Privacy Policy

Version March 2022

Contents

  1. Name and address of the data controller
  2. Contact details of the data protection officer
  3. General provisions concerning data processing
  4. Rights of the data subject
  5. Delivery of the website and preparation of log files
  6. Use of cookies
  7. E-mail contact
  8. Contact form
  9. Application via e-mail and application form
  10. Company website and social media accounts
  11. Use of company accounts in professional networks
  12. Hosting
  13. Plug-ins used

1. Name and address of the data controller

The data controller, as defined by the General Data Protection Regulation (GDPR) and other regulations governing data protection, is:

HR factory GmbH

Konrad-Zuse-Platz 9
81829 Munich
Germany

+49 89 9213106-10
info@hrfactory.com
www.hrfactory.com

2. Contact details of the data protection officer

The data protection officer of the data controller is:

DataCo GmbH
Dachauer Straße 65
80335 Munich
Germany

+49 89 7400 45840

www.dataguard.de

3. General provisions concerning data processing

1. Scope of the processing of personal data

We generally only process the personal data of our users if this is necessary for the provision of a functional website, as well as our content and services. The processing of the personal data of our users normally only takes place with the consent of the user. There are exceptions to this, in cases when obtaining consent in advance is impossible for objective reasons, or the processing of data is required by laws and regulations.

2. Legal grounds for the processing of personal data

The legal grounds for our processing of personal data based on the data subject’s consent is Article 6 Paragraph 1 Item (a) of the EU General Data Protection Regulation (GDPR).

The legal grounds for the processing of personal data that is necessary for the fulfilment of a contract, in which the data subject is a contracting party, is Article 6 Paragraph 1 Item (b) of GDPR. This also applies to the processing of personal data that is necessary for fulfilling pre-contractual obligations.

The legal grounds for processing personal data if it is required to fulfil a legal obligation that our company is subject to is Article 6 Paragraph 1 Item (c) of GDPR.

If the vital interests of the data subject or other natural individual require the processing of personal data, Article 6 Paragraph 1 Item (d) of GDPR applies.

If the processing is necessary for the pursuit of legitimate interests of our company or a third party, and these interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Article 6 Paragraph 1 Item (f) of GDPR applies as the legal grounds for processing.

3. Erasure of data and period of storage

The personal data of the data subject are erased or blocked as soon as the purpose of saving these data no longer applies. The storage of the data may continue beyond this if such storage is required by European or national legislators in EU regulations, laws or other regulatory documents that the data controller is subject to. The data are also blocked or erased if a storage period specified in such laws or regulations expires, unless storing of the data is required for concluding or fulfilling a contract.

4. Rights of the data subject

Whenever we process your personal data, you are the data subject, as defined by GDPR, and you have the following rights with respect to the data controller:

1. Right to access

You may require the data controller to confirm whether any personal data that concern you are processed by the data controller.

If such processing does take place, you may require the data controller to provide the following information:

  1. purposes for the processing of the personal data;
  2. categories of the personal data that are being processed;
  3. recipients and the categories of the recipients to which the personal data concerning you were, or still are disclosed;
  4. planned duration of the storage of the personal data concerning you or, if no specific details pertaining to the duration are available, the criteria for determining the duration of such storage;
  5. existence of a right to rectify or erase your personal data, a right to restrict the processing of the data by the data controller, or a right to object to such processing;
  6. existence of a right to submit a complaint to a supervisory authority;
  7. all information available about the origin of the data if the personal data were not obtained from the data subject;
  8. existence of automatic decision-making, including profiling, as per Article 22 Paragraphs 1 and 4 of GDPR, and at least in these cases, meaningful information about the logic involved, and the significance and the intended consequences of such processing for the data subject.

You have the right to obtain information if your personal data are transferred to a third country or an international organisation. In such a case, you may require us to provide you with information of appropriate safeguards (as per Article 46 of GDPR) used as part of the transfer of the data.

2. Right to rectification

You have the right to the rectification and/or completion of data by the data controller if your personal data processed are inaccurate or incomplete. The data controller must immediately carry the rectification out.

3. Right to restriction of processing

You may demand the restriction of the processing of your personal data under the following conditions:

  1. if you contest the accuracy of your personal data, for a period that makes it possible for the data controller to verify the accuracy of the personal data;
  2. if the processing is unlawful, and you oppose the erasure of the personal data, and instead request that the use of the personal data be restricted;
  3. the data controller no longer needs the personal data for the purposes of the processing, but you need the data for the establishment, exercise or defence of legal claims, or
  4. if you have submitted an objection to processing in accordance with Article 21 Paragraph 1 of GDPR, and it has not yet been verified if the data controller’s legitimate grounds override yours.

If the processing of your personal data has been restricted, these data (with the exception of storage) may only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural individual or legal entity, or for reasons of important public interest of the European Union or a member state.

If a restriction of processing put in place subject to the above conditions is lifted, you will be notified of this by the data controller prior to the lifting of the restriction.

4. Right to erasure

a) Duty to delete

You may require the data controller to immediately erase your personal data, and the data controller must erase these personal data without undue delay whenever one of the following grounds applies:

  1. Your personal data are no longer necessary for the purposes, for which they were collected or otherwise processed.
  2. You revoke your consent to the processing of your personal data as per Article 6 Paragraph 1 Item (a) or Article 9 Paragraph 2 Item (a) of GDPR, and there is no other legal grounds for processing.
  3. You object to the processing in accordance with Article 21 Paragraph 1 of GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21 Paragraph 2 of GDPR.
  4. Your personal data have been processed unlawfully.
  5. The erasure of your personal data is due to a legal obligation, which the data controller is subject to, in accordance with EU or member state law.
  6. Your personal data were collected in relation to the offer of information society services as per Article 8 Paragraph 1 of GDPR.

b) Notification of third parties

If the data controller makes your personal data public, and must erase the personal data subject to Article 17 Paragraph 1 of GDPR, the data controller, taking account of the technology available and the cost of implementation, takes reasonable measures, including those of a technical nature, to inform the data controllers processing the personal data that you, as the data subject, have requested that these data controllers erase any links to, or copies, or reproductions of these personal data.

c) Exceptions

The right to erasure does not apply if the processing is necessary

  1. for the exercise of the right to freedom of information and opinion;
  2. for compliance with a legal obligation which requires processing in accordance with European Union or member state law that the data controller is subject to, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  3. for reasons of public interest in the area of public health, as per Article 9 Paragraph 2 items (h) and (i), and Article 9 Paragraph 3 of GDPR;
  4. for purposes that are in the public interest, scientific or historical research purposes or statistical purposes, as per Article 89 Paragraph 1 of GDPR, if the right stated in Section (a) precludes or significantly impedes the achievement of the goals of this processing, or
  5. for the establishment, exercise or defence of legal claims.

Right to notification

If you exercise your right to rectification, erasure or restriction of processing in relation to the data controller, then the data controller is required to notify all parties, to which your personal data were disclosed, of this rectification, erasure of the data or the restriction of their processing, unless this is impossible, or is associated with disproportionate costs.

You have the right to be informed of such parties by the data controller.

6. Right to data portability

You have the right to receive your personal data that you provided to the data controller, in a structured, commonly used and machine-readable format. Furthermore, you are entitled to transfer these data to another data controller without any impediment by the data controller, to which the personal data were provided, given that

  1. the processing is based on consent, as per Article 6 Paragraph 1 Item (a) or Article 9 Paragraph 2 Item (a) of GDPR, or on a contract as per Article 6 Paragraph 1 Item (b) of GDPR, and
  2. the processing takes place using automated means.

In exercising this right, you may have your personal data transferred directly from one data controller to another, if technically feasible. The freedoms and right of third parties must not be impinged by this.

The right to data portability does not apply to any processing of personal data that is necessary for a task carried out in the public interest or in the exercise of official authority assigned to the data controller.

7. Right to object

You have the right to object, at any time and based on your specific situation, to the processing of your personal data based on Article 6 Paragraph 1 Item (e) or (f) of GDPR; this also applies to any profiling based on these provisions.

The data controller no longer processes your personal data, unless the data controller can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedom, or unless the processing is used for the establishment, exercise or defence of legal claims.

If your personal data are processed for direct marketing, you may object at any time to the processing of your personal data for such marketing, which includes any profiling to the extent that it is related to such direct marketing.

If you object to processing for the purpose of direct marketing, your personal data will no longer be processed for that purpose.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object through automated means using technical specifications.

8. Right to revoke data protection-related consent

You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.

9. Automated individual decision-making, including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling, which results in legal or similar significant effects for you. This does not apply if the decision

  1. is necessary for concluding or fulfilling a contract between you and the data controller,
  2. is authorised by European Union or member state law that the data controller is subject to, whereby such law specifies appropriate measures to safeguard your rights, freedoms and legitimate interests, or
  3. is based on your express consent.

However, these decisions may not be based on special categories of personal data, as defined in Article 9 Paragraph 1 of GDPR, provided that Article 9 Paragraph 2 Item (a) or (b) of GDPR does not apply, and appropriate measures to protect your rights, freedoms and legitimate interests have been taken.

For the cases specified in Sections 1 and 3, the data controller takes appropriate measures to protect your rights, freedoms and legitimate interests, which includes the right to demand intervention by a person on behalf of the data controller, to explain own position, and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or location of the alleged infringement if you believe that the processing of your personal data infringes GDPR.

The supervisory authority, with which the complaint has been lodged, informs the complainant of the progress and the outcome of the complaint including the possibility of a judicial remedy as per Article 78 of GDPR.

5. Delivery of the website and preparation of log files

1. Description and scope of data processing

Every time our website is opened, our system automatically collects data and information from the computer system of the opening computer.

The following data are collected in doing so:

  • Information about browser type and version used
  • User’s operating system
  • User’s internet service provider
  • User’s IP address
  • Access date and time
  • Web pages that the user’s system requested from our website

These data are saved in the log files of our system. These data are not stored together with any other personal data of the user.

2. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the web page to the user’s computer. This requires storing the IP address of the user for the duration of the session.

The saving of the data in log files takes place to ensure the functional capacity of the website. We also use the data to optimise the website and to ensure the security of our information systems. No analysis of the data for marketing purposes takes place in this context.

In the contest of this purpose, too, our legitimate interest in the processing of data is based on Article 6 Paragraph 1 Item (f) of GDPR.

3. Legal grounds for the processing of data

The legal grounds for the temporary storage of the data and the log files is Article 6 Paragraph 1 Item (f) of GDPR.

4. Storage duration

The data are erased as soon as they are no longer needed for achieving the purpose, for which they were collected. In the case of collecting the data for the delivery of the webpage, this takes place as soon as the session in question is over.

In the case of saving the data in the log files, this takes place within no more than seven days. The data may be stored for an extended period. In this case, the IP addresses of the users are erased or anonymised, so that they cannot any longer be matched to the client opening the page.

5. Ability to object and remove

The collection of data for the delivery of the webpage and the saving of the data in log files is critical for the operation of the website. The user can thus not object to this.

6. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are saved in/by the web browser on the computer system of the user. If a user opens a website, a cookie file can be saved in the operating system of the user. This cookie contains a certain series of characters that enables clear identification of the browser whenever the website is opened again.

We use cookies to make our website more user-friendly. Certain elements of our website require that the browser, in which the website is opened, can be identified during page transitions.

The following data are saved and transmitted within the cookies:

  • Language settings

Our website also uses cookies to make it possible to analyse the browsing behaviour of the user.

The user’s data collected in this manner are pseudonymised through technical means. This means that the data can no longer be matched to the user that opened the website. The data are not saved together with any other personal data of the user.

Other cookies are used for Matomo, to improve the user experience of the visitors of our website.

2. Purpose of data processing

The purpose of the use of technically necessary cookies is to facilitate the use of the website by the user. We do not provide certain functions of our website if cookies are not used. These functions require that the browser can be identified after a page transition.

We need cookies for the following purposes:

  • Saving of language settings

The user data collected via technically necessary cookies are not used to create user profiles.

Analytical cookies are used for the purpose of improving the quality of our website and our content. Through analytical cookies, we find out how our website is used, making it possible for us to constantly improve our content.

3. Legal grounds for the processing of data

The legal grounds for the processing of personal data in the context of using cookies is Article 6 Paragraph 1 Item (a) of GDPR.

The legal grounds for the processing of personal data in the context of using technically required cookies is Article 6 Paragraph 1 Item (f) of GDPR.

4. Duration of storage, ability to object and remove

Cookies are saved on the computer of the user, and transferred from it to our website. This is why you, as the user, have full control over the use of cookies. You can deactivate or limit the transmission of cookies by changing your browser settings. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If you deactivate the cookies used by our website, you will possible no longer be able to fully use all of its functions.

If you use the Safari browser (version 12.1 and over), cookies are deleted automatically after seven days. This also includes opt-out cookies that are set to prevent tracking measures.

7. E-Mail contact

1. Description and scope of data processing

Contact is possible using the e-mail address provided on our website. In this case, we save the user’s personal data provided with the e-mail message.

The data are only used to process the conversation.

2. Purpose of data processing

If you contact us via e-mail, we also have the necessary legitimate interest in processing your data.

3. Legal grounds for the processing of data

The legal grounds for the processing of the data are the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.

The legal grounds for the processing the data that are transmitted as part of sending an e-mail message are Article 6 Paragraph 1 Item (f) of GDPR. If contact via e-mail serves the purpose of concluding a contract, additional legal grounds for the processing of the data apply, as per Article 6 Paragraph 1 Item (b) of GDPR.

4. Storage duration

The data are erased as soon as they are no longer needed for achieving the purpose, for which they were collected. For personal data sent via e-mail, this takes place as soon as the conversation with the user is over. The conversation ends once it is understood based on the given circumstances that the matter at hand has been definitively resolved.

The personal data collected as part of the sending procedure are erased within no more than seven days.

5. Ability to object and remove

The user can always object to revoking their consent to the processing of their personal data. If the user contacts us via e-mail, they can object to the saving of their personal data at any time. In such a case, the conversation may no longer continue.

You can revoke your consent at any time by e-mailing us at Datenschutz@hrfactory.com.

All personal data saved as part of your contact are deleted in such a case.

8. Contact form

1. Description and scope of data processing

Our website has a contact form that can be used for electronic contact. If the user does take advantage of the form, the data entered in the input fields are transmitted to us and saved.

The following data are saved as soon as you send the message:

  • Title
  • Name
  • Company
  • E-mail address
  • Phone number
  • Content of the message
  • Data, how you became aware of HR factory
  • Contact date and time

For the processing of your data, we request your consent as part of the sending procedure, referring you to this data protection statement.

Alternatively, you can contact us via the e-mail address provided. In this case, we save the user’s personal data provided with the e-mail message.

The data are only used to process the conversation.

2. Purpose of data processing

We only use the personal data provided in the input fields to process your message. If you contact us via e-mail, we also have the necessary legitimate interest in processing your data.

Any other personal data processed during the sending procedure are intended to prevent the misuse of the contact form, and to ensure the security of our information systems.

3. Legal grounds for the processing of data

The legal grounds for the processing of the data are the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.

The legal grounds for the processing the data that are transmitted as part of sending an e-mail message are Article 6 Paragraph 1 Item (f) of GDPR. If contact via e-mail serves the purpose of concluding a contract, additional legal grounds for the processing of the data apply, as per Article 6 Paragraph 1 Item (b) of GDPR.

4. Storage duration

The data are erased as soon as they are no longer needed for achieving the purpose, for which they were collected. For personal data sent via the input fields of the contact forms, and those sent via e-mail, this takes place as soon as the conversation with the user is over. The conversation ends once it is understood based on the given circumstances that the matter at hand has been definitively resolved.

The personal data collected as part of the sending procedure are erased within no more than seven days.

5. Ability to object and remove

The user can always object to revoking their consent to the processing of their personal data. If the user contacts us via e-mail, they can object to the saving of their personal data at any time. In such a case, the conversation may no longer continue.

You can revoke your consent at any time by e-mailing us at Datenschutz@hrfactory.com.

All personal data saved as part of your contact are deleted in such a case.

9. Application via application form

1. Scope of the processing of personal data

Our website has an application form that can be used for submitting electronic applications. If an applicant does use this option, the data entered in the input fields are transmitted to us and saved. These data are:

  • Title
  • Name
  • Name
  • Address
  • Phone/mobile phone number
  • E-mail address
  • Expected salary
  • Information about education and training
  • Language skills
  • CV
  • Certificates

For the processing of your data, we request your consent as part of the sending procedure, referring you to this data protection statement.

Once you send your application, you will receive confirmation that we received your application documents via e-mail.

We do not transfer your data to third parties. The data are only used to process your application.

2. Purpose of data processing

We only use the personal data included in the application form to process your application. If you contact us via e-mail, we also have the necessary legitimate interest in processing your data.

Any other personal data processed during the sending procedure are intended to prevent the misuse of the application form, and to ensure the security of our information systems.

The information included in your application and CV is saved in a database for HR recruiting Software (HCM4all Clever Hunting), and is only used during the recruitment procedure and with the goal of recruitment via HR factory, and if necessary, transmitted to the client of HR factory.

3. Legal grounds for the processing of data

The legal grounds for the processing of your data are the initiation of the contract that takes place at the request of the data subject, as per Article 6 Paragraph 1 Item (b), Article 1 Paragraph 1 of GDPR, and Article 26 Paragraph 1 Section 1 of the German Federal Data Protection Act (BDSG).

4. Storage duration

Once the application procedure ends, the data are stored for up to six more months. We will delete your data within this period of six months. If there are applicable legal obligations, we store the data subject to the applicable regulations. If you accept your inclusion in the talent pool, we will keep your CV and other important information that you provided us with for two years.

The personal data collected as part of the sending procedure are erased within no more than seven days.

5. Ability to object and remove

The applicant can always object to the processing of their personal data. If the applicant contacts us via e-mail, they can object to the saving of their personal data at any time. In such a case, the application may no longer be considered.

You can revoke your consent at any time by e-mailing us at datenschutz@hrfactory.com.

All personal data saved as part of your electronic application are deleted in such a case.

10. Company website and social media accounts

Use of our company’s social media accounts

Instagram:

Instagram, Part of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland


We provide information on our company website, and make communication possible for Instagram users. If you do anything on the Instagram account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company Instagram, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.

The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.

Thus, publications posted via our company account can contain the following:

  • Information about products
  • Information about services
  • Contests
  • Advertising
  • Contact with client

Every user is free to publish their personal data through activities.

The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.

The data generated via our company account are not stored within our own systems.


You can object to the processing of your personal data that we perform as part of our company account on Instagram, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by Instagram, and your ability to object to it, here:

Instagram: https://help.instagram.com/519522125107875

LinkedIn:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland


We provide information on our company website, and make communication possible for LinkedIn users. If you do anything on the LinkedIn account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company Instagram, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.

The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.

Thus, publications posted via our company account can contain the following:

  • Information about products
  • Information about services
  • Contests
  • Advertising
  • Contact with client

Every user is free to publish their personal data through activities.

The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.

The data generated via our company account are not stored within our own systems.


You can object to the processing of your personal data that we perform as part of our company account on LinkedIn, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by LinkedIn, and your ability to object to it, here:

LinkedIn: https://de.linkedin.com/legal/privacy-policy

Twitter:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland


We provide information on our company website, and make communication possible for Twitter users. If you do anything on the Twitter account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company Twitter, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.

The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.

Thus, publications posted via our company account can contain the following:

  • Information about products
  • Information about services
  • Contests
  • Advertising
  • Contact with client

Every user is free to publish their personal data through activities.

The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.

The data generated via our company account are not stored within our own systems.


You can object to the processing of your personal data that we perform as part of our company account on Twitter, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by Twitter, and your ability to object to it, here:

Twitter: https://twitter.com/de/privacy

Xing:

New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany


We provide information on our company website, and make communication possible for Xing users. If you do anything on the Xing account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company YouTube, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.

The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.

Thus, publications posted via our company account can contain the following:

  • Information about products
  • Information about services
  • Contests
  • Advertising
  • Contact with client

Every user is free to publish their personal data through activities.

The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.

The data generated via our company account are not stored within our own systems.


You can object to the processing of your personal data that we perform as part of our company account on Xing, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by Xing, and your ability to object to it, here:

Xing: https://privacy.xing.com/de

YouTube:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States


We provide information on our company website, and make communication possible for YouTube users. If you do anything on the YouTube account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company YouTube, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.

The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties. Thus, publications posted via our company account can contain the following:

  • Information about products
  • Information about services
  • Contests
  • Advertising
  • Contact with client

Every user is free to publish their personal data through activities.

The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.

The data generated via our company account are not stored within our own systems.


You can object to the processing of your personal data that we perform as part of our company account on YouTube, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by YouTube, and your ability to object to it, here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=de

11. Hosting

The website is hosted on the servers of a service provider that we contracted.

Our service provider is:

Raidboxes

The servers automatically collect and save the information that your browser automatically sends when you visit the website in server log files. The information thus saved includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Server query date and time
  • IP address

These data are never collated with any other data sources. The collection of these data takes place on the basis of Article 6 Paragraph 1 Item (f) of GDPR. The operator of the website has a legitimate interest in the technically malfunction-free delivery and optimisation of its website, and this requires producing server log files.

The geographic location of the server is in Germany.

12. Plug-ins used

We use plug-ins for various purposes. The plug-ins we used are listed below:

Use of YouTube

1. Scope of the processing of personal data

We use the YouTube plug-in operated by Google, at YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented in the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). We use the YouTube plug-in to embed YouTube videos in our website. Whenever you visit our website, your browser connects to the servers of YouTube. This may involve the saving and analysis of personal data, primarily concerning the activity of the user (especially the pages that were visited and the elements that were clicked on), as well as device and browser information (specifically, the IP address and the operating system).

We have no influence over the content of the plug-in. If you are signed in to your YouTube account during your visit, YouTube can associate your visit of our website with that account. Interaction with this plug-in results in this information being transmitted directly to YouTube, and saved there.

For more information about the processing of personal data by Google, visit:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

The use of the YouTube plug-in is intended to improve the user-friendliness and to achieve the desired appearance of our website.

3. Legal grounds for the processing of personal data

The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.

4. Storage duration

Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law (e.g., for tax and accounting purposes).

5. Option to object and remove

You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.

You can prevent the collection and processing of your personal data by Google, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.

Click the following link to deactivate the use of your personal data by Google:

https://adssettings.google.de

For more information about objection or removal options with Google, visit:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Matomo

1. Scope of the processing of personal data

Our website uses Matomo software (www.matomo.org), a service by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The software saves a cookie (i.e., a text file) on your computer, so that your browser can be recognised later. If you access pages within our website, the following data are saved:

  • the IP address of the user, with the last two bytes removed (anonymisation)
  • the page accessed and the time of the access
  • the page, from which our user reached our website (referrer)
  • the browser, browser plug-ins, operating system and screen resolution employed by the user
  • the time the user spent on the website
  • other pages that were accessed from the page in question

The data collected by Matomo are saved on our own server. We do not transfer these data to any third parties.

For more information about the processing of personal data by Matomo, also visit: https://matomo.org/privacy-policy

2. Purpose of data processing

The purpose of processing the personal data is to directly reach a target group that has already expressed its initial interest by visiting the website. We need the data to analyse the browsing behaviour of the user, and to obtain information about the use of individual components of the website. This makes it possible for us to continuously optimise the website and its user-friendliness. In the contest of this purpose, our legitimate interest is based on Article 6 Paragraph 1 Item f of GDPR. By anonymising the IP address, we take the interest of the user in the protection of their personal data into account. We never use these data to personally identify the users of our website, or to compile them with any other data.

3. Legal grounds for the processing of personal data

The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.

4. Storage duration

Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law. Advertising data are anonymised in server protocols, in that Matomo deletes parts of the IP address and cookie information after 12 months, based on its own rules.

5. Option to object and remove

You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.

You can prevent the collection and processing of your personal data by Matomo, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.

You can also click to save an opt-out cookie that is valid for two years. If you do so, Matomo will no longer register your visits. Be aware though that this opt-out cookie is deleted whenever you delete all of your cookies.

For more information about objection or removal options with Matomo, visit: https://matomo.org/privacy-policy/

Use of Google Maps

1. Scope of the processing of personal data

We use the Google Maps online map service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its EU representative, Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (‘Google’). We use the Google Maps plug-in for visual representations of geographic data and for the ability to embed them in our website. Whenever you use Google Maps via our website, information about your use of our website, your IP address and the addresses entered as part of using the route planner function are transferred to and saved by a Google server.

For more information about the processing of personal data by Google, visit:

https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

The use of the Google Maps plug-in is intended to improve user-friendliness and to achieve the desired appearance of our website.

3. Legal grounds for the processing of personal data

The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.

4. Storage duration

Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law.

5. Option to object and remove

You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.

You can prevent the collection and processing of your personal data by Google, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.

Click the following link to deactivate the use of your personal data by Google:

https://adssettings.google.de

For more information about objection or removal options with Google, visit:

https://policies.google.com/privacy?gl=DE&hl=de

Use of Contact Form 7

1. Scope of the processing of personal data

We use WordPress Plugin Contact Form 7 by RockLobster LLC, Sakai 810-0001 Fukuoka Prefecture Chuo-ku Tenjin 1-chome 8-1, Fukuoka City Hall, Japan (‘RockLobster’) to manage contact forms within our online presence. The form data you enter are sent via e-mail. This may involve the saving and analysis of personal data, primarily concerning the activity of the user (especially the pages that were visited and the elements that were clicked on), as well as device and browser information (specifically, the IP address and the operating system). As part of this process, data may be sent to the server of RockLobster in Japan. There is an EU adequate protection decision concerning Japan. You can find it here:

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076:TOC

For more information about the processing of personal data by Contact Form 7, visit:

Click on the button to load the content from contactform7.com.

Load content

2. Purpose of data processing

Our use of Contact Form 7 is intended to improve the user-friendliness of our online presence. We use this plug-in to facilitate the creation, embedding and correct visualisation of contact forms.

3. Legal grounds for the processing of personal data

The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.

4. Storage duration

Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law (e.g., for tax and accounting purposes).

5. Option to object and remove

You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.
You can prevent the collection and processing of your personal data by Contact Form 7, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.

For more information about objection or removal options with Contact Form 7, visit:

Click on the button to load the content from contactform7.com.

Load content

This data protection statement was created with the support of DataGuard.

Cookie settings

You can adjust your cookie settings here.