Data protection

This Data Protection Policy was published on 23 May 2018. It came into effect on this date and takes into particular account the amendments to the new EU General Data Protection Regulation valid as of 25 May 2018.

HR7 GmbH was established as a Hamburg-based recruitment agency. Our services include personnel leasing, personnel placement and general personnel consultation.To safeguard your personal data, HR7 GmbH is obligated to observe statutory data protection legislation pursuant to the German Federal Data Protection Act (FDPA new), the General Data Protection Regulation (GDPR) and the German Telemedia Act (TA), as well as other data protection regulations. All terms used in the following refer to both genders.

General information on data protection and security

At this point, we would like to inform the user about data protection within our company.We naturally observe statutory data protection legislation such as the German Federal Data Protection Act (FDPA new), the General Data Protection Regulation (GDPR) and the German Telemedia Act (TA), as well as other data protection regulations.Please refer to the definitions set forth in Art. 4 of the General Data Protection Regulation (GDPR) for the terms used, such as “personal data” or the “processing” of such.

HR7 is committed to safeguarding the confidentiality of the personal and particularly sensitive data of users (e.g. job applicants) and contractual partners. Therefore, compliance with statutory regulations when using personal data by way of modern information and communication technologies is a matter of course for us.

The subject of data protection is personal data.Pursuant to Section 3 (1) FDPA, personal data is individual information regarding the personal or material circumstances of an identified or identifiable natural person. This includes details such as name, postal address, e-mail address or phone number and, where required, inventory or usage data such as IP address.The controller within the meaning of data protection legislation is HR7 GmbH Rissener Landstraße 129 22587 Hamburg Germany (hereinafter referred to as “HR7”).

When you visit our website without registering or entering details, no personal data is collected. Our server logs collect only the information necessary to establish the connection, such as: Name of the accessed file, date and time of access, volume of data transmitted, notification of successful data retrieval, web browser and requesting domain. The IP addresses of the requesting computers are also logged. This data is statistically evaluated in order to optimise the technical quality of our website and its contents.

For users who would like to apply online, HR7 requires the user’s personal data, to be provided by the user in the online application, for the purpose of initiating and, where applicable, performing a contract. This is mandatory data such as the title, name, postal address, e-mail address and phone number of the user, as well as information about education and further education; work experience; additional qualifications; preferences regarding employment with HR7 including details about the occupational field, preferred location and working hours, etc.

This data is transmitted to us via the Internet by way of Secure Socket Layer (SSL) encryption. HR7 collects and stores this data itself and assures that it will forward this data only to clients who are seeking an employee with a profile that corresponds to the applicant’s profile, as well as in the cases (a) to (d) specified below under “Scope of data collection and storage”. We secure our website and other systems using technical and organisational measures to protect against loss, destruction, alteration or dissemination of, or access to, the data by unauthorised persons.

You can generally use our website without having to provide any personal data. Where personal data (e.g. name, address or e-mail addresses) is collected on our website, this is done at all times on a voluntary basis to the extent possible.This data shall not be forwarded to third parties without your express consent.

Registration

To enable you to use this portal and the services of HR7 GmbH for the purposes of placement and/or personnel leasing, you must register on our job application portal. There are two steps to registration.In the first step of the ONLINE APPLICATION, we ask you to send us your application documents and your contact details (by e-mail). After we have reviewed your application documents and established that your professional qualifications meet our requirements, we then invite you to an interview or speak to you by phone. Before conducting an interview, we will send you an “applicant information form”, which we would ask you to fill in as completely as possible.You will be registered on the HR7 job application portal only after you have filled in this form. We reserve the right not to allow every applicant access to the job application portal. We register you and create a profile for you on the job application portal on the basis of personal information such as your name and contact details, your professional background, your education, and according to an evaluation of specific job-related qualifications.

Please note that Art. 6 (1) a) and Art. 7 GDPR provide the legal basis for consent, Art. 6 (1) b) GDPR provides the legal basis for the processing of data for the purpose of providing our services and for performing contractual measures, Art. 6 (1) c) GDPR provides the legal basis for the processing of data to fulfil our legal obligations, Art. 6 (1) f) GDPR provides the legal basis for the processing of data to safeguard our legitimate interests, and Art. 6 (1) b) in connection with Section 88 (1) GDPR in connection with Section 26 (1) FDPA (new) provide the legal basis for the processing of data for the purposes of the employment relationship.

The use of your data for specific purposes

HR7 observes the principle of data usage for specific purposes and therefore collects, processes and stores the personal data of a user for the specified purposes only.The personal data shall be disclosed to third parties only where this is necessary to provide the service or to perform a contract, as described in this Data Protection Policy. Likewise, data shall be transmitted to public institutions and authorities authorised to receive this data solely in accordance with statutory obligations to disclose information or where HR7 is obligated to provide information on the basis of a judicial decision.

HR7 has obligated its employees and the service providers commissioned by HR7 to observe confidentiality and to comply with the data protection regulations.

We use the data from your applicant profile on the job application portal to advise you of job offers and to submit your details to our clients for the purposes of placement and/or personnel leasing. We may use the contact details provided by you to contact you either by e-mail, post or phone. When we submit your details to our clients, this is done in the form of anonymised applicant profiles created from the information provided in your CV and your professional qualifications. This being the case, please enter in your applicant profile only details that potential employers should see. Upon registering in our applicant database, you thereby authorise HR7 GmbH to use the data and information provided by you to submit these details to companies for the purposes of placement and/or personnel leasing. HR7 is authorised to use all details provided by you in our applicant database except your contact details, i.e. address, e-mail and phone numbers. HR7 reserves the right to make changes to your applicant profile, to add details and to delete the applicant profile either in whole or on part.

When we are contacted (via the contact form or by e-mail), the user’s details are processed in order to handle the request pursuant to Art. 6 (1) b) GDPR.Where we receive an application (via the application form or by e-mail), the user’s details are processed in order to handle the application process pursuant to Art. 6 (1) b) in connection withSection 88 GDPR in connection with Section 26 FDPA (new). This applies not only to applications for specific job vacancies, but also for unsolicited applications. During the application process, no data is collected from third parties, nor is any data transferred to third parties, particularly not to another country, unless the data subjects have consented to this or a legitimate interest on the basis of Art. 6 (1) f) GDPR (e.g. forwarding of the application documents to clients for the purposes of personnel leasing) exists.The data is transmitted in encrypted form and the data subjects are adequately informed of this in advance.

Where the controller concludes an employment contract with a user, the transmitted data is stored for the purpose of conducting the employment relationship in compliance with the statutory regulations, and other data necessary for the formation of an employment relationship is added to this (e.g. social insurance information).

Where the controller does not conclude an employment contract with a user, the data will be automatically deleted after the application process has been completed, insofar as there are no other legitimate interests on the part of the controller that would oppose this deletion. A legitimate interest in this sense would be, for example, a burden of proof in a lawsuit under the German General Equal Treatment Act (AGG).

Scope of data collection and storage

a) Users are required to provide personal data only where this is necessary to set up and use the online application, e.g. to collect data for the application. We collect and store personal data provided in the online application only to the extent that this is necessary to handle applications and any complaints. The personal data of the user (applicant) is transmitted to clients of HR7 insofar as this is necessary for finding placements for the applicant. Where there is a possibility of placing an applicant with a client of HR7, the necessity for transmitting this data is determined on the basis of the mutually agreed job and qualification profile of the applicant.If the user wishes to limit the placement range, he shall inform HR7 of this accordingly in writing.

b) If the applicant participates in employment incentive measures and/or labour market projects offered by the German Federal Employment Agency, job centres (ARGE) or local job options communities (“Optionskommunen”) or claims benefits from these institutions (collectively “labour market projects”), HR7 is authorised to transmit personal data to these institutions and third parties insofar as this is necessary for the intended purpose of the labour market projects and/or is legally stipulated.

c) If the applicant wishes to participate in business qualification projects, HR7 is authorised to collect, store and exchange the data necessary for this with the partners offering the qualification projects (training organisations, participating clients and employers and the competent Chamber of Industry and Commerce).

d) HR7 is also authorised to transmit data to a research facility for the purpose of carrying out scientific research insofar as the scientific interest in carrying out the research outweighs the interest of the data subject in not having the data transmitted and the purpose of the research cannot be achieved in any other manner or can only be achieved with disproportionate effort.

Updating, storing and erasing your data

We respect your statutory right of access to your personal data, and to the rectification, erasure and restriction of processing of your personal data. We also take measures to ensure that the personal data collected by us is accurate and up-to-date.

• You have the right to be informed about what personal data relating to you is stored by us.
• Upon request, we will provide you with a copy of your personal data in a structured, commonly used and machine-readable format.
• If your personal data is inaccurate or incomplete, you have the right to request that we rectify or complete the data accordingly.
• You have the right to object to the processing of your personal data by us.

You can also request that we erase your personal data or restrict the use thereof. This right is stipulated by applicable law and can affect your access to our services.

Sending an e-mail to this effect to HR7 GmbH at datenschutz@hr7-gmbh.de shall suffice.You can also delete your registration on the job application portal this way. We shall store your data until you have deleted your registration as described above. If you want to reactivate and update your details after they have been deactivated, please inform us accordingly.

The data stored by us is always erased as soon as it is no longer required for the purpose for which it was collected, insofar as there are no statutory obligations to retain such. Where the users’ data is not erased because it is required for other, legally permissible purposes, we shall restrict the processing of such. This means that the data will be blocked and not processed for other purposes.This apples, for example, to users’ data that must be retained for purposes of labour, commercial, income tax or tax law.

Data security

We treat your data as strictly confidential.We apply extensive and appropriate technology to protect your data against access, disclosure and use by unauthorised third parties.Despite these security measures, we should point out that we cannot guarantee the complete protection of your data against unauthorised access, nor can we guarantee that it will never be used for purposes other than those intended.

Legal age and legal capacity

You can effectively consent to the collection, processing and use of your data only if you are of legal age and of legal capacity.For this reason, we cannot store your data in this system if you are under 18.Upon submitting this Data Protection Policy, you hereby declare that you are of legal age and of legal capacity.If you are neither of legal age nor of legal capacity, we are still interested in you as an applicant.We would therefore be happy to welcome you in one of our offices, where you can hand in your application personally.

Acceptance of and objection to the data protection regulations

You can register on our job application portal only if you have accepted these data protection regulations.If you send us your application documents or apply directly on our homepage, you hereby confirm that you have read and consent to this Data Protection Policy.If you object to this Data Protection Policy at a later stage or would like to withdraw your consent, you can do so at any time by sending notification to this effect to datenschutz@hr7-gmbh.de tun.

Use of cookies

To improve ease of use, HR7 may use cookies to make your visit to our website more interesting and to enable you to use certain functions.Cookies are small text files that are stored on the user’s computer. Most of the cookies used by us, if and where necessary, are deleted from the user’s hard drive after the browser session has ended (session cookies). Other cookies remain on the computer and enable HR7 to recognise the user’s computer upon his next visit (permanent cookies) and to show the user personalised content.

The user can, of course, browse the HR7 website without cookies.If the user does not want HR7 to recognise his computer, the user can prevent the storage of cookies on his hard drive by selecting “do not accept cookies” in the browser settings. The browser manufacturer’s user manual provides a detailed description of how this works.

The user is advised that not all functions of the HR7 website may be available to their full extent if this function is deactivated.

Information services (newsletter and information)

If the user has registered to use the HR7 information services, his e-mail address will be used for our own advertising purposes (for sending current information or newsletters, etc.) until such time as the user unsubscribes from these information services.The user may unsubscribe at any time.

In this area, HR7 also collects and stores data provided by the user (registration details).

HR7 advises that the transfer of data on the Internet (by e-mail communication, for example) may be subject to security vulnerabilities.It is not possible to completely protect data against third-party access.

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on the users’ computers and enable an analysis of how the website is used. The data generated by the cookies about the users’ use of this website is usually transmitted to a Google server in the US and stored there.

If IP anonymisation has been enabled on this website, however, your IP address will first be truncated by Google within the Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area.Only in exceptional cases will the full IP address be transferred to a Google server in the US and truncated there. IP anonymisation is enabled on this website. Google will use this information on behalf of the operator of this website to evaluate the use of the website by the users, to compile reports about website activity and to provide the website operator with other services relating to website activity and Internet usage.

The IP address transmitted by your browser in the context of Google Analytics will not be combined with any other data held by Google.Users can prevent the installation of cookies by setting their browser software accordingly.Users are advised, however, that in this case they may not be able to use all of the functions of this website to their full extent. Users can also prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) for Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

Alternatively to the browser add-on, or in browsers on mobile devices, you can prevent Google Analytics from collecting your data on this website in future by clicking on this link (disable Google Analytics). This installs an opt-out cookie on your device.If you want to delete cookies, click on this link again.

Social share buttons

Facebook
Plug-ins of the social network Facebook 1601 South California Avenue Palo Alto CA 94304 USA are integrated into our web pages.You can recognise the Facebook plug-ins by the Facebook logo or the “like” button on our web page.You can find an overview of the Facebook plug-ins at

https://developers.facebook.com/docs/plugins/.

If you visit our website, the plug-in establishes a direct connection between your browser and the Facebook server.Facebook then receives the information that you have visited our website from your IP address. If you click the Facebook “like” button while you are still logged into your Facebook account, you can the link the contents of our website to your Facebook profile. This enables Facebook to assign your visit to our website to your user account.We should point out that we, as operator of this website, do not receive any information about the contents of the transmitted data or the use of such by Facebook.

If you do not want Facebook to be able to assign your visit to our website to your Facebook account, please log out of your Facebook account.

LinkedIn
Our website uses functions of the LinkedIn network.The provider is the LinkedIn Corporation 2029 Stierlin Court Mountain View CA 94043 USA. Each time one of our pages that contains LinkedIn functions is called up, a connection is established to LinkedIn servers. LinkedIn then receives the information that you have visited our website under this IP address. If you click the LinkedIn “recommend” button while you are still logged into your LinkedIn account, LinkedIn can assign your visit to our website to you and your user account.We should point out that we, as operator of this website, do not receive any information about the contents of the transmitted data or the use of such by LinkedIn.

Twitter
Functions of the Twitter service are integrated into our web pages. These functions are offered by Twitter Inc. 1355 Market Street Suite 900 San Francisco CA 94103 USA.By using Twitter and the “re-tweet” function, the websites visited by you are linked with your Twitter account and this information is disclosed to other users.Data is also transmitted to Twitter at the same time. We should point out that we, as operator of this website, do not receive any information about the contents of the transmitted data or the use of such by Twitter.

XING
Functions of the Xing service, operated by XING AG Gänsemarkt 43 20354 Hamburg Germany, are integrated into our web pages.If you activate and use this plug-in, your browser establishes a direct connection to the Xing servers.

The content of the plug-in is transmitted directly to your browser by Xing and integrated into the page.

By activating this plug-in, Xing receives the information that you have accessed the respective page of our website. If you are logged into Xing, Xing can assign your visit to your Xing account.

Kununu
The “Kununu” button of the social network Kununu, operated by Kununu GmbH Fischhof 3 Top 7 1010 Vienna Austria, is integrated into our website. If you call up a page of our website that contains such a button, your browser establishes a direct connection to the Kununu servers. The content of the button is transmitted directly to your browser by Kununu and integrated into the page. We should point out that we, as operator of this website, do not receive any information about the contents of the transmitted data or the use of such by Kununu. We have no influence on the scope of data collected by Kununu when the button is clicked.If you do not want Kununu to be able to assign your visit to our website to your user account, please log out of your Kununu account.

Information on the purpose and scope of data collection, the further processing and use of the data by the providers, your rights with regard to the above and settings to protect your privacy can be found in the providers’ privacy policies:

Google privacy policy:
https://www.google.com/intl/de/+/policy/+1button.html

Facebook privacy policy:
https://www.facebook.com/policy.php

LinkedIn privacy policy:
https://www.linkedin.com/legal/privacy-policy

Twitter privacy policy:
https://twitter.com/privacy

Xing privacy policy:
https://www.xing.com/privacy

Kununu privacy policy:
https://www.kununu.com/de/info/agb

Collection and storage of usage data

To optimise our website pursuant to Art 6 (1) f) GDPR, we collect and store data such as date and time of page access, the page from which you accessed our website, and similar data.This is done in anonymised form without identifying the person using the website.User profiles may be created under a pseudonym, where necessary. No connection is established between the natural person using the pseudonym and the collected usage data in this case either.We also use cookies to collect and store usage data (see “Use of cookies”).We collect this data solely for statistical purposes to further optimise our website and to make our services more appealing. The data is collected and stored in anonymised or pseudonymised form, which prevents you from being identified as a natural person.

Right to information, right to withdraw consent and right to object

The user is entitled to receive information about the data stored under his name by HR7 at any time, free of charge, and without providing reasons. The user can also have the data collected by HR7 blocked, rectified or erased at any time. Please send requests for information and other issues by e-mail to Dr. Ralph Hartmann, the Data Protection Officer at HR7, at the following address:

datenschutz@hr7-gmbh.de .

The user is also welcome to contact the Data Protection Officer at HR7 at any time if he has any further questions about the data protection information or the processing of the user’s personal data.

Data protection regulations and the application of such are subject to continuous change.Therefore, it is advisable and essential to stay informed of all amendments to the statutory regulations and company practices.

Contact

If you have any questions about this Data Protection Policy, please feel free to e-mail us at datenschutz@hr7-gmbh.de or write to us at the following address:HR7 GmbH Rissener Landstraße 129 22587 Hamburg, Germany.