Data Protection

Thank you for visiting our website https://talentspring.de and for your interest in our services. As part of your use of our services, your personal data may be processed. The protection of your data is always an important concern for us. This privacy policy explains how we process personal data and what rights you are entitled to.

This privacy policy can be accessed and printed out at any time on our website. 

‍

1. General information

This privacy policy informs you about how we handle your personal data. In particular, it explains what data we collect and what we use it for. It also informs you how and for what purpose this is done.

Personal data ("data") means any information relating to an identified or identifiable person. "Processing" of data means any operation which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("General Data Protection Regulation", GDPR) as well as in the German Federal Data Protection Act (BDSG) and the German Telecommunications and Telemedia Privacy Protection Act (TTDSG).

I. Person responsible

Responsible for the processing of your data is

Suhm HR & Recruiting Services GmbH

Salzachstrasse 60B   

14129 Berlin

Germany

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

If you have any questions about data protection, you can contact the person responsible at [privacy@talentspring.co].

II Data Protection Officer

We have appointed a company data protection officer for our company. You can reach him under:

Data Protection Officer

Walid Karimi

walid@talentspring.co

III Scope of data processing

We treat personal data confidentially and in accordance with the statutory data protection regulations and on the basis of this privacy policy. We process your data only to the extent necessary for the purpose of providing a functional and user-friendly Internet presence or a functional and user-friendly website and for the provision of our content and services. Failure to provide the data may have legal disadvantages, such as the impossibility of performing a contract. As part of data processing, we use various third-party providers in the areas of hosting, online marketing, mailing services and customer/data management (CRM), each of which processes data on our behalf. We have concluded corresponding order processing contracts with these third-party providers, insofar as the third parties are processors, which ensure that an adequate level of data protection is also guaranteed for our processors (Art. 28 GDPR).

IV. Data security

We have taken technical and organizational measures to ensure that the data protection regulations are observed both by us and by external service providers. Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content that you send to us as the site operator.

‍

V. Processing of personal data

The following overview lists all types of data processed by us, the purposes of their processing and the legal basis for their processing.

‍

1. use of the website

If you use our website without transmitting data to us in any other way (e.g. by registering), we collect the following data on our web server temporarily and anonymously via server log files: 

• Website from which our website was requested (so-called referrer URL)
• Name and URL of the requested website
• Date and time of access to the website
• Description of the type, language and version of the web browser used
• IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
• Message as to whether access was successful (access status/ HTTP status code)
• Internet service provider of the accessing system
• Amount of data transferred in each case
• Operating system used and its interface
• the GMT time zone difference
• If a mobile device is used, also: country code, language, device name, name of the operating system and version, if applicable

This processing is technically necessary in order to display our website to you. We also use the data for statistical evaluations to ensure the operational security and stability of our website. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing of the aforementioned data is necessary for the provision of the website and to ensure the stability and operational security of the website and thus serves to safeguard a legitimate interest of our company.

We also use the data to fulfill our legal obligations for reasons of data security. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. c GDPR.

2. contact 

If you write to us, e.g. by sending us an e-mail, using our contact form or contacting us in any other way, we store the contact details you provide, such as your name, address, cell phone number, e-mail address and the information provided in your inquiry.

If you contact us as part of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact request on the legal basis of Art. 6 para. 1 sentence 1 lit. b GDPR. Insofar as you have consented to processing for the purpose of responding to your inquiry, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. Otherwise, we process your data to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR for the purpose of responding appropriately to customer/contact inquiries.

3. registration and user account

You have the option of registering with us. Your e-mail address is required for registration. After registering, you will receive an email to confirm your registration ("double opt-in"). As part of the registration process, you will be provided with the required mandatory information. The processed data includes in particular the login information (e-mail address, password).

As part of the use of our registration and login functions and the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so. We process the following data in connection with registration, login and the user account:

• Inventory data (e.g. name, address)
• Contact details (e.g. e-mail address, telephone number if applicable)
• Content data (e.g. entries in the online form)
• Device data (device name, country code if applicable, language, name of the operating system and version) 
• Connection data (IP address, mail provider)
• Date and time of registration and confirmation

Processing during registration is based on our legitimate interests for the performance and/or initiation of a user contract, for the provision of customer service, for the administration and/or answering of inquiries, and as a security measure (legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR contract fulfillment and pre-contractual inquiries; Art. 6 para. 1 sentence 1 lit. f GDPR legitimate interests).

If you have terminated your user account, your data relating to the user account will be deleted, subject to any legal permission, obligation or consent on your part. It is your responsibility to back up your data before the end of the contract in the event of termination. Subject to a legal permission, obligation or consent on your part, we are entitled to irretrievably delete all data stored during the term of the contract.

4th Newsletter 

You have the option of subscribing to our newsletter. With our newsletter we inform you about us and our offers. Your e-mail address is required to register for the newsletter. If you register for the newsletter, your e-mail address will be transmitted to us (or our e-mail provider) and stored there. After registering, you will receive an e-mail to confirm your registration ("double opt-in"). In this context, we (or our mail provider) process the following data: 

• Inventory data (e.g. name, address)
• Contact details (e.g. e-mail address, telephone number if applicable)
• Content data (e.g. entries in the online form)
• Device data (device name, country code if applicable, language, name of the operating system and version) 
• Connection data (IP address, mail provider)
• Date and time of registration and confirmation

Our newsletter is sent on the basis of your prior express consent, Art. 6 para. 1 sentence 1 lit. a GDPR. If we commission a service provider to send emails, this is done on the basis of our legitimate interests in efficient and secure delivery. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR.

You can revoke your consent to the processing of data for the purpose of sending the newsletter or analyzing the associated data at any time. The revocation can be made via a link contained in every newsletter or by sending us a separate message.

5. recruitment process  

If you apply for a position advertised by us or one of our clients, we will collect the data required for us to carry out the application process with one of our clients or to contact you with the aim of opening an application process with one of our clients as part of the recruitment process. 

In this context, we process the following data:

• Inventory data (e.g. name, address, date of birth)
• Contact details (e.g. e-mail address, telephone number)
• Any other information you have provided independently
• documents sent to us and their content (e.g. letter of application, CV, certificates, proof of employment, references, residence permit, work permit).

In addition, we process such personal data that we have obtained in a permissible manner from publicly accessible sources or personal contacts (e.g. from joint communication in a job-oriented social network such as XING or LinkedIn) for the purpose of establishing contact or after receipt of your application for the purpose of carrying out the application procedure. This includes, in particular, name, Xing or LinkedIn link, current position, current employer and any correspondence with the candidates via those services.

We process your personal data in order to fulfill our contractual or pre-contractual obligations on the legal basis of Art. 6 para. 1 sentence 1 lit. b GDPR or, if applicable, for the initiation and/or execution of the employment relationship with you (§ 26 BDSG). Insofar as you have consented to processing for the purpose of processing your application, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

In the event that no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests stand in the way of deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

6. cookies, plug-ins and other third-party tools

Cookies

We use cookies on our website that are either provided by us or by third parties.

Cookies are small data records that are stored on the device you are using and saved by the browser. Cookies are used to make our website more user-friendly, effective and secure. There are different types of cookies that are used for different purposes. Some cookies ensure that our services function correctly or that you are recognized on your device after successful registration ("necessary" cookies). By placing these necessary cookies, for example, we make it easier for you to visit our website and use the services available there. Other cookies are placed to analyze user preferences and thus improve our offers ("extended cookies"). We use these for purposes such as tracking (e.g. interest/behavioral profiling), remarketing, visitor action evaluation, conversion measurement, reach measurement (e.g. access statistics, recognition of returning visitors), target group formation and cross-device tracking. We only set non-essential cookies with your consent. When you visit our website for the first time, a pop-up is displayed ("cookie banner") in which the individual cookies are described in more detail. There you have the option of accepting or rejecting cookies according to your preferences. You can change your settings at any time here [LINK to cookie banner]. Please note that deactivating cookies may limit the functionality of this website.

Depending on the browser settings, the following data is processed when cookies are used:

• Usage data (e.g. websites visited, interest in content, access times), 
• Meta/communication data (e.g. device information, IP addresses),
• Location data (data that indicates the location of an end user's end device)

If personal data is processed when using "necessary" cookies, this is based on Art. 6 para. 1 sentence 1 lit. f GDPR due to legitimate interests in quality assurance and a technically flawless presentation of the website. The processing of personal data when using so-called "extended cookies" is based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

Usercentrics Consent Management 

We use Usercentrics, a consent management platform, on our website. When you visit our website, you have the option of selecting your preference regarding the use of cookies in the cookie banner. The use of Usercentrics enables us to obtain and manage your cookie consent and/or your consent to the use of certain technologies. When you enter our website, the following personal data is transferred to Usercentrics:

• Your consent or the revocation of your consent
• Your IP address
• Information about your browser and your end device
• Time of your visit to the website

Furthermore, Usercentrics stores cookies in your browser in order to be able to assign the consent given or its revocation to you. The use of Usercentrics enables the legally compliant documentation and verifiability of consent, fulfills basic functions of the website and is necessary for its proper functioning. This constitutes a legitimate interest; the legal basis for data processing in this respect is Art. 6 para. 1 lit. f GDPR. Usercentrics is also used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, Website: https://usercentrics.com/de/, Privacy Policy: https://usercentrics.com/de/datenschutzerklaerung/.  

Mailchimp 

We use the provider Mailchimp. Mailchimp is a service with which the sending of newsletters can be organized and evaluated. For this purpose, we forward your e-mail address and the information as to whether you have registered for the newsletter and/or for further product information to Mailchimp.

With the help of Mailchimp, we can analyze our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (a so-called web beacon) connects to Mailchimp's servers in the USA. This enables us to determine whether a newsletter message has been opened and which links have been clicked on. In addition, technical information is collected (e.g. time of registration, IP address, browser type and operating system). This information is used for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. 

Mailchimp, Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, Website: https://mailchimp.com/de/, Privacy Policy: https://www.intuit.com/privacy/statement/.

Youtube

We integrate YouTube videos into our website. We use the extended data protection mode, which, according to the YouTube provider, only starts storing user information when the video is played. Data processing and transfer of data by YouTube is not completely excluded by the extended data protection mode. Regardless of playback of the embedded videos, for example, a connection to the Google "DoubleClick" network is established each time this website is accessed. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. Information about your use of our website (e.g. which of our pages you have visited) is transmitted to YouTube servers and stored there; this information may also be transmitted to the servers of Google LLC in the USA. This takes place regardless of whether you are logged into a YouTube account or whether such a user account exists. If you are logged into your YouTube account, your data will be assigned directly to your account. If you do not wish your data to be associated with your profile, you must log out. YouTube stores your data (even for users who are not logged in) as usage profiles and analyzes them. The processing of your data in the context of using YouTube is based on your consent; the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com/; Privacy Policy: https://policies.google.com/privacy.

Google Maps

We use Google Maps on our website. Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there as soon as you access the subpages in which the Google Maps map is integrated; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The processing of your data in the context of the use of Google Maps is based on your consent; the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

Google Maps, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.google.de/maps; Privacy Policy: https://policies.google.com/privacy.

Salesforce 

We use the customer relationship management (CRM) system from Salesforce to organize our customer relationships as part of the provision of our services. 

The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR, as the data processing is necessary to fulfill our contractual obligations. 

Salesforce, salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany; parent company: SalesForce.com, Inc, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105; Website: https://www.salesforce.com/de/?bc=OTH; Privacy Policy: https://www.salesforce.com/de/company/privacy/full_privacy/?bc=OTH   

Hivebrite 

Hivebrite is a cloud-based online community management platform. We use Hivebrite to build a contact network and to communicate with candidates. Among other things, Hivebrite processes inventory data such as name, address, email address and content data. 

The processing of your data in the context of the use of Hivebrite is based on your consent; the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

Hivebrite, Kit United SAS, 5, rue des Italiens à Paris (75009), France; Website: https://hivebrite.com/; Privacy Policy: https://hivebrite.com/privacy-policy 

7. analysis tools and advertising 

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, on our websites. In this context, pseudonymized user profiles are created and cookies are used (see "Cookies" above). The information generated by cookies about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request, is transmitted to a Google server in the USA and stored there. Google LLC processes the data in the USA and ensures compliance with European data protection regulations by using the EU standard contractual clauses (SCCs). The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. This processing will only be carried out if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on(http://tools.google.com/dlpage/gaoptout?hl=en). 

Google Analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy https://policies.google.com/privacy; Further information: Types of processing and data processed: https://business.safety.google/adsservices/; Data processing conditions for Google advertising products and standard contractual clauses for third country transfers of data: https://business.safety.google/adsprocessorterms/.

Intercom

We use third-party Intercom to better understand your use of our Services. Specifically, we provide Intercom, Inc. ("Intercom") with a limited amount of your data (such as login date and some personal data such as your email address) and use Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyzes your use of our website and/or product and tracks our relationship using cookies and similar technologies so that we can improve our service to you. 

We can also use Intercom as a medium for communication, either via email or messages within our products. The Intercom Messenger Apps and Apps in Inbox products may also provide you with access to other third party applications such as Stripe. As part of our service agreements, Intercom collects publicly available contact and social data about you, such as your email address, gender, company, job title, photos, website URLs, social media handles and physical addresses to improve your user experience. If you do not want this data to be collected by or transmitted to Intercom, please contact us.

Intercom: Intercom R&D Unlimited Company, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland; parent company: Intercom, Inc, 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA Further information: Data processing by Intercom: https://www.intercom.com/terms-and-policies#cookie-policy; Terms of use of Intercom: https://www.intercom.com/terms-and-policies#terms 

8. social media

We are represented on the following social media platforms and process user data in this context in order to communicate with the users active there or to provide information about us. We also advertise our social media presences on our website via corresponding "buttons", which are integrated into our website as a graphic of the respective network. The use of this linked graphic prevents a connection to the respective social network server from being automatically established when a website with a social media advertisement is called up in order to display a graphic of the respective network itself. Only by clicking on the corresponding graphic/button will the user be forwarded to the service of the respective social network. Once the user has been forwarded, the respective network collects information about the user. This is initially data such as IP address, date, time and page visited. If the user is logged into their user account on the respective network during this time, the network operator may be able to assign the information collected about the user's specific visit to the user's personal account. If the user wants to prevent the collected information from being directly assigned to their user account, they must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.

• Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; https://www.facebook.com; privacy policy: https://www.facebook.com/about/privacy; additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
• TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; Website: https://www.tiktok.com/; Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE 
• Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; Website: https://twitter.com; Privacy Policy: https://twitter.com/de/privacy; Settings: https://twitter.com/personalization.
• LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://de.linkedin.com/; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://www.youtube.com/; Privacy Policy: https://policies.google.com/privacy; Opt-Out: https://adssettings.google.com/authenticated.
• Instagram, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; Website: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.

We would like to point out that user data within social networks can also be processed for market research and advertising purposes. For example, user profiles can be created based on user behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the opt-out options, please refer to the privacy policies and information provided by the operators of the respective social media providers. In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

9. other third-party tools and technologies

We also use the following third-party tools. The processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR, insofar as we pursue a legitimate interest, of Art. 6 para. 1 sentence 1 lit. b GDPR, insofar as we thereby fulfill our (pre-)contractual obligations and, if you have consented, on Art. 6 para. 1 sentence 1 lit. a GDPR.

Email authorization: 

Outreach.io, 333 Elliott Ave W #500
Seattle, WA 98119; website: https://www.outreach.io/; Privacy Policy: https://www.outreach.io/privacy-policy 

Performance Recruiting: 

Perspective.co, Perspective Software GmbH, Müggelstraße 22, 10247 Berlin, website: https://www.perspective.co/de; Privacy Policy: https://www.perspective.co/de/datenschutzerklaerung 

Funnel.io, Funnel AB, Klarabergsgatan 29, 111 21 Stockholm, Sweden; website: https://funnel.io/; Privacy Policy: https://funnel.io/privacy; Further information on data security: https://funnel.io/funnel-data-privacy-and-security 

CRM: 

Vincere, ACCESS UK LTD, The Old School, School Lane, Stratford St Mary, Colchester, Essex, CO7 6LZ; website: https://www.vincere.io/?lang=de; Privacy Policy. https://www.vincere.io/privacy-archived20jan21?lang=de

Video player: 

HippoVideo, Lyceum Technologies Inc, 2035 Sunset Lake Road, Suite B-2,
Newark, Delaware, 19702; website: https://www.hippovideo.io/; Privacy Policy: https://www.hippovideo.io/privacy_policy.html 

10. further processing purposes

We also process your personal data in order to fulfill other legal obligations that may apply to us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. In this respect, we process your personal data in accordance with the legal basis of Art. 6 para. 1 sentence 1 lit. c GDPR to fulfill a legal obligation to which we are subject.

We also process your personal data in order to assert our rights and enforce our legal claims. We process your personal data in order to be able to defend ourselves against legal claims and insofar as this is necessary to defend against or prosecute criminal offenses. We process your personal data on the legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR to protect our legitimate interests, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses.

VII Storage and deletion of data

The data processed by us will be deleted in accordance with the legal requirements as soon as the consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data no longer applies or it is not required for the purpose). This means that we only store your personal data for as long as is necessary for the respective processing purpose and limit the storage period to the minimum required. In addition, we only store your data if we are entitled or obliged to do so in accordance with statutory retention periods (e.g. in accordance with the German Commercial Code (HGB) or German Fiscal Code (AO)). 

Our data protection notices may also contain further information on the storage and deletion of data, which apply primarily to the respective processing. 

VIII. Your rights

You have the following rights: 

• the right to information, 
• the right to rectification or erasure, 
• the right to restriction of processing, 
• the right to data portability,
• the right to withdraw your consent with effect for the future.
• the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. 

To exercise your above rights, you can send an email to [privacy@talentspring.co]. You also have the right to complain to a data protection supervisory authority about the processing of your personal data.

IX. Forwarding of data / third country transfers

We only pass on your data to third parties if you have consented to this or if there is another legal basis. If we use third-party tools that process your data outside the EU/EEA, we ensure that the legal requirements of Art. 44 et seq. GDPR for such a third country transfer are complied with and your data is processed in the third country in question in accordance with the European data protection standard. For this purpose, we regularly use the so-called EU standard contractual clauses (SCC), which we conclude with the respective provider. In addition, in accordance with the requirements of the ECJ ("Schrems II"), a case-by-case risk analysis is carried out with regard to the respective third country transfer in order to ensure that your data is processed lawfully in the third country concerned and, in particular, to prevent access to your data by government agencies.

X. Data processing when accessing linked content

This privacy policy only applies to this website. However, the website may also contain external links or hyperlinks to websites of other providers. These are to be distinguished from our own content. This external content does not originate from us, nor do we have any influence over the content of third-party sites. If you are redirected to other sites via links within the website, please inform yourself there about the respective handling of your data.

XI. Automated decision making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

XII. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and was last updated in March 2023.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.

‍

English version below:

‍

Privacy policy

Thank you for visiting our website https://talentspring.de and for your interest in our services. In the course of your use of our services, your personal data may be processed. The protection of your data is always an important concern for us. This privacy policy explains how we process personal data and what rights you have.

‍

This data protection declaration can be accessed and printed out at any time on our website. 

‍

‍

‍

General information

This privacy policy informs you about how we handle your personal data. In particular, it explains what data we collect and what we use it for. In addition, it informs you about how and for what purpose this is done.

‍

Personal data ("data") is any information relating to an identified or identifiable individual. The "processing" of data means any operation performed upon personal data, whether or not by automatic means, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The legal basis for data protection can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC ("General Data Protection Regulation", GDPR), as well as in the German Federal Data Protection Act (BDSG) and the Telecommunications and Telemedia Data Protection Act (TTDSG).

‍

I. Responsible

‍

Responsible for the processing of your data is

‍

Suhm HR & Recruiting Services GmbH

‍

Salzachstrasse 60B   

‍

14129 Berlin

‍

Germany

‍

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

‍

If you have any questions regarding data protection, the data controller can be reached at [privacy@talentspring.co].

‍

II. data protection officer

‍

We have appointed a company data protection officer for our company. You can reach this officer at:

‍

Data Protection Officer

‍

Walid Karimi

‍

walid@talentspring.co

‍

III. scope of data processing

‍

We treat personal data confidentially and in accordance with the statutory data protection regulations and on the basis of this data protection declaration. We process your data only as necessary for the purpose of providing a functional and user-friendly Internet presence or website and for the provision of our content and services. Failure to provide the data may have legal disadvantages, such as the impracticability of a contract. As part of our data processing, we use various third-party providers in the areas of hosting, online marketing, mailing services and customer/data management (CRM), each of which processes data on our behalf. We have concluded corresponding order processing agreements with these third-party providers, insofar as the third parties are order processors, which ensure that an adequate level of data protection is also guaranteed at our order processors (Art. 28 GDPR).

‍

IV. Data security

‍

We have taken technical and organizational measures to ensure that the regulations on data protection are observed both by us and by external service providers. For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption.

‍

‍

‍

V. Processing of personal data

‍

The following overview lists all types of data processed by us, the purposes of their processing, as well as the legal basis for their processing.

‍

1. use of the website

‍

If you use our website without transmitting data to us in any other way (e.g. by registering), we collect the following data on our web server temporarily and anonymously via server log files: 

‍

Website from which our website was requested (so-called referrer URL)

Name and URL of the requested website

Date and time of access to the website

Description of the type, language and version of the web browser used

IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established

Message whether access was successful (access status/ HTTP status code)

Internet service provider of the accessing system

Amount of data transferred in each case

operating system used and its interface

the GMT time zone difference

when using a mobile device, if applicable, additionally: country code, language, device name, operating system name and version

This processing is technically necessary in order to be able to display our website to you. We also use the data for statistical evaluations to ensure the operational security and stability of our website. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f GDPR. The processing of the aforementioned data is necessary for the provision of the website and to ensure the stability and operational security of the website and thus serves to protect a legitimate interest of our company.

‍

We also use the data to fulfill our legal obligations for reasons of data security. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. c GDPR.

‍

2. contacting us 

‍

If you write to us, e.g. by sending us an e-mail, using our contact form or contacting us in any other way, we store the contact data you provide in the process, such as name, address, cell phone number, e-mail and the information provided in your inquiry.

‍

Insofar as you contact us in the context of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact request on the legal basis of Art. 6 (1) sentence 1 lit. b DSGVO. Insofar as you have consented to the processing for the purpose of answering your inquiry, the legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO. Otherwise, we process your data to protect our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR for the proper response to customer/contact inquiries.

‍

3. registration and user account

‍

You have the option to register with us. Your e-mail address is required for registration. After registration, you will receive an email to confirm the registration ("double opt-in"). As part of the registration process, you will be provided with the required mandatory data. The processed data includes in particular the login information (e-mail address, password).

‍

In the context of using our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. As a matter of principle, this data is not passed on to third parties unless it is necessary for the prosecution of our claims or there is a legal obligation to do so. In connection with the registration, login and user account, we process the following data:

‍

Inventory data (e.g. name, address).

Contact data (e.g. e-mail address, telephone number if applicable)

Content data (e.g. entries in the online form)

Device data (device name, country code if applicable, language, operating system name and version) 

Connection data (IP address, mail provider)

Date and time of registration and confirmation

Processing during registration is based on our legitimate interests for the performance and/or initiation of a user contract, for the provision of customer service, for the administration and/or response to inquiries, and as a security measure (legal basis: Art. 6 para. 1 p. 1 lit. b GDPR contract performance and pre-contractual inquiries; Art. 6 para. 1 p. 1 lit. f GDPR legitimate interests).

‍

If you have terminated your user account, your data with regard to the user account will be deleted, subject to any legal permission, obligation or consent on your part. It is your responsibility to back up your data in the event of termination prior to the end of the contract. Subject to any legal permission, obligation or consent on your part, we are entitled to irretrievably delete all data stored during the term of the contract.

‍

4. newsletter 

‍

You have the possibility to register for our newsletter. With our newsletter we inform you about us and our offers. To register for the newsletter, your e-mail address is required. If you register for the newsletter, your e-mail address will be transmitted to us (or our mail provider) and stored there. After registration, you will receive an email to confirm the registration ("double opt-in"). In this context, we (or our mail provider) process the following data: 

‍

Inventory data (e.g. name, address)

Contact data (e.g. e-mail address, telephone number if applicable)

Content data (e.g. entries in the online form)

Device data (device name, country code if applicable, language, operating system name and version) 

Connection data (IP address, mail provider)

Date and time of registration and confirmation

The dispatch of our newsletter is based on your prior express consent, Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in efficient and secure dispatch. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR.

‍

You can revoke your consent to the processing of data for the purpose of sending the newsletter or the evaluation of the associated data at any time. The revocation can be made via a link contained in each newsletter or by sending a separate message to us.

‍

5. recruitment procedure  

‍

If you apply for a position advertised by us or one of our customers, we collect the data required for us to carry out the application procedure with one of our customers or to contact you with the aim of opening an application procedure with one of our customers as part of the recruitment procedure. 

‍

In this context, we process the following data:

‍

Inventory data (e.g. name, address, date of birth).

contact data (e.g. e-mail address, telephone number)

any other information provided by you independently

documents submitted to us and their content (e.g. letter of application, curriculum vitae, certificates, proof of employment, references, residence permit, work permit).

In addition, for the purpose of contacting you or after receipt of your application for the purpose of carrying out the application process, we process such personal data that we have obtained in a permissible manner from publicly accessible sources or personal contacts (e.g., from a joint communication in a career-oriented social network such as XING or LinkedIn). This includes, in particular, name, Xing or LinkedIn link, current position, current employer and any correspondence with candidates conducted via those services.

‍

We process your personal data in order to fulfill our contractual or pre-contractual obligations on the legal basis of Art. 6 (1) p. 1 lit. b DSGVO or, if applicable, for the initiation and/or implementation of the employment relationship with you (Section 26 BDSG). Insofar as you have consented to the processing for the purpose of handling your application, the legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

‍

In the event that no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests prevent deletion. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

‍

6. cookies, plug-ins and other third-party tools

‍

Cookies

‍

On our website, we use cookies that are either provided by ourselves or by third parties.

‍

Cookies are small data records that are stored on the terminal device you are using and that are saved by the browser. Cookies serve to make our offer more user-friendly, effective and secure. There are different types of cookies that are used for different purposes. Some cookies ensure that our offers function properly or that you are recognized on your terminal device after successful registration ("necessary" cookies). By placing these necessary cookies, we make it easier for you to visit our offers and use the services available there. We place other cookies to analyze user preferences and thus improve our offers ("advanced cookies"). We use these for purposes such as tracking (e.g. interest/behavioral profiling), remarketing, visit action evaluation, conversion measurement, reach measurement (e.g. access statistics, recognition of returning visitors), targeting and cross-device tracking. We only set non-essential cookies with your consent. When you visit our offers for the first time, a pop-up is displayed ("cookie banner"), in which the individual cookies are described in more detail. There you have the option to allow or reject cookies according to your preferences. You can change your settings at any time here [LINK to Cookie Banner]. We would like to point out that if you disable cookies, the functionality of this website may be limited.

‍

When cookies are used, the following data is processed - depending on the browser settings:

‍

Usage data (e.g. websites visited, interest in content, access times), 

Meta/communication data (e.g. device information, IP addresses),

Location data (data indicating the location of an end user's terminal device).

Insofar as personal data is processed when "necessary" cookies are used, this is based on Art. 6 (1) p. 1 lit. f GDPR due to legitimate interests of quality assurance and a technically flawless presentation of the website. The processing of personal data when using so-called "extended cookies" is based on your consent (Art. 6 para. 1 p. 1 lit. a GDPR).

‍

Usercentrics Consent Management 

‍

We use Usercentrics, a consent management platform, on our website. When visiting our website, you have the option to select your preference regarding the use of cookies in the cookie banner. The use of Usercentrics allows us to obtain and manage your cookie consent and/or your consent to the use of certain technologies. When you enter our website, the following personal information is transferred to Usercentrics:

‍

Your consent or withdrawal of consent.

Your IP address

Information about your browser and about your terminal device

The time of your visit to the website

Furthermore, Usercentrics stores cookies in your browser in order to be able to assign the consent given or its revocation to you. The use of Usercentrics enables the legally compliant documentation and verifiability of consent, fulfills basic functions of the website and is necessary for its proper functioning. This represents a legitimate interest, the legal basis for data processing in this respect is Art. 6 para. 1 lit. f GDPR. The use of Usercentrics also takes place in order to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR.

‍

Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de/, privacy policy: https://usercentrics.com/de/datenschutzerklaerung/.  

‍

Mailchimp 

‍

We use the provider Mailchimp. Mailchimp is a service that can be used to organize and evaluate the sending of newsletters. For this purpose, we forward your email address and the information whether you have signed up for the newsletter and/or for further product information to Mailchimp.

‍

With the help of Mailchimp, we can evaluate our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (a so-called web beacon) connects to Mailchimp's servers in the USA. This allows us to determine whether a newsletter message was opened and which links were clicked. In addition, technical information is collected (e.g. time of registration, IP address, browser type and operating system). This information is used for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. 

‍

Mailchimp, Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, website: https://mailchimp.com/de/, privacy policy: https://www.intuit.com/privacy/statement/.

‍

YouTube

‍

We embed videos into our website using YouTube. We use the extended data protection mode, which, according to the provider of YouTube, initiates a storage of user information only when the video is played. A data processing and transfer of data by YouTube is not completely excluded by the extended data protection mode. Independently of a playback of the embedded videos, for example, a connection to the Google network "DoubleClick" is established each time this website is called up. As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. In the process, information about your use of our website (e.g. which of our pages you have visited) is transmitted to YouTube servers and stored there; this may also involve transmission to Google LLC servers in the USA. This occurs regardless of whether you are logged into a YouTube account or whether such a user account exists. If you are logged into your YouTube account, your data will be directly assigned to your account. If you do not want the association with your profile, you must log out. YouTube stores your data (even for users who are not logged in) as usage profiles and evaluates them. The processing of your data in the context of the use of YouTube is based on your consent, legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.

‍

YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://www.youtube.com/; privacy policy: https://policies.google.com/privacy.

‍

Google Maps

‍

We use Google Maps on our website. Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. When you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The processing of your data in the context of the use of Google Maps is based on your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.

‍

Google Maps, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://www.google.de/maps; privacy policy: https://policies.google.com/privacy.

‍

Salesforce 

‍

To organize our customer relationships in the context of providing our services, we use the customer relationship management (CRM) system of Salesforce. 

‍

The legal basis is Art. 6 para. 1 p. 1 lit. b GDPR, as the data processing is necessary to fulfill our contractual obligations. 

‍

Salesforce, salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany; parent company: SalesForce.com, Inc, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105; website: https://www.salesforce.com/de/?bc=OTH; privacy policy: https://www.salesforce.com/de/company/privacy/full_privacy/?bc=OTH   

‍

Hivebrite 

‍

Hivebrite is a cloud-based online community management platform. We use Hivebrite to build a network of contacts and to communicate with candidates. In doing so, Hivebrite processes, among other things, inventory data, such as name, address, email address as well as content data. 

‍

The processing of your data in the context of the use of Hivebrite is based on your consent, legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.

‍

Hivebrite, Kit United SAS, 5, rue des Italiens à Paris (75009), France; Website: https://hivebrite.com/ ; Privacy Policy: https://hivebrite.com/privacy-policy 

‍

7. analysis tools and advertising 

‍

Google Analytics

‍

We use Google Analytics, a web analytics service provided by Google LLC, on our websites. In this context, pseudonymized usage profiles are created and cookies are used (see "Cookies" above). The information generated by cookies about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request, is transmitted to a Google server in the USA and stored there. Google LLC processes the data in the USA and ensures compliance with European data protection regulations by using the EU standard contractual clauses (SCCs). The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

‍

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. These processing operations are only carried out if you have given your express consent in accordance with Art. 6 (1) p. 1 lit. a GDPR.

‍

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (http://tools.google.com/dlpage/gaoptout?hl=en). 

‍

Google Analytics: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy policy https://policies.google.com/privacy; Further information: Types of processing as well as data processed: https://business.safety.google/adsservices/; Data processing terms for Google advertising products and standard contractual clauses for third country transfers of data: https://business.safety.google/adsprocessorterms/.

‍

Intercom

‍

We use third-party Intercom to better understand your use of our Services. Specifically, we provide Intercom, Inc ("Intercom") with a limited amount of your information (such as login date and some personal information such as your email address) and use Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyzes your use of our website and/or product and tracks our relationship using cookies and similar technologies so that we can improve our service to you. 

‍

We may also use Intercom as a medium for communication, either via email or messaging within our Products. The Intercom Messenger Apps and Apps in Inbox products may also allow you to access other third-party applications such as Stripe. As part of our service agreements, Intercom collects publicly available contact and social data about you, such as your email address, gender, company, job title, photos, website URLs, social media handles, and physical addresses, to improve your user experience. If you do not want this information collected by or submitted to Intercom, please contact us.

‍

Intercom: Intercom R&D Unlimited Company, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland; parent company: Intercom, Inc, 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA Further information: Data processing by Intercom: https://www.intercom.com/terms-and-policies#cookie-policy; Terms of use of Intercom: https://www.intercom.com/terms-and-policies#terms 

‍

8. social media

‍

We are present on the following social media platforms and process user data in this context in order to communicate with users active there or to offer information about us. We also promote our social media presences on our website via corresponding "buttons", which are embedded on our website as graphics of the respective network. The use of this linked graphic prevents the automatic establishment of a connection to the respective server of the social network when calling up a website that has a social media advertisement, in order to display a graphic of the respective network itself. Only by clicking on the corresponding graphic/button will the user be redirected to the service of the respective social network. After the user has been forwarded, information about the user is collected by the respective network. This is initially data such as IP address, date, time and page visited. If the user is logged into his user account of the respective network during this time, the network operator may be able to assign the collected information of the specific visit of the user to the personal account of the user. If the user wants to prevent the collected information from being directly assigned to his user account, he must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.

‍

Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; https://www.facebook.com; privacy policy: https://www.facebook.com/about/privacy; additional privacy notices: agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, privacy notices for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.

TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; website: https://www.tiktok.com/; privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE 

Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; website: https://twitter.com; privacy policy: https://twitter.com/de/privacy; settings: https://twitter.com/personalization.

LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://de.linkedin.com/; privacy policy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://www.youtube.com/; Privacy Policy: https://policies.google.com/privacy; Opt-Out: https://adssettings.google.com/authenticated.

Instagram, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; website: https://www.instagram.com; privacy policy: https://instagram.com/about/legal/privacy.

We would like to point out that user data within social networks may also be processed for market research and advertising purposes. For example, usage profiles can be created based on the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them). For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the privacy statements and information provided by the operators of the respective social media providers. In the case of information requests and the assertion of data subject rights, we also point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

‍

9. other third-party tools and technologies

‍

Furthermore, we use the following third-party tools. The processing is carried out on the legal basis of Art. 6 para. 1 p. 1 lit. f GDPR, insofar as we thereby pursue a legitimate interest, of Art. 6 para. 1 p. 1 lit. b GDPR, insofar as we thereby fulfill our (pre-)contractual obligations and, insofar as you have consented, on Art. 6 para. 1 p. 1 lit. a GDPR.

‍

Email authorization: 

‍

Outreach.io, 333 Elliott Ave W #500.

Seattle, WA 98119; website: https://www.outreach.io/; privacy policy: https://www.outreach.io/privacy-policy 

‍

Performance Recruiting: 

‍

Perspective.co, Perspective Software GmbH, Müggelstraße 22, 10247 Berlin, website: https://www.perspective.co/de; privacy policy: https://www.perspective.co/de/datenschutzerklaerung 

‍

Funnel.io, Funnel AB, Klarabergsgatan 29, 111 21 Stockholm, Sweden; website: https://funnel.io/; privacy policy: https://funnel.io/privacy; further information on data security: https://funnel.io/funnel-data-privacy-and-security 

‍

CRM: 

‍

Vincere, ACCESS UK LTD, The Old School, School Lane, Stratford St Mary, Colchester, Essex, CO7 6LZ; website: https://www.vincere.io/?lang=de; privacy policy. https://www.vincere.io/privacy-archived20jan21?lang=de

‍

Video player: 

‍

HippoVideo, Lyceum Technologies Inc, 2035 Sunset Lake Road, Suite B-2,

Newark, Delaware, 19702; website: https://www.hippovideo.io/; privacy policy: https://www.hippovideo.io/privacy_policy.html

‍

‍

10. other processing purposes

‍

We also process your personal data in order to fulfill other legal obligations that may affect us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. In this respect, we process your personal data in accordance with the legal basis of Art. 6 para. 1 p. 1 lit. c GDPR to fulfill a legal obligation to which we are subject.

‍

We also process your personal data in order to assert our rights and enforce our legal claims. We process your personal data in order to be able to defend ourselves against legal claims and insofar as this is necessary for the defense against or prosecution of criminal offenses. We process your personal data on the legal basis of Art. 6 (1) p. 1 lit. f GDPR to protect our legitimate interests, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses.

‍

VII Storage and deletion of data

‍

The data we process will be deleted in accordance with legal requirements as soon as their consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not necessary for the purpose). This means that we only store your personal data for as long as it is required for the respective processing purpose and limit the storage period to the minimum necessary. In addition, we only store your data if we are entitled or obliged to do so in accordance with statutory retention periods (for example, under the German Commercial Code (HGB) or the German Fiscal Code (AO)). 

‍

Our data protection notices may also contain further details on the retention and deletion of data, which have priority for the respective processing operations. 

‍

VIII. Your rights

‍

You have the following rights: 

‍

the right to information, 

the right to rectification or erasure 

the right to restriction of processing, 

the right to data portability,

the right to revoke consent you have given with effect for the future.

the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) sentence 1 lit. e or f GDPR; this also applies to profiling based on these provisions. 

To exercise your above rights, you can send an email to [privacy@talentspring.co]. You also have the right to complain to a data protection supervisory authority about the processing of your personal data.

‍

IX. Disclosure of data / third party transfers

‍

As a matter of principle, we only pass on your data to third parties if you have consented to this or if there is another legal basis. Insofar as we use third-party tools that process your data outside the EU/EEA, we ensure that the legal requirements of Art. 44 et seq. GDPR for such a third country transfer are met and that your data is processed in the relevant third country in accordance with the European data protection standard. As a rule, we use the so-called EU standard contractual clauses (SCC) for this purpose, which we conclude with the respective provider. In addition, in accordance with the requirements of the ECJ ("Schrems II"), a case-by-case risk analysis is carried out with regard to the respective third country transfer in order to ensure that your data is processed lawfully in the third country concerned and, in particular, that access to your data by state authorities is prevented.

‍

X. Data processing when calling up linked content

‍

This data protection declaration only refers to this website. However, the website may also contain external links or hyperlinks to websites of other providers. They are to be distinguished from our own content. This third-party content does not originate from us, nor do we have any influence on the content of third-party sites. If you are forwarded to other pages via links within the website, please inform yourself there about the respective handling of your data.

‍

XI. Automated decision making/profiling

‍

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).

‍

XII. Up-to-dateness and modification of this privacy policy

‍

This privacy policy is currently valid and has a status of March 2023.

‍

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.

‍

‍