Privacy Policy

Cookie Settings: Here you can edit your cookie settings


HR factory GmbH As of 11.09.2024 Who We Are The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is: HR factory GmbH Konrad-Zuse-Platz 9 81829 Munich Germany +49 89 9213106-10 info@hrfactory.com www.hrfactory.com Contacting the Data Protection Officer The data protection officer of the controller is: DataCo GmbH Nymphenburger Str. 86 80636 Munich Germany +49 89 7400 45840 www.dataguard.de On this page, we inform you about the processing of your personal data on the website. How we collect and use your personal data depends on how you interact with us or which services you use. We collect, use, or share your personal data only if we have a legitimate purpose and a legal basis for doing so. What do we understand by the term legal basis? Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how to withdraw your consent, please refer to the subsections “Exercising Your Rights” in the following sections of this Privacy Policy. Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) – We must use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have requested it from you, or you have taken certain steps yourself before entering into this contract. Statutory Obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – We must use your data to comply with the law. Vital Interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to prevent you from suffering serious physical harm. Public Duty (Art. 6 para. 1 sentence 1 lit. e GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest, or because it is covered by a task prescribed by law, such as a statutory function. Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not override it. Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or a legal obligation and you do not provide the requested data. Sharing of Data and International Transfer As explained in this privacy policy, we use various service providers to assist us in delivering our services and ensuring the security of your data. When we engage these service providers, it is necessary for us to share your personal data with them. With all service providers to whom we disclose your data, we have entered into agreements that obligate them to protect your data. If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” data protection standard according to the European Commission, or by applying another safeguard, such as an enhanced contractual agreement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission. If, for example, we use US service providers, we rely either on the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have concluded with our service providers by sending an email to the address specified in this privacy policy. Your Rights If personal data concerning you is processed, you are considered a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller: 1. The right of access (Art. 15 GDPR) You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and the following information: Purposes of Processing Categories of Personal Data Recipients or categories of recipients Planned storage duration or the criteria for determining this duration the existence of the rights to rectification, erasure, or restriction, or objection Right to lodge a complaint with the competent supervisory authority Possible origin of the data (if collected from a third party) Possible existence of automated decision-making, including profiling, with meaningful information about the logic involved, the significance, and the expected impacts. Possible transfer of personal data to a third country or international organization 2. Right to Rectification (Art. 16 GDPR) Should your personal data be incorrect or incomplete, you have the right to request an immediate correction or completion of the personal data. 3. Right to Restriction of Processing (Art. 18 GDPR) If one of the following conditions is met, you have the right to request a restriction on the processing of your personal data: You contest the accuracy of your personal data, for a period that allows us to verify the accuracy of the personal data. Within the context of unlawful processing, you refuse the deletion of personal data and instead request the restriction of the use of personal data. We no longer require your personal data for processing purposes, but you need your personal data for the assertion, exercise, or defense of your legal claims or after you have objected to the processing, for the duration of the examination to determine whether our legitimate reasons outweigh your reasons. 4. Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR) If one of the following reasons applies, you have the right to request the immediate deletion of your personal data: Your data is no longer necessary for the processing purposes for which it was originally collected. You withdraw your consent and there is no other legal basis for the processing. You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) GDPR. Your personal data is being processed unlawfully. The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject. The personal data was collected in relation to services offered by the information society in accordance with Article 8(1) of the GDPR. Please note that the aforementioned reasons do not apply insofar as the processing is necessary: To exercise the right to freedom of expression and information; To fulfill a legal obligation or to perform a task that is in the public interest and to which we are subject. For reasons of public interest in the field of public health. For archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes. for the establishment, exercise, or defense of legal claims. 5. Right to Data Portability (Art. 20 GDPR) You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller. 6. Right to object to certain data processing (Art. 21 GDPR) You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out based on Article 6(1) sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions. If personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing. 7. Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The supervisory authority with which the complaint was lodged informs the complainant about the status and outcomes of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. A list of the locally competent supervisory authorities in Germany can be accessed on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html Provision of the Website and Creation of Log Files 1. Description and Scope of Data Processing Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data will be collected: Information about the browser type and the version used The user’s operating system The Internet Service Provider of the user Date and time of access Websites from which the user’s system reaches our website These data are stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. 2. Purpose of Data Processing The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The storage in log files is carried out to ensure the functionality of the website. Additionally, the data helps us optimize the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. 3. Legal Basis for Data Processing Legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR. 4. Duration of Storage The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of data collection for the provision of the website, this is the case when the respective session is terminated. In the case of data being stored in log files, this occurs after no more than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized, so that an association with the accessing client is no longer possible. 5. Exercise of Your Rights The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. The user can object to this. Whether the objection is successful is to be determined within the framework of a balancing of interests. Use of Cookies 1. Description and Scope of Data Processing During your visit to our website, we use technical tools for various functions, particularly cookies, which may be stored on your device. When accessing our website and at any time thereafter, you have the choice of whether to allow cookies in general or to select which individual additional functions you would like to enable. You can make changes in your browser settings or through our consent manager. Cookies are text files or information in a database that are stored on your hard drive and associated with the browser you are using, allowing certain information to be relayed to the entity that sets the cookie. Below, we describe the types of cookies we use: We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (fully correctly) or the support functions are not possible. The following data is stored and transmitted by the technically necessary cookies: Language Settings Utilization of Website Functions We use cookies on our website that are not technically necessary. Technically unnecessary cookies are considered text files that do not solely serve the functionality of the website but also collect other data. By setting technically unnecessary cookies, the following data is processed: IP address Location of Internet users Date and time of the website access Tracking of browsing behavior Linking the website visit with other social media platforms 2. Purpose of Data Processing The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. For the following applications, we require the technically necessary cookies: Adoption of language settings Functionality of the website The use of technically non-essential cookies is for the purpose of improving the quality of our website, its content, and thereby our reach and economic efficiency. By setting these cookies, we learn how the website is used and can continuously optimize our offerings. In particular, these cookies serve us for the following purposes: We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. Additionally, we use cookies on our website that enable an analysis of users’ surfing behavior. 3. Legal Basis for Data Processing For the storage of information in the end user’s terminal equipment and/or access to information already stored in the end user’s terminal equipment, the provisions of the Telecommunications-Telemedia Data Protection Act (TTDSG) are applicable. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your terminal equipment is based on § 25 para. 2 no. 2 TTDSG. This storage and access to the information in your terminal equipment is intended to facilitate your use of our website and to provide you with our services as desired. Some functions of our website also do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g., logging out or closing the browser) or after a predetermined period. Information about different storage periods for cookies can be found in the following sections of this privacy policy. Insofar as cookies are used that are not technically necessary, this is done on the basis of your explicit consent, which you can provide via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. You can withdraw your consent at any time with effect for the future or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make will only apply to the browser you are currently using. If personal data is processed following the storage of and access to information on your terminal device, the provisions of the GDPR are applicable. You can find information on this in the following sections of this privacy policy. 4. Exercise of Your Rights You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: https://hrfactory.com/de/datenschutzerklaerung/ Email Contact 1. Description and Scope of Data Processing On our website, it is possible to make contact via the provided email address. In this case, the personal data of the user transmitted with the email will be stored. The data is used exclusively for processing the conversation. 2. Purpose of Data Processing In the case of contact via email, there is also a legitimate interest required for the processing of the data. 3. Legal basis for data processing Legal basis for the processing of data transmitted in the course of sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimally responding to your inquiry sent via email. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. 4. Duration of Storage The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. For the personal data sent via email, this is the case when the respective conversation with the user is concluded. The conversation is considered concluded when it can be inferred from the circumstances that the relevant matter has been fully resolved. The additional personal data collected during the dispatch process will be deleted no later than seven days after collection. 5. Exercise of Your Rights If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of establishing contact will be deleted in this case. Contact Form 1. Description and Scope of Data Processing On our website, there is a contact form available that can be used for electronic communication. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. At the time the message is sent, the following data is stored: Email address Last Name First Name Phone / Mobile number Company name, salutation, personal message IP address of the calling computer Date and time 2. Purpose of Data Processing The processing of personal data from the input form of the contact form or via the provided email address is solely for the purpose of handling the contact inquiry. The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems. 3. Legal Basis for Data Processing Legal basis for the processing of data transmitted in the course of sending an email is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry submitted via the contact form. If the email contact aims at concluding a contract, an additional legal basis for the processing is Article 6(1) sentence 1 lit. b GDPR. 4. Duration of Storage The data will be deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. For the personal data from the input form of the contact form and those sent by email, this is the case when the respective conversation with the user is concluded. The conversation is considered concluded when it can be inferred from the circumstances that the relevant matter has been fully clarified. The additional personal data collected during the sending process will be deleted no later than seven days after. 5. Exercise of Your Rights If the user contacts us via the input form in the contact form, they can object to the storage of their personal data at any time, in the following manner: The withdrawal of consent can be sent via email to datenschutz@hrfactory.com at any time. All personal data stored in the course of making contact will be deleted in this case. Corporate Appearances Instagram: Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland On our company page, we provide information and offer Instagram users the opportunity for communication. If you engage in an activity on our Instagram business profile (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo from your user profile) publicly. Since we generally or largely have no influence over the processing of your personal data by Instagram, we cannot make any definitive statements about the purpose and scope of the processing of your data. We use our corporate presence on social networks for communication and information exchange with (potential) customers. In particular, we use our corporate presence for: The website of HR factory GmbH is designed for the information and contact of third parties. The publications about the company’s appearance may include the following content: Information about products Information about Services Advertisement Customer Contact Each user is free to publish personal data through activities. To the extent that we process your personal data to evaluate your online behavior, offer you sweepstakes, or conduct lead campaigns, this is done on the basis of your explicit consent declaration, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR. Legal basis for the processing of personal data Data for the purpose of communication with customers and prospects is processed under Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest in this context is to respond optimally to your inquiry or to be able to provide the requested information. If the purpose of the contact is to conclude a contract, then an additional legal basis for the processing is Article 6(1)(b) of the GDPR. The data generated by the company’s appearance is not stored in our own systems. For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us. You may object to the processing of your personal data, which we collect in connection with your use of our company presence, at any time and exercise your rights as a data subject as outlined in the section “Your Rights” of this privacy policy. To do so, please send us an informal email to datenschutz@hrfactory.com. For information on how Instagram processes your personal data and the corresponding options for objection, please find more details here: Instagram: https://help.instagram.com/519522125107875 YouTube: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States On our company page, we provide information and offer YouTube users the opportunity for communication. If you engage in an activity on our YouTube company page (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo of your user profile) publicly. Since we generally or largely have no influence over the processing of your personal data by YouTube, we cannot make any definitive statements about the purpose and scope of the processing of your data. We use our corporate presence on social networks for communication and information exchange with (potential) customers. In particular, we use the corporate presence for: The website of HR factory GmbH is designed for the information and contact of third parties. The publications about the company’s appearance may include the following content: Information about products Information about Services Advertisement Customer Contact Each user is free to publish personal data through activities. To the extent that we process your personal data to evaluate your online behavior, offer you sweepstakes, or conduct lead campaigns, this is done on the basis of your explicit declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR. Legal basis for the processing of personal data for the purpose of communication with customers and prospects is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or in being able to provide the requested information. If the purpose of contacting is to conclude a contract, then the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us. You can object to the processing of your personal data, which we collect in the context of your use of our company presence, at any time and exercise your rights as a data subject, as outlined in the section “Your Rights” in this privacy policy. To do so, please send us an informal email to datenschutz@hrfactory.com. For information on how your personal data is processed by YouTube and the corresponding options for objection, please find further details here: YouTube: https://policies.google.com/privacy?gl=DE&hl=en Translate this text to English: Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland On our company page, we provide information and offer Twitter users the opportunity for communication. If you engage in an activity on our company’s Twitter presence (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo from your user profile) publicly. However, since we generally have little or no influence over the processing of your personal data by Twitter, we cannot make any definitive statements about the purpose and scope of the processing of your data. We use our corporate presence on social networks for communication and information exchange with (potential) customers. In particular, we use our corporate presence for: The website of HR factory GmbH is designed for the information and contact of third parties. The publications about the company’s appearance may include the following content: Information about products Information about Services Advertisement Customer Contact Each user is free to publish personal data through activities. To the extent that we process your personal data to evaluate your online behavior, offer you sweepstakes, or conduct lead campaigns, this is done based on your explicit consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR. Legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or in providing the requested information. If the purpose of contacting is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. The data generated by the company’s appearance are not stored in our own systems. For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us. You may object to the processing of your personal data, which we collect in connection with your use of our corporate presence, at any time and exercise your rights as a data subject, as outlined in the section “Your Rights” in this privacy policy. To do so, please send us an informal email to datenschutz@hrfactory.com. For information on how Twitter processes your personal data and the corresponding options to object, please find more details here: Twitter: https://twitter.com/de/privacy Use of Corporate Profiles in Career-Oriented Networks 1. Scope of Data Processing The company profile is used for applications, information/PR, and active sourcing. We do not have any information regarding the processing of your personal data by the companies jointly responsible for the company profile. You can find further information in the privacy policy of: LinkedIn XING On our site, we provide information and offer users the opportunity for communication. The company profile is used for applications, information/PR, and active sourcing. We have no information regarding the processing of your personal data by the companies jointly responsible for the corporate presence. Further information can be found in the privacy policy of: LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/de If you engage in an activity on our company’s page (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo from your user profile) publicly. 2. Legal basis for data processing The legal basis for processing personal data for the purpose of communication with customers and prospects is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or in being able to provide the requested information. If the purpose of contacting is to conclude a contract, then an additional legal basis for processing is Article 6(1)(b) GDPR. 3. Purpose of Data Processing Our corporate presence serves to inform users about our services. In doing so, each user is free to disclose personal data through activities. 4. Duration of Storage The data generated by the company’s appearance are not stored in our own systems. Exercise of Your Rights You may object to the processing of your personal data, which we collect in the context of your use of our corporate presence, at any time and exercise your rights as a data subject, as outlined in the section “Your Rights” in this privacy policy. To do so, please send us an informal email to the email address mentioned in this privacy policy. Further information on exercising your rights can be found here: LinkedIn: https://www.linkedin.com/legal/privacy-policy XING: https://privacy.xing.com/en Hosting The website is hosted on servers by a service provider commissioned by us. Our service provider is: Raidboxes of the provider Raidboxes GmbH Hafenstraße 32 48153 Münster. For more information, please refer to the provider’s privacy policy: https://raidboxes.io/legal/privacy/ The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information includes: Information about the browser type and version used The user’s operating system The Internet service provider of the user Date and time of access Websites from which the user’s system reaches our website A merging of this data with other data sources is not performed. The collection of this data is based on Article 6(1)(f) of the GDPR. Our legitimate interest in processing this data lies in displaying our website without errors and optimizing its functions. The server location of the website is geographically situated in Germany. Content delivery networks Amazon CloudFront 1. Description and Scope of Data Processing We use features of the Content Delivery Network Amazon CloudFront by Amazon Web Service Inc., 410 Terry Avenue North, Seattle WA 98109, on our website. USA (hereinafter referred to as Amazon CloudFront). A Content Delivery Network (CDN) is a network of regionally distributed servers connected via the internet, used to deliver content—particularly large media files such as videos. Amazon CloudFront provides web optimization and security services, which we use to improve the loading times of our website and to protect it from misuse. When you access our website, a connection is established to the servers of Amazon CloudFront to retrieve content, for example. This may result in personal data being stored and evaluated in server log files, especially user activity (in particular, which pages have been visited) and device and browser information (especially the IP address and the operating system). Further information on the collection and storage of data by Amazon CloudFront can be found here: https://aws.amazon.com/de/privacy/ For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us. 2. Purpose of Data Processing The use of Amazon CloudFront’s features serves the delivery and acceleration of online applications and content. 3. Legal Basis for Data Processing The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website—this requires the collection of server log files. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. 5. Exercise of Your Rights Information on exercising your rights with respect to Amazon CloudFront can be found at: https://aws.amazon.com/de/privacy/ Integrated Third-Party Services We engage various service providers to deliver the services offered by us on the website. In general, we have a legitimate interest in sharing your data with the relevant service providers when these services are essential for providing the basic service offered on the website, in order to deliver the corresponding website service. If such services are required for additional services, enhanced features, or additional purposes, your personal data will only be shared with service providers if you give your consent. Here you can revoke your consent to the use of integrated third-party services at any time and manage your consent settings: https://hrfactory.com/de/datenschutzerklaerung/ Use of Borlabs Cookie 1. Scope of Processing Personal Data We use functionalities of the cookie consent solution Borlabs Cookie from the provider Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs). Borlabs enables us to obtain, manage, and document user consent for data processing in a legally compliant manner. For this purpose, Borlabs places cookies on the user’s device. The following data will be processed: Cookie Duration Cookie Version Domain and path of the website Opt-in and opt-out data UID (randomly generated user ID) Further information on the processing of data by Borlabs can be found here: https://de.borlabs.io/datenschutz/ 2. Purpose of Data Processing The processing of personal data serves to comply with the legal obligations of the GDPR and the BDSG. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes mentioned under 2. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. 5. Objection and Removal Option You can prevent the collection and processing of your personal data by Borlabs by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supported browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on objection and removal options regarding Borlabs can be found at: https://de.borlabs.io/datenschutz/ Use of the Google Marketing Platform 1. Scope of the Processing of Personal Data We use the Marketing Platform of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google places cookies on your computer. This allows personal data to be stored and evaluated, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (specifically the IP address and the operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (specifically pseudonymized user IDs). Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address. Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de 2. Purpose of Data Processing The use of the Google Marketing Platform is intended to serve relevant ads to the user, improve reports on campaign performance, or prevent a user from seeing the same ads multiple times. Legal basis for the processing of personal data Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage The Google Marketing Platform stores your data until the specified purpose is fulfilled, with the maximum storage duration being 18 months. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent up to the point of revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) it in your browser. With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de For more information on objection and removal options regarding Google, please visit: https://policies.google.com/privacy?gl=DE&hl=de Use of Facebook Pixel 1. Scope of Processing Personal Data We use the Facebook Pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and its representative in the Union, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H, D2 Dublin, Ireland (hereinafter referred to as Facebook) on our online presence. With its help, we can track the actions of users after they have seen or clicked on a Facebook advertisement. Personal data can be stored and evaluated in this way, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (specifically the IP address and the operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (specifically pseudonymized user IDs). This allows us to measure the effectiveness of Facebook advertisements for statistical and market research purposes. Data may be transmitted to Facebook servers in the USA. The data collected in this way is anonymous to us, meaning we do not see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook may connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s data usage policy. For more information on Facebook’s data processing, please visit: https://de-de.facebook.com/policy.php 2. Purpose of Data Processing The use of the Facebook Pixel serves the analysis and optimization of advertising measures. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Facebook by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on options for objection and removal with respect to Facebook can be found at: https://de-de.facebook.com/policy.php Use of Google AdWords 1. Scope of the processing of personal data We use Google AdWords from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). With this service, we place advertisements. Google sets a cookie on your computer. This allows personal data to be stored and evaluated, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (especially pseudonymized user IDs). For more information on how Google processes data, please visit here: https://policies.google.com/privacy?gl=DE&hl=de 2. Purpose of Data Processing We only receive information about the total number of users who have responded to our advertisement. No information is shared that could identify you. The use is not intended for tracking. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can deactivate the use of your personal data by Google with the following link: https://adssettings.google.de More Information on objection and removal options regarding Google can be found at: https://policies.google.com/privacy? Use of Google Maps 1. Scope of the Processing of Personal Data We use the online map service Google Maps by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). We use the Google Maps plugin to visually display geographical data and embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address, and addresses entered in the route planning function are transmitted to a Google server and stored there. Further information on data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de 2. Purpose of Data Processing The use of the Google Maps plugin serves to enhance user-friendliness and provide an appealing presentation of our online presence. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/ ) or Ghostery (https://www.ghostery.com) in your browser. With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de Further information on options for objection and removal with respect to Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de Use of Google ReCaptcha 1. Scope of the Processing of Personal Data We use Google ReCaptcha provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is intended to verify whether data input is compliant and not performed by a bot. To this end, Google ReCaptcha analyzes and authenticates the behavior of an online presence visitor with regard to various characteristics. As a result, personal data may be stored and evaluated, particularly the user’s activity (especially mouse movements and which elements have been clicked) and device and browser information (especially time, IP address, and operating system). The data will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de 2. Purpose of Data Processing The use of Google ReCaptcha is intended to protect our online presence from misuse. 3. Legal Basis for the Processing of Personal Data The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de Further information on objection and removal options with respect to Google can be found at: http://policies.google.com/privacy?gl=DE&hl=de Use of Google Web Fonts 1. Scope of Processing Personal Data We use Google Webfonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). The webfonts are transferred to the browser’s cache when the page is accessed to enable an optically improved display of various information. If the browser does not support Google Webfonts or blocks access, the text will be displayed in a standard font. No cookies are stored on the visitor’s device when the page is accessed. Data transmitted in connection with the page access is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com sent. This may result in the storage and analysis of personal data, particularly the user’s activity, including which pages have been visited and which elements have been clicked, as well as device and browser information, especially the IP address and the operating system. The data is not linked with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. For more information on Google’s data processing, please visit here: https://policies.google.com/privacy?gl=DE&hl=de 2. Purpose of Data Processing The use of Google Webfonts serves to provide an appealing presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is generally the consent of the user pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes. 5. Exercise of Your Rights You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de Information on Objection and Removal Options You can find information about Google at: https://policies.google.com/privacy?gl=DE&hl=de Use of HubSpot 1. Scope of the processing of personal data We utilize features of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as HubSpot). This is an integrated software solution that allows us to cover various aspects of our online marketing. These include, among others: email marketing (newsletters and automated mailings, e.g., for providing downloads), social media publishing & reporting, reporting (particularly traffic sources, access, etc.), contact management (especially user segmentation & CRM), landing pages, and contact forms. HubSpot places a cookie on your computer. This allows personal data to be stored and evaluated, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (particularly pseudonymized user IDs). Further information on data processing by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy 2. Purpose of Data Processing The use of the HubSpot plug-in is solely for the purpose of optimizing our marketing. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by HubSpot by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on options for objection and removal regarding HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy Use of Matomo 1. Scope of Processing Personal Data We use the software “Matomo” on this website (www.matomo.org),, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand). The software places a cookie (a text file) on your computer, which allows your browser to be recognized. When subpages of our website are accessed, the following data is stored: the user’s IP address, shortened by the last two bytes (anonymized) the accessed subpage and the time of access the page from which the user accessed our website (referrer) which browser with which plugins, which operating system, and which screen resolution is being used the duration of stay on the website the pages that are accessed from the called subpage The data collected with Matomo is stored on our own servers. There is no disclosure to third parties. Further information on the processing of data by Matomo can be found here, among other places: https://matomo.org/privacy-policy/ 2. Purpose of Data Processing The purpose of processing personal data is to specifically target an audience that has already shown initial interest by visiting the site. We require the data to analyze user browsing behavior and to obtain information about the use of individual components of the website. This enables us to continuously optimize the website and its user-friendliness. Our legitimate interest in these purposes is justified under Article 6(1)(f) of the GDPR. By anonymizing the IP address, we address the users’ interest in the protection of personal data. The data is never used to personally identify the website user and is not combined with other data. 3. Legal Basis for the Processing of Personal Data The legal basis for processing users’ personal data is generally the user’s consent according to Article 6(1) sentence 1 lit. a of the GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized, as Matomo claims, by deleting parts of the IP address and cookie information after 12 months. 5. Right of Withdrawal and Elimination Option You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Matomo by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. You can also create a so-called opt-out cookie with a single click below, which is valid for two years. This will result in Matomo not recording your further visits. However, please note that the opt-out cookie will be deleted if you delete all cookies. Further information on options for objection and removal regarding Matomo can be found at: https://matomo.org/privacy-policy/ Use of OpenStreetMap 1. Scope of the Processing of Personal Data We use the OpenStreetMap plugin from the OpenStreetMap Foundation, OpenStreetMap Foundation St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (hereinafter referred to as: OpenStreetMap). We use the OpenStreetMap plugin to visually represent geographical data and embed it into our online presence. The following data is processed by OpenStreetMap: -IP address -Geographical data (point lines and areas with associated attributes and GPS tracking data) -Communication-related data -Session metadata -User ID and login name -Time & date of access -Email address linked to the account -Network access data. The provider of this online presence has no influence over the data transmission. Additionally, a session cookie is set. The website, API servers, databases, and servers for supporting services are currently located in the United Kingdom and the Netherlands. For more information on how OpenStreetMap processes data, please visit here: https://wiki.osmfoundation.org/wiki/Privacy_Policy 2. Purpose of Data Processing The use of OpenStreetMap is in the interest of providing an appealing presentation of our online offerings and ensuring the easy location of the places we have specified on our online presence. 3. Legal basis for the processing of personal data Legal basis for the processing of users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage We have no information regarding the duration of storage. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by OpenStreetMap by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on options for objection and removal regarding OpenStreetMap can be found at: https://wiki.openstreetmap.org/wiki/Privacy_Policy Use of Vimeo 1. Scope of the Processing of Personal Data We use the plugin of the video portal Vimeo, operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Vimeo is an online video streaming portal. When you visit our online presence, your browser establishes a connection with Vimeo’s servers in the USA. Information about your visit to our online presence and your IP address is transmitted to Vimeo. This occurs regardless of whether you have a Vimeo account and whether you are logged into it. If you are logged in, Vimeo can associate the collected data with your account. For more information on how Vimeo processes data, please visit here: https://vimeo.com/privacy 2. Purpose of Data Processing The provision of the Vimeo plugin serves the purpose of providing and embedding videos. 3. Legal basis for the processing of personal data The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Vimeo by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on objection and removal options regarding Vimeo can be found at: https://vimeo.com/privacy Use of WPML 1. Scope of the Processing of Personal Data We use WPML by OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as WPML). WPML is a multilingual plugin for WordPress. We use WPML to present our online presence in various languages. When you visit our online presence, a cookie is stored on your device by WPML to save the language setting you have chosen. Personal data may be stored and evaluated as a result, primarily the user’s activity (in particular, which pages have been visited and which elements have been clicked on) as well as device and Browser information (in particular the IP address and the operating system). Further information on the processing of data by WPML can be found here: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/ Purpose of processing personal data The use of WPML serves to present our online presence in multiple languages. 3. Legal Basis for the Processing of Personal Data Legal basis for data processing is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in addressing visitors to our online presence in their native language. 4. Duration of Storage WPML stores cookies on your device. Information about the storage duration of the cookies can be found at: https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance 5. Exercise of Your Rights You can prevent the collection and processing of your personal data by WPML by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on options for objection and removal regarding WPML, please visit: https://wpml.org/de/documentation-3/privacy-policy-and-gdprcompliance/ Use of New Relic 1. Scope of the Processing of Personal Data We use the performance analytics tool New Relic from New Relic, Inc., 188 Spear Street, Suite 1200, San Francisco, California. 94105, United States (hereinafter referred to as New Relic). New Relic offers software and online tools that allow us to monitor and analyze the functionality of our software. This includes, among other things, tools for monitoring server operations, mobile applications, web applications, and backend infrastructures. Personal data can be stored and evaluated in this process, such as user activity (in particular, which pages have been visited and which elements have been clicked on) and Device and browser information (in particular the IP address and the operating system). Further information on the processing of data by New Relic can be found here: https://newrelic.com/termsandconditions/privacy 2. Purpose of Data Processing The use of New Relic is for monitoring, visualizing, and analyzing the performance of our production environments. 3. Legal Basis for the Processing of Personal Data Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by New Relic by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on options for objection and removal regarding New Relic can be found at: https://newrelic.com/termsandconditions/privacy Use of Google Tag Manager 1. Scope of the Processing of Personal Data We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). With Google Tag Manager, tags from Google’s services and third-party providers can be managed and embedded collectively on an online presence. Tags are small code elements on an online presence that serve, among other things, to measure visitor numbers and behavior, capture the impact of online advertising and social channels, employ remarketing and audience targeting, and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager ensures the triggering of other tags, which may in turn collect data. For information on this, please refer to the sections on the use of the respective services in this privacy policy. Google Tag Manager does not access this data. Further information about Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de 2. Purpose of Data Processing The purpose of processing personal data is the collected and clear management as well as the efficient integration of third-party services. 3. Legal Basis for the Processing of Personal Data The legal basis for processing the personal data of users is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. 4. Duration of Storage Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized by Google, according to their statements, by deleting parts of the IP address and cookie information after 9 and 18 months, respectively. 5. Exercise of Your Rights You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de Further information on objection and removal options with respect to Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de HR factory Academy 1. Description and Scope of Data Processing We offer participation in workshops. For registration, we request the following information: Email address Last name First name Telephone / Mobile number Company name, salutation, personal message IP address of the calling computer Date and time The transfer of personal data is carried out to the CRM service provider Hubspot and to business partners when necessary for the execution of the workshops. 2. Purpose of Data Processing The processing of personal data is for the preparation, execution, and follow-up of the booked workshop. We will provide you with information regarding the booked workshop for these purposes. 3. Legal Basis for Data Processing Legal basis for the processing of the data is the fulfillment of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR. 4. Duration of Storage The data will be deleted as soon as they are no longer required for the purpose for which they were collected. 5. Transfer of Personal Data to a Third Country In principle, the personal data collected and generated during the provision of relevant products and services are stored on our servers in the European Union. Part of the data processing agreement with Hubspot includes the so-called EU Standard Contractual Clauses (Art. 46 para. 2 sentence 1 lit. c GDPR )These are to be classified as suitable guarantees for the protection of the transfer and processing of personal data outside the EU. HR People Pilot 1. Use of the HR PeoplePilot: The HR PeoplePilot is an AI-based chatbot operated by HR factory. It is designed to answer questions about the use cases of Artificial Intelligence in the field of Human Resources. This service aims to provide interested parties and users with information and support regarding the implementation of AI in HR processes. 2. Data Collection and Processing: When using the HR PeoplePilot, no personal or company-related data from users is explicitly collected. Users are expressly advised not to enter such information into the chat. Communication with the HR PeoplePilot is conducted via the IP address of HR factory, which prevents direct identification of users through their own IP addresses. To enhance the user experience and ensure the flawless functioning of the chatbot, the same cookies are used as explained at the beginning of HR factory’s privacy policy. 3. Disclosure to Third Parties: There is no disclosure of the data collected during the use of the HR PeoplePilot to third parties. 4. Storage Duration: The data collected during interaction with the HR PeoplePilot is stored for a maximum period of 30 days. This includes technical logs of the interactions, which do not contain any personal data. 5. Rights of the Users: We grant users all legal rights concerning their data. These include the right to access, rectify, delete, restrict processing, the right to object to processing, as well as the right to data portability. 6. Contact Information of the Controller and Data Protection Officer: The contact details of the controller responsible for processing and the data protection officer are identical to the information provided at the beginning of the privacy policy. If you have any questions or concerns regarding the processing of your data by HR PeoplePilot, you can contact these addresses. 7. Right to lodge a complaint: Users have the right to lodge a complaint with a supervisory authority if they believe that the processing of their data does not comply with data protection laws. AI Assistant 1. Description and Purpose of the Chatbot The chatbot integrated into our website is an AI-powered tool that assists users with navigation and answering questions about our company and services. The chatbot is provided by OpenAI and uses GPT technology to generate relevant responses. Use of the chatbot is voluntary and requires explicit consent to the terms of use and the privacy policy. 2. Collection and Processing of Personal Data When using the chatbot, the following personal data is collected and processed: Connection dataWhen initiating a chat session, the user’s IP address is anonymously recorded to ensure a secure connection. This data is used exclusively for providing the service and troubleshooting. Communication contentAll inputs that users make in the chat are processed to generate appropriate responses. We recommend not entering sensitive or personal data in the chat. Important: The conversations are not used to train OpenAI’s models. KekseTo improve the user experience and analyze the usage of the chatbot, cookies may be used. These cookies do not collect personal data but are solely intended for the optimization of the service. 3. Legal Basis for Processing The processing of personal data is based on the user’s consent in accordance with Article 6(1) sentence 1 lit. a of the GDPR. Users must explicitly agree to the privacy policy and terms of use before they can use the chatbot. 4. Disclosure to Third Parties and Subprocessors The data collected during the use of the chatbot will not be shared with third parties unless it is necessary to fulfill legal obligations. HR factory has entered into a Data Processing Agreement (DPA) with OpenAI, which contains the following provisions: Role distributionHR factory is the data controller and OpenAI is the data processor. OpenAI processes the data only according to the instructions of HR factory. Security MeasuresOpenAI has implemented measures to ensure the security of data, including encryption, access controls, and protocols in the event of a data breach. Sub-processorsHR factory is informed about the use of subprocessors and has the right to raise objections. Data DeletionData sent via the API will be deleted after a maximum of 30 days to comply with the requirements of the GDPR. Audit RightsHR factory has the right to conduct audits to verify OpenAI’s compliance with data protection requirements. 5. Storage Duration The data collected during the use of the chatbot is anonymized and stored for a maximum period of 30 days. This data is used solely for the improvement of the service and ensuring system security. After this period, the data is automatically deleted. 6. Revocation of Consent Users have the right to withdraw their consent to data processing at any time with effect for the future. The withdrawal can be made via email to the contact details provided in this privacy policy. 7. Right to lodge a complaint with a supervisory authority If a user believes that the processing of personal data concerning them violates the GDPR, they have the right to file a complaint with the competent supervisory authority. Application via Application Form 1. Scope of the processing of personal data On our website, there is an application form available that can be used for electronic applications. If an applicant takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data includes: Salutation First name Name Address Telephone / Mobile number Email address Salary expectation Information on Education and Schooling Language Skills Curriculum Vitae Certificates For the processing of your data, your consent will be obtained during the submission process, and reference will be made to this privacy policy. After submitting your application, you will receive an email confirmation from us acknowledging the receipt of your application documents. Your data will not be shared with third parties. The data will be used exclusively for processing your application. 2. Purpose of Data Processing The processing of personal data from the application form is solely for the purpose of handling your application. In the event of contact via email, there is also the necessary legitimate interest in processing the data. The other personal data processed during the submission process serve to prevent misuse of the application form and to ensure the security of our information technology systems. The information contained in your application and resume will be stored in a database for HR recruiting software (HCM4all Clever Hunting) and used only during the hiring process and for the purpose of recruitment by HR factory and, if necessary and for this purpose, shared with clients of HR factory. 3. Legal basis for data processing The legal basis for processing your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b Alt. 1 GDPR and § 26 para. 1 sentence 1 BDSG. 4. Duration of Storage After the conclusion of the application process, the data will be stored for up to six months. At the latest, after the six-month period, your data will be deleted. In the event of a legal obligation, the data will be stored in accordance with the applicable regulations. If you have consented to being included in the talent pool, we will retain your resume and other important information you have provided to us for two years. The additional personal data collected during the sending process will be deleted no later than seven days after collection. 5. Objection and Removal Option The applicant has the opportunity to object to the processing of personal data at any time. If the applicant contacts us via email, they can object to the storage of their personal data at any time. In such a case, the application can no longer be considered. The withdrawal of consent can be made at any time via email to datenschutz@hrfactory.com. All personal data stored in the course of electronic applications will be deleted in this case. This privacy policy was created with the assistance of DataGuard created.

HR factory GmbH

As of 11.09.2024

Who We Are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

HR factory GmbH

Konrad-Zuse-Platz 9

81829 Munich

Germany

+49 89 9213106-10

info@hrfactory.com

www.hrfactory.com

Contacting the Data Protection Officer

The data protection officer of the controller is:

DataCo GmbH

Nymphenburger Str. 86

80636 Munich

Germany

+49 89 7400 45840
www.dataguard.de

On this page, we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We collect, use, or share your personal data only if we have a legitimate purpose and a legal basis for doing so.

What do we understand by the term legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For more information on how to withdraw your consent, please refer to the subsections “Exercising Your Rights” in the following sections of this Privacy Policy.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) – We must use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have requested it from you, or you have taken certain steps yourself before entering into this contract.

Statutory Obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – We must use your data to comply with the law.

Vital Interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to prevent you from suffering serious physical harm.

Public Duty (Art. 6 para. 1 sentence 1 lit. e GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest, or because it is covered by a task prescribed by law, such as a statutory function.

Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not override it.

Please note that we may not be able to provide you with our website services if your data is processed to fulfill a contract or a legal obligation and you do not provide the requested data.

Sharing of Data and International Transfer

As explained in this privacy policy, we use various service providers to assist us in delivering our services and ensuring the security of your data. When we engage these service providers, it is necessary for us to share your personal data with them.

With all service providers to whom we disclose your data, we have entered into agreements that obligate them to protect your data.

If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” data protection standard according to the European Commission, or by applying another safeguard, such as an enhanced contractual agreement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.

If, for example, we use US service providers, we rely either on the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have concluded with our service providers by sending an email to the address specified in this privacy policy.

Your Rights

If personal data concerning you is processed, you are considered a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

1. The right of access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and the following information:

Purposes of Processing
Categories of Personal Data
Recipients or categories of recipients
Planned storage duration or the criteria for determining this duration
the existence of the rights to rectification, erasure, or restriction, or objection
Right to lodge a complaint with the competent supervisory authority
Possible origin of the data (if collected from a third party)
Possible existence of automated decision-making, including profiling, with meaningful information about the logic involved, the significance, and the expected impacts.
Possible transfer of personal data to a third country or international organization

2. Right to Rectification (Art. 16 GDPR)

Should your personal data be incorrect or incomplete, you have the right to request an immediate correction or completion of the personal data.

3. Right to Restriction of Processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request a restriction on the processing of your personal data:

You contest the accuracy of your personal data, for a period that allows us to verify the accuracy of the personal data.
Within the context of unlawful processing, you refuse the deletion of personal data and instead request the restriction of the use of personal data.
We no longer require your personal data for processing purposes, but you need your personal data for the assertion, exercise, or defense of your legal claims or
after you have objected to the processing, for the duration of the examination to determine whether our legitimate reasons outweigh your reasons.

4. Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR)

If one of the following reasons applies, you have the right to request the immediate deletion of your personal data:

Your data is no longer necessary for the processing purposes for which it was originally collected.
You withdraw your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Article 21(2) GDPR.
Your personal data is being processed unlawfully.
The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
The personal data was collected in relation to services offered by the information society in accordance with Article 8(1) of the GDPR.

Please note that the aforementioned reasons do not apply insofar as the processing is necessary:

To exercise the right to freedom of expression and information;
To fulfill a legal obligation or to perform a task that is in the public interest and to which we are subject.
For reasons of public interest in the field of public health.
For archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes.
for the establishment, exercise, or defense of legal claims.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller.

6. Right to object to certain data processing (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out based on Article 6(1) sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

If personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

The supervisory authority with which the complaint was lodged informs the complainant about the status and outcomes of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the locally competent supervisory authorities in Germany can be accessed on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data will be collected:

Information about the browser type and the version used

The user’s operating system

The Internet Service Provider of the user

Date and time of access

Websites from which the user’s system reaches our website

These data are stored in the log files of our system.

A storage of this data together with other personal data of the user does not take place.

2. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is carried out to ensure the functionality of the website. Additionally, the data helps us optimize the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

3. Legal Basis for Data Processing

Legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of Storage

The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of data collection for the provision of the website, this is the case when the respective session is terminated.

In the case of data being stored in log files, this occurs after no more than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized, so that an association with the accessing client is no longer possible.

5. Exercise of Your Rights

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. The user can object to this. Whether the objection is successful is to be determined within the framework of a balancing of interests.

Use of Cookies

1. Description and Scope of Data Processing

During your visit to our website, we use technical tools for various functions, particularly cookies, which may be stored on your device. When accessing our website and at any time thereafter, you have the choice of whether to allow cookies in general or to select which individual additional functions you would like to enable. You can make changes in your browser settings or through our consent manager.

Cookies are text files or information in a database that are stored on your hard drive and associated with the browser you are using, allowing certain information to be relayed to the entity that sets the cookie. Below, we describe the types of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (fully correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies:

Language Settings

Utilization of Website Functions

We use cookies on our website that are not technically necessary. Technically unnecessary cookies are considered text files that do not solely serve the functionality of the website but also collect other data.

By setting technically unnecessary cookies, the following data is processed:

IP address

Location of Internet users

Date and time of the website access

Tracking of browsing behavior

Linking the website visit with other social media platforms

2. Purpose of Data Processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

For the following applications, we require the technically necessary cookies:

Adoption of language settings

Functionality of the website

The use of technically non-essential cookies is for the purpose of improving the quality of our website, its content, and thereby our reach and economic efficiency. By setting these cookies, we learn how the website is used and can continuously optimize our offerings. In particular, these cookies serve us for the following purposes:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. Additionally, we use cookies on our website that enable an analysis of users’ surfing behavior.

3. Legal Basis for Data Processing

For the storage of information in the end user’s terminal equipment and/or access to information already stored in the end user’s terminal equipment, the provisions of the Telecommunications-Telemedia Data Protection Act (TTDSG) are applicable. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your terminal equipment is based on § 25 para. 2 no. 2 TTDSG. This storage and access to the information in your terminal equipment is intended to facilitate your use of our website and to provide you with our services as desired. Some functions of our website also do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g., logging out or closing the browser) or after a predetermined period. Information about different storage periods for cookies can be found in the following sections of this privacy policy.

Insofar as cookies are used that are not technically necessary, this is done on the basis of your explicit consent, which you can provide via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. You can withdraw your consent at any time with effect for the future or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make will only apply to the browser you are currently using. If personal data is processed following the storage of and access to information on your terminal device, the provisions of the GDPR are applicable. You can find information on this in the following sections of this privacy policy.

4. Exercise of Your Rights

You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: https://hrfactory.com/de/datenschutzerklaerung/

Email Contact

1. Description and Scope of Data Processing

On our website, it is possible to make contact via the provided email address. In this case, the personal data of the user transmitted with the email will be stored.

The data is used exclusively for processing the conversation.

2. Purpose of Data Processing

In the case of contact via email, there is also a legitimate interest required for the processing of the data.

3. Legal basis for data processing

Legal basis for the processing of data transmitted in the course of sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimally responding to your inquiry sent via email.

If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

4. Duration of Storage

The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. For the personal data sent via email, this is the case when the respective conversation with the user is concluded. The conversation is considered concluded when it can be inferred from the circumstances that the relevant matter has been fully resolved.

The additional personal data collected during the dispatch process will be deleted no later than seven days after collection.

5. Exercise of Your Rights

If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of establishing contact will be deleted in this case.

Contact Form

1. Description and Scope of Data Processing

On our website, there is a contact form available that can be used for electronic communication. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent, the following data is stored:

Email address

Last Name

First Name

Phone / Mobile number

Company name, salutation, personal message

IP address of the calling computer

Date and time

2. Purpose of Data Processing

The processing of personal data from the input form of the contact form or via the provided email address is solely for the purpose of handling the contact inquiry.

The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing

Legal basis for the processing of data transmitted in the course of sending an email is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry submitted via the contact form. If the email contact aims at concluding a contract, an additional legal basis for the processing is Article 6(1) sentence 1 lit. b GDPR.

4. Duration of Storage

The data will be deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. For the personal data from the input form of the contact form and those sent by email, this is the case when the respective conversation with the user is concluded. The conversation is considered concluded when it can be inferred from the circumstances that the relevant matter has been fully clarified.

The additional personal data collected during the sending process will be deleted no later than seven days after.

5. Exercise of Your Rights

If the user contacts us via the input form in the contact form, they can object to the storage of their personal data at any time, in the following manner:

The withdrawal of consent can be sent via email to datenschutz@hrfactory.com at any time.

All personal data stored in the course of making contact will be deleted in this case.

Corporate Appearances

Instagram:

Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland

On our company page, we provide information and offer Instagram users the opportunity for communication.

If you engage in an activity on our Instagram business profile (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo from your user profile) publicly.

Since we generally or largely have no influence over the processing of your personal data by Instagram, we cannot make any definitive statements about the purpose and scope of the processing of your data.

We use our corporate presence on social networks for communication and information exchange with (potential) customers. In particular, we use our corporate presence for:

The website of HR factory GmbH is designed for the information and contact of third parties.

The publications about the company’s appearance may include the following content:

Information about products

Information about Services

Customer Contact

Each user is free to publish personal data through activities.

To the extent that we process your personal data to evaluate your online behavior, offer you sweepstakes, or conduct lead campaigns, this is done on the basis of your explicit consent declaration, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

Legal basis for the processing of personal data
Data for the purpose of communication with customers and prospects is processed under Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest in this context is to respond optimally to your inquiry or to be able to provide the requested information.

If the purpose of the contact is to conclude a contract, then an additional legal basis for the processing is Article 6(1)(b) of the GDPR.

The data generated by the company’s appearance is not stored in our own systems.

For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.

You may object to the processing of your personal data, which we collect in connection with your use of our company presence, at any time and exercise your rights as a data subject as outlined in the section “Your Rights” of this privacy policy. To do so, please send us an informal email to datenschutz@hrfactory.com. For information on how Instagram processes your personal data and the corresponding options for objection, please find more details here:

Instagram: https://help.instagram.com/519522125107875

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our company page, we provide information and offer YouTube users the opportunity for communication.

If you engage in an activity on our YouTube company page (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo of your user profile) publicly.

Since we generally or largely have no influence over the processing of your personal data by YouTube, we cannot make any definitive statements about the purpose and scope of the processing of your data.

We use our corporate presence on social networks for communication and information exchange with (potential) customers. In particular, we use the corporate presence for: The website of HR factory GmbH is designed for the information and contact of third parties.

The publications about the company’s appearance may include the following content:

Information about products

Information about Services

Customer Contact

Each user is free to publish personal data through activities.

To the extent that we process your personal data to evaluate your online behavior, offer you sweepstakes, or conduct lead campaigns, this is done on the basis of your explicit declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

Legal basis for the processing of personal data for the purpose of communication with customers and prospects is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or in being able to provide the requested information.

If the purpose of contacting is to conclude a contract, then the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

For the processing of your personal data in third countries, we have provided appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data, which we collect in the context of your use of our company presence, at any time and exercise your rights as a data subject, as outlined in the section “Your Rights” in this privacy policy. To do so, please send us an informal email to datenschutz@hrfactory.com. For information on how your personal data is processed by YouTube and the corresponding options for objection, please find further details here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=en

Translate this text to English: Twitter:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

On our company page, we provide information and offer Twitter users the opportunity for communication.

If you engage in an activity on our company’s Twitter presence (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo from your user profile) publicly.

However, since we generally have little or no influence over the processing of your personal data by Twitter, we cannot make any definitive statements about the purpose and scope of the processing of your data.

We use our corporate presence on social networks for communication and information exchange with (potential) customers. In particular, we use our corporate presence for:

The website of HR factory GmbH is designed for the information and contact of third parties.

The publications about the company’s appearance may include the following content:

Information about products

Information about Services

Customer Contact

Each user is free to publish personal data through activities.

To the extent that we process your personal data to evaluate your online behavior, offer you sweepstakes, or conduct lead campaigns, this is done based on your explicit consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

Legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or in providing the requested information.

If the purpose of contacting is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

The data generated by the company’s appearance are not stored in our own systems.

You may object to the processing of your personal data, which we collect in connection with your use of our corporate presence, at any time and exercise your rights as a data subject, as outlined in the section “Your Rights” in this privacy policy. To do so, please send us an informal email to datenschutz@hrfactory.com. For information on how Twitter processes your personal data and the corresponding options to object, please find more details here:

Twitter: https://twitter.com/de/privacy

Use of Corporate Profiles in Career-Oriented Networks

1. Scope of Data Processing

The company profile is used for applications, information/PR, and active sourcing. We do not have any information regarding the processing of your personal data by the companies jointly responsible for the company profile. You can find further information in the privacy policy of:

XING

On our site, we provide information and offer users the opportunity for communication.

The company profile is used for applications, information/PR, and active sourcing.

We have no information regarding the processing of your personal data by the companies jointly responsible for the corporate presence.
Further information can be found in the privacy policy of:

LinkedIn:
https://www.linkedin.com/legal/privacy-policy

XING:

https://privacy.xing.com/de

If you engage in an activity on our company’s page (e.g., comments, posts, likes, etc.), it is possible that you may thereby disclose personal data (e.g., your real name or a photo from your user profile) publicly.

2. Legal basis for data processing

The legal basis for processing personal data for the purpose of communication with customers and prospects is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your inquiry or in being able to provide the requested information.

If the purpose of contacting is to conclude a contract, then an additional legal basis for processing is Article 6(1)(b) GDPR.

3. Purpose of Data Processing

Our corporate presence serves to inform users about our services. In doing so, each user is free to disclose personal data through activities.

4. Duration of Storage

The data generated by the company’s appearance are not stored in our own systems.

Exercise of Your Rights

You may object to the processing of your personal data, which we collect in the context of your use of our corporate presence, at any time and exercise your rights as a data subject, as outlined in the section “Your Rights” in this privacy policy. To do so, please send us an informal email to the email address mentioned in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

XING:

https://privacy.xing.com/en

Hosting

The website is hosted on servers by a service provider commissioned by us.

Our service provider is:

Raidboxes of the provider Raidboxes GmbH Hafenstraße 32 48153 Münster. For more information, please refer to the provider’s privacy policy: https://raidboxes.io/legal/privacy/

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information includes:

Information about the browser type and version used

The user’s operating system

The Internet service provider of the user

Date and time of access

Websites from which the user’s system reaches our website

A merging of this data with other data sources is not performed. The collection of this data is based on Article 6(1)(f) of the GDPR. Our legitimate interest in processing this data lies in displaying our website without errors and optimizing its functions.

The server location of the website is geographically situated in Germany.

Content delivery networks

Amazon CloudFront

1. Description and Scope of Data Processing

We use features of the Content Delivery Network Amazon CloudFront by Amazon Web Service Inc., 410 Terry Avenue North, Seattle WA 98109, on our website.

USA (hereinafter referred to as Amazon CloudFront). A Content Delivery Network (CDN) is a network of regionally distributed servers connected via the internet, used to deliver content—particularly large media files such as videos. Amazon CloudFront provides web optimization and security services, which we use to improve the loading times of our website and to protect it from misuse. When you access our website, a connection is established to the servers of Amazon CloudFront to retrieve content, for example. This may result in personal data being stored and evaluated in server log files, especially user activity (in particular, which pages have been visited) and device and browser information (especially the IP address and the operating system).

Further information on the collection and storage of data by Amazon CloudFront can be found here:

https://aws.amazon.com/de/privacy/

2. Purpose of Data Processing

The use of Amazon CloudFront’s features serves the delivery and acceleration of online applications and content.

3. Legal Basis for Data Processing

The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website—this requires the collection of server log files.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.

5. Exercise of Your Rights

Information on exercising your rights with respect to Amazon CloudFront can be found at:

https://aws.amazon.com/de/privacy/

Integrated Third-Party Services

We engage various service providers to deliver the services offered by us on the website.

In general, we have a legitimate interest in sharing your data with the relevant service providers when these services are essential for providing the basic service offered on the website, in order to deliver the corresponding website service.

If such services are required for additional services, enhanced features, or additional purposes, your personal data will only be shared with service providers if you give your consent.

Here you can revoke your consent to the use of integrated third-party services at any time and manage your consent settings: https://hrfactory.com/de/datenschutzerklaerung/

Use of Borlabs Cookie

1. Scope of Processing Personal Data
We use functionalities of the cookie consent solution Borlabs Cookie from the provider Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs). Borlabs enables us to obtain, manage, and document user consent for data processing in a legally compliant manner. For this purpose, Borlabs places cookies on the user’s device.

The following data will be processed:

Cookie Duration
Cookie Version
Domain and path of the website
Opt-in and opt-out data
UID (randomly generated user ID)

Further information on the processing of data by Borlabs can be found here:
https://de.borlabs.io/datenschutz/

2. Purpose of Data Processing
The processing of personal data serves to comply with the legal obligations of the GDPR and the BDSG.

3. Legal Basis for the Processing of Personal Data
Legal basis for the processing of users’ personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes mentioned under 2.

4. Duration of Storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.

5. Objection and Removal Option
You can prevent the collection and processing of your personal data by Borlabs by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supported browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options regarding Borlabs can be found at: https://de.borlabs.io/datenschutz/

Use of the Google Marketing Platform

1. Scope of the Processing of Personal Data

We use the Marketing Platform of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google places cookies on your computer. This allows personal data to be stored and evaluated, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (specifically the IP address and the operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (specifically pseudonymized user IDs). Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address. Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of the Google Marketing Platform is intended to serve relevant ads to the user, improve reports on campaign performance, or prevent a user from seeing the same ads multiple times.

Legal basis for the processing of personal data

Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

The Google Marketing Platform stores your data until the specified purpose is fulfilled, with the maximum storage duration being 18 months.

5. Exercise of Your Rights

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent up to the point of revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) it in your browser. With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de For more information on objection and removal options regarding Google, please visit: https://policies.google.com/privacy?gl=DE&hl=de

Use of Facebook Pixel

1. Scope of Processing Personal Data

We use the Facebook Pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and its representative in the Union, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal H, D2 Dublin, Ireland (hereinafter referred to as Facebook) on our online presence. With its help, we can track the actions of users after they have seen or clicked on a Facebook advertisement. Personal data can be stored and evaluated in this way, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (specifically the IP address and the operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (specifically pseudonymized user IDs). This allows us to measure the effectiveness of Facebook advertisements for statistical and market research purposes. Data may be transmitted to Facebook servers in the USA. The data collected in this way is anonymous to us, meaning we do not see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook may connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s data usage policy. For more information on Facebook’s data processing, please visit: https://de-de.facebook.com/policy.php

2. Purpose of Data Processing

The use of the Facebook Pixel serves the analysis and optimization of advertising measures.

3. Legal Basis for the Processing of Personal Data

Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.

5. Exercise of Your Rights

Use of Google AdWords

1. Scope of the processing of personal data

We use Google AdWords from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). With this service, we place advertisements. Google sets a cookie on your computer. This allows personal data to be stored and evaluated, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (especially pseudonymized user IDs). For more information on how Google processes data, please visit here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

We only receive information about the total number of users who have responded to our advertisement. No information is shared that could identify you. The use is not intended for tracking.

3. Legal Basis for the Processing of Personal Data

Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.

5. Exercise of Your Rights

Use of Google Maps

1. Scope of the Processing of Personal Data

We use the online map service Google Maps by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). We use the Google Maps plugin to visually display geographical data and embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address, and addresses entered in the route planning function are transmitted to a Google server and stored there. Further information on data processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of the Google Maps plugin serves to enhance user-friendliness and provide an appealing presentation of our online presence.

3. Legal Basis for the Processing of Personal Data

Legal basis for the processing of users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.

5. Exercise of Your Rights

Further information on options for objection and removal with respect to Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google ReCaptcha

1. Scope of the Processing of Personal Data

We use Google ReCaptcha provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is intended to verify whether data input is compliant and not performed by a bot. To this end, Google ReCaptcha analyzes and authenticates the behavior of an online presence visitor with regard to various characteristics. As a result, personal data may be stored and evaluated, particularly the user’s activity (especially mouse movements and which elements have been clicked) and device and browser information (especially time, IP address, and operating system).

The data will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of Google ReCaptcha is intended to protect our online presence from misuse.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.

5. Exercise of Your Rights

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

With the following link, you can deactivate the use of your personal data by Google:

https://adssettings.google.de

Further information on objection and removal options with respect to Google can be found at:

http://policies.google.com/privacy?gl=DE&hl=de

Use of Google Web Fonts

1. Scope of Processing Personal Data

We use Google Webfonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). The webfonts are transferred to the browser’s cache when the page is accessed to enable an optically improved display of various information. If the browser does not support Google Webfonts or blocks access, the text will be displayed in a standard font. No cookies are stored on the visitor’s device when the page is accessed. Data transmitted in connection with the page access is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com sent. This may result in the storage and analysis of personal data, particularly the user’s activity, including which pages have been visited and which elements have been clicked, as well as device and browser information, especially the IP address and the operating system. The data is not linked with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. For more information on Google’s data processing, please visit here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of Google Webfonts serves to provide an appealing presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display.

3. Legal Basis for the Processing of Personal Data

Legal basis for the processing of users’ personal data is generally the consent of the user pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.

5. Exercise of Your Rights

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de
Information on Objection and Removal Options
You can find information about Google at:
https://policies.google.com/privacy?gl=DE&hl=de

Use of HubSpot

1. Scope of the processing of personal data

We utilize features of HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as HubSpot). This is an integrated software solution that allows us to cover various aspects of our online marketing. These include, among others: email marketing (newsletters and automated mailings, e.g., for providing downloads), social media publishing & reporting, reporting (particularly traffic sources, access, etc.), contact management (especially user segmentation & CRM), landing pages, and contact forms. HubSpot places a cookie on your computer. This allows personal data to be stored and evaluated, particularly user activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the displayed advertisements (specifically which advertisements were shown and whether the user clicked on them), and also data from advertising partners (particularly pseudonymized user IDs). Further information on data processing by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

2. Purpose of Data Processing

The use of the HubSpot plug-in is solely for the purpose of optimizing our marketing.

3. Legal Basis for the Processing of Personal Data

Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law, for example, for tax and accounting purposes.

5. Exercise of Your Rights

Further information on options for objection and removal regarding HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy

Use of Matomo

1. Scope of Processing Personal Data

We use the software “Matomo” on this website (www.matomo.org),, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand). The software places a cookie (a text file) on your computer, which allows your browser to be recognized. When subpages of our website are accessed, the following data is stored:

- the user’s IP address, shortened by the last two bytes (anonymized)

- the accessed subpage and the time of access

- the page from which the user accessed our website (referrer)

- which browser with which plugins, which operating system, and which screen resolution is being used

- the duration of stay on the website

- the pages that are accessed from the called subpage

The data collected with Matomo is stored on our own servers. There is no disclosure to third parties.

Further information on the processing of data by Matomo can be found here, among other places: https://matomo.org/privacy-policy/

2. Purpose of Data Processing

The purpose of processing personal data is to specifically target an audience that has already shown initial interest by visiting the site. We require the data to analyze user browsing behavior and to obtain information about the use of individual components of the website. This enables us to continuously optimize the website and its user-friendliness. Our legitimate interest in these purposes is justified under Article 6(1)(f) of the GDPR. By anonymizing the IP address, we address the users’ interest in the protection of personal data. The data is never used to personally identify the website user and is not combined with other data.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing users’ personal data is generally the user’s consent according to Article 6(1) sentence 1 lit. a of the GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized, as Matomo claims, by deleting parts of the IP address and cookie information after 12 months.

5. Right of Withdrawal and Elimination Option

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation.
You can prevent the collection and processing of your personal data by Matomo by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also create a so-called opt-out cookie with a single click below, which is valid for two years. This will result in Matomo not recording your further visits. However, please note that the opt-out cookie will be deleted if you delete all cookies.

Further information on options for objection and removal regarding Matomo can be found at: https://matomo.org/privacy-policy/

Use of OpenStreetMap

1. Scope of the Processing of Personal Data

We use the OpenStreetMap plugin from the OpenStreetMap Foundation, OpenStreetMap Foundation St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (hereinafter referred to as: OpenStreetMap).

We use the OpenStreetMap plugin to visually represent geographical data and embed it into our online presence. The following data is processed by OpenStreetMap: -IP address -Geographical data (point lines and areas with associated attributes and GPS tracking data) -Communication-related data -Session metadata -User ID and login name -Time & date of access -Email address linked to the account -Network access data. The provider of this online presence has no influence over the data transmission. Additionally, a session cookie is set. The website, API servers, databases, and servers for supporting services are currently located in the United Kingdom and the Netherlands. For more information on how OpenStreetMap processes data, please visit here: https://wiki.osmfoundation.org/wiki/Privacy_Policy

2. Purpose of Data Processing

The use of OpenStreetMap is in the interest of providing an appealing presentation of our online offerings and ensuring the easy location of the places we have specified on our online presence.

3. Legal basis for the processing of personal data

Legal basis for the processing of users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

We have no information regarding the duration of storage.

5. Exercise of Your Rights

Use of Vimeo

1. Scope of the Processing of Personal Data

We use the plugin of the video portal Vimeo, operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Vimeo is an online video streaming portal. When you visit our online presence, your browser establishes a connection with Vimeo’s servers in the USA. Information about your visit to our online presence and your IP address is transmitted to Vimeo. This occurs regardless of whether you have a Vimeo account and whether you are logged into it. If you are logged in, Vimeo can associate the collected data with your account. For more information on how Vimeo processes data, please visit here: https://vimeo.com/privacy

2. Purpose of Data Processing

The provision of the Vimeo plugin serves the purpose of providing and embedding videos.

3. Legal basis for the processing of personal data

The legal basis for processing users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.

5. Exercise of Your Rights

Use of WPML

1. Scope of the Processing of Personal Data

We use WPML by OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as WPML). WPML is a multilingual plugin for WordPress. We use WPML to present our online presence in various languages. When you visit our online presence, a cookie is stored on your device by WPML to save the language setting you have chosen. Personal data may be stored and evaluated as a result, primarily the user’s activity (in particular, which pages have been visited and which elements have been clicked on) as well as device and
Browser information (in particular the IP address and the operating system). Further information on the processing of data by WPML can be found here: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

Purpose of processing personal data

The use of WPML serves to present our online presence in multiple languages.

3. Legal Basis for the Processing of Personal Data

Legal basis for data processing is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in addressing visitors to our online presence in their native language.

4. Duration of Storage

WPML stores cookies on your device. Information about the storage duration of the cookies can be found at: https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance

5. Exercise of Your Rights

You can prevent the collection and processing of your personal data by WPML by blocking the storage of third-party cookies on your computer, using the “Do Not Track” feature of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. For more information on options for objection and removal regarding WPML, please visit: https://wpml.org/de/documentation-3/privacy-policy-and-gdprcompliance/

Use of New Relic

1. Scope of the Processing of Personal Data

We use the performance analytics tool New Relic from New Relic, Inc., 188 Spear Street, Suite 1200, San Francisco, California.
94105, United States (hereinafter referred to as New Relic). New Relic offers software and online tools that allow us to monitor and analyze the functionality of our software. This includes, among other things, tools for monitoring server operations, mobile applications, web applications, and backend infrastructures. Personal data can be stored and evaluated in this process, such as user activity (in particular, which pages have been visited and which elements have been clicked on) and
Device and browser information (in particular the IP address and the operating system). Further information on the processing of data by New Relic can be found here: https://newrelic.com/termsandconditions/privacy

2. Purpose of Data Processing

The use of New Relic is for monitoring, visualizing, and analyzing the performance of our production environments.

3. Legal Basis for the Processing of Personal Data

Legal basis for the processing of users’ personal data is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law.

5. Exercise of Your Rights

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by New Relic by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Further information on options for objection and removal regarding New Relic can be found at: https://newrelic.com/termsandconditions/privacy

Use of Google Tag Manager

1. Scope of the Processing of Personal Data

We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). With Google Tag Manager, tags from Google’s services and third-party providers can be managed and embedded collectively on an online presence. Tags are small code elements on an online presence that serve, among other things, to measure visitor numbers and behavior, capture the impact of online advertising and social channels, employ remarketing and audience targeting, and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager ensures the triggering of other tags, which may in turn collect data. For information on this, please refer to the sections on the use of the respective services in this privacy policy. Google Tag Manager does not access this data. Further information about Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de

2. Purpose of Data Processing

The purpose of processing personal data is the collected and clear management as well as the efficient integration of third-party services.

3. Legal Basis for the Processing of Personal Data

The legal basis for processing the personal data of users is generally the user’s consent according to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized by Google, according to their statements, by deleting parts of the IP address and cookie information after 9 and 18 months, respectively.

5. Exercise of Your Rights

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, disabling the execution of script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de Further information on objection and removal options with respect to Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

HR factory Academy

1. Description and Scope of Data Processing

We offer participation in workshops. For registration, we request the following information:

Email address

Last name

First name

Telephone / Mobile number

Company name, salutation, personal message

IP address of the calling computer

Date and time

The transfer of personal data is carried out to the CRM service provider Hubspot and to business partners when necessary for the execution of the workshops.

2. Purpose of Data Processing

The processing of personal data is for the preparation, execution, and follow-up of the booked workshop. We will provide you with information regarding the booked workshop for these purposes.

3. Legal Basis for Data Processing

Legal basis for the processing of the data is the fulfillment of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of Storage

The data will be deleted as soon as they are no longer required for the purpose for which they were collected.

5. Transfer of Personal Data to a Third Country

In principle, the personal data collected and generated during the provision of relevant products and services are stored on our servers in the European Union.

Part of the data processing agreement with Hubspot includes the so-called EU Standard Contractual Clauses (Art. 46 para. 2 sentence 1 lit. c GDPR )These are to be classified as suitable guarantees for the protection of the transfer and processing of personal data outside the EU.

HR People Pilot

1. Use of the HR PeoplePilot: The HR PeoplePilot is an AI-based chatbot operated by HR factory. It is designed to answer questions about the use cases of Artificial Intelligence in the field of Human Resources. This service aims to provide interested parties and users with information and support regarding the implementation of AI in HR processes.

2. Data Collection and Processing: When using the HR PeoplePilot, no personal or company-related data from users is explicitly collected. Users are expressly advised not to enter such information into the chat. Communication with the HR PeoplePilot is conducted via the IP address of HR factory, which prevents direct identification of users through their own IP addresses.
To enhance the user experience and ensure the flawless functioning of the chatbot, the same cookies are used as explained at the beginning of HR factory’s privacy policy.

3. Disclosure to Third Parties: There is no disclosure of the data collected during the use of the HR PeoplePilot to third parties.

4. Storage Duration: The data collected during interaction with the HR PeoplePilot is stored for a maximum period of 30 days. This includes technical logs of the interactions, which do not contain any personal data.

5. Rights of the Users: We grant users all legal rights concerning their data. These include the right to access, rectify, delete, restrict processing, the right to object to processing, as well as the right to data portability.

6. Contact Information of the Controller and Data Protection Officer: The contact details of the controller responsible for processing and the data protection officer are identical to the information provided at the beginning of the privacy policy. If you have any questions or concerns regarding the processing of your data by HR PeoplePilot, you can contact these addresses.

7. Right to lodge a complaint: Users have the right to lodge a complaint with a supervisory authority if they believe that the processing of their data does not comply with data protection laws.

AI Assistant

1. Description and Purpose of the Chatbot

The chatbot integrated into our website is an AI-powered tool that assists users with navigation and answering questions about our company and services. The chatbot is provided by OpenAI and uses GPT technology to generate relevant responses. Use of the chatbot is voluntary and requires explicit consent to the terms of use and the privacy policy.

2. Collection and Processing of Personal Data

When using the chatbot, the following personal data is collected and processed:

Connection dataWhen initiating a chat session, the user’s IP address is anonymously recorded to ensure a secure connection. This data is used exclusively for providing the service and troubleshooting.
Communication contentAll inputs that users make in the chat are processed to generate appropriate responses. We recommend not entering sensitive or personal data in the chat. Important: The conversations are not used to train OpenAI’s models.
KekseTo improve the user experience and analyze the usage of the chatbot, cookies may be used. These cookies do not collect personal data but are solely intended for the optimization of the service.

3. Legal Basis for Processing

The processing of personal data is based on the user’s consent in accordance with Article 6(1) sentence 1 lit. a of the GDPR. Users must explicitly agree to the privacy policy and terms of use before they can use the chatbot.

4. Disclosure to Third Parties and Subprocessors

The data collected during the use of the chatbot will not be shared with third parties unless it is necessary to fulfill legal obligations.

HR factory has entered into a Data Processing Agreement (DPA) with OpenAI, which contains the following provisions:

Role distributionHR factory is the data controller and OpenAI is the data processor. OpenAI processes the data only according to the instructions of HR factory.
Security MeasuresOpenAI has implemented measures to ensure the security of data, including encryption, access controls, and protocols in the event of a data breach.
Sub-processorsHR factory is informed about the use of subprocessors and has the right to raise objections.
Data DeletionData sent via the API will be deleted after a maximum of 30 days to comply with the requirements of the GDPR.
Audit RightsHR factory has the right to conduct audits to verify OpenAI’s compliance with data protection requirements.

5. Storage Duration

The data collected during the use of the chatbot is anonymized and stored for a maximum period of 30 days. This data is used solely for the improvement of the service and ensuring system security. After this period, the data is automatically deleted.

6. Revocation of Consent

Users have the right to withdraw their consent to data processing at any time with effect for the future. The withdrawal can be made via email to the contact details provided in this privacy policy.

7. Right to lodge a complaint with a supervisory authority

If a user believes that the processing of personal data concerning them violates the GDPR, they have the right to file a complaint with the competent supervisory authority.

Application via Application Form

1. Scope of the processing of personal data

On our website, there is an application form available that can be used for electronic applications. If an applicant takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:

- Salutation

- First name

- Name

- Address

- Telephone / Mobile number

- Email address

- Salary expectation

- Information on Education and Schooling

- Language Skills

- Curriculum Vitae

- Certificates

For the processing of your data, your consent will be obtained during the submission process, and reference will be made to this privacy policy.

After submitting your application, you will receive an email confirmation from us acknowledging the receipt of your application documents.

Your data will not be shared with third parties. The data will be used exclusively for processing your application.

2. Purpose of Data Processing

The processing of personal data from the application form is solely for the purpose of handling your application. In the event of contact via email, there is also the necessary legitimate interest in processing the data.

The other personal data processed during the submission process serve to prevent misuse of the application form and to ensure the security of our information technology systems.

The information contained in your application and resume will be stored in a database for HR recruiting software (HCM4all Clever Hunting) and used only during the hiring process and for the purpose of recruitment by HR factory and, if necessary and for this purpose, shared with clients of HR factory.

3. Legal basis for data processing

The legal basis for processing your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b Alt. 1 GDPR and § 26 para. 1 sentence 1 BDSG.

4. Duration of Storage

After the conclusion of the application process, the data will be stored for up to six months. At the latest, after the six-month period, your data will be deleted. In the event of a legal obligation, the data will be stored in accordance with the applicable regulations. If you have consented to being included in the talent pool, we will retain your resume and other important information you have provided to us for two years.

The additional personal data collected during the sending process will be deleted no later than seven days after collection.

5. Objection and Removal Option

The applicant has the opportunity to object to the processing of personal data at any time. If the applicant contacts us via email, they can object to the storage of their personal data at any time. In such a case, the application can no longer be considered.

The withdrawal of consent can be made at any time via email to datenschutz@hrfactory.com.

All personal data stored in the course of electronic applications will be deleted in this case.

This privacy policy was created with the assistance of DataGuard created.