Privacy policy
1. Name and contact details of the person responsible
SK Pharma Logistics GmbH
Remusweg 8
33729 Bielefeld
Phone: +49 (0) 521 55 77 74-0
Email: info@sk-pharma.de
2. Contact details of the data protection officer
SK Pharma Logistics GmbH
Datenschutzbeauftragung
Remusweg 8
33729 Bielefeld
Email: datenschutz@sk-pharma.de
3. Rights of data subjects
Every data subject has the right to
- Information (Art. 15 GDPR)
- Correction (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
Consent given to the processing of personal data can be revoked at any time.
You also have the right to lodge a complaint with a competent data protection supervisory authority. You can find an overview of the competent supervisory authorities under the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
4. Data transfer to third countries
When selecting our external services and service providers on our website, we consider European companies wherever possible. Only in exceptional cases will we have data processed outside the European Union or the European Economic Area in the context of using third-party services.
We only authorise data processing in third countries if the special requirements of Art. 44 et seq. GDPR are fulfilled. As a rule, we will obtain consent in accordance with Art. 49 GDPR prior to such data transfer.
Alternatively, data may be processed on the basis of special guarantees, e.g. the EU Commission’s officially recognised determination of a level of data protection corresponding to the EU, the EU-U.S. Data Privacy Framework (DPF) or compliance with officially recognised special contractual obligations (so-called standard data protection clauses).
We would like to point out that in countries outside the EU/EEA, no level of data protection comparable to that in the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without data subjects being able to take legal action against this. It can therefore not be ruled out that US authorities may process, analyse and permanently store data on US servers for surveillance purposes.
5. General data processing when visiting our website
Description and Purpose of Data Processing
Information of a general nature is recorded when our website is visited. This information from website visitors includes, for example, the type of web browser, the operating system used, the domain name of the internet service provider, the IP address and similar.
They are processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring the smooth use of our website and
- Ensuring and analysing system security and stability, in particular to detect misuse, and
- For the technically error-free presentation and optimisation of our website.
We do not use data to draw conclusions about individuals. However, we reserve the right to check server log files retrospectively if there are concrete indications of unlawful use.
Legal Basis
The processing takes place according to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.
Storage Duration
In principle, we delete personal data when it is no longer required for the defined purpose of data processing and no statutory retention obligations prevent deletion.
IP addresses and names of internet service providers used are stored by our external service provider, where our website is hosted, for a period of seven days and then deleted.
Categories of Recipients
In order to handle our business processes, we may transfer personal data to third parties (e.g. IT service providers, cloud service providers, hosting providers, etc.) who act as our processors in accordance with our instructions. In these cases, all third parties are contractually obliged to treat personal data confidentially.
Provision Prescribed or Required
In order to handle our business processes, we may transfer personal data to third parties (e.g. IT service providers, cloud service providers, hosting providers, etc.) who act as our processors in accordance with our instructions. In these cases, all third parties are contractually obliged to treat personal data confidentially.
6. Use of Cookies
Description and Purpose of Data Processing
When our website is accessed, cookies are stored on the end device of the website visitor. We make a fundamental distinction here between cookies that are necessary for us, which enable us to provide basic and flawless functions of the website, and cookies that may be used by third-party services.
Legal Basis
The cookies necessary for us are processed on the basis of Article 25 para. 2 No. 2 German Telecommunications Digital Services Data Protection Act (TDDDG).
The processing of other cookies is based on your consent in accordance with Article 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Categories of Recipients
In order to handle our business processes, we may transfer personal data to third parties (e.g. IT service providers, cloud service providers, hosting providers, etc.) who act as our processors in accordance with our instructions. In these cases, all third parties are contractually obliged to treat personal data confidentially.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Without this data, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
Profiling
Web analysis tools can be used to evaluate the behaviour of visitors to our website and analyse their interests.
7. Consent Management Platform (CMP)
Description and Purpose of Data Processing
We use a Consent Management Platform (CMP) on our website to manage the consent given by our website visitors. This requires the use of cookies in order to save the selected consent options.
Legal Basis
The CMP is used on the basis of Art. 6 para. 1 lit. c GDPR to fulfil our legal obligation.
Storage Duration
The storage period for consent data is generally 12 months from the date of consent.
Categories of Recipients
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the CMP is Usercentrics GmbH (Sendlinger Str. 7, 80331 Munich).
In order to handle our business processes, we may transfer personal data to third parties (e.g. IT service providers, cloud service providers, hosting providers, etc.) who act as our processors in accordance with our instructions. In these cases, all third parties are contractually obliged to treat personal data confidentially.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Unfortunately, it is not possible to use our website if it is not provided.
8. Google
8.1. Google Tag Manager
Description and Purpose of Data Processing
We use Google Tag Manager on our website. Google Tag Manager is a tool with which website tags can be integrated and managed centrally via a user interface. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and deliver the tools integrated via it.
Legal Basis
The processing is carried out on the basis of the consent of our website visitors in accordance with Art. 6 para. 1 lit. a GDPR.
Recipient
Google Tag Manager stores IP addresses, which can also be transmitted to the provider who acts as a processor for us. The provider of the service is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Google is certified in accordance with the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Non-provision has no consequences for website visitors.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
8.2. Google Analytics
Description and Purpose of Data Processing
We use the web analysis service Google Analytics on our website. The service uses cookies that enable us to analyse the use of our website.
IP anonymisation is used on our website. The IP address of visitors is truncated within the member states of the EU and the European Economic Area. This truncation eliminates the personal reference of the IP address.
Legal Basis
The processing is carried out on the basis of the consent of our website visitors in accordance with Art. 6 para. 1 lit. a GDPR.
Recipient
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the service is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Google is certified in accordance with the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Non-provision has no consequences for website visitors.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
In addition, storage can be prevented by the corresponding setting in the browser of website visitors. As a result, you may not be able to use some of the functions of our website to their full extent.
Furthermore, installation of a browser plugin using Link can prevent processing by the provider of the web analysis service.
Profiling
Web analysis tools can be used to evaluate the behaviour of visitors to our website and analyse their interests. A pseudonymised user profile is created for this purpose.
8.3. Google Signale
Description and Purpose of Data Processing
We use the web analysis service Google Signals on our website. The service offers extended analysis functions via Google Analytics, including cross-device reports and aggregated data from Google accounts.
Legal Basis
The processing is carried out on the basis of the consent of our website visitors in accordance with Art. 6 para. 1 lit. a GDPR.
Recipient
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the service is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Google is certified in accordance with the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Non-provision has no consequences for website visitors.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
Profiling
Web analysis tools can be used to evaluate the behaviour of visitors to our website and analyse their interests. A pseudonymised user profile is created for this purpose.
8.4. Google Ads & Remarketing
Description and Purpose of Data Processing
We use the web analysis service Google Ads Manager on our website. The service is used to provide and analyse online advertising, conversion tracking to measure the success of advertising campaigns and remarketing.
Legal Basis
The processing is carried out on the basis of the consent of our website visitors in accordance with Art. 6 para. 1 lit. a GDPR.
Recipient
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the service is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Google is certified in accordance with the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Non-provision has no consequences for website visitors.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
Profiling
Web analysis tools can be used to evaluate the behaviour of visitors to our website and analyse their interests. A pseudonymised user profile is created for this purpose.
8.5. Google Conversion-Tracking
Description and Purpose of Data Processing
We use the web analysis service Google Conversion Tracking on our website. The service is used to measure the effectiveness of advertising campaigns by tracking the actions that users take after clicking on an advert (e.g. form submissions).
Legal Basis
The processing is carried out on the basis of the consent of our website visitors in accordance with Art. 6 para. 1 lit. a GDPR.
Recipient
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the service is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Google is certified in accordance with the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Non-provision has no consequences for website visitors.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
Profiling
Web analysis tools can be used to evaluate the behaviour of visitors to our website and analyse their interests. A pseudonymised user profile is created for this purpose.
9. Use of the SalesViewer® technology
This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimisation purposes on the basis of the website operator’s legitimate interests (Article 6(1)(f) GDPR).
For this purpose, a javascript-based code is used to collect company-related data and use it accordingly. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymised and is not used to personally identify the visitor to this website.
The data stored within the framework of SalesViewer® will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.
You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.
10. Microsoft Advertising
Description and Purpose of Data Processing
We use Microsoft Advertising on our website. The service is used to provide and analyse online advertising, conversion tracking to measure the success of advertising campaigns and remarketing.
Legal Basis
The processing is carried out on the basis of the consent of our website visitors in accordance with Art. 6 para. 1 lit. a GDPR.
Recipient
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the service is Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Microsoft is certified in accordance with the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Detailed information on the storage duration of cookies can be found in our Consent Management Platform (CMP). Our CMP can be accessed via the icon at the bottom left of our website.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Non-provision has no consequences for website visitors.
Revocation of Consent
Consent can be revoked at any time in our CMP. Our CMP can be accessed via the icon at the bottom left of our website.
Profiling
The service can be used to evaluate the behaviour of website visitors and analyse their interests.
11. Cloudflare Turnstile
Description and Purpose of Data Processing
We use Cloudflare Turnstile on our website. The service is used to provide and check Captcha validations to ensure security and prevent spam, bots or unauthorised access to our website.
Legal Basis
The processing is carried out on the basis of our legitimate interest in accordance with Art. Art. 6 para. 1 lit. f GDPR, which lies in the guarantee of the purposes described above.
Recipient
The data is transferred to the provider of the CMP, which acts as a processor for us. The provider of the service is Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA).
It cannot be ruled out that the provider also processes the data in the USA. We would like to point out that in the USA, no level of data protection comparable to that in the EU can be guaranteed. However, Cloudflare is certified according to the “EU-US Data Privacy Framework”.
Criteria for Determining the Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Data is only stored by Cloudflare for a short time, e.g. to perform Captcha validation. No further storage takes place.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Without processing, however, the functionality of the website may be limited, as spam and bots cannot be effectively fended off.
12. Use of contact forms
Description and Purpose of Data Processing
The data entered in our contact forms is stored for the purpose of personalised communication with the person entering it. To do this, you must enter the data in the input fields marked with an asterisk. This data is used to allocate an enquiry and subsequently respond to it. The provision of further data is optional and voluntary.
Legal Basis
The data entered in the contact form is processed on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. By providing the contact form, we want to make it easy for you to get in touch with us. Information provided will be stored for the purpose of processing the enquiry and for possible follow-up questions.
Alternatively, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (e.g. in the case of a request for quotation or similar).
Storage Duration
The data collected will be deleted no later than six months after the enquiry has been processed. If there is a contractual relationship, we are subject to the statutory retention periods and the storage period is based on the relevant legal requirements.
Recipient
As a matter of principle, only those persons who require personal data for the processing of contact enquiries have access to the data transmitted via our contact forms.
Recipients may also be the technical service providers we use for the operation and maintenance of our website, who act as our processors.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. However, contact enquiries can only be processed if the data is entered in the input fields marked with an asterisk.
13. Data Processing in the Context of Business Communication
Description and Purpose of Data Processing
In the context of business communication, we process data in order to be able to communicate with our partners. This can be done to initiate business or to fulfil contractual and legal obligations, to offer products and to strengthen customer relationships and more.
Legal Basis
Depending on the phase of the contact, the following legal bases may be relevant for the processing of data in this context:
- for the implementation of pre-contractual measures or for the fulfilment of a contract pursuant to Art. 6 para. 1 lit. b GDPR.
- In order to fulfil legal obligations to which we are subject in accordance with Art. 6 para. 1 lit. c GDPR.
- To safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
Storage Duration
Personal data will generally be deleted or blocked as soon as the purpose of storage no longer applies. The purpose results from the content of the communication and the respective business transaction. Retention periods are determined for the respective business transactions on a case-by-case basis. As a rule, data is stored for the fulfilment of retention periods under commercial and tax law, unless longer storage is necessary for the defence of legal claims.
Recipient
Within our company, we ensure that only those persons receive data who need it to fulfil contractual and legal obligations. Depending on the type of business relationship, data may be passed on to partner companies for the fulfilment of contractual obligations. In some cases, we use other service providers to process business transactions. These can be, for example, parcel services, banks, internet service providers, manufacturers, IT service providers and tax consultants.
Provision Prescribed or Required
The provision of personal data may be required on the basis of the contractual relationship. If the data is not provided, business communication is unfortunately not possible.
14. Application Procedure
Description and Purpose of Data Processing
We process your data if you have sent it to us in connection with an application. In this case, the processing is carried out for the purpose of deciding on the establishment of an employment relationship with us and generally for carrying out an application procedure.
Our application process is digitalised with the help of HR software. As a result, the digital job advertisements on our website are linked to this HR software. The provider of this HR software is Personio SE & Co KG (Seidlstraße 3, 80335 Munich, Germany).
Legal Basis
The legal basis is Art. 88 GDPR in conjunction with Article 26 German Data Protection Act (BDSG) and Art. 6 para. 1 lit. b GDPR for the establishment or performance of a contractual relationship. In addition, we may process your personal data insofar as this is necessary to fulfil legal obligations in accordance with Art. 6 para. 1 lit. c GDPR or in accordance with Art. 6 para. 1 lit. f GDPR to avert legal claims asserted against us.
If you give us your express consent to process personal data for specific purposes, the legal basis for your consent is Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future.
The legal basis for the use of the HR software on our website within the framework described above is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in an efficient application process and personnel management.
Storage Duration
If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If your application is successful, we will transfer your application documents to your personnel file.
Recipient
Your application data will be reviewed by our HR department upon receipt of your application. Suitable applications are then forwarded internally to the relevant department managers for the vacant position. As a matter of principle, only those persons who require personal data for the processing of contact enquiries have access to the data transmitted via our contact forms.
Our application process is digitalised with the help of HR software. In this context, data may be transmitted to the service provider commissioned by us, who acts as our processor. The service provider is Personio SE & Co KG (Seidlstraße 3, 80335 Munich, Germany).
In order to handle our business processes, we may transfer personal data to third parties (e.g. IT service providers, cloud service providers, hosting providers, etc.) who act as our processors in accordance with our instructions. In these cases, all third parties are contractually obliged to treat personal data confidentially.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. If your application does not contain all the personal data required for a decision, this may result in your application not being considered.
Revocation of Consent
Consent can be revoked at any time.
15. Internal Reporting Office within the meaning of the Whistleblower Protection Act (HinSchG)
Description and Purpose of Data Processing
As part of our internal reporting centre within the meaning of the German Whistleblower Protection Act (HinSchG), we process personal data of whistleblowers and other affected parties for the purpose of processing and documenting reports, contacting whistleblowers and other affected parties and initiating follow-up measures.
Legal Basis
The processing of personal data of whistleblowers via our internal reporting centre within the meaning of the Whistleblower Protection Act (HinSchG) is generally carried out in accordance with Art. 6 para. 1 lit. c GDPR in conjunction with Article 12 HinSchG.
The processing of special categories of personal data in accordance with Art. 9 para. 1 GDPR by an internal reporting office is possible, provided that these are necessary for the fulfilment of its tasks in accordance with Article 10 sentence 2 HinSchG. The legal basis for processing in this case is Art. 6 para. 1 lit. c GDPR in conjunction with Art. 9 para. 2 lit. g GDPR in conjunction with Article 10 HinSchG.
If certain processing operations, such as the disclosure of personal data in accordance with Article 9 paras 3 and 4 HinSchG, require the consent of the data subject, the necessary consent will be obtained. The legal basis for processing in this case is Art. 6 para. 1 lit. a GDPR in conjunction with Art. 9 para. 2 lit. a GDPR.
Storage Duration
Personal data in connection with the internal reporting office within the meaning of the HinSchG is retained for the period required for the clarification and final assessment of a report. Once the internal investigation has been completed, the personal data concerned will be deleted in accordance with the statutory provisions.
In the case of proceedings, the personal data concerned is generally erased by the data controller 3 years after completion. The documentation may be kept for longer to fulfil the requirements of the HinSchG or other relevant legal provisions, if necessary and proportionate.
Personal data relating to information in the non-factual area of application and lack of seriousness and usability will be deleted immediately.
Recipient
To the extent necessary to clarify facts, personal data may be passed on to individual, carefully selected specialist departments within our company. In doing so, the controller ensures that personal data is only accessible to those persons who need to receive this data to fulfil the above-mentioned processing purposes. All persons who have access to personal data in this context are obliged to maintain special confidentiality.
Personal data will not be passed on or otherwise transferred to third parties unless this is necessary for the purposes of criminal prosecution. Insofar as the controller is obliged to do so by law or by court order, he/she may transfer personal data to bodies authorised to receive such information.
Provision Prescribed or Required
The provision of personal data via the internal reporting centre within the meaning of the HinSchG is voluntary. If the data is not provided, business communication is unfortunately not possible.
16. Deployment and Use of Social Networks & Job Forums
Description and Purpose of Data Processing
We maintain company profiles on various social networks, job forums and comparable platforms. These appearances serve to present the company and create contact channels for interested parties, customers and third parties.
If our profiles in social networks or comparable platforms are used to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data provided to us will be used exclusively for the purpose of communication and processing concerns.
We hereby point out that personal data may also be collected, used and stored by the operators of the respective networks and comparable platforms when you visit our profiles in networks and comparable platforms. This happens even if visitors themselves do not have a profile on the respective social network. For a detailed description of the respective data processing of the platforms we use, we refer to the following linked information from the respective providers:
LinkedIn (Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
XING & Kununu (Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland)
Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung
Instagram (Provider: Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
Privacy Policy: http://instagram.com/about/legal/privacy/
Facebook (Provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
Privacy Policy: https://www.facebook.com/about/privacy/
Information on Insight data: https://www.facebook.com/legal/terms/information_about_page_insights_data
Indeed (Provider: Indeed Ireland Operations, Ltd., 124 St. Stephen’s Green, Dublin 2, Ireland)
Privacy Policy: https://de.indeed.com/legal/gdpr_de?hl=de
Stepstone (Provider: The Stepstone Group Deutschland GmbH, Völklinger Straße 1, Düsseldorf, Deutschland)
Privacy Policy: https://www.stepstone.de/e-recruiting/rechtliches/datenschutzerklarung/
Legal Basis
Depending on the phase of the contact, the following legal bases may be relevant for the processing of data in this context:
- for the implementation of pre-contractual measures or for the fulfilment of a contract pursuant to Art. 6 para. 1 lit. b GDPR.
- In order to fulfil legal obligations to which we are subject in accordance with Art. 6 para. 1 lit. c GDPR.
- To safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
Storage Duration
We delete stored data as soon as its storage is no longer required or we are requested to delete it. As a rule, data is stored for the fulfilment of retention periods under commercial and tax law, unless longer storage is necessary for the defence of legal claims.
Recipient
We do not pass on collected data to third parties. However, we cannot rule out and have no influence on the extent to which the operators of the respective social networks and comparable platforms pass on data to third parties.
Provision Prescribed or Required
The provision of personal data is neither legally nor contractually required. Failure to do so will mean that no contact can be made with us via our social networks and comparable platforms.
17. Changes to Our Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to be able to make updates to our data processing on this website.
Privacy Notice Status: November 2024
Version V3
26.11.2024
Parts of the privacy policy were created with the help of activeMind AG (version #2020-09-30).