Data Protection Regulations
1. Data protection at a glance
General information
The following notes provide a simple overview of what happens to your personal information when you visit our website. Personal information is any information that personally identifies you. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
Data collection on our website
How do we collect your data?
On the one hand, your data is collected by you communicating it to us. This may, for example, involve data that you enter in a contact form.
Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time of page call). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure that the website is error-free. Other data can be used to analyze your user behavior.
Which data is used in the JobRouter Academy?
You can access all training content via our JobRouter Academy at https://academy.jobrouter.com/en/. We use the WebCampus e-learning solution, provided by Alphabrik GmbH, located at Gertigstraße 48, 22303 Hamburg, Germany. This also includes troubleshooting. The data will only be collected, processed and used for the aforementioned purpose.
When registering for the e-learning platform, we store your first name and surname as well as your company contact data for the correct salutation and for a possible invoice for training content that is subject to purchase, which is processed for this purpose by JobRouter AG. In addition, your e-mail address will be stored for login access and, if necessary, as a contact option for questions regarding training content.
In addition, the learning progress of all users is stored in individual training contents for the purpose of reporting authorizations for classroom training and contractually required recertification training. Your group assignments, roles, authorizations, assessments and login times are also saved. We use these data exclusively for the operation of the JobRouter Academy and do not pass them on to third parties. The data is hosted on servers accessed by us. Computer name/IP address can be stored for a short time (maximum 7 days) for error analysis.
You can cancel your account at the JobRouter Academy at any time. Either by e-mail to academy@jobrouter.com, or by message, either by mail to JobRouter AG, Besselstraße 26, D-68219 Mannheim or by telephone at +49 (0) 621/426460.
Which data is used for the JobRouter webinars?
In the context of registering for a JobRouter webinar, we only collect personal data from you via your email address. We use this data exclusively for the execution of our webinars. There is a transfer of data to third parties insofar as we use the web-based software solution Zoom from Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA for conducting our webinars. (Privacy Policy: www.zoom.us/de-de/privacy.html). Zoom Video Communications, Inc. is the responsible entity for providing this service and the associated data processing.
After the webinar is conducted, aggregated statistical data is transmitted to JobRouter AG. If you have asked a question during the webinar, we receive your inquiry for further processing after the end of the webinar. We are the responsible entity for the data stored by and through JobRouter AG in the course of this process.
With the registration for participation, you will receive further information and reminders about the event via email before and after the event.
2. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations as well as this data protection explanation.
If you use this website, various personal data will be collected. Personal data is data with which you can be personally identified. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can be subject to security gaps. A complete protection of the data against access by third parties is not possible.
Note on the responsible body
The responsible body for data processing on this website is:
JobRouter AG
Besselstraße 26
68219 Mannheim
Germany
phone: +49 (0) 621 42646-0
e-Mail: office@jobrouter.com
Responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Statutory data protection officer
We have appointed a data protection officer for our company.
DEUDAT GmbH
Herr Mario Arndt
Zehntenhofstraße 5 b
65201 Wiesbaden
phone: +49 611 950008-40
e-mail: jobrouter(at)deudat.de
www.deudat.de
Please direct inquiries that should only reach the Data Protection Officer and not the Data Protection Team to jobrouter@deudat.de
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of objection against data collection in special cases and against direct advertising (Art. 21 DSGVO)
If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f DSGVO, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which a processing is based can be found in this data protection declaration. If you file an objection, we will no longer process your personal data concerned unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defense of legal claims (objection according to Art. 21 para. 1 DSGVO).
If your personal data are processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising. If you object, your personal data will no longer be used for direct marketing purposes (objection according to Art. 21 para. 2 DSGVO).
Right of appeal to the competent supervisory authority
In the event of infringements of the DSGVO, the persons concerned have the right to appeal to a supervisory authority, in particular in the Member State of their habitual residence, workplace or place of presumed infringement. The right of appeal shall be without prejudice to other administrative or judicial remedies.
Right to data transferability
You have the right to have data, which we process on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, blocking, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address given in the Legal Disclosure page for this and other questions on the subject of personal data.
Right to limitation of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the Legal Disclosure page. The right to restriction of the processing exists in the following cases:
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the examination you have the right to demand the restriction of the processing of your personal data.
- If the processing of your personal data has taken place unlawfully, you may demand that the data processing be restricted instead of deleted.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to demand the restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21 Para. 1 DSGVO, a balance must be struck between your and our interests. As long as it is not yet clear whose interests predominate, you have the right to demand that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, these data may only be processed - apart from their storage - with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
Duration of storage
Personal data will be deleted at the end of the legal retention period if they are no longer necessary for the performance of the contract or contract initiation.
Legal basis of the processing
If you have given us your consent to process your personal data for a specific purpose, the processing is based on Art. 6 (1) a GDPR or Art. 9 (2) a GDPR, if special categories of data are processed according to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1) a GDPR. If you have consented to the storage of cookies or to the access to information on your device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we will process your data on the basis of Art. 6 (1) b GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we will process it on the basis of Art. 6 (1) c GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6 (1) f GDPR. Information about the relevant legal basis in each individual case is provided in the following paragraphs of this Data Protection Notice.
Safety and security
As the data controller, we have taken technical and organizational security measures in accordance with Art. 32 DSGVO. These include in particular measures to ensure the confidentiality, integrity and availability of the data. In addition, we have set up processes to ensure that data subjects' rights are safeguarded, that personal data are deleted and that we react immediately to the threat posed by such data. In addition, we ensure the protection of personal data already during the development and selection of hardware and software in accordance with the principles of Art. 25 DSGVO. All our employees and persons involved in data processing are obliged to comply with the Basic Data Protection Ordinance and other laws relevant to data protection as well as to treat personal data confidentially.
In the event of the collection and processing of personal data, the information is transmitted in encrypted form in order to prevent misuse of the data by third parties. Our security measures are continuously revised in line with technological developments.
Nevertheless, Internet-based data transmissions can in principle have security gaps, so that absolute protection cannot be guaranteed.
Changes to our data protection regulations
We reserve the right to change our security and data protection measures if this becomes necessary due to technical development. In these cases we will also adapt our data protection information accordingly. Please therefore take note of the latest version of our data protection declaration.
3. Data collection on our website
Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions requested by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a justified interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6 (1) a GDPR and § 25 (1) TDDDG); consent can be revoked at any time. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are dealt with separately in this data protection declaration.
Server log files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:
- The type and version of browser used
- The used operating system
- Referrer URL
- The hostname of the accessing computer
- The time of the server inquiry
- The IP address
This data is not merged with other data sources.
This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.
Links
If you use external links that are offered on our website, this data protection declaration does not extend to these links. Insofar as we offer links, we assure you that at the time the link was created no infringements of applicable law were discernible on the linked websites. However, we have no influence on compliance with data protection and security regulations by other providers. Therefore, please inform yourself on the websites of the other providers about the data protection declarations provided there.
Children and adolescents
Persons under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect them and do not pass them on to third parties.
Inquiry by e-mail, telephone, fax or contact form
If you contact us by e-mail, telephone, fax or contact form, your request including all personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the enquiries addressed to us.
The data you send us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Registration on our portal
You can register on our portal to use additional features on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory data requested during registration must be provided in full. Otherwise we will refuse the registration.
In the case of important changes, for example in the scope of our services or in the case of technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.
The data entered during registration will be processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. An informal e-mail notification to us is sufficient for this purpose. The legality of the data processing already carried out remains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our portal and will subsequently be deleted. Legal retention periods remain unaffected.
4. Analysis tools and advertising
Matomo (formerly called Piwik)
This website uses the open-source web analysis service Matomo. Matomo uses technologies that make it possible to recognize the user across multiple pages with the aim of analyzing the user patterns. The information recorded by Matomo about the use of this website will be stored on our server. Prior to archiving, the IP address will first be anonymized.
Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6 (1) a GDPR and § 25 (1) TDDDG); consent can be revoked at any time.
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6 (1) a GDPR and § 25 (1) TDDDG); consent can be revoked at any time.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
IP anonymisation
We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Browser Plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent the collection of your information on future visits to this site.
Website prevented:
Deactivate Google Analytics
For more information on how Google Analytics uses user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245.
Order processing
We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics of Google Analytics
This website uses the function "demographic features" of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. This information cannot be associated with any specific individual. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit Google Analytics from collecting your data as described under "Objection to data collection".
Storage period
Data stored by Google at the user and event level that is linked to cookies, user IDs (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android Advertising ID) will be stored according to 14
months anonymously or deleted. Details can be found under the following link: https://support.google.com/analytics/answer/7667196
Hubspot
We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter Hubspot CRM).
Among other things, Hubspot CRM enables us to manage existing and potential customers as well as customer contacts, and to enable appointment booking directly in Microsoft Teams. For this purpose, Teams is integrated directly into HubSpot CRM. With the help of Hubspot CRM, we are able to capture, sort and analyze customer interactions via email, social media or phone across different channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter mailings). With the Partner News, we support the sales activities of our partners in order to provide timely information about product, sales and marketing updates. Based on Art. 6 (1) lit. b DSGVO, we do not require an opt-in because we always conclude a partner contract with our JobRouter sales partners. Accordingly, the dispatch of this information serves our contractual fulfillment. Our corporate newsletter is freely accessible to everyone and is sent on the basis of a double opt-in (Art. 6 (1) lit. a)
With Hubspot CRM, we are also able to record and analyze the user behavior of our contacts on our website.
The use of Hubspot CRM is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and Section 25 Para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TDDDG. The consent can be revoked at any time.
For details, please refer to Hubspot's privacy policy: https://legal.hubspot.com/privacy-policy.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TN8pAAG&status=Active
Order processing
We have concluded a contract on order processing (AVV) for the use of the above service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the DSGVO.
Hotjar
This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool used to analyse your user patterns on this website. Hotjar allows us to for instance record your mouse and scroll movements as well as your click. During this process, Hotjar also has the capability to determine how long your cursor remained in a certain position. Based on this information, Hotjar compiles so-called Heatmaps, that make possible to determine which parts of the website the website visitor reviews with preference.
We are also able to determine how long you have stayed on a page of this website and when you left. We can also determine at which point you suspended making entries into a contact form (so-called conversion funnels).
Furthermore, Hotjar can be deployed to obtain direct feedback from website visitors. This function aims at the improvement of the website offerings of the website operator.
Hotjar uses cookies. Cookies are small text files that are placed on your computer and stored by your browser. Their purpose is to make our website presentation more user friendly, more effective and more secure. These cookies allow us to in particular determine if this website was used with a certain device or if the functions of Hotjar have been deactivated for the respective browser. Hotjar cookies will remain on your device until you delete them.
You can set up your browser in such a manner that you will be notified anytime cookies are placed and you can permit cookies only in certain cases or exclude the acceptance of cookies in certain instances or in general and you can also activate the automatic deletion of cookies upon closing of the browser. If you deactivate cookies, the functions of this website may be limited.
The use of Hotjar and the storage of the Hotjar cookies are based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6 (1) a GDPR and § 25 (1) TDDDG); consent can be revoked at any time.
Deactivation of Hotjar
If you would like to deactivate the recording of data by Hotjar, please click on the link below and follow the instructions provided under the link: https://www.hotjar.com/policies/do-not-track/.
Please keep in mind that you will have to separately deactivate Hotjar for every browser and every device. For more detailed information about Hotjar and the data to be recorded, please consult the Data Privacy Declaration of Hotjar under the following link: https://www.hotjar.com/privacy/.
Contract data processing
We have entered into a contract data processing agreement with Hotjar to implement the stringent European Data Protection Regulations.
Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Meta Pixel (formerly Facebook Pixel)
To measure conversion rates, this website uses the visitor activity pixel of Facebook/Meta. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and to optimize future advertising efforts.
The collected data is anonymous to us as the operator of this website and we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. This may allow Facebook to serve advertisements on Facebook pages and outside Facebook. This use of data cannot be influenced by us as the site operator.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found under: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g., requests for information) regarding data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/.
You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.
If you do not have a Facebook account, you can deactivate any user-based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
LinkedIn Insight
This website uses the Insight tag from LinkedIn. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data processing by LinkedIn Insight tag
We use the LinkedIn Insight tag to obtain information about visitors to our website. Once a website visitor is registered with LinkedIn, we can analyze the key occupational data (e.g., career level, company size, country, location, industry, job title) of our website visitors to help us better target our site to the relevant audience. We can also use LinkedIn Insight tags to measure whether visitors to our websites make a purchase or perform other actions (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also features a retargeting function that allows us to display targeted advertising to visitors to our website outside of the website. According to LinkedIn, no identification of the advertising addressee takes place.
LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser characteristics and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data will then be deleted within 180 days.
The data collected by LinkedIn cannot be assigned by us as a website operator to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own promotional activities. For details, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
Legal basis
If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TDDDG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of Art. 6(1)(f) GDPR; the website operator has a legitimate interest in effective advertising promotions that include the utilization of social media.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Objection to the use of LinkedIn Insight Tag
You can object to LinkedIn’s analysis of user behavior and targeted advertising at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can control the use of their personal information for promotional purposes in the account settings. To prevent LinkedIn from linking information collected on our site to your LinkedIn account, you must log out of your LinkedIn account before you visit our site.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Microsoft Advertising
The website operator uses Microsoft Advertising. Microsoft Advertising is an online advertising program of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Advertising enables us to display advertisements in the Bing search engine or on third-party websites when the user enters certain search terms into Bing (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Microsoft (e.g., location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements led to the corresponding clicks.
The use of this service is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Data transfer to the US is based on the standard contractual clauses of the EU Commission. You can find details here: https://learn.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
5. Our social media appearances
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.
Legal basis
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR). Responsibility and assertion of rights If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook). Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
Storage time
The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).
Individual social networks
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.
X (formerly Twitter) as of November 2023
We would like to inform our users that we have decided to no longer actively use the X platform (formerly Twitter). However, our account will remain active. Due to recent events, we no longer feel that our company values are conscientiously represented on this platform, which has prompted us to make this decision. Please note that despite the inactivity of our account, personal data that has been transmitted to the platform in the past may continue to be stored and processed by X.
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy:
https://policies.google.com/privacy?hl=en.
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.
For details on their handling of your personal data, please refer to Instagram's privacy policy: https://privacycenter.instagram.com/policy/.
6. Newsletter
Newsletter data
If you wish to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or will only be collected on a voluntary basis. We use these data exclusively for the dispatch of the requested information and do not pass these on to third parties.
The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of data, e-mail address and their use to send the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you cancel the newsletter. Data stored by us for other purposes remain unaffected by this.
7. Plugins and Tools
YouTube
Our website uses plugins from the YouTube website. The website is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in advanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they view the video. However, YouTube's enhanced privacy mode does not necessarily preclude the sharing of information with YouTube partners. YouTube connects to the Google DoubleClick network whether or not you're watching a video.
When you start a YouTube video on our site, it connects to YouTube's servers. This will tell the YouTube server which of our pages you've visited. If you are logged in to your YouTube account, you can allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube can also store various cookies on your device after you start a video. YouTube can use these cookies to obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud. The cookies remain on your device until you delete them. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is based exclusively on this consent (Art. 6 (1) a GDPR and § 25 (1) TDDDG); consent can be revoked at any time.
If necessary, after the start of a YouTube video, further data processing operations may be triggered over which we have no control. YouTube is used in the interest of an appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Further information on data protection at YouTube can be found in its data protection declaration at: https://policies.google.com/privacy.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
pretix
For the registration to our events we use "pretix", a service of rami.io GmbH, Markgräfler Straße 16, 69126 Heidelberg.
If you buy a ticket, pretix processes the data exclusively to carry out the requested sale and to forward the data to us. In this case, your first and last name, your company affiliation as well as your valid e-mail address, address and, if applicable, payment data are collected. Pretix does not use the data itself and does not connect them with your purchases at other organizers. When you buy a ticket, pretix uses a technically necessary cookie to ensure convenient functionality and to make sure which shopping cart belongs to you. Pretix does not store IP addresses, browser information or other unnecessary metadata beyond the duration of your request.
If you pay for your ticket via a payment provider such as PayPal, pretix transfers only the absolutely necessary data to the respective payment provider. If you provide an e-mail address from Outlook or similar providers, pretix will send e-mails to you via rapidmail, a German e-mail provider, if necessary.
All servers of pretix are located in German data centers.
Privacy policy: https://pretix.eu/about/en/privacy
RingCentral (formerly Hopin)
In the course of organizing and conducting our online, we are collaborating with the online event platform provider RingCentral (ringcentral.com), formerly Hopin. This collaboration is essential to provide you with a seamless and interactive event experience. Therefore, we wish to inform you about the relevant aspects of data protection in connection with the use of RingCentral.
What is RingCentral?
RingCentral is an online event platform that enables virtual events. It offers features such as live streaming, virtual meeting rooms, and networking opportunities.
What Data is Transferred to RingCentral?
To participate in the event, certain personal data will be transferred to RingCentral. This typically includes your name, email address, and other information necessary for registration and participation in the event.
Purpose of Data Transfer
The transmission of your data to RingCentral serves the purpose of enabling your participation in the event, including access to various features of the platform such as live streams and networking opportunities.
Data Protection Measures
We have entered into appropriate data processing agreements with RingCentral to ensure that the processing of your personal data complies with data protection regulations. RingCentral commits to adhering to the GDPR data protection standards.
Your Rights
You have the right to access, correct, delete, or restrict the processing of your personal data. You can also object to the processing of your data. Please note that your participation in the event may be limited without the provision of certain data.
Further Information
For more information on RingCentral's privacy practices, we recommend reading their privacy policy on https://www.ringcentral.com/legal.html. If you have any questions about our privacy practices, please feel free to contact us.
SmartEvents
We would like to inform you that for the organization and execution of online events, we are collaborating with the service provider SmartEvents (www.smartevents.de).
What is SmartEvents?
SmartEvents is a tool for organizing and conducting online events, offering various features that enable efficient event planning and management.
What Data is Transmitted to SmartEvents?
For participating in the event, certain personal data such as your name, email address, and other necessary registration information will be transmitted to SmartEvents.
Purpose of Data Transmission
The transmission of your data to SmartEvents is for the purpose of event management, to ensure a smooth participation in the event and to facilitate communication related to the event.
Data Protection Measures
We have entered into appropriate data processing agreements with SmartEvents to ensure that the processing of your personal data complies with data protection regulations. SmartEvents commits to adhering to the GDPR data protection standards.
Your Rights
You have the right to access information about the processing of your personal data, as well as the right to rectification, deletion, or restriction of processing. You can also object to the processing of your data. Please note that your participation in the event might be limited if you choose not to provide certain data.
Further Information
For detailed information on SmartEvents' data protection practices, we recommend reviewing their privacy policy at www.smartevents.de. If you have any further questions about our data protection practices, please feel free to contact us.
Data protection information for SAP Business ByDesign
We use SAP Business ByDesign in our company to efficiently manage and optimize our business processes. When using this cloud-based ERP system, various types of personal data are processed.
SAP Business ByDesign is designed to comply with data protection regulations. This includes both technical and organizational measures to ensure the security of your data. Only the data that is necessary for carrying out the business processes is collected. This may include, for example, your name, address, e-mail address, telephone number and other necessary contact and contractual data.
The collected data will only be used for the purpose of carrying out the business processes and will not be passed on to third parties, unless there is a legal obligation to do so or you have given your express consent. Your data is securely hosted on SAP servers located in the European Union to ensure a high level of data protection and data security.
The legal basis for the processing of personal data in the context of the use of SAP Business ByDesign arises mainly from Art. 6 (1) of the General Data Protection Regulation (DSGVO).
Pursuant to Art. 6 (1) (b) DSGVO, personal data is processed to the extent necessary for the performance of a contract to which the data subject is a party, or for the performance of pre-contractual measures taken at the request of the data subject. This means that the data processing is necessary to fulfill our contractual obligations to you or to carry out pre-contractual measures at your request.
In addition, the processing of personal data is carried out in accordance with Art. 6(1)(c) DSGVO if we are subject to a legal obligation that requires such processing, such as the fulfillment of tax obligations.
Furthermore, processing may be based on Art. 6 (1) (f) DSGVO. In this case, we process your data to protect legitimate interests, unless your interests or fundamental rights and freedoms requiring the protection of personal data override these. Legitimate interests in this sense include, in particular, our business interest in efficiently designing and optimizing our business processes with SAP Business ByDesign.
In certain cases, we may also ask for your consent to process your personal data. In these cases, the data processing is based on Art. 6 (1) a) DSGVO. You can revoke your consent at any time. However, the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You have the right to request information about the data stored about you, to correct it, to delete it or to restrict its processing, provided that this does not contradict the legal requirements or the requirements of the performance of the contract. In addition, you have the right to withdraw your consent to data processing at any time and to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.
SAP and we as a company are committed to keeping your personal data confidential and secure. If you have any questions or concerns about the processing of your personal data in SAP Business ByDesign, you can contact us at any time.
8. Our own services
Applications
We offer you the opportunity to apply to us (e.g. by e-mail, mail or online application form). In the following we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated strictly confidentially.
Scope and purpose of data collection
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary for a decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu according to German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a DSGVO. Consent may be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 Para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.
Retention period of the data
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data transmitted by you including any remaining physical application documents will be stored for a maximum of 6 months after completion of the application process (retention period) in order to be able to trace the details of the application process in the event of discrepancies (Art. 6 Para. 1 lit. f DSGVO).
You may object to this storage if you have legitimate interests that outweigh our interests.
After expiry of the retention period, the data will be deleted unless there is a legal obligation to retain or any other legal reason for further storage. If it is evident that the retention of your data will be necessary after the expiry of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other legal storage obligations remain unaffected.
Use of Microsoft 365
JobRouter AG uses Microsoft 365 applications for internal purposes.
We strive to avoid transfers to unsafe third countries wherever possible. The processing of your personal data therefore regularly takes place within the EU.
However, due to the necessary involvement of US software manufacturers in cases of support, a transfer of personal data to the USA cannot be excluded. There is currently no valid adequacy decision of the EU Commission for transfers to the United States, therefore, USA is considered a so-called data protection unsafe third country.
We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in unsafe third countries. For example, US companies are required to hand over personal data to security authorities without you as the Data Subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
In order to nevertheless ensure an appropriate level of data protection, the service provider in question is bound to JobRouter AG via Standard Contractual Clauses of the EU Commission, including additional measures to ensure an appropriate level of data protection.
Should you require further information in this regard, please contact datenschutz@jobrouter.com.
Use of JobRouter® Sign
For the purpose of electronic signing of documents, JobRouter AG uses the JobRouter® Sign application. For these purposes, personal data such as first name, last name, email address and mobile phone number are collected and processed. The legal basis for the collection and processing of thise data is Article 6 Paragraph 1 lit. b) and f) GDPR which determine a contractual or pre-contractual measure or a legitimate interest of JobRouter AG; or Art. 88 GDPR in conjunction with Section 26 FDPA in the case of an employment relationship. The data collected from you will also be transmitted to our service provider Namirial GmbH. We have concluded an order processing contract with the solution provider in accordance with Art. 28 GDPR. Further transmission of the data within or outside the EU/EEA does not take place and is also not planned. Your data will be deleted as soon as further processing is no longer necessary for the aforementioned purposes.
JobRouter® app
Surveys
To continuously improve the quality of our products and ensure they meet the expectations and needs of our prospects and existing customers, we regularly conduct surveys. The processing of your personal data for these surveys is based on Article 6(1)(b) of the General Data Protection Regulation (GDPR) if you are already a customer and the survey is part of fulfilling our contractual obligations, as well as on Article 6(1)(f) of the GDPR, as we have a legitimate interest in receiving feedback on our products in order to improve them.
Data Collection and Use
For participation in our surveys, we collect data necessary for the conduct of the survey as well as specific feedback on the services you use; the provision of names and contact information is optional. This information is used to better tailor our product offerings to your needs and to increase customer satisfaction.
Interest Balancing
In processing your data based on our legitimate interest, we carefully balance your rights and freedoms. We ensure that your data is not used beyond what is necessary for the purposes of product improvement.
Data Protection and Security
We commit to adhering to the highest standards of data protection and ensure that your data is securely stored and processed. Your data is retained only as long as necessary for the purposes mentioned above and is handled in accordance with our privacy policy.
9. Online-based Audio and Video Conferences (Conference tools)
Data processing
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.
Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards, and other information shared while using the service.
Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.
Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.
Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected. We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.
Conference tools used
We employ the following conference tools:
Zoom
We use Zoom. The provider of this service is Zoom Communications Inc, San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to Zoom’s privacy policy: https://zoom.us/en-us/privacy.html.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://zoom.us/de-de/privacy.html.
Data processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.
Data processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Last update: 02/2024