.png)
Privacy statement
The person responsible within the meaning of data protection laws is Talent for the Team GmbH, Moorfuhrtweg 11, 22301 Hamburg (“company”).
With this data protection notice, we inform you (also referred to as “user” or “data subject” in the following text) in general about data processing in our company and in particular about data processing when you access our website, when you contact us via our website contact form, contact by e-mail or telephone. We will also inform you about our online presence on social media and about your rights with regard to the processing of your data. Conceptually, “data processing” always means the processing of personal data.
1. General information on data processing
1.1 Categories of personal data
We process the following categories of personal data:
- inventory data (e.g. names, addresses, functions, organizational affiliation, etc.);
- contact details (e.g. email, telephone/fax numbers, etc.);
- content data (e.g. text inputs, image files, videos, etc.);
- usage data (e.g. access data);
- Meta/communication data (e.g. IP addresses).
1.2 Recipients or categories of recipients of personal data
If, as part of our processing, we disclose data to other persons and companies such as web hosts, contract processors or third parties, transfer it to them or otherwise grant them access to the data, this is done on the basis of legal permission (e.g. if a transfer of the data to third parties in accordance with Article 6 (1) subparagraph 1 lit. b GDPR is required to fulfill the contract), if the data subject has consented or a legal obligation provides for this.
1.3 Duration of storage of personal data
The criterion for the duration of storage of personal data is the respective legal retention period. After the deadline, the corresponding data will be deleted, provided that it is no longer required to achieve the purpose, fulfill the contract or initiate a contract.
1.4 Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done as part of the use of third-party services or the disclosure or transfer of data to third parties, this is only done if it is done to fulfill our (pre-) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permits, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. of the GDPR are met, i.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
2. Data processing when you visit our website
2.1 Log files
Each time a data subject accesses our website, general data and information are stored in our system's log files:
- date and time of retrieval (time stamp);
- request details and destination address (protocol version, HTTP method, referer, useragent string);
- name of the retrieved file and amount of data transferred (requested URL including query string, size in bytes);
- Message as to whether the retrieval was successful (HTTP status code).
When using this general data and information, we do not draw any conclusions about the data subject. There is no personal evaluation or evaluation of the data for marketing purposes or profiling. The IP address is not saved in this context.
The legal basis for the temporary storage of data is Art. 6 para. 1 subparagraph 1 lit. f GDPR. The collection of data to provide the website and the storage of data in log files is absolutely necessary for the secure operation of our website. There is therefore no right of objection on the part of the person concerned.
2.2 Malware detection and log data evaluation
We collect log data that is generated during the operation of our company's communication technology and evaluate it automatically, insofar as this is necessary to identify, limit or eliminate faults or errors in communication technology or to defend against attacks on our information technology or to detect and defend against malicious programs.
The legal basis for the temporary storage and evaluation of data is Art. 6 para. 1 subparagraph 1 lit. f GDPR. The storage and evaluation of the data is absolutely necessary for the provision of the website and for its secure operation. There is therefore no right of objection on the part of the person concerned.
2.3 Cookies
So-called cookies are used on our website. Cookies are small text files that are exchanged between web browsers and hosting servers. Cookies are stored on the user's computer and transmitted from it to our site. In the web browser you are using, you can restrict or fundamentally prevent the use of cookies by making the appropriate settings. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our website, this may mean that the website cannot be displayed or used to the full extent.
The legal basis for processing personal data using cookies is Art. 6 para. 1 subparagraph 1 lit. f GDPR.
2.4 Hosting
The hosting services we use are intended to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating our website.
In doing so, we or our contract processors process inventory data, contact data, content data, contract data, usage data and meta and communication data from users of our website on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 para. 1 subparagraph 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).
3. Data processing when you contact us
3.1 Contacting us via email
You can contact our company by e-mail via the e-mail addresses published on our website.
If you use this contact method, the data you provide (e.g. name, first name, address), but at least the email address and the information contained in the email, together with the personal data you have provided, will be stored for the purpose of contacting and processing your request. In addition, the following data is collected by our system:
- IP address of the calling computer;
- The date and time of the email.
The legal basis for processing personal data in the context of emails sent to us is Art. 6 para. 1 subparagraph 1 lit. b or lit. f GDPR.
3.2 Contacting us via the website contact form
If you use the contact form provided on our website to communicate, it is necessary to provide your name and first name as well as your e-mail address. Without this data, your request submitted via the contact form cannot be processed. Providing the address is optional and allows us, if you wish, to process your request by post.
In addition, the following data is collected by our system:
- IP address of the calling computer;
- date and time of registration.
The legal basis for processing personal data as part of contact forms submitted to us is Art. 6 para. 1 subparagraph 1 lit. b or lit. f GDPR.
3.3 Contact by letter and fax/computer fax
If you send us a letter or a fax/computer fax, the data you provide (e.g. surname, first name, address) and the information contained in the letter or fax/computer fax, together with the personal data provided by you, will be stored for the purpose of contacting and processing your request.
The legal basis for processing personal data in the context of letters and faxes sent to us is Art. 6 para. 1 subparagraph 1 lit. b or lit. f GDPR.
4. Online presence on social media
We maintain online presences on the social networks LinkedIn, Instagram and Facebook in order to inform users active there about our services and, if interested, to communicate via the platforms. Our social media channels can only be accessed via an external link. As soon as you access our social media profile in the respective network, the terms and conditions and data processing guidelines of the respective operators apply there.
We have no influence on the collection of data and its further use by social networks. There is no information as to what extent, at what location and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are carried out with the data and to whom the data is passed on. We therefore expressly draw your attention to the fact that your data (e.g. personal information, IP address) is stored by network operators in accordance with their data usage guidelines and used for business purposes.
We process data with regard to social media presences insofar as they are used to send us comments or direct messages, for example. The legal basis for processing data following the user's consent is Art. 6 para. 1 subparagraph 1 lit. a GDPR.
5. Your rights
As a data subject, you have the following rights in connection with the processing of your personal data:
5.1 Right to information in accordance with Article 15 GDPR
(1) The data subject has the right to request confirmation from the person responsible as to whether personal data concerning him or her is being processed; if this is the case, he has the right to information about this personal data and to the following information:
- a) the purposes of processing;
- b) the categories of personal data that are processed;
- c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- d) if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining this period;
- e) the existence of a right to correct or delete personal data concerning you or to restrict processing by the person responsible or a right to object to this processing;
- f) the existence of a right to lodge a complaint with a supervisory authority;
- g) if the personal data are not collected from the data subject, all available information about the origin of the data;
- h) the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
(2) If personal data is transferred to a third country or to an international organization, the data subject has the right to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.
5.2 Right to correction in accordance with Article 16 GDPR
The data subject has the right to obtain from the person responsible the correction of incorrect personal data concerning him or her without undue delay. Taking into account the purposes of processing, the data subject has the right to request the completion of incomplete personal data — including by means of a supplementary statement.
5.3 Right to deletion in accordance with Article 17 GDPR
(1) The data subject has the right to require the controller to delete personal data concerning him or her immediately, and the controller is obliged to delete personal data immediately if one of the following reasons applies:
- a) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- b) The data subject withdraws the consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and there is no other legal basis for the processing.
- c) The data subject objects to processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for processing, or the data subject objects to processing in accordance with Article 21 (2) GDPR.
- d) The personal data was processed unlawfully.
- e) The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
- f) The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
(2) If the controller has made the personal data public and is obliged to delete them in accordance with paragraph 1, he shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform controllers who process the personal data that a data subject has requested them to delete all links to this personal data or copies or replications of this personal data.
(3) Paragraphs 1 and 2 do not apply insofar as processing is necessary
a) to exercise the right to freedom of expression and information;
b) to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject, or to perform a task which is in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make impossible or seriously impair the achievement of the objectives of this processing, or
e) to assert, exercise or defend legal claims.
5.4 Right to restrict processing in accordance with Article 18 GDPR
1) The data subject has the right to request the controller to restrict processing if one of the following conditions is met:
a) the accuracy of the personal data is disputed by the data subject, for a period of time which enables the person responsible to verify the accuracy of the personal data,
b) the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
c) the controller no longer needs the personal data for processing purposes, but the data subject needs them to assert, exercise or defend legal claims, or
d) the data subject has objected to processing in accordance with Article 21 (1) GDPR as long as it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.
(2) Where processing has been restricted in accordance with paragraph 1, this personal data may only be processed — apart from storage — with the consent of the data subject or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
5.5 Right to data portability in accordance with Article 20 GDPR
(1) The data subject has the right to receive the personal data concerning him or her, which he has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transfer this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that
a) the processing is based on consent in accordance with Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR or on a contract in accordance with Art. 6 para. 1 lit. b) GDPR and
b) processing is carried out using automated procedures.
(2) When exercising their right to data portability in accordance with paragraph 1, the data subject has the right to have the personal data transmitted directly from one controller to another controller, insofar as this is technically feasible.
The right referred to in paragraph 1 shall not affect the rights and freedoms of other persons.
This right does not apply to processing that is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority vested in the person responsible.
5.6 Right of objection in accordance with Article 21 GDPR
The data subject has the right, for reasons arising from his or her particular situation, to object at any time to the processing of personal data concerning him or her on the basis of Article 6 (1) (e) or f) GDPR; this also applies to profiling based on these provisions. The controller no longer processes the personal data unless he can demonstrate compelling legitimate grounds for processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
In connection with the use of information society services, notwithstanding Directive 2002/58/EC, the data subject may exercise his right of objection by means of automated procedures using technical specifications.
5.7 Right of withdrawal in accordance with Article 7 (3) GDPR
The data subject has the right to withdraw their data protection consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
5.8 Right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data concerning him or her is contrary to this Regulation.