Source: https://talentcube.de/en/privacy/
Timestamp: 2019-04-19 20:45:29+00:00

Document:
Responsible: Talentcube GmbH, Leonrodplatz 2, 80636 Munich, Germany Tel .: +49 (0) 89 392 979 40 Our company data protection officer is reachable under the above-mentioned Address or at datenschutz@talentcube.de.
We offer you the opportunity to contact us via a contact form provided on the website for questions of any kind. It is necessary to provide your name, contact details (telephone number or e-mail address) and a message in order to answer them. Further information can be provided voluntarily. The data processing for the purpose of contacting us is done according to Art. 6 (1) (b) DSGVO on the basis of your specific request.
this is legally permissible and, according to Art. 6 (1) (b) DSGVO, is required for the settlement of contractual relationships with you.
We use the Gravatar service of Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110, USA, within our online offering and specifically on the blog. Gravatar is a service that allows users to log in and submit profile pictures and their email addresses. If users with the respective e-mail address on other online sites (especially in blogs) leave posts or comments, their profile pictures can be displayed next to the posts or comments. For this purpose, the e-mail address communicated by the user to Gravatar is transmitted in encrypted form in order to check whether a profile has been stored. This is the sole purpose of sending the e-mail address and it will not be used for any other purpose, but will be deleted afterwards. By displaying the images, Gravatar gets to know the IP address of the users, as this is necessary for communication between a browser and an online service. For more information about Gravatar’s collection and use of data, see the Automattic Privacy Notice: https://automattic.com/privacy/. If users do not want a user picture linked to their email address on Gravatar to appear in the comments, they should use a non-Gravatar email address to comment. We also point out that it is also possible to use an anonymous or even no e-mail address if the users do not want their own e-mail address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our commenting system. We support the use of the above-mentioned analysis tool on Art. 6 (1) (f) of the GDPR: the processing takes place according to the needs of our website and is therefore necessary to safeguard our legitimate interests.
By using Facbook Connect from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland we also offer the possibility of easier registration with Facebook for our services. You can use your existing Facebook user account for this purpose. By clicking the “Log in with Facebook” link, you can use this registration method via our online portal. To do this, you need to already have a Facebook account or have access to Facebook. If you would like to register for one of our services using your Facebook account, the first step in the registration process will immediately redirect you to Facebook. Facebook will then ask you to log in or to register. Under no circumstances will we receive your personal access data (user name and password). In a second step, you will connect your Facebook profile with the service for which you would like to register. At this point, you will be told what data from your Facebook profile will be transmitted to us. This information is usually your “public information” on Facebook and information which you have made available to the public or authorized for the application in question. Information of this type generally includes your name, profile picture and cover photo, your gender, your networks, your username (Facebook URL), and your user ID number (Facebook ID). We will also use the email address you have saved with Facebook in order to contact you outside of Facebook. You can see an overview of information in your profile that is available to the public via the General Account Settings menu of your Facebook profile (https://www.facebook.com/settings?tab=applications). The legal basis for data collection and storage is your consent, within the meaning of Art. 6 paragraph 1 sentence 1 letter a GDPR. If you would like to remove the connection between Facebook Connect and our service, please log in to Facebook and make the required changes to your profile. We will then no longer have the right to use information from your Facebook profile.
The stored data will be deleted as soon as they revoke any consent or if the data is no longer necessary for their intended purpose and the deletion does not conflict with any legitimate interests or statutory retention requirements. If the data is not deleted because it is required for other or legitimate purposes, its processing will be restricted. The data will be blocked and are not processed for other purposes. This applies for data of users who must be kept for commercial or tax reasons. According to legal requirements, storage takes place for 6 years in accordance with § 257 (1) HGB (for example commercial letters, accounting documents, etc.) and for 10 years in accordance with § 147 (1) AO (for example commercial and business letters, tax-relevant documents).
You have the right to request a confirmation of the processing of your personal data.
You have the right to receive personally identifiable information in a structured, common and machine-readable format and to transmit that information to another person in charge.
You have the right to object if the processing of personal data concerning you for the performance of a task in the public interest (Article 6 (1) (e) GDPR) or for the protection of our legitimate interests (Article 6 (1) (f) GDPR) is required.
If you believe that the processing of your personal data is contrary to the GDPR, you have the right to complain to a supervisory authority, without prejudice to other legal remedies.
With the following information, we would like to give you an overview of the processing of your personal data as part of the installation and use of the mobile application “Talentcube” (hereinafter app) and your rights under the Data Protection Act.
a. On the basis of your consent (Article 6 (1) a DSGVO): If you have given us an explicit opt-in for the processing of personal data for the respective purposes within corresponding functions of the app, the legality of this processing (for example transfer of applicant data) is based on your consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent, which were given to us before the validity of the GDPR, i.e. before May 25, 2018. The revocation of consent does not affect the legality of the data processed until the revocation.
b. For the fulfillment of contractual obligations (Article 6 (1) b DSGVO): The processing of data is primarily to provide the services and features of our app.
to control and further develop our app.
4. How are services integrated by third parties?
We use Mixpanel, a service offered by Mixpanel Inc. (Mixpanel), 405 Howard Street, Floor 2, San Francisco, CA 94105, USA, to collect pseudonymised technical data from our app and website to understand how users interact with our app. Mixpanel is used to track and improve activities within the app, as well as to inform you based on your activities. More information about Mixpanel can be found at https://mixpanel.com/terms. At https://mixpanel.com/optout/ you can object to this data processing at any time.
We use the Crashlytics analytics service provided by Google Inc. (Google), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Crashlytics collects user data to generate so-called crash reports in case of software crashes. These crash reports serve as documentation for troubleshooting and improvement of the service. Crashlytics automatically collects usage data that is not attributable to the individual user. These usage data include, device status, Mac address, device type and software version, information about how a service is being used and the physical location of the device at the time of a software crash. For more information about Crashlytics’ data processing and how you can opt out of data processing at any time, please visit https://try.crashlytics.com/terms/privacy-policy.pdf.
To send our communications via live chat, as well as to evaluate the use of our website, we use the service “Intercom” provided by Intercom Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111, United States. Intercom transmits a limited amount of your data (such as email address and date of registration) for statistical evaluation of your website usage. Intercom analyzes the use of our website and tracks our customer relationships with the aim of improving our offer for you. We also use Intercom to send messages via live chat on our website. More information about Intercom can be found at http://docs.intercom.io/privacy. You can object to data processing at any time in live chat by saying “I disagree with the processing of my data”.
5. Who has access to my data?
Apart from the above-mentioned processing, your personal data will only be transferred with your consent.
If service providers are deployed in a third country, they are required to do so in addition to written instructions by agreeing on EU standard contractual clauses or certification under the Privacy Shield to comply with data protection levels in Europe.
Your personal data will be deleted immediately after completing the application process or after a maximum of 6 months, unless you have given us expressly your consent for a longer storage of your data. Otherwise, we will store and process your personal information as long as it is necessary to fulfill our contractual and legal obligations. If the data is no longer required for the fulfillment of contractual or legal obligations, these are regularly deleted, unless their temporary processing is necessary for the preservation of evidence within the framework of the statutory limitation provisions. According to §§ 195ff. of the Civil Code (BGB) these limitation periods can be up to 30 years, but the regular limitation period is 3 years.
All data subjects have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure (“right to be forgotten”) under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object to Article 21 GDPR, as well as the right to data portability under Article 20 GDPR. With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO i.V.m. § 19 BDSG). You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us prior to the validity of the General Data Protection Regulation, i.e. before 25 May 2018. Please note that the revocation only works for the future. Processing that took place before the revocation is not affected.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147
 § 19