.
Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Application by e-mail or by post

Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending it by post. Instead of applying via the online form and e-mail, applicants still have the option of sending us their application by post.

In addition, the information on data processing when applying via our contact forms or by e-mail (see above) also applies to your application by e-mail or by post.

Use of the recruiting software persoprofiler.6

This website uses persoprofiler.6, a recruiting software from Compana Software GmbH, Herrmann-Oberth-Straße 12 a, D-90537 Feucht, www.compana.net.

The persoprofiler.6 recruiting software helps to increase the reach of job advertisements, thereby attracting more applicants and making the application process more efficient. A multiposting module is used to publish the job advertisements not only on the website itself, but also on more than 100 job portals and social media platforms. Applicants' personal data is transmitted to Compana Software GmbH for the purpose of managing and maintaining applications, which then processes this data on our behalf. This order processing is carried out strictly in accordance with the statutory provisions of data protection law. The data is processed in a computer center in Nuremberg in accordance with the state of the art and legal requirements. We retain control of this data. Data is only passed on to third parties if an interested company requests the applicant data. This data transfer corresponds to the contractual purpose and therefore does not require separate consent. You can prevent data processing by not creating an application via the website and sending it to us. Data processing via the aforementioned software takes place exclusively on a voluntary basis through the transmission of your applicant data to us initiated by you.

You can access Compana's data protection information here: https://compana.net/datenschutzerklaerung/

Purpose of data processing: The purpose of using the software and the associated data processing is to be able to target your application as effectively as possible and with the greatest possible reach to interested companies.

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 (1) (a) GDPR, as the transmission of your application documents to us is to be regarded as consent to the specific data processing.
The legal basis is also Art. 6 (1) (f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.
The legal basis is also Art. 6 (1) (b) GDPR, as we process your application data in a contractual relationship concluded between you and us through your submission of the application documents to us and our service requires the corresponding disclosure and forwarding of your application data to interested companies.

Duration of storage: The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case when the application phase has ended, the vacant position has been filled and there is no possibility of making you any other offers in response to your application.
Subject to your justified revocation, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the Equal Treatment Act.

Right of objection and removal: You have the option to withdraw your consent at any time or to object to further data processing on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection information). In such a case, your application can no longer be considered. You can object to further data processing by sending us an informal message (e.g. by e-mail). All personal data stored in the course of the application will be deleted in this case.
If we also process the data for reasons of contract processing, we may not delete the data immediately for this purpose, but continue to process it until the expiry of the limitation period and, if necessary, beyond that in the event of a retention obligation under commercial or tax law (see the explanations under A. under the heading "Data deletion and storage period").

Use of cookies by us and by third-party providers

When you access individual pages, we use so-called cookies. These are small text files that are stored on your end device (PC, smartphone, tablet, etc.). When you access a website, a cookie may be stored by your browser. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies from third-party providers may also be used. If this is the case, we will inform you about this separately in this privacy policy in the information about the respective third-party tools (such as analysis tools, plugins, etc.).

Cookies are used to make our website usable or to make it more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

We also use cookies that enable an analysis of the user's surfing behavior. The following data can be transmitted in this way:

  • Oyerlay cookie to inform you whether or not you have already been shown a notice (e.g. on cookie use).

When you visit our website, you will be informed about the use of cookies for analysis purposes and your consent to the processing of the personal data used in this context will be obtained.

Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

We need cookies for the following applications:

  • Checking the display of overlays/hints on the website

The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

Legal basis for data processing: The legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) GDPR if the user has given consent to this, and otherwise a legitimate interest on our part based on the purposes mentioned in accordance with Art. 6 (1) (f) GDPR.

Duration of storage: Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our service providers (third-party providers) to recognize your browser on your next visit (persistent cookies).

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively lodged an objection in accordance with Art. 21 GDPR (see the visually highlighted "Note on special right of objection" under C.). It is reviewed regularly, at least annually, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer sufficiently relevant to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Objection and removal options Cookies are stored on your computer and transmitted from it to our website. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Such a "do-not-track" setting of your browser is understood by us as an objection to the further collection and use of your personal data. Note: If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Use of the analysis tool Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

We would like to point out that on this website Google Analytics has been extended by the code "anonymizeIp" in order to ensure an anonymized collection of IP addresses (so-called IP masking). By activating IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

Purpose of data processing: The purpose of using the analysis tool or analysis cookies is to improve the quality of our website and its content. This enables us to find out how the website is used and thus constantly optimize our offer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Legal basis for data processing: The legal basis for the processing of personal data is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. Google Inc. has acceded to the "EU-US Privacy Shield", so that data transfer to the USA is permitted.

Duration of storage: The cookies are stored on the user's computer and transmitted to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively lodged an objection in accordance with Art. 21 GDPR (see the visually highlighted "Note on special right of objection" under C.). It is reviewed regularly, at least annually, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer sufficiently relevant to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Objection and removal option: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link(http://tools.google.com/dlpage/gaoptout?hl=de).
You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website:

Click here to deactivate Google Analytics

Use of Google Maps

This website uses Google Maps, a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there.

Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Under no circumstances will Google associate your IP address with other Google data. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence.

Purpose of data processing: Google Maps is used for the purpose of improving the quality of our website and its content and to provide you with a simple, useful and well-known map service for orientation, for displaying our company headquarters, for planning your journey, etc.

Legal basis for data processing: The legal basis for the processing of personal data using Google Maps is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. Google Inc. has acceded to the "EU-U.S. Privacy Shield", so that data transfer to the USA is permitted.

Duration of storage: As a user, you can decide for yourself about the execution of the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of Java Script. Note: If the execution of Java Script is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively lodged an objection in accordance with Art. 21 GDPR (see the visually highlighted "Note on special right of objection" under C.). It is reviewed regularly, at least annually, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer sufficiently relevant to us with regard to the evaluation and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

Objection and removal option: You have the option of deactivating the Google Maps service in a simple manner and thus preventing the transfer of data to Google: To do this, deactivate JavaScript in your browser.
To prevent the execution of Java Script code altogether, you can also install a Java Script blocker, such as the browser plug-in NoScript (e.g. www.noscript.net or www.ghostery.com).
Note: If the execution of Java Script is deactivated, it may no longer be possible to use all functions of the website to their full extent.

The privacy policy and terms of use for Google products and specifically for Google Maps can be found at https://policies.google.com/technologies/product-privacy?hl=de

Use of reCAPTCHA

On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to differentiate whether an entry is made by a natural person or abusively by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA.
Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

Use of YouTube videos on the website

Java script code from the company YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA (hereinafter YouTube) is loaded on our website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. YouTube is an Internet video portal that allows video clips to be posted free of charge and other users to view, rate and comment on them. We use YouTube to embed videos on our website. If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser may transmit personal data to YouTube.

Each time a page is accessed on which a YouTube video has been integrated, the user's Internet browser will automatically download the relevant video from YouTube and run it.

As part of this process, YouTube and Google receive information about which specific sub-page of our website is visited by the user. If the user is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the user is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the user.
YouTube and Google always receive information that the respective user has visited our website if the user is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.

YouTube's privacy policy provides information about the collection, processing and use of personal data by YouTube and Google and can be accessed here: http://www.google.de/intl/de/policies/privacy

Purpose of data processing: The purpose of embedding YouTube videos is to be able to present multimedia content to the user on the website and thereby enhance and improve the user experience on the website. As this makes our website more attractive, the use of YouTube also serves our marketing and advertising purposes.

Legal basis for data processing: The legal basis for the processing of personal data is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself about the execution of the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of Java Script. Note: If the execution of Java Script is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Objection and removal option: You can prevent the execution of the Java Script code required for the tool by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
To prevent the execution of Java Script code altogether, you can also install a Java Script blocker, such as the browser plug-in NoScript (e.g. www.noscript.net or www.ghostery.com).
Note: If the execution of Java Script is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Encryption of the website

The website and thus the data transmissions via it are encrypted according to the SSL standard (https protocol).

Transfer of personal data to a third country (other EU countries)

There is an intention to transfer personal data to the United States of America (USA). There is an adequacy decision of the EU Commission, which states that personal data may be transferred to the USA if the recipient has acceded to the "EU-U.S. Privacy Shield". Personal data is therefore only transferred to recipients in the USA who have demonstrably acceded to the EU-U.S. Privacy Shield.

The intention relates specifically to the transfer of data to the following companies:

  • Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). as provider of the web analysis tool Google Analytics and the map service Google Maps.
  • YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA as the provider of an Internet video portal from which videos are integrated on our website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The aforementioned companies have joined the EU-U.S. Privacy Shield and have submitted to a level of regulation comparable to the EU level of data protection. The transfer of data to these companies is therefore generally permitted. Furthermore, in the case of order processing, corresponding order processing contracts have been concluded with these companies to secure the data and our rights to issue instructions.

C. Rights of data subjects

If your personal data is processed, you are the "data subject" and you have the following rights vis-à-vis us as the controller:

Right to information

You have the right to obtain confirmation from us free of charge as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data and to further information, which you can find in Art. 15 GDPR. You can contact us by post or email for this purpose.

Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right - taking into account the above-mentioned purposes of processing - to request the completion of incomplete personal data, including by means of a supplementary declaration. You can contact us by post or e-mail for this purpose.

Right to erasure

You have the right to demand the immediate deletion of personal data concerning you if one of the conditions of Art. 17 GDPR applies. You can contact us by post or email to exercise this right.

Right to restriction of processing

You have the right to demand that we restrict processing if one of the requirements of Art. 18 GDPR is met. You can contact us by post or email to do this.

Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the requirements of Art. 20 GDPR are met. You can contact us by post or email for this purpose.

Right to object to processing based on legitimate interest

If, in exceptional cases, we process personal data on the basis of Art. 6(1)(f) GDPR (i.e. for legitimate interests), you have the right to object to the processing of your personal data by us at any time on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for direct marketing purposes, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or by e-mail for this purpose.

A technical procedure that you use, e.g. clear technical information that your web browser transmits to us ("do-not-track" message), is also considered an objection in this sense.

Right of revocation if consent has been given

You have the right to withdraw your consent to the collection and use of personal data at any time with effect for the future. To do so, you can contact us by post or e-mail. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Automated decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Unless the decision is necessary for entering into, or the performance of, a contract between you and us, it is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or it is based on your explicit consent.
We do not carry out any such automated decision-making.

Voluntary nature of the provision of data

If the provision of personal data is required by law or contract, we will always point this out when collecting the data. In some cases, the data collected by us is required for the conclusion of a contract, namely if we would otherwise not be able to fulfill our contractual obligation to you, or not sufficiently. You are under no obligation to provide the personal data. However, failure to provide it may mean that we are unable to perform or offer a service, action, measure or similar requested by you or that it is not possible to conclude a contract with you.

 

Right to lodge a complaint with a supervisory authority

Without prejudice to any other rights, you have the right to lodge a complaint with a data protection supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection law.

Responsible for us: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10A, 70173 Stuttgart, website: www.baden-wuerttemberg.datenschutz.de.

Do you have any questions about this data protection notice, the processing operations mentioned here or your rights as a data subject?

Internal Data Protection Officer
Rudi Michel
ACTIEF Personalmanagement GmbH
Bahnhofplatz 12
D-76137 Karlsruhe
E-Mail [email protected]

https://www.actief-personal.de/einwilligung-zur-datenverarbeitung-zur-durchfuhrung-des-bewerbungsverfahrens/

https://www.actief-personal.de/informationen-und-datenschutz/

https://www.actief-personal.de/einwilligung-zur-datenverarbeitung-zur-durchfuhrung-des-bewerbungsverfahrens-intern/

https://www.actief-personal.de/informationen-zum-datenschutz-intern/

Status of our data protection information: 25.05.2018