Privacy Policy
Version March 2022
Contents
- Name and address of the data controller
- Contact details of the data protection officer
- General provisions concerning data processing
- Rights of the data subject
- Delivery of the website and preparation of log files
- Use of cookies
- E-mail contact
- Contact form
- Application via e-mail and application form
- Company website and social media accounts
- Use of company accounts in professional networks
- Hosting
- Plug-ins used
1. Name and address of the data controller
The data controller, as defined by the General Data Protection Regulation (GDPR) and other regulations governing data protection, is:
HR factory GmbH
Konrad-Zuse-Platz 9
81829 Munich
Germany
+49 89 9213106-10
info@hrfactory.com
www.hrfactory.com
2. Contact details of the data protection officer
The data protection officer of the data controller is:
DataCo GmbH
Dachauer Straße 65
80335 Munich
Germany
+49 89 7400 45840
3. General provisions concerning data processing
1. Scope of the processing of personal data
We generally only process the personal data of our users if this is necessary for the provision of a functional website, as well as our content and services. The processing of the personal data of our users normally only takes place with the consent of the user. There are exceptions to this, in cases when obtaining consent in advance is impossible for objective reasons, or the processing of data is required by laws and regulations.
2. Legal grounds for the processing of personal data
The legal grounds for our processing of personal data based on the data subject’s consent is Article 6 Paragraph 1 Item (a) of the EU General Data Protection Regulation (GDPR).
The legal grounds for the processing of personal data that is necessary for the fulfilment of a contract, in which the data subject is a contracting party, is Article 6 Paragraph 1 Item (b) of GDPR. This also applies to the processing of personal data that is necessary for fulfilling pre-contractual obligations.
The legal grounds for processing personal data if it is required to fulfil a legal obligation that our company is subject to is Article 6 Paragraph 1 Item (c) of GDPR.
If the vital interests of the data subject or other natural individual require the processing of personal data, Article 6 Paragraph 1 Item (d) of GDPR applies.
If the processing is necessary for the pursuit of legitimate interests of our company or a third party, and these interests are not overridden by the interests, fundamental rights and freedoms of the data subject, Article 6 Paragraph 1 Item (f) of GDPR applies as the legal grounds for processing.
3. Erasure of data and period of storage
The personal data of the data subject are erased or blocked as soon as the purpose of saving these data no longer applies. The storage of the data may continue beyond this if such storage is required by European or national legislators in EU regulations, laws or other regulatory documents that the data controller is subject to. The data are also blocked or erased if a storage period specified in such laws or regulations expires, unless storing of the data is required for concluding or fulfilling a contract.
4. Rights of the data subject
Whenever we process your personal data, you are the data subject, as defined by GDPR, and you have the following rights with respect to the data controller:
1. Right to access
You may require the data controller to confirm whether any personal data that concern you are processed by the data controller.
If such processing does take place, you may require the data controller to provide the following information:
- purposes for the processing of the personal data;
- categories of the personal data that are being processed;
- recipients and the categories of the recipients to which the personal data concerning you were, or still are disclosed;
- planned duration of the storage of the personal data concerning you or, if no specific details pertaining to the duration are available, the criteria for determining the duration of such storage;
- existence of a right to rectify or erase your personal data, a right to restrict the processing of the data by the data controller, or a right to object to such processing;
- existence of a right to submit a complaint to a supervisory authority;
- all information available about the origin of the data if the personal data were not obtained from the data subject;
- existence of automatic decision-making, including profiling, as per Article 22 Paragraphs 1 and 4 of GDPR, and at least in these cases, meaningful information about the logic involved, and the significance and the intended consequences of such processing for the data subject.
You have the right to obtain information if your personal data are transferred to a third country or an international organisation. In such a case, you may require us to provide you with information of appropriate safeguards (as per Article 46 of GDPR) used as part of the transfer of the data.
2. Right to rectification
You have the right to the rectification and/or completion of data by the data controller if your personal data processed are inaccurate or incomplete. The data controller must immediately carry the rectification out.
3. Right to restriction of processing
You may demand the restriction of the processing of your personal data under the following conditions:
- if you contest the accuracy of your personal data, for a period that makes it possible for the data controller to verify the accuracy of the personal data;
- if the processing is unlawful, and you oppose the erasure of the personal data, and instead request that the use of the personal data be restricted;
- the data controller no longer needs the personal data for the purposes of the processing, but you need the data for the establishment, exercise or defence of legal claims, or
- if you have submitted an objection to processing in accordance with Article 21 Paragraph 1 of GDPR, and it has not yet been verified if the data controller’s legitimate grounds override yours.
If the processing of your personal data has been restricted, these data (with the exception of storage) may only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural individual or legal entity, or for reasons of important public interest of the European Union or a member state.
If a restriction of processing put in place subject to the above conditions is lifted, you will be notified of this by the data controller prior to the lifting of the restriction.
4. Right to erasure
a) Duty to delete
You may require the data controller to immediately erase your personal data, and the data controller must erase these personal data without undue delay whenever one of the following grounds applies:
- Your personal data are no longer necessary for the purposes, for which they were collected or otherwise processed.
- You revoke your consent to the processing of your personal data as per Article 6 Paragraph 1 Item (a) or Article 9 Paragraph 2 Item (a) of GDPR, and there is no other legal grounds for processing.
- You object to the processing in accordance with Article 21 Paragraph 1 of GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21 Paragraph 2 of GDPR.
- Your personal data have been processed unlawfully.
- The erasure of your personal data is due to a legal obligation, which the data controller is subject to, in accordance with EU or member state law.
- Your personal data were collected in relation to the offer of information society services as per Article 8 Paragraph 1 of GDPR.
b) Notification of third parties
If the data controller makes your personal data public, and must erase the personal data subject to Article 17 Paragraph 1 of GDPR, the data controller, taking account of the technology available and the cost of implementation, takes reasonable measures, including those of a technical nature, to inform the data controllers processing the personal data that you, as the data subject, have requested that these data controllers erase any links to, or copies, or reproductions of these personal data.
c) Exceptions
The right to erasure does not apply if the processing is necessary
- for the exercise of the right to freedom of information and opinion;
- for compliance with a legal obligation which requires processing in accordance with European Union or member state law that the data controller is subject to, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
- for reasons of public interest in the area of public health, as per Article 9 Paragraph 2 items (h) and (i), and Article 9 Paragraph 3 of GDPR;
- for purposes that are in the public interest, scientific or historical research purposes or statistical purposes, as per Article 89 Paragraph 1 of GDPR, if the right stated in Section (a) precludes or significantly impedes the achievement of the goals of this processing, or
- for the establishment, exercise or defence of legal claims.
Right to notification
If you exercise your right to rectification, erasure or restriction of processing in relation to the data controller, then the data controller is required to notify all parties, to which your personal data were disclosed, of this rectification, erasure of the data or the restriction of their processing, unless this is impossible, or is associated with disproportionate costs.
You have the right to be informed of such parties by the data controller.
6. Right to data portability
You have the right to receive your personal data that you provided to the data controller, in a structured, commonly used and machine-readable format. Furthermore, you are entitled to transfer these data to another data controller without any impediment by the data controller, to which the personal data were provided, given that
- the processing is based on consent, as per Article 6 Paragraph 1 Item (a) or Article 9 Paragraph 2 Item (a) of GDPR, or on a contract as per Article 6 Paragraph 1 Item (b) of GDPR, and
- the processing takes place using automated means.
In exercising this right, you may have your personal data transferred directly from one data controller to another, if technically feasible. The freedoms and right of third parties must not be impinged by this.
The right to data portability does not apply to any processing of personal data that is necessary for a task carried out in the public interest or in the exercise of official authority assigned to the data controller.
7. Right to object
You have the right to object, at any time and based on your specific situation, to the processing of your personal data based on Article 6 Paragraph 1 Item (e) or (f) of GDPR; this also applies to any profiling based on these provisions.
The data controller no longer processes your personal data, unless the data controller can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedom, or unless the processing is used for the establishment, exercise or defence of legal claims.
If your personal data are processed for direct marketing, you may object at any time to the processing of your personal data for such marketing, which includes any profiling to the extent that it is related to such direct marketing.
If you object to processing for the purpose of direct marketing, your personal data will no longer be processed for that purpose.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object through automated means using technical specifications.
8. Right to revoke data protection-related consent
You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.
9. Automated individual decision-making, including profiling
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which results in legal or similar significant effects for you. This does not apply if the decision
- is necessary for concluding or fulfilling a contract between you and the data controller,
- is authorised by European Union or member state law that the data controller is subject to, whereby such law specifies appropriate measures to safeguard your rights, freedoms and legitimate interests, or
- is based on your express consent.
However, these decisions may not be based on special categories of personal data, as defined in Article 9 Paragraph 1 of GDPR, provided that Article 9 Paragraph 2 Item (a) or (b) of GDPR does not apply, and appropriate measures to protect your rights, freedoms and legitimate interests have been taken.
For the cases specified in Sections 1 and 3, the data controller takes appropriate measures to protect your rights, freedoms and legitimate interests, which includes the right to demand intervention by a person on behalf of the data controller, to explain own position, and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or location of the alleged infringement if you believe that the processing of your personal data infringes GDPR.
The supervisory authority, with which the complaint has been lodged, informs the complainant of the progress and the outcome of the complaint including the possibility of a judicial remedy as per Article 78 of GDPR.
5. Delivery of the website and preparation of log files
1. Description and scope of data processing
Every time our website is opened, our system automatically collects data and information from the computer system of the opening computer.
The following data are collected in doing so:
- Information about browser type and version used
- User’s operating system
- User’s internet service provider
- User’s IP address
- Access date and time
- Web pages that the user’s system requested from our website
These data are saved in the log files of our system. These data are not stored together with any other personal data of the user.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the web page to the user’s computer. This requires storing the IP address of the user for the duration of the session.
The saving of the data in log files takes place to ensure the functional capacity of the website. We also use the data to optimise the website and to ensure the security of our information systems. No analysis of the data for marketing purposes takes place in this context.
In the contest of this purpose, too, our legitimate interest in the processing of data is based on Article 6 Paragraph 1 Item (f) of GDPR.
3. Legal grounds for the processing of data
The legal grounds for the temporary storage of the data and the log files is Article 6 Paragraph 1 Item (f) of GDPR.
4. Storage duration
The data are erased as soon as they are no longer needed for achieving the purpose, for which they were collected. In the case of collecting the data for the delivery of the webpage, this takes place as soon as the session in question is over.
In the case of saving the data in the log files, this takes place within no more than seven days. The data may be stored for an extended period. In this case, the IP addresses of the users are erased or anonymised, so that they cannot any longer be matched to the client opening the page.
5. Ability to object and remove
The collection of data for the delivery of the webpage and the saving of the data in log files is critical for the operation of the website. The user can thus not object to this.
6. Use of cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are saved in/by the web browser on the computer system of the user. If a user opens a website, a cookie file can be saved in the operating system of the user. This cookie contains a certain series of characters that enables clear identification of the browser whenever the website is opened again.
We use cookies to make our website more user-friendly. Certain elements of our website require that the browser, in which the website is opened, can be identified during page transitions.
The following data are saved and transmitted within the cookies:
- Language settings
Our website also uses cookies to make it possible to analyse the browsing behaviour of the user.
The user’s data collected in this manner are pseudonymised through technical means. This means that the data can no longer be matched to the user that opened the website. The data are not saved together with any other personal data of the user.
Other cookies are used for Matomo, to improve the user experience of the visitors of our website.
2. Purpose of data processing
The purpose of the use of technically necessary cookies is to facilitate the use of the website by the user. We do not provide certain functions of our website if cookies are not used. These functions require that the browser can be identified after a page transition.
We need cookies for the following purposes:
- Saving of language settings
The user data collected via technically necessary cookies are not used to create user profiles.
Analytical cookies are used for the purpose of improving the quality of our website and our content. Through analytical cookies, we find out how our website is used, making it possible for us to constantly improve our content.
3. Legal grounds for the processing of data
The legal grounds for the processing of personal data in the context of using cookies is Article 6 Paragraph 1 Item (a) of GDPR.
The legal grounds for the processing of personal data in the context of using technically required cookies is Article 6 Paragraph 1 Item (f) of GDPR.
4. Duration of storage, ability to object and remove
Cookies are saved on the computer of the user, and transferred from it to our website. This is why you, as the user, have full control over the use of cookies. You can deactivate or limit the transmission of cookies by changing your browser settings. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If you deactivate the cookies used by our website, you will possible no longer be able to fully use all of its functions.
If you use the Safari browser (version 12.1 and over), cookies are deleted automatically after seven days. This also includes opt-out cookies that are set to prevent tracking measures.
7. E-Mail contact
1. Description and scope of data processing
Contact is possible using the e-mail address provided on our website. In this case, we save the user’s personal data provided with the e-mail message.
The data are only used to process the conversation.
2. Purpose of data processing
If you contact us via e-mail, we also have the necessary legitimate interest in processing your data.
3. Legal grounds for the processing of data
The legal grounds for the processing of the data are the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.
The legal grounds for the processing the data that are transmitted as part of sending an e-mail message are Article 6 Paragraph 1 Item (f) of GDPR. If contact via e-mail serves the purpose of concluding a contract, additional legal grounds for the processing of the data apply, as per Article 6 Paragraph 1 Item (b) of GDPR.
4. Storage duration
The data are erased as soon as they are no longer needed for achieving the purpose, for which they were collected. For personal data sent via e-mail, this takes place as soon as the conversation with the user is over. The conversation ends once it is understood based on the given circumstances that the matter at hand has been definitively resolved.
The personal data collected as part of the sending procedure are erased within no more than seven days.
5. Ability to object and remove
The user can always object to revoking their consent to the processing of their personal data. If the user contacts us via e-mail, they can object to the saving of their personal data at any time. In such a case, the conversation may no longer continue.
You can revoke your consent at any time by e-mailing us at Datenschutz@hrfactory.com.
All personal data saved as part of your contact are deleted in such a case.
8. Contact form
1. Description and scope of data processing
Our website contains a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.
The following data are saved as soon as you send the message:
- Title
- Name
- Company
- E-mail address
- Phone number
- Content of the message
- Data, how you became aware of HR factory
- Contact date and time
The data will be used exclusively for the processing of the conversation.
2. Purpose of data processing
The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
Any other personal data processed during the sending procedure are intended to prevent the misuse of the contact form, and to ensure the security of our information syThe other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
3. Legal grounds for the processing of data
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 p. 1 lit. f DSGVO. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DSGVO.
4. Storage duration
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Ability to object
If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
9. Application via application form
1. Scope of the processing of personal data
Our website has an application form that can be used for submitting electronic applications. If an applicant does use this option, the data entered in the input fields are transmitted to us and saved. These data are:
- Title
- Name
- Name
- Address
- Phone/mobile phone number
- E-mail address
- Expected salary
- Information about education and training
- Language skills
- CV
- Certificates
For the processing of your data, we request your consent as part of the sending procedure, referring you to this data protection statement.
Once you send your application, you will receive confirmation that we received your application documents via e-mail.
We do not transfer your data to third parties. The data are only used to process your application.
2. Purpose of data processing
We only use the personal data included in the application form to process your application. If you contact us via e-mail, we also have the necessary legitimate interest in processing your data.
Any other personal data processed during the sending procedure are intended to prevent the misuse of the application form, and to ensure the security of our information systems.
The information included in your application and CV is saved in a database for HR recruiting Software (HCM4all Clever Hunting), and is only used during the recruitment procedure and with the goal of recruitment via HR factory, and if necessary, transmitted to the client of HR factory.
3. Legal grounds for the processing of data
The legal grounds for the processing of your data are the initiation of the contract that takes place at the request of the data subject, as per Article 6 Paragraph 1 Item (b), Article 1 Paragraph 1 of GDPR, and Article 26 Paragraph 1 Section 1 of the German Federal Data Protection Act (BDSG).
4. Storage duration
Once the application procedure ends, the data are stored for up to six more months. We will delete your data within this period of six months. If there are applicable legal obligations, we store the data subject to the applicable regulations. If you accept your inclusion in the talent pool, we will keep your CV and other important information that you provided us with for two years.
The personal data collected as part of the sending procedure are erased within no more than seven days.
5. Ability to object and remove
The applicant can always object to the processing of their personal data. If the applicant contacts us via e-mail, they can object to the saving of their personal data at any time. In such a case, the application may no longer be considered.
You can revoke your consent at any time by e-mailing us at datenschutz@hrfactory.com.
All personal data saved as part of your electronic application are deleted in such a case.
10. Company website and social media accounts
Use of our company’s social media accounts
Instagram:
Instagram, Part of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland
We provide information on our company website, and make communication possible for Instagram users. If you do anything on the Instagram account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company Instagram, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.
The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.
Thus, publications posted via our company account can contain the following:
- Information about products
- Information about services
- Contests
- Advertising
- Contact with client
Every user is free to publish their personal data through activities.
The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.
The data generated via our company account are not stored within our own systems.
You can object to the processing of your personal data that we perform as part of our company account on Instagram, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by Instagram, and your ability to object to it, here:
Instagram: https://help.instagram.com/519522125107875
LinkedIn:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
We provide information on our company website, and make communication possible for LinkedIn users. If you do anything on the LinkedIn account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company Instagram, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.
The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.
Thus, publications posted via our company account can contain the following:
- Information about products
- Information about services
- Contests
- Advertising
- Contact with client
Every user is free to publish their personal data through activities.
The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.
The data generated via our company account are not stored within our own systems.
You can object to the processing of your personal data that we perform as part of our company account on LinkedIn, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by LinkedIn, and your ability to object to it, here:
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Twitter:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
We provide information on our company website, and make communication possible for Twitter users. If you do anything on the Twitter account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company Twitter, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.
The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.
Thus, publications posted via our company account can contain the following:
- Information about products
- Information about services
- Contests
- Advertising
- Contact with client
Every user is free to publish their personal data through activities.
The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.
The data generated via our company account are not stored within our own systems.
You can object to the processing of your personal data that we perform as part of our company account on Twitter, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by Twitter, and your ability to object to it, here:
Twitter: https://twitter.com/de/privacy
Xing:
New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
We provide information on our company website, and make communication possible for Xing users. If you do anything on the Xing account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company YouTube, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.
The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties.
Thus, publications posted via our company account can contain the following:
- Information about products
- Information about services
- Contests
- Advertising
- Contact with client
Every user is free to publish their personal data through activities.
The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.
The data generated via our company account are not stored within our own systems.
You can object to the processing of your personal data that we perform as part of our company account on Xing, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by Xing, and your ability to object to it, here:
Xing: https://privacy.xing.com/de
YouTube:
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
We provide information on our company website, and make communication possible for YouTube users. If you do anything on the YouTube account of our company (e.g., comments, posts, likes), this can result in you disclosing your personal data (e.g., your real name, or the picture in your user profile). Because we normally, or mostly, have no influence on how your personal data are processed by the company YouTube, which is jointly responsible for the company account of HR factory GmbH, we cannot provide you with reliable information as to the purpose and scope of the processing of your data.
The accounts of our company on social media are used for communicating and sharing information with (potential) clients. In particular, we use the company account to contact and provide information to third parties. Thus, publications posted via our company account can contain the following:
- Information about products
- Information about services
- Contests
- Advertising
- Contact with client
Every user is free to publish their personal data through activities.
The legal grounds for the processing of personal data are Article 6 Paragraph 1 Item (a) of GDPR.
The data generated via our company account are not stored within our own systems.
You can object to the processing of your personal data that we perform as part of our company account on YouTube, and exercise the rights you have at any time, as specified in Section IV of this data protection statement. To do this, send an e-mail message to Datenschutz@hrfactory.com (in no particular form). \n You can find more information about the processing of your personal data by YouTube, and your ability to object to it, here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=de
11. Hosting
The website is hosted on the servers of a service provider that we contracted.
Our service provider is:
Raidboxes
The servers automatically collect and save the information that your browser automatically sends when you visit the website in server log files. The information thus saved includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Server query date and time
- IP address
These data are never collated with any other data sources. The collection of these data takes place on the basis of Article 6 Paragraph 1 Item (f) of GDPR. The operator of the website has a legitimate interest in the technically malfunction-free delivery and optimisation of its website, and this requires producing server log files.
The geographic location of the server is in Germany.
12. Plug-ins used
We use plug-ins for various purposes. The plug-ins we used are listed below:
Use of YouTube
1. Scope of the processing of personal data
We use the YouTube plug-in operated by Google, at YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented in the EU by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). We use the YouTube plug-in to embed YouTube videos in our website. Whenever you visit our website, your browser connects to the servers of YouTube. This may involve the saving and analysis of personal data, primarily concerning the activity of the user (especially the pages that were visited and the elements that were clicked on), as well as device and browser information (specifically, the IP address and the operating system).
We have no influence over the content of the plug-in. If you are signed in to your YouTube account during your visit, YouTube can associate your visit of our website with that account. Interaction with this plug-in results in this information being transmitted directly to YouTube, and saved there.
For more information about the processing of personal data by Google, visit:
https://policies.google.com/privacy?gl=DE&hl=de
2. Purpose of data processing
The use of the YouTube plug-in is intended to improve the user-friendliness and to achieve the desired appearance of our website.
3. Legal grounds for the processing of personal data
The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.
4. Storage duration
Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law (e.g., for tax and accounting purposes).
5. Option to object and remove
You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.
You can prevent the collection and processing of your personal data by Google, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.
Click the following link to deactivate the use of your personal data by Google:
For more information about objection or removal options with Google, visit:
https://policies.google.com/privacy?gl=DE&hl=de
Use of Matomo
1. Scope of the processing of personal data
Our website uses Matomo software (www.matomo.org), a service by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The software saves a cookie (i.e., a text file) on your computer, so that your browser can be recognised later. If you access pages within our website, the following data are saved:
- the IP address of the user, with the last two bytes removed (anonymisation)
- the page accessed and the time of the access
- the page, from which our user reached our website (referrer)
- the browser, browser plug-ins, operating system and screen resolution employed by the user
- the time the user spent on the website
- other pages that were accessed from the page in question
The data collected by Matomo are saved on our own server. We do not transfer these data to any third parties.
For more information about the processing of personal data by Matomo, also visit: https://matomo.org/privacy-policy
2. Purpose of data processing
The purpose of processing the personal data is to directly reach a target group that has already expressed its initial interest by visiting the website. We need the data to analyse the browsing behaviour of the user, and to obtain information about the use of individual components of the website. This makes it possible for us to continuously optimise the website and its user-friendliness. In the contest of this purpose, our legitimate interest is based on Article 6 Paragraph 1 Item f of GDPR. By anonymising the IP address, we take the interest of the user in the protection of their personal data into account. We never use these data to personally identify the users of our website, or to compile them with any other data.
3. Legal grounds for the processing of personal data
The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.
4. Storage duration
Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law. Advertising data are anonymised in server protocols, in that Matomo deletes parts of the IP address and cookie information after 12 months, based on its own rules.
5. Option to object and remove
You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.
You can prevent the collection and processing of your personal data by Matomo, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.
You can also click to save an opt-out cookie that is valid for two years. If you do so, Matomo will no longer register your visits. Be aware though that this opt-out cookie is deleted whenever you delete all of your cookies.
For more information about objection or removal options with Matomo, visit: https://matomo.org/privacy-policy/
Use of Google Maps
1. Scope of the processing of personal data
We use the Google Maps online map service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its EU representative, Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (‘Google’). We use the Google Maps plug-in for visual representations of geographic data and for the ability to embed them in our website. Whenever you use Google Maps via our website, information about your use of our website, your IP address and the addresses entered as part of using the route planner function are transferred to and saved by a Google server.
For more information about the processing of personal data by Google, visit:
https://policies.google.com/privacy?gl=DE&hl=de
2. Purpose of data processing
The use of the Google Maps plug-in is intended to improve user-friendliness and to achieve the desired appearance of our website.
3. Legal grounds for the processing of personal data
The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.
4. Storage duration
Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law.
5. Option to object and remove
You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.
You can prevent the collection and processing of your personal data by Google, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.
Click the following link to deactivate the use of your personal data by Google:
For more information about objection or removal options with Google, visit:
https://policies.google.com/privacy?gl=DE&hl=de
Use of Contact Form 7
1. Scope of the processing of personal data
We use WordPress Plugin Contact Form 7 by RockLobster LLC, Sakai 810-0001 Fukuoka Prefecture Chuo-ku Tenjin 1-chome 8-1, Fukuoka City Hall, Japan (‘RockLobster’) to manage contact forms within our online presence. The form data you enter are sent via e-mail. This may involve the saving and analysis of personal data, primarily concerning the activity of the user (especially the pages that were visited and the elements that were clicked on), as well as device and browser information (specifically, the IP address and the operating system). As part of this process, data may be sent to the server of RockLobster in Japan. There is an EU adequate protection decision concerning Japan. You can find it here:
https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076:TOC
For more information about the processing of personal data by Contact Form 7, visit:
2. Purpose of data processing
Our use of Contact Form 7 is intended to improve the user-friendliness of our online presence. We use this plug-in to facilitate the creation, embedding and correct visualisation of contact forms.
3. Legal grounds for the processing of personal data
The legal grounds for processing the user’s personal data is essentially the user’s consent, as per Article 6 Paragraph 1 Item (a) of GDPR.
4. Storage duration
Your personal data are stored for as long as they are necessary to achieve the goals described in this data protection statement, or for as long as it is required by law (e.g., for tax and accounting purposes).
5. Option to object and remove
You have the right to revoke your consent pertaining to the protection of your data at any time. Revocation of consent does not affect the legality of consent-based processing prior to the revocation.
You can prevent the collection and processing of your personal data by Contact Form 7, by prohibiting the saving of third-party cookies on your computer, by using the ‘Do Not Track’ function in a browser that has one, by deactivating the running of scripts in your browser, or by installing a script blocker, such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com), in your browser.
For more information about objection or removal options with Contact Form 7, visit:
This data protection statement was created with the support of DataGuard.
Cookie settings
You can adjust your cookie settings here.