Source: https://www.taledo.com/data-security/
Timestamp: 2019-04-23 21:52:26+00:00

Document:
In the following, we, Taledo GmbH (“Taledo”), would like to inform you about how we process your personal data when visiting www.taledo.com, the recruitment services offered (“the services”) and what rights you are entitled to.
Taledo GmbH, located at Rosa-Luxemburg-Straße 7, 10178 Berlin , is responsible for all data processing. Should you have any questions or suggestions, you may contact us in writing at the aforementioned address, by telephone at +49 (30) 220 6637 0 or by e-mail at [email protected].
1.1 When visiting our website, the web server we use automatically logs information transmitted by your browser. This includes the IP address of the computer or other device you are using, the date and time (including time zone) at which the website was accessed, information regarding which part of our website was visited and the files requested on our website, the transferred data volume, the domain via which the respective request was made (so-called Referrer-URL), the operating system used and the browser used.
The legal basis for data processing enabling the use of the website is Art. 6 para. 1 sentence 1 lit. f) of the Basic Data Protection Ordinance (“GDPR”) or, in the case where you are already registered for the services, the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.
1.2 We also process this information in order to prevent the misuse of our website and services, to analyze and optimize the use of our website and services. The legal basis of this processing can be found under Art. 6 para. 1 sentence 1 lit. f) GDPR, where our legitimate interests are the security and enhancement of our website and services.
Cookies allow us to make our services more user-friendly and effective, by storing the settings which you use to display our services during your visit and providing us with statistical information on the use of the website and our services. Cookies are only set with your consent (Article 6 (1) sentence 1 (a) GDPR).
Most cookies we use are so-called “session cookies”. They are automatically erased after visiting our website. Other cookies remain stored on your device for 14 days, unless they are deleted by your earlier.
Usually, you can set your browser so that you are informed about the setting of cookies, or that the setting is excluded for certain cases or in general, or that you allow the setting of cookies in individual cases. You can also delete saved cookies in your browser settings. However, disabling cookies may limit the functionality of this website.
The IP address transmitted by Google Analytics from your browser is not merged with any other data provided by Google.
You can prevent the storage of cookies by selecting the appropriate setting on your browser. You may however, in this case, not be able to use the full functionality of our website. Furthermore, you can prevent the collection of data generated by the cookies, related to your use of our website and services (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout . You can also prevent the future use of Google Analytics, especially when accessing our website from browsers on mobile devices, by clicking on the following link: here. By clicking on the link, an opt-out cookie is stored on your device. It is thereforenecessary to save it again by clicking on the link if you delete the cookies on your device.
Further information regarding how Google processes personal data in in relation to Google Analytics can be found on the corresponding Google website ( https://marketingplatform.google.com/about/ ) and in Google’s data protection declaration ( https://policies.google.com/privacy?hl=de&gl=de ).
The EU Commission has issued an adequacy decision (No. 2016/1250) for any transmission to the US, according to which companies that meet certain criteria are guaranteed an adequate level of protection, also known as the “EU-US Privacy Shield”. These companies are listed in the so-called “Privacy Shield List” or “Privacy Shield List”. Google is one of the companies listed there. The transmission to Google in connection with Google Analytics is based on Art. 45 and 28 GDPR.
You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.
5.1.1 You must register to use the Services. You have the choice between registering as an employer or an applicant. In both cases, you must enter your name, your e-mail address and a password of your own choice to register.
If you register as an applicant seeking job offers, you must in addition provide the following job-related information, which will be included in your user profile: Your place of residency, work experience, basic information about your preferred job (location, field/industry, position) and your employment status (i.e. whether you are currently actively looking for a new job). You must also send us your CV. The communication of your personal data is not required by law, but is required to conclude the contract regarding the use of our services. You may also voluntarily provide additional information to supplement your user profile, such as your exact professional background, the existence of a work permit and details of your skills and experience.
5.1.2 We will process all of the aforementioned personal data of your user profile solely for the purpose of providing the services on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.
5.2.1 We process the personal data of your user profile in order to provide the services. If you are registered as an applicant, we may also recommend your profile to an employer with regard to a job application, and in this context transfer your personal information stored in your profile.
In addition, we offer communication services through which you can communicate with an employer or applicant. We can thus, for this purpose, transmit data from your user profile and the message content to your communication partner.
The legal basis for the above mentioned data processing is Art. 6 (1) (b) GDPR.
5.2.2 Please note that employers or applicants registered for our services may also be located outside the EU, such as in the US. By providing the services, we can therefore also transfer your personal data to these countries. Transmission will only take place if an appropriate level of protection is guaranteed or if you expressly consent to it after having been informed about the potential risks of such data transmissions without suitable guarantees. The legal basis for these transmissions is Article 6 (1) (b) GDPR and Art. 45 GDPR (if there is an adequacy decision set by the Commission), Art. 46 GDPR (if the respective recipient provides sufficient guarantees) or Art. 47 GDPR, for all other cases.
5.2.3 We may also process the contents of the message in order to improve, detect and prevent misuse of our services. Such data processing is carried out on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest is the optimization of our services and ensuring the proper use of our services.
5.2.4 If a contract between you and an applicant or employer has been concluded, we collect remuneration data from this contract (employment date, job title, and agreed remuneration including any bonus payments). The disclosure of this information is set in the contract regarding the use of our services, so failure to notify us will result in breach of your contract with us. We will process this data together (if necessary with the payment information provided by you) to calculate and bill our compensation as well as, if necessary, to determine your bonus payments, which we may wish to grant you. The legal basis for this processing is Article 6 (1) sentence 1 lit. b) GDPR.
You can register for our newsletter service if you wish to receive regular updates regarding our services.
For the registration and sending of the newsletter we need your valid e-mail address. To make sure that you actually want to receive information from us, we use the so-called double opt-in procedure. Once you have registered, you will receive an e-mail containing a link to activate the newsletter service. Only after you have activated the newsletter service in this way will your registration be effective and the selected newsletter will be sent to you.
Of course, you can unsubscribe from the e-mail newsletter and revoke your consent to receive the newsletter at any time. You can object to the use of your e-mail address at any time without incurring any costs other than the transmission costs according to the basic rates. All you have to do is send an informal e-mail to [email protected] or click on the unsubscribe link contained in each newsletter.
The legal basis for data processing in connection with the newsletter is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
Further personal data is stored if you voluntarily enter it on our website (e. g. when you contact us via the options offered on the website).
We process this personal data to fulfil the purpose noticeably associated with the transmission, e. g. to process your request. The legal basis for this processing of your personal data is Art. 6 Para. 1 S. 1 lit. b) GDPR, in case you enter your personal data for the purpose of initiating a contract. Otherwise, the legal basis of this processing is Art. 6 para. 1 sentence 1 letter f) GDPR. Our legitimate interest is the processing of your request.
8.1 Any communication with you via email is accomplished by using the Gmail service offered by Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA . Your personal data (e-mail address, message content) can also be sent to Google servers outside the EU such as the USA. The transmission to Google is based on Art. 28 and 45 GDPR. For more details, please see paragraph 3. The processing of your personal data is based on Art. 6 Para. 1 S. 1 lit. b) GDPR as long as they are registered for our services. Otherwise, the transmission is based on Art. 6 Par. 1 S. 1 lit. f) GDPR, whereby our legitimate interest is communication with you for processing your possible request.
8.2 We use so-called CRM tools of Sales-force.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (“Salesforce”) for the administration of our customer data. This means that your personal data (email address, message content) may be transferred to Salesforce servers, which may also be located outside the EU such as the United States. Salesforce is on the Privacy Shield List. The transfer to Salesforce is based on Articles 28 and 45 GDPR. The processing of your personal data with the CRM tools is based on Art. 6 Par. 1 S. 1 lit. b) GDPR.
When communicating via our services and uploading content within our services, we ask the user to note that this may be visible to other users. We therefore ask the user to handle the information provided by him/her carefully. Uploaded user content is transmitted in order to fulfil the relevant functions of our services on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.
We process personal data of the user as long as the user is registered for the use of our services or as long as it is necessary to achieve the processing purposes or is prescribed by a legal obligation to store the data. Subsequent to this period, the data is immediately deleted.
However, we store data for legal reasons for as long as this is required by law (up to ten years). Furthermore, we store data, in case legal disputes arise, for as long as this is legally permissible. This can be up to 30 years.
If necessary, we may ask the user, when submitting content, for permission to process the data beyond this period.
Apart from that, Taledo will not pass on the User’s personal data to third parties unless the user has expressly consented to the transfer (Art. 6 para. 1 sentence 1 lit. a) GDPR) and Taledo is not entitled or obliged to do so by legal provisions or court orders. In the latter case, the transmission by Taledo is for the fulfilment of a legal obligation pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR.
The User has the right to obtain from Taledo, in writing and free of charge, the personal data related to him/her which is stored at Taledo, the purposes of processing, its origin, which recipients or categories of recipients the transfer of data has been passed on to, the storage period and his/her relevant rights at his disposal.
The user has the right to request at any time the correction of incorrect data, the deletion and/or restriction of the processing of personal data stored about him, unless Taledo is legally obliged to retain such data. Insofar as this includes personal data required for the provision of services to the user, the deletion or restriction of the processing of such data can only take place when the user no longer uses Taledo’s services.
The user has the right, at any time, to object to data processing based on Article 6 (1) sentence 1 (e) or (f) GDPR for reasons arising from his particular situation, unless Taledo can demonstrate compelling justifiable reasons, which outweigh the interests of the user, or the processing serves to assert, exercise or defend legal claims. The user can object to data processing for the purpose of direct advertising at any time without special reasons being required.
If the user provides data relating to the himself/herself and Taledo processes such data on the basis of the user’s consent or in order to fulfil the contract, the user may request that the he/she receive such data in a structured, current and machine-readable format from Taledo or that Taledo transmit such data to another person responsible to the extent technically possible (so-called right to data transferability).
Any consent given by the user regarding the use of personal data can be freely revoked by the user at any time with effect for the future.
The user may also lodge a complaint with a supervisory authority against data processing which, in his opinion, violates the statutory provisions.
You can exercise your rights by contacting us in writing at Taledo GmbH, Rosa-Luxemburg-Straße 7, 10178 Berlin or via e-mail to [email protected]. Furthermore, our data protection officer Steffen Weber is available to you in writing at INTARGIA Management Consulting GmbH, Max-Planck-Straße 20, 63303 Dreieich or via email to [email protected] .
Taledo receives funding under the Pro FIT-Program of the Investitionsbank Berlin in order to further improve the Taledo platform with the goal of enabling/researching modern headhunting incorporating automation with human elements. The project is co-financed through funds from the European Regional Development Fund (EFRE).

References: Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 6
 Art. 6
 Art. 45
 Art. 46
 Art. 47
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6