1. ABOUT US
We, Talentry GmbH, are responsible for the collection, processing and storage of your data. You can obtain our details from our legal notice at any time.
The careful handling of your personal data is of paramount importance to us. In the course of processing we comply with the statutory provisions, for example the General Data Protection Regulation (GDPR) and with the national regulations relating thereto.
This data protection policy applies to all websites of our group accessible under our domains (www.talentry.com, www.talentry.de, blog.talentry.com). Where you move to websites of other operators in the course of accessing our offering, the data protection provisions, for the content of which those operators are responsible, apply on those sites.
Since we wish to give you a comprehensive overview of the processing of personal data in our business, you will find below an overview of all our services in the course of which we collect and process personal data.
Where separate or additional conditions apply for individual services or we are asking for a consent, we shall inform you specifically in advance of the respective service (for instance for the newsletter or when you are making contact with us).
In addition, we take various security precautions to protect your personal data. This means that the transfer between your web browser and our servers for instance is always transport-encrypted; we also maintain a number of technical and also organisational measures to protect your data constantly.
2. WHY WE PROCESS YOUR DATA
You can always use our website without revealing your identity. If you register for our newsletter or wish to make contact with us, we ask for your name and other personal information. It is your decision whether you provide this (broader) data. Data that is a mandatory requirement from you in order to provide our services is designated as such.
The collection and processing of your personal data is carried out for the following purposes on the basis of the following legal grounds:
- Contract initiation under Art. 6 1. (a) and (b) GDPR
- Contract performance under Art. 6 1. (b) GDPR
- Client management under Art. 6 1. (b), (c) and (f) GDPR
- Communications and data exchange under Art. 6 1. (a), (b), (c) and (f) GDPR
- External communications and advertising under Art. 6 1. (a) and (f) GDPR
- Implementation of informed consent under Art. 6 1. (a) GDPR
- Securing the proper operation of a data processing system under Art. 6 1. (c) and (f) GDPR
- Applicant selection procedure in the course of personnel and resources administration on the basis of Art. 6 1. (a) and (b) GDPR in conjunction with S.26 new German Federal Data Protection Act
3. YOUR DATA THAT WE COLLECT AND PROCESS
We collect various categories of personal data from you. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name. Personal data includes for instance information such as your name, your address, your telephone number and your date of birth (where provided). Statistical information that cannot be connected to you directly or indirectly – such as for instance the popularity of individual web pages of our offering or the number of users of a page – are not personal data. This includes directly and indirectly collected data. In both cases data are collected only to the extent necessary; the data are processed exclusively for the purposes set out at paragraph 2. Whether you wish to pass data to us that optimise the use of our services for you but that are not necessary for that use, is your decision. Corresponding data fields are designated “voluntary”.
The directly collected data comprise:
- Email address, for instance for the purposes of the newsletter or to make contact using our contact form
- Applicant details to implement our online application procedure
- Data that you pass to us actively and consciously in the course of using our services,
- Further data that you pass to us voluntarily, for instance data fields designated “voluntary” and completed by you
In addition to this during the course of using our services data concerning you are collected indirectly:
- Technical connection data, for instance the pages of our web offering accessed, your IP address, shortened by the last three numbers, date and time of access, device used, browser configuration data.
- Data collected in the course of web page tracking and newsletter tracking
Under age persons:
Our website is not aimed at under age persons and we also do not knowingly collect personal data of under-age persons.
Where persons under the age of 16 pass personal data to us, this is only permitted where the person with parental authority has him/herself agreed or has approved the agreement of the young person. For this purpose the contact data of the person with parental authority must be provided to us under Art.8 2. GDPR in order that we may be certain of the consent or the approval of the person with parental authority. These data and the data of the under-age person are then processed in accordance with this data protection policy.
Where we ascertain that an under-age person under 16 years has sent us personal data without the agreement of the person with parental authority or his/her approval of the agreement of the under-age person, the data shall be erased immediately.
4. WHO HAS ACCESS TO YOUR DATA AND TO WHOM WE PASS YOUR DATA
Access to your personal data stored by us is restricted to our employees and to the service providers commissioned by us who need to deal with this personal data to perform their tasks.
Where third parties are given access to your data, we have obtained your permission for this or there is a legal ground for it.
We also employ service providers to provide services and to process data (inter alia for hosting, newsletter distribution, dispatch of letters or emails and the maintenance and analysis of databases, the protection of our web server or for tracking web pages). Where special provisions apply for this, we have listed these below according to the respective service for you. The service providers process the data exclusively at our direction and are under an obligation to comply with the applicable data protection provisions. All processors have been carefully selected and receive access to your data only to the extent and for the necessary time required to provide the services or to the extent to which you have agreed to the processing and use of the data.
4b) Transfer to third countries and legal basis
The servers of some of the service providers employed by us are situated in the USA and other countries outside the European Union. Undertakings in these countries are subject to a data protection law that does not generally protect personal data to the same extent as is the case in the member states of the European Union. Where your data are processed in a country which does not have data protection to the acknowledged high level of the European Union, we ensure through contractual provisions or other recognised instruments that your personal data are appropriately protected. We will advise you of this again expressly in the context of the individual services.
Where a transfer of personal data to third countries occurs, this is on the basis of the EU-US Privacy Shield decision in accordance with Art. 45 GDPR or the 2010 Decision on standard contractual clauses, in accordance with Art. 46 2. (c) GDPR in conjunction with the Decision of the EU Commission of 05.02.2010 (2010/87/EU) or on the basis of your consent in accordance with Art. 49 1. (a) GDPR.
4c) Transfer to prosecution and criminal investigation authorities
In exceptional cases we transfer personal data to prosecution and criminal investigation authorities. This occurs on the basis of relevant statutory obligations, for instance under the Criminal Procedure Code, the Tax Code, the Money Laundering Act or state police laws.
5. STORAGE PERIODS
We store personal data in accordance with statutory regulations or your consent.
To determine actual storage periods we use the following criteria:
We store the personal data until the purposes for which they were collected come to an end (for instance at termination of a contractual relationship or following final activity, where there is no continuing obligation, or where you withdraw your consent to the specific data processing).
Storage beyond this occurs only where
- there are statutory retention requirements (for instance under the Tax Code and the Commercial Code);
- the data are still needed for the establishment and exercise of legal claims or the defence of legal claims, for instance by reason of technological and forensic requirements for the defence against attacks on our web server and their prosecution;
- the erasure would be counter to the data subject’s legitimate interests;
- another exception under Art. 17 3. GDPR applies.
6. YOUR RIGHTS
You have a series of statutory rights that we wish to refer you to below. In addition, our data protection officer is of course available to you for questions concerning data collected and processed in relation to you via the contact details given below.
6a) Right to access and data portability
You have the right at any time to access to the personal data concerning you processed by us.
Where the data was processed on the basis of your consent or on the basis of a contract according to Art 6 1. (b) GDPR, you may also require under Art. 20 1. GDPR receipt of the stored personal data concerning you in a structured, commonly used and machine-readable format. At your request we shall also transmit the data directly to a recipient specified by you.
6b) Right to rectification, restriction and erasure
Further you may under Art. 16 to 18 GDPR require us to rectify, restrict (storage) or erase your personal data where the data has been inaccurately processed by us, there are grounds for restriction of further data processing or the data processing has become unlawful for other reasons or where its storage is not permitted for other legal reasons. We ask you to note that your right to erasure can be restricted owing to statutory retention periods.
6c) Right to object
Where our data processing is based exclusively on our legitimate interest under Art 6 1. (f) GDPR, you may object to this processing under Art. 21 1. GDPR. We then cease processing your data unless we can demonstrate data protection grounds for the processing that override your interests, rights and freedoms or where the processing serves the establishment, exercise or defence of a legal claim. In addition, you always have the right to object to the use of your data for the purposes of direct marketing with future effect under Art. 21 2. GDPR.
6d) Right to withdraw consent
Where you have allowed us by consent to process your personal data, you have a right under Art. 7 3. GDPR to withdraw consent with future effect.
6e) Right to complain to the regulatory authority
You are free to lodge a complaint with a regulatory authority where you think that our processing of your personal data breaches the European General Data Protection Regulation or other national and international data protection laws.
The contact details for our responsible regulatory authority are:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Telephone: +49 (0) 981 53 1300
6f) Contact details
To exercise your rights you may send us an informal communication to the following contact details. Similarly, please direct the withdrawal of your consent with details of which consent declaration you wish to withdraw to the following contact details:
Nymphenburger Str. 86
Telephone: +49 (0) 89 41615976 -0
Data protection officer
it.sec GmbH & Co. KG
Telephone: +49 (0) 731 20589 -24
7. USE OF OUR WEBSITE – PROFILING, COOKIES AND WEB TRACKING
7a) Basic information on Cookies and Opt Out options
We use so-called cookies in some areas of our website, for instance in order to identify visitors’ preferences and to be able to optimize the website correspondingly. This makes navigation easier and contributes significantly to the user-friendliness of a web page. Cookies help us also in the identification of particularly popular areas of our Internet offering. Cookies are small files that are stored on the hard drives of visitors to the site. They enable information to be held for a specific period and the identification of the visitor’s computer. We use permanent cookies to improve the user experience and individual performance mapping.
Our cookie information on our web site provides in relation to these that you agree the following declaration:
This web site uses Tracking Cookies or Tracking Software in order to be able to offer you inter alia the full scope of functions of our web site and thus a better online experience. More detailed information on the cookies and web-tracking process used by us and the consents provided by you to this can be found in our data protection statement. Technically unnecessary cookies and our tracking software are however activated only after you have provided us with your consent.
Please also remember that the erasure of all cookies will result also in opt-out cookies being erased. You would therefore have to reset these as appropriate. Cookies are also tied to a browser, i.e. they must always be set separately for each browser used by you on each device used by you. The necessary links for this can be found below in the description of the respective services.
7b) Google Analytics
This web site uses Google Analytics, a web analysis service provided by Google LLC (“Google”). Google Analytics uses so-called “Cookies”, text files that are stored on your computer and that enable analysis of your use of the website. The information generated by the cookie concerning your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will however be abbreviated by Google within the member states of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On our account Google will use this information in order to evaluate your use of the website, to compose reports on the website activities and to provide further services connected with website use and Internet use to the website operator. The IP address transmitted from your browser by Google Analytics will not be merged by Google with other data. It is possible to object to web analysis by Google Analytics by setting an opt-out cookie which instructs Google not to store or use your data for the purposes of web analysis. Please note that this solution prevents web analysis only for so long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable.
However, you can also prevent the storage of the cookies by using a corresponding setting in your browser software; we ask you to note however that in this case it is possible that not all functions of this website can be used to their full extent. You can also prevent the capture by Google of the data generated by the cookie and relating to your use of the website (incl. your IP address) and the processing of this data by Google by down-loading and installing the browser plug in at the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de.
Data recipient: Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
7c) Google Tag Manager
Google Tag Manager is a product of Google that enables us to administer website tags from applications such as e.g. Google Analytics on an interface. The Tag Manager is a cookie-less domain and does not capture personal data.
7d) DoubleClick by Google
In the event that you do not agree to this type of processing, you can prevent storage of the cookies using an appropriate setting in your browser. You can also prevent the capture by Google of the data generated by the cookie and relating to your use of the website (incl. your IP address) and the processing of this data by Google by down-loading and installing the browser plug in at this link <https://support.google.com/ads/answer/7395996?hl=de> Alternatively you can also deactivate the Doubleclick cookies on this site <http://www.google.com/ads/preferences/html/opt-out.html>.
Data recipient: Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
7e) Google Maps
Our website uses the ‘Google Maps’ service provided by Google, for instance to give you the ability to search for a retailer or do route planning.
When accessing Google Maps on this website data are forwarded to Google, for instance your current location. For this service the Google data protection provisions apply (https://policies.google.com/privacy?hl=en&gl=en), supplemented by the separate data protection provisions for Google Maps (https://www.google.com/intl/en_en/help/terms_maps.html).
Data recipient: Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Privacy-Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
7f) Youtube Video, imbedded via iFrame in the extended data protection mode
We use Youtube, a service provided by Google, to display video-content to you. Whilst using this, to protect your privacy we have activated the extended data protection mode.
On pressing the start button on the video you consent to the transmission of data to Youtube LLC:
You will find further information concerning data protection at YouTube in its data protection declaration (http://www.youtube.com/t/privacy_at_youtube).
Data recipient: Youtube LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
7g) Social Media Buttons
Our website uses Social Media buttons (Facebook, Twitter, LinkedIn, Xing, Youtube, Instagram) to enable you to interact with third parties.
These Social Media buttons are not connected as plug ins over a so-called iFrame, but set as links. By activating the Social Media buttons you are redirected directly to the site of the corresponding provider. To comply with data protection provisions and for accuracy, topicality and completeness of the information on data processing provided there the relevant provider within the meaning of Art. 4 (17) GDPR is responsible.
7h) Whois Data Ltd
For purposes of marketing, optimization products and services – the company Whois Data Ltd (https://www.whoisvisiting.com
8. SUPPLEMENTARY INFORMATION AND PROVISION FOR INDIVIDUAL SERVICES
We send you at your express request our newsletter on the topics selected by you together with information on our company. Please note that delivery can only be made once you have confirmed your requirement expressly again using our Double-Opt-In procedure.
The personal data collected during registration for the newsletter are used exclusively for mailing and the personalisation of the newsletter (for instance to address you by your name). You can at any time with effect going forward withdraw consent to the storage of personal data that you have provided to us for the mailing of the newsletter. For the purposes of withdrawal of consent each newsletter contains a corresponding link; alternatively you are welcome to contact us directly so that we can implement your withdrawal. We have given you details in the Double-Opt-In email of the consent provided to us.
Newsletter use analysis
Our newsletter contains tracking pixels. A tracking pixel is an invisible graphic in HTML emails the purpose of which is when opening the email to enable a log file record together with a record relating to the links activated from the newsletter with subsequent analysis. This enables us by means of statistical evaluation to appraise the success of our newsletter campaigns and to optimize our newsletter in order to introduce to you for instance topics and offerings better suited to your interests.
The personal data thus collected are processed by our service providers named below.
Where you do not agree to this, you can unsubscribe from the newsletter at any time using a link at the end of each newsletter.
Data recipient: The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000
Atlanta, GA 30308, USA
8b) Contact form
Data that you send to us using our contact form are processed for the purposes of communication and data exchange, thus in order to respond to you concerning your specific enquiry. These data are stored for so long as their processing for these purposes is necessary or until the expiry of any subsequent retention periods.
8c) Online application process
We offer you the option of applying to us online. The transfer of the data provided by you and of the accompanying file attachments is by transport-encrypted connection. Your electronic application data are accepted by the respective responsible personnel department and forwarded only to the specialist department for that vacancy or to the persons entrusted with handling it. All participants will handle your application documents with the requisite care and absolutely confidentially.
On completion of the applicant selection process we shall keep your application documents for 4 months and then erase them and destroy any copies where we have not entered into a contract of employment with you. If we want to include your application documents in our applicants’ pool we shall contact you about this. In the notification you can actively consent to the further storage of your documents. Your applicant account and the data stored therein remain stored independently of a specific active application for so long as you do not deactivate this, so that you have the options of applying for further vacancies with us.
Please note that applications that you send to us by email are transmitted to us unencrypted. We therefore recommend the use of the online application portal.
8d) Data processing for purposes of direct marketing
Direct mail marketing
To the extent permitted in law we also use as appropriate your name and the postal address known to us for mailing advertising for our offerings. The legal basis is Art. 6 1. (f) in conjunction with recital 47 GDPR. Our legitimate interest is the promotion of sales or demand among our existing customers. Of course you can, at any time, object to the processing of your data for marketing purposes with effect going forward. A communication in text form to the above-named contact details is sufficient. Following such we erase your data from our distribution list. We shall keep the data that account for your objection subsequently for a further 6 years in accordance with Art. 17 3. (e) GDPR. During this period, however, your personal data will be barred from further processing.
To the extent permitted in law we also use as appropriate in the case of business customers your name, company affiliation and your given telephone number, in order to inform you of our own offerings, depending on your presumed interests. The legal basis is Art. 6 1. (f) in conjunction with recital 47 GDPR, S.7 (2) no. 2 Unfair Competition Act. Our legitimate interest is the promotion of sales or demand among our existing business customers. Of course you can at any time object to processing of your data for marketing purposes with effect going forward. A communication in text form to the above-named contact details is sufficient. Following such we erase your data from our distribution list. We shall keep the data that account for your objection subsequently for a further 6 years in accordance with Art. 17 3. (e) GDPR. During this period, however, your personal data will be barred from further processing.