1. Information on the collection of personal data
(1) This privacy notice provides information on the collection of personal data when you visit our website. Personal data comprises all information that can be used to personally identify you, e.g. name, address, email addresses, user behaviour.
(2) The data controller for this website pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is Studitemps GmbH, Im Mediapark 4a, 50670, Cologne, represented by its Managing Director Clemens Weitz.
You can contact our data protection officer at email@example.com or by writing to our postal address with the addition of ‘c/o Data Protection Officer’.
(3) When you contact us by email or using a contact form, we will store the data you disclose (your email address, name and phone number) in order to answer your query as per Art. 6 (1) lit. f GDPR. Data collected for this purpose shall be erased as soon as storage is no longer required, or we shall restrict the processing thereof in the case of statutory retention obligations.
(4) If we commission third-party services for the provision of individual features on our website or would like to use your data for advertising purposes, we shall notify you in advance and obtain your consent. In this case, we would like to point out that you will still be able to use our services as usual even if you do not consent to the use of your data for other purposes. We only process your data for the purpose it was collected with the determined criteria, in particular purpose and retention period. We would be happy to provide you with information on your rights in this regard at any time.
2. Your rights
(1) You are entitled to the following rights regarding your personal data stored by us;
— Right to information;
— Right to rectification or erasure;
— Right to restrict data processing;
— Right to object to processing;
— Right to data portability.
(2) You also reserve the right to lodge a complaint with a data protection supervisory authority in relation to processing of your personal data carried out by us.
3. Collection of personal data when you visit our website
(1) In the case of purely informational uses of our website, i.e. when you do not register or disclose information to us using any other method, we shall only collect the personal data that is transmitted to our server by your browser. If you would like to view our website, we shall collect the following data, which is technically required to display our website and ensure the stability and integrity of our website as per Art. 6 (1) lit. f GDPR:
— IP address
— Date and time of the visit
— Time difference to Greenwich Mean Time (GMT)
— Content of the request (specific pages)
— Access status/HTTP status code
— Data volume transmitted per visit
— Website from which the request originated
— Operating system and the corresponding user interface
— Language and version of the browser software
We will also collect the following data when you visit out internal job portal (see below):
— Randomly generated code number for the cookie or session
(2) In addition to the data stipulated above, cookies will also be saved on your device when you visit our website. Cookies are small text files that are allocated to your browser and saved on your hard drive, which enables the website that sets the cookie (us in this case) to receive certain information. Cookies are not able to execute programmes or transfer viruses to your computer. Their purpose is to make the website as user-friendly and effective as possible.
a) This website uses the following types of cookies, the scope and functioning of which shall be explained below: Information to be supplied when data is collected from the data subject
– Transient cookies (see b)
– Persistent cookies (see c)
b) Transient cookies are automatically erased when you close your browser. They include session cookies. These cookies store a session ID, which is used to assign various requests made during an individual session to your browser.
This enables the future recognition of your device when you return to the website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically erased after a defined period, which varies from cookie to cookie. You can erase cookies in the security settings of your browser at any time.
d) You can configure your browser settings to your desired settings and block third-party or all cookies, for example. We would like to note that objecting to cookies may prevent the proper functioning of certain features on this website.
4. Individual tools we use on our website
We use the following tools on our website:
(1) Facebook Pixel
a) We use Facebook Pixel provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
b) Facebook Pixel enables Facebook to recognise you as a user to display ads. This allows us to display ads on the devices used by visitors to our website. It also allows us to analyse the success of the corresponding ads by counting the number of ad clicks (conversion tracking).
c) This processing takes place on the basis of the Facebook Data Policy.
e) The use of Facebook Pixel on this website takes place on the basis of your consent as per Art. 6 (1) lit. a GDPR.
(2) Google Analytics, Ads and Tag Manager
a) This website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google Analytics is linked to Google Ads and Google Tag Manager. The information generated by the cookie about your use of this website will generally be transmitted to a Google server in the USA and stored there. If IP anonymisation is activated, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address sent to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator.
b) The IP address transmitted by your browser in relation to Google Analytics is not merged with other data from Google.
d) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are processed in truncated form, and it is consequently not possible to establish any links to you personally. Namely, if the data you disclose features any personal information, it will not be possible to draw any personal links to you and the personal data will be instantly erased.
e) We use Google Analytics, Google Ads and Tag Manager to analyse and regularly improve the use of our website. The obtained statistics allow us to improve our services and make them more tailored to your needs as a user.
g) We use Google Analytics on the basis of your consent as per Art. 6 (1) lit. a GDPR.
a) We use the service Leadfeeder, provided by Liidio Oy, Mikonkatu 17 C, 00100 Helsinki, Finland in connection with Google Analytics on our website. Leadfeeder accesses the list of IP addresses of website users compiled by Google Analytics. This list is then compared to the list of IP addresses with information on companies with the same IP addresses that can be found online. Due to the previous truncation of website users’ IP addresses from the use of Google Analytics, it is consequently not possible to establish any personal links to the website user. However, it may be possible to establish the user’s identity by browsing the linked company information.
b) We use Leadfeeder on the basis of your consent as per Art. 6 (1) lit. a GDPR.
(4) LinkedIn Conversion Tracking
a) We use LinkedIn Conversion Tracking on our website. This technology provided by the LinkedIn Corporation (1000 West Maude Avenue, Sunnyvale CA 94085, USA) provides us with anonymous and pooled reports on the performance of our ads. To this end, the LinkedIn Insight Tag is integrated in job posts using a pixel. When you visit the respective page, a connection is established to the LinkedIn service which counts the number of visitors or individuals who end the application process. In addition, it also enables LinkedIn to display relevant ads tailored to your interests.
b) You can find more information on data protection on LinkedIn here.
c) As a rule – whether you are a registered LinkedIn member or not – you can object to the analysis of your user behaviour by LinkedIn and ads containing interest-based recommendations (opt-out). In order to do so, click on ‘Opt-out on LinkedIn’ (for LinkedIn members) or ‘Opt-out’ (for other users) at this link.
e) We use LinkedIn Conversion Tracking on the basis of your consent as per Art. 6 (1) lit. a GDPR.
b) We use Matelso on the basis of your consent as per Art. 6 (1) lit. a GDPR.
(6) Microsoft/Bing Universal Event Tracking
a) We use Bing Universal Event Tracking (UET) from Microsoft Bing Ads. This service is provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter: ‘Microsoft’). This allows us to track the activity of users on our website if they land on our website by clicking on an ad placed by Bing Ads.
b) If you land on our website by clicking on an ad placed by Bing Ads, a cookie will be stored on your device. A Bing UET Tag is integrated on our website. The tag is a code used to store certain non-personal data on your use of the website. This includes, among other information, the time spent on the website, which areas of the website you visited and which ads users clicked on to land on our website. It does not collect any information on your identity.
c) This information is transferred to a Microsoft server in the USA and stored there for a maximum of 180 days. Microsoft complies with the data protection provisions of the US Privacy Shield and is registered for the US Privacy Shield programme run by the United States Department of Commerce. In addition, we have also concluded a data processing agreement with Microsoft governing the use of Bing Ads. With this agreement, Microsoft ensures that it processes data in compliance with the GDPR and protects the rights of data subjects.
d) You can find more information on Bing analysis services on the Bing website.
e) You can find more information on data protection at Microsoft in the Microsoft Privacy Statement.
f) We use UET on the basis of your consent as per Art. 6 (1) lit. a GDPR.
a) At the start of a session, the error analysis tool Bugsnag, a service provided by Bugsnag Inc, 110 Sutter Str, San Francisco, CA 94107, USA, randomly generates a unique ID. In the event that a technical error occurs on the website, this allows us to assign the error to a particular user. This helps us analyse and evaluate errors. To this end, the following data is disclosed to Bugsnag Inc: ID and time of error.
b) We use Bugsnag on the legal basis of Art. 6 (1) lit. f GDPR.
5. Facebook Page
a) Studitemps maintains a presence on the social media network operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2, Dublin, Ireland (hereinafter: ‘Facebook’) as a joint controller as per Art. 26 GDPR. You can learn more about how the processing of data is split among the controllers on the page ‘Page Insights Controller Addendum’. We use this page to communicate with potential customers and subscribers and provide information on our products and services.
b) When you visit our Facebook page, Facebook allows Studitemps to receive information on the users and their behaviour on the page. This includes information on interactions such as clicks on the Like button, comments and other general information on the users (e.g. age and background). The information received helps Studitemps learn something about the users and their interaction with the page. You can learn more on the page ‘Facebook Page Statistics’.
d) If Studitemps receives data through your use of the Facebook page, you shall be entitled to the rights specified in this privacy notice.
You can contact Facebook directly to assert your rights against Facebook. Alternatively, Facebook will forward your request to Facebook.
6. Using the internal job portal and applications to jobs that are not subject to personnel leasing
(1) Our website features a job portal for jobs that are not subject to personnel leasing (internal job portal). As a website user, you can apply to specified job posts or send an unsolicited application.
(2) If you visit the portal, your data may be stored (see above). When data is stored in log files, user information will be erased within 7 days at the latest. Data may be stored for a longer period subject to data protection provisions. In this case, the IP addresses will be deleted or edited so they can no longer be assigned to your computer.
(3) This website uses the programme Talention Analytics to analyse page visits and visitors. The programme Talention Analytics is provided by TFI GmbH, Lise-Meitner-Straße 5-9, 42119 Wuppertal. Talention Analytics uses persistent cookies, which allows Talention to analyse how users use the website. The information stored in the cookie on your use of the website is transferred to the Talention Analytics web server and stored there. In this process, Talention Analytics anonymises the IP address of the accessing computer. The data transferred from the accessing computer's browser when using Talention Analytics is not merged with other data from the user, unless the user consents thereto. You can prevent the use of Talention Analytics by opting out of the corresponding cookies in your browser settings. You can also permanently opt out of the programme Talention Analytics by clicking on the following link opt-out. In this case, an opt-out cookie will be stored on your computer. This cookie is read when you open this website and will ensure that Talention Analytics is not executed. Furthermore, Talention Analytics will not execute any actions if Do Not Track is enabled in your browser.
(4) The following data is collected during the application process: Title (mandatory field), first name and surname (mandatory field), email address (mandatory field), phone number, applications documents (such as cover letter, CV, (mandatory field), certificates, photo) and detailed information on education and skills.
(5) If you register on the Talent Network, you grant us permission to maintain contact with you for your future career path. You will then regularly receive updates on the topic of careers, invitations and information on specialist and career events along with special job opportunities (newsletter). We collect the following data for this purpose: Title (mandatory field), first name and surname (mandatory field), email address (mandatory field), phone number, applications documents (such as cover letter, CV, (mandatory field), certificates, photo).New
6. Using the internal job portal and applications to jobs that are not subject to personnel leasing
(1) Our website features a job portal for jobs that are not subject to personnel leasing (internal job portal). As a website user, you can apply to specified job posts or send an unsolicited application. Internal vacancies and applications are processed by the inhouse jobvalley HR department at: Im Mediapark 4a, 50670 Cologne, Germany.
(2) If you visit the portal, your data may be stored (see above). When data is stored in log files, user data will be erased within 7 days at the latest. Data may be stored for a longer period subject to data protection provisions. In this case, the IP addresses will be deleted or edited so they can no longer be assigned to your computer.
(3) Prior to 15/12/2021, the programme Bewerber3 from P&I Loga was used to process applications on the inhouse career page. All data collected in relation to submitted applications was stored on an internal server. All application data and documents are automatically erased after 6 months. On request, the data can also be immediately and completely erased prior to the 6-month deadline.
Since 16/12/2021, the programme Connexys from Salesforce has been used on the inhouse career page. salesforce.com Germany GmbH is headquartered at Erika-Mann-Str. 31, 80636 Munich, Germany. Application data is stored on Salesforce servers, all application documents are erased within 6 months and application data is anonymised to ensure it cannot be assigned to any certain individual. Anonymised data is stored to quantitatively analyse application numbers and is not made publicly accessible or disclosed to third parties under any circumstances.
(4) The following data is collected during the application process: First name and surname (mandatory field), email address (mandatory field), phone number, address, desired work location, application documents (e.g. cover letter, CV (mandatory field), certificates to verify education and skills), available start date and salary expectations.
(5) If their explicit consent is granted, individual applicants may be included in our Talent Network. By granting their consent, the applicant agrees to the storage of their application data beyond the initial 6-month period and the sole use of their data to contact them in the event of a suitable vacancy.
7. Data protection for applications and during the application process (personnel leasing)
Studitemps collects and processes personal data from applicants to manage the application process as the controller. Data may be processed in the mail or electronically. Electronic processing is particularly the case if an applicant sends their corresponding application documents to the controller by email or on a web form on the website. If the controller concludes an employment contract with an applicant, the data disclosed will be stored in accordance with the pertinent statutory provisions to manage the employment relationship. If no employment contract is concluded with the controller, the application documents will be automatically erased within 4 months after the decision is announced, provided the controller does not have any other legitimate interest in the continued storage of the data as per Art. 6 (1) lit. b GDPR. Legitimate interest in this case may be, for example, the obligation to furnish proof in proceedings according to the General Act on Equal Treatment [Gleichbehandlungsgesetz - AGG]. The legal basis in this case is Art. 6 (1) lit. f GDPR.
8. General terms: Legal basis
The legal basis for processing carried out by our company for which we obtain consent for a specific purpose of processing is Art 6 (1)(a) GDPR. If the processing of personal data is required for the fulfilment of a contract to which the data subject is party, such as processing required to supply goods or render other services or performances, the basis of processing is Art. 6 (1)(b) GDPR. This also serves as the basis for processing required to carry out pre-contractual measures such as responding to enquiries regarding our products or services. Processing takes place on the legal basis of Art. 6 (1) lit. b GDPR Art. 88 GDPR and Art. 26 BDSG. Insofar as our company is subject to a legal obligation which requires us to process personal data for reasons such as fulfilling tax obligations, the basis for processing is Art. 6 (1)(c) GDPR. In rare cases, we may be required to process personal data to safeguard vital interests of the data subject or another natural person. For example, we may be required to process personal data if a visitor to our premises gets injured and his name, age, health insurance details or other vital information need to be disclosed to a doctor, hospital or other third party. The basis for this processing would be Art. 6 (1)(d) GDPR. Finally, processing may also take place on the basis of Art. 6 (1)(f) GDPR.
(1) If you provide your consent, you can subscribe to our newsletter to receive information on our latest offers. The promoted goods
and services are specified in the consent declaration.
(2) We use the double opt-in process for registering to our newsletter. Accordingly, when you register, we send an email to the provided email address that asks you to confirm that you want to receive the newsletter. If you do not confirm your registration, your data will be blocked and automatically erased after one month. We also save the IP addresses you've used and the time of registration and confirmation. The purpose behind this process is to verify your registration and clarify any potential misuse of your personal data.
(3) The only mandatory information we require to send the newsletter is your email address. The disclosure of any other data marked separately is voluntary and used to address you personally. Once we've received your confirmation, we will store your email address so we can send the newsletter. This takes place on the legal basis of Art. 6 (1) lit. a GDPR.
(4) You can withdraw your consent to receiving the newsletter at any point in time and unsubscribe. To do so, you can either click on the link in the newsletter email, send an email to firstname.lastname@example.org or contact us using the contact details in the legal notice.
(5) We would like to draw your attention to the fact that we analyse your user behaviour when we send the newsletter. The emails we send contain web beacons, or tracking pixels, consisting of single pixel image files, which are stored on our website. For the analyses, we merge the data specified in section 3 and the web beacons with your email address and an individual ID. This data is solely collected in pseudonymised form. As such, the IDs will not be linked to your other personal data, which ensures we are not able to identify you personally from this data. You can object to this tracking at any time by clicking on the separate link in every email or contacting us in another way. Your data will only be stored as long as you remain subscribed to the newsletter. Once you unsubscribe, we will solely save your data in a statistical and anonymous format.
10. Social media plugins
(1) We use the following social media plugins: Instagram, Twitter, Facebook, YouTube, LinkedIn and Xing. We use the double-click solution, i.e. when you visit our website, no personal data will initially be disclosed to the plugin provider. You can see who provides the plugin with the mark on the box above its initial letter or logo. You can communicate directly with the plugin provider using the button. The plugin provider will only be informed that you have accessed the corresponding website from our online presence if you click on the marked field and consequently activate it. Furthermore, the data specified in section 3 of this statement shall be transferred to the provider. According to the respective providers in Germany, in the case of Xing, your IP address will be anonymised immediately after collection. As a result, when you activate the plugin, personal data will be transferred from you to the respective plugin provider and stored there (in the USA for US-based providers). As the plugin provider primarily collects data through cookies, we recommend deleting all cookies before clicking on the grey box in your browser's security settings.
(2) We do not have any influence on the data collected and data processing procedures and we are not aware of the full extent of the processing, the purposes of processing or the retention periods. We also do not have any information on the erasure of data collected by the plugin provider.
(3) The plugin provider stores your collected data as part of a user profile and uses it for advertising and market research purposes, and/or the needs-based design of its website. This analysis is primarily carried out (even for users who are not logged in) to display personalised advertising and inform other users of the social network about your activity on our website. You reserve the right to object to the creation of a user profile and must contact the respective plugin provider to this end. We offer plugins to allow you to interact with the social networks and other users, enabling us to improve our content and make it more interesting for you as the user. The legal basis for the use of plugins is Art. 6 (1) lit. f GDPR.
(4) Your data will be forwarded irrespective of whether you have an account on the plugin provider's platform or are logged into your account. If you are logged into your account on the plugin provider's platform, the data we collect will instantly be assigned to your account on the plugin provider’s platform. If you click on the activated button and set a link to the page, for example, the plugin provider will also store this information in your user account and publicly share it with your contacts. We recommend regularly logging out of your social network account once you are done using it, particularly before activating the button, in order to avoid the plugin provider from linking this activity to your profile.
(5) Please refer to the respective provider’s privacy notice, as linked below, to learn more about the purpose and scope of data collection and the processing thereof by the plugin provider. The privacy notice also provides more information on your rights in this regard and how to change your browser settings to protect your privacy.
(6) Addresses for the respective plugin providers with a link to their privacy notice:
a) Google Inc. (YouTube), 1600 Amphitheater Parkway, Mountainview, California 94043, USA;
b) Twitter 795 Folsom St., Ste. 600, San Francisco, CA 94107
c) Facebook (incl. Instagram): Facebook Ireland, Limited 4, Canal Square, Dublin 2, Ireland
d. Linkedin, www.linkedin.com/legal/privacy-policy
e) Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; http://www.xing.com/privacy.
11. Integration of Google Maps
(1) We use services provided by Google Maps on this website. This enables us to display interactive maps directly on our website and facilitates easy navigation of the maps feature for our users.
(2) When you visit our website, Google is informed that you have visited the corresponding subpages on our website. Furthermore, the data specified in section 3 of this notice shall be transferred to Google. This takes place irrespective of whether you are logged in to a Google user account or whether you do not have an account with Google. If you are logged into your Google account, your data will be directly assigned to your account. If you would like to prevent Google from assigning data to your account, please log out of your account prior to clicking on the Google Maps button. Google saves your data as part of a user profile and uses it for advertising and market research purposes, and/or the needs-based design of its website. This analysis is primarily carried out (even for users who are not logged in) to provide personalised advertising and inform other users of the social network about your activity on our website. You reserve the right to object to the creation of a user profile and must contact Google to this end.
(3) Please refer to the privacy notice of the respective service provider to learn more about the purpose and scope of data collection and the processing thereof by plugin providers. This shall also provide more information on your rights in this regard and how to change your browser settings to protect your privacy: Link.