Source: https://media.stepstone.de/ueber-stepstone/en/legal-notes/data-protection-policy/?%3E
Timestamp: 2020-08-13 13:54:10
Document Index: 405156672

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 46', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art 26', 'Art. 6', 'Art. 6', 'Art. 26', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 26', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 8', 'Art. 6', 'Art. 89', 'Art. 78']

StepStone data protection policy - Ueber StepStone
Data controller (hereinafter referred to as “StepStone” or “we”) within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
StepStone Germany GmbH
by phone under 0211 93493-0
and by e-mail datenschutz@stepstone.de
the general use of our platforms and our services, where we process data on the basis of a legitimate interest (pursuit of our business interests) or on the basis of your consent
Page Insights in the context of our Facebook fanpage
Further information can be found in the long version of our privacy policy under “Rights of the data subject“.
The data controller (hereinafter referred to as “StepStone” or “we”) in the sense of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:StepStone Deutschland GmbH
Contact details of the data protection officerYou can contact our data protection as follows:StepStone Deutschland GmbH
40219 DüsseldorfContactable by telephone on 0211 93493-0
and by email datenschutz@stepstone.de
In the following we inform you about the different purposes for which we process personal data, on which legal basis such processing takes place, and for how long we store the data.Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 (1) (a) EU General Data Protection Regulation (GDPR) is the legal basis for the processing of personal data. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR will be the legal basis. This also applies to processing operations required to carry out pre-contractual actions. If processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 (1) (c) GDPR is the legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not prevail over the first interest, Art. 6 (1) (f) GDPR is the legal basis for processing.The personal data of the data subject will be stored for as long as the purpose continues.
With each access to our Platforms, we automatically collect data and information from the accessing device and store this data and information in the log files of the server. We may collect (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (known as referrers), (4) the sub-web pages that are accessed on our website (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used to defend any attacks against our IT systems. For security purposes, i.e. to be able to reconstruct an eventual attack against our Platforms, we store such data including the IP address for 14 days and then anonymize or delete such data. The IP address is required during the connection to transfer the contents of our Platform to your device. The legal basis for the processing and storage of the IP address is a legitimate interest as per Article 6 (1) (f) GDPR. The legitimate interest for the transmission of the IP address is that it is required to display the contents of the website; without transmission of the IP address it is not possible to display the content of the Platform. The legimtiate interest for the temporary storage are our security interests
If you register for a newsletter, we use your e-mail address to send you the respective newsletter, in which we regularly inform you about interesting topics. To ensure that you are properly registered for the newsletter, that is, to prevent unauthorized subscriptions on behalf of third parties, we will use a double-opt-in process and send you a confirmation e-mail after your first newsletter subscription; this e-mail will request you to confirm the subscription. The legal basis for sending the double opt in email is a legitimate interest in the sense of Art. 6 para 1 f GDPR. The legal basis to send the newsletter after confirmed double opt in is your consent in accordance with Art. 6 (1) sentence 1 a GDPR. In connection with your newsletter registration, we also store your IP address plus the date and time of registration and confirmation, so that we can trace and prove the registration at a later date. The legal basis for this storage is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR, where the legitimate interest is in being able to prove the registration. We will store your email address for sending you the newsletter until you unsubscribe or we stop sending the newsletter to you. Additionally we may send emails about StepStone services that are similar to those you already use. Legal basis is a legitimate interest as per Art. 6 (1) sentence 1 f GDPR, namely the pursuit of our business interests. The newsletters contain what are known as tracking pixels tor the statistical evaluation of our newsletter campaigns. This is a miniature graphic embedded in HTML-formatted e-mails that lets us know if and when you opened an e-mail and which links in the e-mail were accessed. In this context your IP address will be transmitted to our servers, but we will not store the IP address or any other personal data. The legal basis for the use of these tracking pixels is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR, where the legitimate interest is in being able to evaluate and optimize our newsletters.
You may object to all types of StepStone newsletters at any time without incurring any costs other than the transmission costs at the basic rates (i.e., the cost of your internet service provider).
We offer webinars on our websites, these are seminars that are conducted online about our products and services and other topics about recruiting and job search. When you register for a StepStone webinar, we collect certain information to enable you to participate in the webinar. The legal basis here is your consent in accordance with Art. 6 (1) sentence 1 a GDPR. We will store the data for this purpose until the webinar has taken place. Furthermore we will use the information you have provided to us to provide you with marketing as described in section 3.1.4, which is included herein by reference. Some of these webinars are held, if these are directed at businesses, together with StepStone Österreich GmbH, Prinz Eugen-Straße 8-10, 1040 Wien, Österreich, which is an affiliated company with us. In this case StepStone Österreich and we are joint controller under data protection laws. In this context we provide the electronic infrastructure to conduct the webinar. The exact content, time and date, and which of our employees shall present the webinar will be defined jointly by the parties on a case by case basis. The use of the personal data for the conduct of a webinar will be done jointly, while the use for marketing purposes will be done individually and separately from each other. In the latter case we will provide the personal data to StepStone Österreich GmbH which will then use the data in accordance with their privacy statement (s. there in 3.1.4), if an Austrian address was provided. Further details about the processing of personal data can be found in the privacy policy of StepStone Österreich GmbH at https://www.stepstone.at/ueber-stepstone/legal-information/privacy-statement/.We use LogMeIn, Inc., 333 Summer Street, Boston, MA 02210 USA to collect the registration data and provide the webinar as a data processor, and this party will be a recipient of your personal data in this context. Data will be transferred to the USA, i.e. into a country outside of the EU or the EEA. The transfer is permitted under Art. 45 GDPR as LogMeIn, Inc., is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The Privacy Shield notice can be accessed at https://www.logmeininc.com/de/legal/privacy-shield. Additionally, we have entered into the standard contractual clauses which are available at https://logmeincdn.azureedge.net/legal/20180926/DPA/LMI-Customer-Data-Processing-Addendum-2018-v2-GDPR-SAMPLE.pdf as a sample, so that a transfer is also permitted under Art. 46 (2) (c) GDPR.
StepStone surveys
StepStone organizes market surveys from time to time. As part of such surveys we will use the IP address during the connection (which is permitted under Art. 6 para 1 f GDPR, because it is technically necessary to use the IP address to diplay our content on your device). We will not connect any other personal data as part of the survey, but at the end of the survey we might offer you the opportunity to participate in a competition. In order to participate in the competition you will have to provide us with your e-mail address, which we will only use for the purpose of the competition to notify you if you have won a prize. In particular, the e-mail address will be stored completely separately from your answers to the survey. The legal basis for the storage of your email address is your consent under Art. 6 (1) (a) GDPR. We will store your email address for this purpose until the end of the respective competition.
In this context we use Easyfeedback GmbH, Ernst-Abbe-Straße 4, 56070 Koblenz, Germany as data processor. They provide the platform on which the surveys take place. Easyfeedback uses PlusServer GmbH, Hohenzollernring 72, 50672 Cologne, Germany as host provider and for server management as additional processor, so that these are recipients of data. In any case they only process the data according to our instructions.
For the sending of e-mails and messages through other electronic channels we use the services of Selligent SA, 1420 Braine-l’Alleud, 2 avenue de Finlande, Belgium, as a data processor who in turn uses the following subcontractors
Accordingly, these parties may also be provided with your personal data in the course of data processing commissioned by us. It will be stored there for a period that is otherwise lawful for purposes under this Data Protection Policy, i.e. in particular for the contractual communications in the course of contracts with you or otherwise for promotional communications. The use of Selligent, Inc. is permitted under Art. 45 GDPR, as they are Privacy Shield certified and thus, according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content / DE / TXT / HTML /? Uri = CELEX: 32016D1250 & from = DE), an adequate level of data protection exists. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000PBKYAA4&status=Active.
We use Akamai Technologies GmbH, Parkring 20-22, 85748 Garching, Germany and Akamai Technologies, Inc., 150 Broadway, Cambridge, 02142 MA, USA as data processors for the purposes of proxy caching and web application firewall services. That means that any visit to our websites is routed through the servers of Akamai, meaning that the user will not be connected directly to our servers but to those of Akamai and Akamai will then request the content from our servers and will deliver it to the user. Proxy caching in this context means that Akamai will cache selected content (but not personal data) for a period of 24 hours, so that this can be delivered faster to you. The web application firewall means that Akamai will try to identify malicious web traffic and will prevent it from accessing our websites. Akamai does not store any personal data, but any dataflows between our servers and the user will be routed through Akamai, so that this can also include personal data. Data transferred to Akamai Technologies, Inc is transferred outside the EU and the EEA. This is permissible under Art. 45 GDPR because Akamai Technologies, Inc is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.With respect to Akamai, the additional legitimate interest in the context of the legal basis is that we thereby are also implementing technical and organizational measures to protect our Platforms and the personal data stored on them.
In specific cases we use the reCAPTCHA service https://www.google.com/recaptcha/intro/ by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (“Google”) based on a legitimate interest (i.e. the interest to ensure the correctness of data, avoidance of automatic registrations / orders by so-called bots, and economical operation of our online offering within the meaning of Art. 6 (1) f) GDPR).Google is certified under the Privacy Shield Agreement and thus warrants that it complies with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).We use re-Captcha to distinguish whether an input is made by a human or abusively by automated, mechanical processing. The query in this context includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google. Your input will be transmitted to Google and analyzed for this purpose.For more information about Google reCAPTCHA and Google’s Data Protection Policy, please visit the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
We use cookies on our websites. Cookies are text files that are stored on a computer system via an Internet browser. We use such cookies both as a technical means of providing services on our Platforms as well as for analyzing the website behavior of our visitors and on that basis developing a more user-friendly design of our offerings. For this purpose, we may also use other techniques, such as tracking pixels or code in apps. In addition, we may use these cookies or other techniques to target you with interesting job advertisements and other content. For the sake of clarity, we have moved the information on cookies and similar techniques in section 4 of this Data Protection Policy. More details can be found there.
Data processing if you register for a Job Agent or a MyStepStone account
First, we offer you the opportunity to enter into a contract to receive a Job Agent. The purpose of data processing in the context of a Job Agent is for us to send you regular e-mails about job vacancies that correspond to a predefined profile or are recommended to you based on your user behavior. Details of the Job Agent can be found in our Terms of Use. The jobagents contain tracking pixels tor the statistical evaluation of the jobagents. Tracking pixels are miniature graphics embedded in HTML-formatted e-mails that let us know if and when you opened an e-mail and which links in the e-mail were accessed. Thereby we can adjust the jobs in the job agent even better to your needs. In this context your IP address will be transmitted to our servers, but we will not store the IP address. The legal basis is Art. 6 (1) (b) GDPR. We store the data under a contract for the use of the Job Agent for the duration of the contractual term, i.e. until you or we terminate your Job Agent.
Second, we offer you the opportunity to enter into a contract for a MyStepStone account, where you can use additional functions and correspondingly define the scope of the contractual use. The purposes of the data processing under this contract are that:
You will automatically receive a JobAgent and you can use additional functionalities of a JobAgent (see 3.2.1)
As part of your My StepStone account we offer you a salary planer. The the StepStone salary planer compares the information you enter about your current job situation, salary, professional experience, education, age, and gender with the same data of other users in an aggregated statistical database, and analyzes this comparison in order to present a salary comparison for you. The legal basis is the existing agreement with you on MyStepStone. We can only provide you with the salary planer if we can statistically analyze all salary related details from all users. Therefore, we collect the information you have provided in a statistical database in order to prepare the salary comparison. We will not store any personal data about you that could be linked directly to you. In particular, we will not store your email address in this database. The legal basis for this processing is a legitimate interest of StepStone to provide the salary planer and there is no reason why any of your interests or fundamental rights and freedoms which require protection of personal data override our interest.
With Facebook Connect, you can use your Facebook account to open a new MyStepStone account at StepStone or to connect to a MyStepStone account. If you create a MyStepStone account via Facebook or log in to an existing MyStepStone account via Facebook, we will gain access to your public profile and your e-mail address.We use this information to pre-populate or update your MyStepStone account at StepStone and then provide you with the MyStepStone account in accordance with clause 3.2.2.Since we use your Facebook data to create a MyStepStone account, the legal basis is the contract for the MyStepStone account pursuant to Art. 6 (1) (b) GDPR, as in described in clause 3.2.2. We will store your personal data for the purposes and period described in point 3.2.2.
Data processing about businesses and their employees
We process personal data for the purpose of contract management, that is, so that we can provide our customers with the contractual services and also for associated pre-contractual purposes. If the customer is a natural person, the legal basis is that the processing is required for the performance of a contract or for the performance of pre-contractual measures pursuant to Art. 6 (1) sentence 1 b GDPR. If we process personal data of employees of the customer, the legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the conduct of our business and that of the customer. There is no conflicting interest of the data subject because, from the point of view of our customer, we are required to perform the processing in the context of the existing employment relationship with the data subject (section 26 revised German Data Protection Act (BDSG-neu). We store personal data for this purpose for the term of the contract.Furthermore, we store accounting records for the duration of ten years and business correspondence, i.e. every message that is used to prepare, execute, or revoke a business transaction, for the duration of six years, in order to comply with statutory retention periods for business correspondence under section 257 (1) no. 2 German Commercial Code (HGB) and section 147 German Tax Code (AO), whereby the term begins at the end of the calendar year in which the correspondence was sent or received or the accounting record came into existence. The legal basis for this purpose is Art. 6 (1) (c) GDPR.
In order to use and manage their contractual services, our customers or their employees can use the StepStone Recruiter Space. In this context, we process such personal data of the respective customer or its employees as was provided by them, as well as the respective contractually agreed or offered services and the manner in which they are utilized. When using our Direct Search Database we also collect and save when which CVs were accessed. In order to prevent abuse and thereby guarantee proper billing and to ensure and verify that the StepStone Recruiter Space and the contractual services are functioning correctly at all times, and in particular to allow our customer service team to solve problems that may arise for specific customers, we will, upon every use of the StepStone Recruiter space, additionally collect and store the Corporate User ID (i.e. the user’s username) and the Company ID (i.e. the name of this customer based on the specific user’s affiliation with a specific StepStone customer).If the customer is a natural person, the legal basis is that the processing is required for the performance of a contract or for the performance of pre-contractual measures pursuant to Art. 6 (1) sentence 1 b GDPR. If we process personal data of the customer’s employees, the legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the conduct of our business and that of the customer. There is no conflicting interest of the data subject because, from the point of view of our customer, we are already required to perform the data processing in the context of the existing employment relationship with the data subject (section 26 revised German Data Protection Act (BDSG-neu). Personal data will be stored for this purpose for the term of the contract for the use of the StepStone Recruiter Space.Additionally, we use the data collected under this section in anonymous form to produce statistics about the general behavior of the customers of the Direct Search Database. This allows us to make the services more customer-friendly. The legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the execution of our business activities.
Every now and then we use questionnaires for customer satisfaction. We use the answers given by the respective participant to evaluate the satisfaction with our services. We can also publish the answers in anonymized and/or aggregated form. Insofar as we process personal data in this context, i.e. for evaluation and/or anonymous or aggregated publication, the legal basis is a legitimate interest pursuant to Art. 6 Para. 1, S. 1 f DSGVO, namely the interest in optimizing our services and the publication of customer opinions about our services.
We occasionally receive feedback from our customers in text form, which we would like to publish. We reserve the right to publish such feedback in anonymous form. The legal basis for is also a legitimate interest, namely the use of customer feedback for advertising purposes. In individual cases, we may also wish to publish non-anonymized customer opinions about our services. In such cases, we obtain the prior consent of the parties concerned in accordance with Art. 6 Para. 1, S. 1 a DSGVO. We store the data in the context of the use and publication of customer satisfaction responses for as long as we are still interested to use the responses and (in case of non-anonymous use) as long as the data subject has not withdrawn consent.
We use a facebook fanpage at https://www.facebook.com/stepstone.de/. Facebook provides Page-Insights for that fanpage to us. Page-Insights are aggregated data, which allow us to understand how users interact with our fanpage. Page Insights can be based on personal data which is collected in relation to a visit of or an interaction with our fanpage and its content by users. Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland („Facebook Ireland“) and we are joint controllers in the sense of Art 26 GDPR for the processing of Insights data and we have entered into an arrangement with Facebook Ireland which you can find at https://www.facebook.com/legal/terms/page_controller_addendum. Legal basis for our use of the fanpage and Page-Insights is a legitimate interest in the sense of Art. 6 para 1 f GDPR, in relation to the fanpage that means the use of Facebook as channel of communication about our company and in relation to Page Insights the better understanding of the interests of visitors of our fanpage so that we can specifically serve these interests.
We use cookies on our websites. Cookies are text files that are stored on a computer system via an Internet browser. We use such cookies both as a technical means of providing services on our Platforms, for enabling e.g. certain functions, as well as for analyzing the website behavior of our visitors and on that basis developing a more user-friendly design of our offerings. For this purpose, we can also use other techniques, such as tracking pixels or code in apps. In addition, we may use these cookies or other techniques to target you with interesting job advertisements and other content.Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (known as session cookies). Other cookies are kept on your end device and enable us or our partner companies to recognize your browser on the next visit (persistent cookies).If not specifically stated below, you can view the exact retention period of a given cookie by displaying the cookie in your browser.You can set your browser up such that you are notified when a cookie is set and can decide individually whether to accept them or whether you opt out of accepting cookies for specific cases or generally. If you opt out of accepting cookies, the functionality of our website may be limited. We deal with specific cookies or similar technology below.
We use technical cookies. These are cookies that are merely required to collect certain information on our Platforms to provide a service required or wanted by you as user. This extends to navigation or session cookies that enable smooth navigation and use of the website (and for instance permit access to the restricted area); analysis cookies that are set directly by us to collect aggregated information about the number of users and their behavior; functional cookies that provide you with navigation by certain selected criteria as part of a service optimization (e.g. selected language, purchase of selected products).The legal basis for these cookies is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes.
On our website we use services by Criteo SA, 32 Rue Blanche, 75009 Paris in the framework of our common responsibility as defined under Art. 26 GDPR.The purpose of the processing is retargeting, which means that when you have viewed certain offers on the website, we may show you advertising for similar offers from us on websites or other third-party platforms. We designate the scope of the respective advertising campaign in line with the contract with Criteo. The implementation of this advertising campaign, including the decision on which advertisements are delivered where is then the responsibility of Criteo. To that end a code from Criteo is executed on our pages directly by Criteo and what are known as (re)marketing tags (invisible graphics or code, also known as web beacons) are integrated into the website. These are used to store an individual cookie, i.e. a small file on your device (comparable technologies may also be used instead of cookies). This file records which websites the user locates, the content he or she is interested in and which offers he or she has clicked. It also stores technical information on the browser and operating system, referring websites, time of visit and other information on the use of the online offering. Criteo may also combine the above information with information from other sources. If the user subsequently visits other websites, tailored advertisements can be displayed depending on his or her interests.Further information and means of objecting to this data recording by Criteo can be found in Criteo’s privacy policy:
http://www.criteo.com/de/privacy.Criteo stores the data for 13 months and the cookies set by Criteo expire automatically after 13 months.Within the scope of the joint responsibility for the data processing described in this clause 4.1, you can assert your rights under the GDPR against us and Criteo either with us or with Criteo.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes.
Our websites use web and security analysis techniques from Akamai Technologies, Inc. (“Akamai”). These techniques use cookies, text files and beacons that are stored on your computer and that enable Akamai (i) to perform security analyses and thus prevent unauthorized access to our websites and (ii) to analyze the use of the websites by you. The information generated by the cookies or beacons about the access to our websites, including your IP address and other data from log files, is transferred to Akamai’s servers, some of which are located in the USA, where it is stored and processed. This is permissible under Art. 45 GDPR because Akamai is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.Akamai will use this information to prevent unauthorized access to the websites, to produce reports about website activity for us, to perform further services associated with the website use and Internet use, and to analyze your use of our websites. Akamai may also pass this data to third parties if Akamai is required to do so by law or if these third parties are processing this data on behalf of Akamai. Akamai will not use the data to identify natural persons. You can prevent the storage of cookies or beacons by making a corresponding setting in your browser software; however, note that if you do so you may not be able to use the full functionality of this website. You can view the precise storage duration of the cookies for yourself by accessing this information via your respective browser.For further information on terms of use for the processing of personal data by Akamai and on Akamai’s data protection policy, see https://www.akamai.com/de/de/privacy-policies/.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes and the protection of our websites.
On our websites we use services provided by ADITION technologies AG, Oststraße 55, 40211 Dusseldorf, who acts as data processor. ADITION uses cookies to control and optimize the display of advertising material that we display for the user. This concerns, for example, the maximum display frequency of advertising material that a user sees. In addition, ADITION occasionally uses stored cookie information for statistical surveys. By setting cookies, ADITION does not store personal data such as name, e-mail address or other personal information. All information is purely anonymous and contains technical information such as the frequency of advertising and the date of the advertisement, the browser used or the operating system installed. A storage of personal data does not take place. ADITION works strictly in accordance with German data protection law in all processes of data collection. All stored data is stored on servers in the Federal Republic of Germany. In addition, ADITION meets all P3P requirements (Privacy Preferences Project). For information on ADITION’s privacy policy, please visit www.adition.com/contact/data-protection/. Clicking on the following link will stop the collection of anonymous data: www.adition.com/kontakt/datenschutz/?optout=trueAdTraxx.The legal basis for the use of Adition is a legitimate interest under Art. 6 para. 1 sentence 1 f GDPR. Our legitimate interest is the user-friendly design of our services.
We use the service Sentry provided by Functional Software Inc., 132 Hawthorne Street, San Francisco, California 94107, to improve the technical stability of our service by monitoring system stability and detecting code errors. Sentry serves solely for these purposes and particularly does not evaluate any data for promotional purposes. The data about users, e.g. information about the device or the time of an error will be collected anonymously and will not be used for personal purposes and will subsequently be deleted. For more information, see the Sentry privacy policy: https://sentry.io/privacy/. The transfer is permitted under Art. 45 GDPR, because Functional Software Inc. is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The Privacy Shield notice can be accessed at https://www.privacyshield.gov/participant?id=a2zt0000000TNDzAAO&status=Active. The legal basis for the use of Sentry is a legitimate interest under Art. 6 (1) sentence 1 f DSGVO. Our legitimate interest is the user-friendly design of our services.
We use Hotjar, a web analytics service of Hotjar Ltd, Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (“Hotjar”) in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on https://www.hotjar.com/privacy.You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this link https://www.hotjar.com/opt-out.We have a contract processing agreement with Hotjar. The use of Hotjar is based based on a legitimate interest according to Art. 6 para. 1 p. 1 f GDPR. Our legitimate interest is the user-friendly design of our websites.
To analyze the usage of our apps, we use the app analysis service AppSee of Shift 6 Ltd. Menorat Hamaor 3, Tel Aviv, Israel.The user behavior within the apps is analyzed in order to identify causes of errors and to constantly improve the user experience. Only anonymous data is collected and stored, details of the stored information can be found at https://support.appsee.com/customer/en/portal/articles/2686233-what-types-of-data-does-appsee-capture. A storage of personal data does not take place. To create the anonymized data, your IP address may be processed by Shift 6 and its affiliate US company AppSee Inc. Such processing can also take place in the US or Israel. A transfer of personal data to Israel is allowed under the Adequacy Decision 2011/61 / EU (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32011D0061), as Israel is therefore has a level of data protection that is adequate compared to the EU’ and in the US Appsee Inc is certified under Privacy Shield, and thus in accordance with Commission Implementing Decision (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/? uri = CELEX: 32016D1250 & from = DE) there is an adequate level of data protection. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000TSUAAA4&status=Active.You will find further information about the privacy of Appsee at: http://www.appsee.com/legal/privacypolicy.The legal basis for the use of Appsee is a legitimate interest under Art. 6 para. 1 sentence 1 f GDPR. Our legitimate interest is the user-friendly design of our offers.You can object to the use of Appsee at any time by changing the setting of the slider for anonymous statistics in the app under “Settings”.
We use the the Fabric Crashlytics service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to better address technical issues related to our mobile apps. Fabric Crashlytics is an analytics service that collects technical information about the device (such as the operating system and model) and app usage data, specifically related to system crashes and errors. We use this information to collect data on app usage specifically related to system crashes and errors, and to better understand how our users use the app to improve the app. The information collected is available only in anonymous form. A storage of personal data does not take place. Google Ireland Limited may use Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, as a subcontractor. Google Inc. is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Other subcontractors that Google can use can be found here: https://fabric.io/terms/subprocessors.For more information, see the Fabric Crashlytics Terms of Use at: https://fabric.io/terms.The legal basis for the use of Fabric Craslytics is a legitimate interest under Art. 6 para. 1 sentence 1 f GDPR. Our legitimate interest is the user-friendly design of our apps.You can opt out of using Fabric Crashlytics at any time by changing the setting of the slider for anonymous statistics in the app under “Settings”.
We also use the app analysis service Adjust (adjust GmbH, Saarbruecker Str. 38a, 10405 Berlin) to analyze the usage of our apps. The Adjust service has been tested and certified according to the ePrivacyseal (European Privacy Seal) (see https://www.eprivacy.eu/en/customers/awarded-seals/).When using the app, Adjust collects installation and usage data on our behalf. We use this anonymous information to understand how our users interact with our app. Adjust uses your anonymized IDFA or Android ID as well as your anonymized IP and MAC address. It is not possible to identify you. A storage of personal data does not take place accordingly.For more information, see Adjust’s Privacy Policy: https://www.adjust.com/privacy-policy/.The legal basis for the data analysis and use of Adjust is a legitimate interest (ie interest in the analysis, optimization and economic operation of our apps) in the sense of Art. 6 (1) (f) GDPR for the purposes of our own Market research, advertising purposes and the optimization and user friendly design of the apps. There is no apparent conflicting interest, especially since we have concluded a data processing agreement with Adjust.You can opt out of using Adjust at any time by changing the setting of the slider for anonymous statistics in the app under “Settings”.
We use Liftoff Mobile Inc. (Liftoff) – 555 Bryant Street, Suite, 133, Palo Alto, CA 94301, USA. We are Joint Controllers with Liftoff and entered into a contract with them according to Art. 26 GDPR. We use Liftoff for retargeting purposes and for the purpose to exclude users from retargeting, who already installed the StepStone mobile application(App). For that reason, we transmit data from Adjust to Liftoff. Processed data is especially the ADID/IDFA (special Ad Tracking ID of your mobile device). Liftoff uses this data within its ad network with the purpose to publish StepStone Ads or to exclude users from them. The legal basis of this processing operation is Art. 6 I lit. f GDPR. Our legitimate interest regarding the exclusion of distribution of ads is that we do not want to distribute ads to already existing users. Regarding the distribution of ads our legitimate interest is to promote our products and services. Liftoff is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt00000008P8wAAE&status=Active). Liftoffs European representative is Liftoff, Mappin House, 4 Winsley Street, London W1W 8HF, UK and reachable under gdpr@liftoff.io. Transmitted data will be deleted after contract termination with Liftoff or if you haven’t used the StepStone App for 30 days. You can opt out of at any time by changing the setting of the slider for anonymous statistics in the app under „Settings”.
In our apps we use technology from Google Firebase (Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, “Google”) with various functionalities.Firebase Analytics enables the analysis of the use of our apps. This completely anonymized information about the use of our app is collected and transmitted to Google and stored there. Google uses the advertising ID of the device. Google will use this information to evaluate the use of our app and to provide us with other services related to the use of apps. In Device Settings, you can restrict the use of the Advertising ID (iOS: Privacy / Advertising / No Ad Tracking, Android: Account / Google / View). Google Analytics for Firebase (Google Inc.). We also use Firebase Remote Config, which allows us to run A / B tests and customize the behavior and appearance of the app without having to download a new version. Personal data is not stored.Google Inc. is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Subcontractors that Google can use can be found here: https://firebase.google.com/terms/subprocessors.The legal basis for the use of data analysis and the use of Firebase is a legitimate interest (ie interest in the analysis, optimization and economic operation of our apps) within the meaning of Art. 6 (1) (f) GDPR).You can opt-out of using Firebase at any time by changing the setting of the slider for anonymous statistics in the app under “Settings”.
The “Facebook Pixel” from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, is used within our website. This means that what are termed tracking pixels are integrated into our pages. When you visit our pages, the tracking pixel creates a direct link between your browser and the Facebook server.This provides Facebook with the information from your browser for instance that our page was accessed by your device. If you are a Facebook user, Facebook can allocate the visit to our pages to your user account. Please note that as the provider of the pages we are not informed about the content of the data transferred or its use by Facebook. We can merely choose which segments of Facebook users (age, interests) our advertising is to be shown to.By accessing the pixel on your browser, Facebook can also identify whether displaying an advertisement on Facebook was successful, e.g. if it resulted in an online sale being completed. This enables us to record the effectiveness of Facebook advertisements for statistical and market-research purposes.Please click here if you wish to opt out of data recording via Facebook Pixel: https://www.facebook.com/settings?tab=advertisements#_=_. Alternatively, you can deactivate the Facebook Pixel on the Digital Advertising Alliance page via the following link:http://www.aboutads.info/choices/.Transfer of data to the USA is permissible under Art. 45 GDPR because Facebook is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes and the targeted marketing of our services.
Our websites use the remarketing or “similar audiences” function from Google Inc. (“Google”). This enables us to target the visitors to our websites with advertising by displaying personalized, interest-driven advertisements to the users of the website when they visit other websites in the Google Display network. Google uses cookies to perform the analysis of the website use, on the basis of which the interest-driven advertisements are generated. No personal data of the website visitors is stored. If you then visit another website in the Google Display network, you will be shown advertisements that are highly likely to relate to product and information areas you have previously accessed.You can permanently deactivate the use of cookies by Google by clicking the following link and downloading and installing the plug-in provided there: https://www.google.com/settings/advertisements/plugin. Alternatively, you can deactivate the use of cookies from third-party providers by accessing the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/ and the implementing the additional information about opting out as set out there. For further information on Google Remarketing and Google’s data protection policy, click: http://www.google.com/privacy/advertisements/.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes and the targeted marketing of our services.
On the grounds of our legitimate interests (i.e. interest in the analysis, optimization, and economical operation of our online offering within the meaning of Art. 6 (1) (f) GDPR), we use the marketing and remarketing services (for short: “Google Marketing Services”) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).Google is certified under the Privacy Shield Agreement and thus warrants that it complies with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).The Google Marketing Services enable us to display advertisements for and on our website in a more targeted manner to so that users are only shown advertisements that they may be interested in. If a user sees e.g. advertisements for products that he or she was interested in on other websites, this is referred to as “remarketing”. For this purpose, when our websites and other websites are accessed on which Google Marketing Services are active, Google directly executes a Google code and what are termed (re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. These are used to store an individual cookie, i.e. a small file on the user’s device (comparable technologies may also be used instead of cookies). The cookies may be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which websites the user searches for, the content he or she is interested in and which offers he or she has clicked. It also stores technical information on the browser and operating system, referring websites, time of visit, and other information on the use of the online offering. Similarly, the user’s IP address is recorded, whereby in the context of Google Analytics we state that the IP address is shortened in within Member States of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is it transferred in full to a Google server in the USA and shortened there. The IP address is not merged with the user’s data within other Google offerings. Google may also combine the above information with information from other sources. If the user subsequently visits other websites, tailored advertisements can be displayed depending on his or her interests.The user’s data is processed in a pseudonymized form as part of the Google Marketing Services. This means that Google stores and processes e.g. not the user’s name or e-mail address, but instead processes the relevant data based on the cookie within pseudonymized user profiles. This means that, from Google’s perspective, the advertisements are not managed and displayed for a specifically identifiable person, but for the holder of the cookie, irrespective of who the holder of this cookie is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information about the user collected by Google Marketing Services is transferred to Google and stored on Google’s servers in the USA.The Google Marketing Services deployed by us include the “Google AdWords” online advertising program. Google AdWords supplies every AdWords customer with a different “conversion cookie”. This means that cookies cannot be traced via the websites of AdWords customers. The information obtained using the cookie enables conversion statistics for AdWords customers to be produced who have opted for conversion tracking. The AdWords customers are notified of the total number of users who clicked their advertisement and were forwarded to a page containing a conversion tracking tag. However, they are not given any information that could be used to personally identify users.We may involve third parties on the basis of the “DoubleClick” Google marketing services. DoubleClick uses cookies that enable Google and its partner websites to place advertisements on the basis of users’ visits to this website and other websites on the Internet.Additionally, we may deploy the “Google Tag Manager” to integrate and manage the Google analytics and marketing service within our website.For further information on data usage for marketing purposes by Google, refer to the overview page: https://www.google.com/policies/technologies/advertisements; Google’s privacy policy can be accessed at https://www.google.com/policies/privacy.If you would like to opt out of interest-driven advertising from Google Marketing Services, you can use the settings and opt-out options provided by Google: https://www.google.com/policies/privacy
Our online services use the Microsoft Conversion Tracking (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads sets a cookie on your computer if you have accessed our website via a Microsoft Bing ad. Microsoft Bing and we can thus recognize that someone clicked on an ad, was redirected to our website, and reached a previously determined landing page (conversion page). We are only informed of the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user is provided to us. If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie – for example, via a browser setting that generally deactivates the automatic setting of cookies. For more information about Microsoft Bing privacy and cookies, visit the Microsoft Web site: privacy.microsoft.com/en-us/privacystatement. The use of Bing Ads Conversion Trackin is permitted under Art. 45 GDPR, because Microsoft is is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The Privacy Shield notice can be accessed at https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active. The Legal basis is a legitimate interest in accordance with Art. 6 para. 1 sentence 1 f DSGVO, namely the pursuit of our business purposes.
This website is marketed by Media Impact (Media Impact GmbH & Co. KG, Axel-Springer-Strasse 65, 10888 Berlin). In this context advertising is optimized for you by the collection and processing of your usage behavior and geared to forecasted interests. This will benefit you as a user by giving you advertising that is more in line with your interests and less overall randomly delivered advertising. To record your usage behavior, a cookie is stored on your computer, but no personal identification of your person is possible. The legal basis is Article 6 (1) sentence 1 f GDPR, namely the pursuit of our business purposes, namely the targeted advertising of our services.For more information on usage-based online advertising, please visit the following link: https://www.mediaimpact.de/artikel/-ueber-unsere-Werbung_31787984.html.The service provider that Media Impact uses to market our sites is Contact Impact, Dr.-Leo-Ritter-Straße 2, 93049 Regensburg.If you do not want to receive any use-based ads from Contact Impact, you can opt-out using the following link and opt-out: https://contactimpact.com/optout.
The tracking of Ad Up, a technology and service provider of Axel Springer Teaser Ad GmbH (Axel-Springer-Strasse 65, 10969 Berlin), is integrated on our websites. By collecting anonymised and / or pseudonymous data, Ad Up will be able to display advertisements for a specific time on websites.Ad Up uses cookies to provide advertisers with a so-called conversion tracking that determines the effectiveness of their ads and keywords. The legal basis is Article 6 (1) sentence 1 f GDPR, namely the pursuit of our business purposes, namely the targeted advertising of our services.More information on the data protection of Axel Springer Teaser Ad GmbH is available at https://www.adup-tech.com/datenschutz/. Via the button “Activate opt-out cookie” you also have the possibility to set an opt-out-cookie in your browser and deactivate Ad Up in this browser
Our websites use Optimizely, a web-analytics service from Optimizely Inc. (631 Howard Street, Suite 100, San Francisco, CA 94105, United States) for the simplification and performance of A/B tests to further develop this website. The information generated by a cookie about your use of the website is usually transferred to one of Optimizely’s servers in the USA and stored there. The cookie generated by Optimizely has a term of ten years.Transfer of data to the USA is permissible under Art. 45 GDPR because Optimizely is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000TNkWAAW&status=Active.Your opt-out option: You can deactivate tracking by Optimizely at any time by following the instructions at https://www.optimizely.com/opt_out.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes.
We use the “Tealium Audience Stream”, a service by Tealium Inc., 11085 Torreyana Road, San Diego, CA 92121, USA (Tealium) within our website. This collects and stores data that we use to create pseudonymized user profiles. On our behalf, Tealium will use this information to structure your use of the website in line with your needs automatically and in real time and to display advertising. For this purpose, information including the following is collected: viewed and clicked advertisements, articles, advertising, visitor numbers, subject matter of the page, etc.The pseudonymized user profiles are not merged with personal data about the bearer of the pseudonym without consent, which must be provided separately. Similarly, the IP address transmitted by your browser is not merged with the usage profiles.Cookies are used is used to create the usage profiles, or similar technology for mobile end devices. The information generated by the cookie about your use of this website is stored exclusively in Germany. You can prevent the storage of the cookies by making a corresponding setting in your browser software; however, please note that if you do so you may not be able to use all functions of this website fully.You may opt out of the data collection and storage for the purposes of web analysis and the placement of advertisements with future effect by following the instructions on http://tealium.com/de/privacy/.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes.
This website uses a Tag Management System (TMS), a service from Tealium Inc., 11085 Torreyana Road, San Diego, CA 92121, USA (Tealium), for the dynamic customization of parts of the website. To enable this functionality, a cookie called utag_main is set. The TMS is needed for us to provide our services and can therefore not be deactivated. The cookie has a term of twelve months.Data transferred to Tealium is transferred to the USA and thus to a country outside the EU and the EEA. This is permissible under Art. 45 GDPR because Tealium is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000TSaYAAW&status=Active.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes.
We use Adobe Analytics, a web-analytics tool from Adobe Systems Software Ireland Limited, that enables us to optimize our services in line with your requirements.Adobe Analytics uses cookies that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transferred to servers of the service in Ireland where it is anonymized. It is then transferred to servers in the USA for further processing, where it is stored. Adobe uses this information to evaluate your use of the website to compile reports on website activities for the website operators and to provide further services connected with the use of the website and the Internet.No personal data is stored because of the anonymization.As a user of our websites you of course have the option to block cookies at any time in your browser settings. You can opt out of any future recording of your user behavior on the Platform at any time; click the following link for instructions on how to deactivate cookies on your computer: https://www.adobe.com/privacy/opt-out.html.The legal basis for processing this data is a legitimate interest under Art. 6 (1) (f) GDPR. The legitimate interest as defined by Art. 6 (1) (f) GDPR that we are pursuing by processing the data described above is our interest in structuring our offerings in a user- and demand-driven manner. No conflicting interest is apparent, especially because you may opt out at any time.
We use Nielsen Digital Ad Ratings Services provided by Nielsen Company (Germany) GmbH, which acts as a subcontractor of Musiol Oldigs Meyer Markendienst GmbH. For the purpose of the web analysis on this website cookies are used in this context. The web analysis is used to create statistical analysis of the use of our website and its services. The purpose is to better understand the use of our website and its services and to improve its effectiveness and efficiency. As part of the web analysis and the associated cookie only anonymous user information is recorded.
You may object to the cookies being set by Nielsen at any time by following the instructions on the following page: https://priv-policy.imrworldwide.com/priv/browser/de/en/optout.html#choices. Legal basis is a legitimate interest under Article 6 paragraph 1 f of the GDPR, namely the pursuit of our business interests.
Our websites use ScorecardResearch Beacon, a service by Full Circle Studies, Inc., 11950 Democracy Drive, Reston, VA 20190, USA. Among other things, ScorecardResearch Beacon uses cookies that are saved on your computer and enable an analysis of your use of the website. During use, data such as in particular the IP address and users’ activities may be transmitted to a server of Full Circle Studies, Inc. and stored there in anonymous form, personal data is not stored. Full Circle Studies, Inc. may transfer this information to third parties to the extent that this is prescribed by law or where third parties process the data. You may prevent the collection and forwarding of personal data (in particular your IP address) and the processing of the data by deactivating JavaScript in your browser or installing a tool such as NoScript (www.noscript.net). You can find further information on data protection when using ScorecardResearch Beacon under the following link: http://www.fullcirclestudies.com/privacy.aspx. You can access an opt-out option under the following link: http://www.scorecardresearch.com/optout.aspx.You IP address is transferred to the USA and thus to a country outside the EU and the EEA. This is permissible under Art. 45 GDPR because Full Circle Studies, Inc.is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000PC0qAAG&contact=true.The legal basis for processing this data is a legitimate interest under Art. 6 (1) (f) GDPR. The legitimate interest as defined by Art. 6 (1) (f) GDPR that we are pursuing by processing the data described above is our interest in structuring our offerings in a user- and demand-driven manner. No conflicting interest is apparent, especially because you may opt out at any time.
Data collection and storage can be objected to at any time with effect for the future, by clicking on this link HERE, in order to prevent the collection by SalesViewer® within this website in the future. An opt-out cookie for this website is then stored on your device. If you delete your cookies in this browser, you must click this link again. SalesViewer ® uses the subcontractor Hetzer Online GmbH, Industriestr. 25, 91710, Gunzenhausen for server hosting (Infrastructure SalesViewer®) and Host Europe GmbH, Welserstraße 14, 51149 Cologne for the provision of the DNS server for SalesViewer®.The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely pursuance of our business purposes for the demand-driven structuring of our offerings. No conflicting interest is apparent, especially because you may opt out at any time and no personal data is stored.
We use Dunnhumby GmbH (Sociomantic), Paul-Lincke-Ufer 39/40, 10999 Berlin, for display advertising with the aim to publish relevant vacant job offers to existing and new users. For that reason, we use cookies/Pixel within our website and Emails to identify existing users from new ones and to personalize Job offers. All User will receive in the first place advertisements, but existing one may get excluded. We process following data: IP-address, device, operating system, time and date of access. Legal ground of processing is a legitimate interest according to Art. 6 I 1 lit.f GDPR. Concerning the publishing of our advertisements our legitimate interest grounds in the active promoting of our services. Concerning the exclusion of users our legitimate interest grounds in the interest to publish only relevant advertisements to the user. Data will be deleted after 90 days. You can object this use of date by follwing the link and ticking in the checkbox “opt-out”. https://www.sociomantic.com/privacy/en/
Measuring techniques via the INFOnline
Our websites use the measuring technique (“SZMnG”) of INFOnline GmbH (https://www.INFOnline.de) to ascertain key statistical values about the use of our offerings. The purpose of the measurement of use is to ascertain the number of visits to our website, the number of website visitors and their surfing behavior – on the basis of a uniform and standard procedure, and by doing so to obtain comparable data across the market.For all digital offerings that are a member of the German Audit Bureau of Circulation (IVW –http://www.ivw.eu) or participate in the studies of the Working Group for Online Media Research (AGOF –http://www.agof.de), the usage statistics are regularly processed by the AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. (Working Group for Media Analysis, agma –http://www.agma-mmc.de) to ascertain reach and published with the performance value “unique user”, and also by the IVW with the performance values “page impression” and “visits”. These reaches and statistics can be viewed on the respective websites.
Measurement by INFOnline GmbH using the SZMnG measuring technique is performed in line with a legitimate interest pursuant to Art. 6 (1) (f) GDPR.The purpose of processing the personal data is to produce statistics and to create user categories. The purpose of the statistics is to be able to track and provide evidence of the use of our offering. The user categories form the basis of an interest-driven structuring of advertising techniques and measures. Usage measurement that guarantees comparability with other market participants is indispensable for marketing this website. Our legitimate interest results from being able to commercially exploit the insights gleaned from the statistics and user categories and the market value of our website – including in direct comparison with third-party websites – that can be calculated from the statistics.Additionally, we have a legitimate interest in providing the pseudonymized data to INFOnline, AGOF and IVW for market-research (AGOF, agma) and for statistical purposes (INFOnline, IVW). Further, we have a legitimate interest in making the pseudonymized data available to INFOnline for the further development and provision of interest-driven advertising materials.
INFOnline GmbH collects the following data that is deemed personal data under the GDPR:
IP address: On the Internet, every device requires a unique address, known as the IP address, in order to transfer data. Because of the way the Internet works, the IP address needs to be stored at least for a brief period for technical reasons. Before any data processing takes place, IP addresses are shortened by 1 byte and simply anonymized. The unshortened IP addresses are not stored of processed further.
A randomly generated client identifier: Reach processing alternatively uses either a third-party-cookie, a first-party-cookie with the identifier “ioam.de”, a local storage object, or a signature that is produced from various information automatically transferred by your browsers in order to identify computer systems. This identifier is unique to a browser until the cookie or local storage object is deleted. The data can only be measured and the respective client identifier subsequently allocated is therefore only possible if you access other websites that similarly use the measuring technique (“SZMnG”) from INFOnline GmbH.The validity of the cookie is limited to a maximum of one year.
The measuring technique from INFOnline GmbH that is used on our websites measures usage data. The purpose of this is to record the performance values page impressions, visits, and clients and to generate further identifiers from them (e.g. qualified clients). Additionally, the measured data is used as follows:
A geolocalization, i.e. the allocation of a website access to the place where the access took place, is performed exclusively on the basis of the anonymized IP address and only up to the geographic level of the German Federal States/regions. Under no circumstances can the geographic information obtained in this manner be used to trace a user’s actual location.
The usage data of a technical client (e.g. a browser on a device) is merged across websites and stored in a database. This information is used for the technical evaluation of the social information age and gender and passed to the service providers of AGOF for further reach analysis. Within the AGOF study, a random sample is used evaluate social features that can be allocated to the following categories: age, gender, nationality, profession, marital status, general information about the household, household income, place of residence, Internet usage, online interests, place of usage, user type. Storage duration of the data
The full IP address is not stored by INFOnline GmbH. The shortened IP address is only stored for a maximum of 60 days. The usage data in combination with the unique identifier is stored for a maximum of six months.
Passing-on of the data
Neither the IP address nor the shortened IP address is passed on. Data with client identifiers is forwarded to the following service providers of AGOF to produce the AGOF study:
Our apps may use the measuring techniques (“SZMnG”) of INFOnline GmbH (https://www.INFOnline.de) to ascertain key statistical values about how our offerings are used. The purpose of usage measurement is to deploy a uniform and standard procedure to ascertain the usage intensity, the number of usages and users of our application, and their surfing behavior, and by doing so to obtain comparable data across the market.For all digital offerings that are a member of the German Audit Bureau of Circulation (IVW – http://www.ivw.eu) or participate in the studies of the Working Group for Online Media Research (AGOF – http://www.agof.de), the usage statistics are regularly processed by the AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. (Working Group for Media Analysis, agma – http://www.agma-mmc.de) to ascertain reach and published with the performance value “unique user”, and also by the IVW with the performance values “page impression” and “visits”. These reaches and statistics can be viewed on the respective websites. Legal basis for processing data
Measurement by INFOnline GmbH using the SZMnG measuring technique is performed in line with a legitimate interest pursuant to Art. 6 (1) (f) GDPR.
The purpose of processing the personal data is to produce statistics to create user categories. The purpose of the statistics is to enable us to track and provide evidence of how our offering is used. The user categories form the basis of an interest-driven structuring of advertising techniques and measures. Usage measurement that guarantees comparability with other market participants is indispensable for marketing these apps. Our legitimate interest results from being able to commercially exploit the insights gleaned from the statistics and user categories and the market value of our app – including in direct comparison with third-party apps – that can be determined from the statistics.Additionally, we have a legitimate interest in providing the pseudonymized data to INFOnline, AGOF and IVW for market-research (AGOF, agma) and for statistical purposes (IVW, INFOnline). Further, we have a legitimate interest in making the pseudonymized data available to INFOnline for the further development and provision of interest-driven advertising materials. Type of dataINFOnline GmbH collects the following data that is deemed personal data under the GDPR:
The measuring technique of INFOnline GmbH that is used in this app measures usage data. The purpose of this is to record the performance values page impressions, visits, and clients and to generate further identifiers from them (e.g. qualified clients). Additionally, the measured data is used as follows:
A geolocalization, i.e. the allocation of a website access to the place where the access took place, is performed exclusively on the basis of the anonymized IP address and only up to the geographic level of the German Federal States/regions. Under no circumstances can the geographic information obtained in this manner be used to trace the actual place of residence of a user.
The usage data of a technical client (e.g. a browser on a device) is merged across apps and stored in a database. This information is used for the technical evaluation of the social information age and gender and passed to the service providers of AGOF for further reach analysis. Within the AGOF study, a random sample is used evaluate social features that can be allocated to the following categories: age, gender, nationality, profession, marital status, general information about the household, household income, place of residence, Internet usage, online interests, place of usage, user type.
The full IP address is not stored by INFOnline GmbH. The shortened IP address is only stored for a maximum of 60 days. The usage data in combination with the unique identifier is stored for a maximum of six months. Passing-on of the data
We use data processors as specified above for the respective processing purposes (in particular, “StepStone Surveys“, ” hosting and securing our platforms, administrative, troubleshooting, and support services” and “Cookies and technologies that we use via third party providers“). These can therefore, as described there, be the recipient of personal data.
Additionally, we may also provide or provide information to third parties under your consent or any agreement you have with us, as described above (in particular under “Application Form“, under “MyStepStone Account” for a profile made available to you by potential employers and under “Data processing when publishing advertisement products” in relation to business customers and their employees) so that these can be recipients as described.
In certain cases, we may transfer personal information to a country outside the EU or the EEA (so-called third countries). Essentially, this can be the case if you are applying for a job and the recruiter is based in a third country. More details can be found above under “Application form” or “MyStepStone Account“. Furthermore, we use data processors or, within the scope of a legitimate interest, service providers that process data in some cases in third countries. For details, see “Sending of Emails and Other Messages,” “Proxy Caching and Web Application Firewall“, “Google Re-Captcha” “Youtube Videos“, “StepStone Webinars” and “Cookies and technologies that we use via third party providers“.
You may request confirmation from us as to whether we process personal data relating you.If such processing is taking place, you can request the following information from us:
The right to receive the copy must not affect the rights and freedoms of others and the right to information does not exist if the information disclosed is confidential, in accordance with a legal provision or its nature, in particular because of the predominant legitimate interests of a third party must be kept.
You have a right to rectification and/or completion vis-à-vis the data controller if the personal data concerning you that is being processed is incorrect or incomplete. The data controller must perform the rectification without undue delay.Your right to rectification may be limited if it is likely to render impossible or seriously impair the achievements of the statistical purposes and the limitation is necessary for satisfying the statistical purposes.
(6) The personal data concerning you is collected in the context of information society services pursuant to Art. 8 (1).
You have the right to object, on grounds relating to your specific situation to object, at any time to the processing of the personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR; this also applies to any profiling based on those provisions.In this case we will stop processing the personal data concerning you unless we can provide compelling and legitimate grounds for the processing that override your interests, rights and freedoms, or the data is being processed for the purpose of establishing, exercising, or defending legal claims.If the personal data concerning you is being processed for the purpose of conducting direct marketing, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to any profiling connected to such direct marketing.If you object to the data processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes.In the context of the use of information society services and Directive 2002/58/EC notwithstanding, you may exercise your right to object using automated means using technical specifications.
Where personal data is processed for statistical purposes pursuant to Art. 89 (1) GDPR, you, on grounds relating to your specific situation, have the right to object to personal data concerning your being processed.Your right to object may be limited if it is likely to render impossible or seriously impair the achievements of the statistical purposes and the limitation is necessary for satisfying statistical purposes.
Notwithstanding any other administrative or judicial legal remedy, you have the right to lodge a complaint with a supervisory authority in the Member State of your place of residence, your workplace, or the place of the alleged breach if you are of the opinion that the processing of the personal data concerning you breaches the GDPR.The supervisory body to which the complaint was submitted will notify the complainant of the status and outcomes of the complaint including the option of a judicial remedy under Art. 78 GDPR. Responsible supervisory authority for us is the state commissioner for data protection North Rhine-Westphalia, https://www.ldi.nrw.de/
Amendment of the data protection policy; amendment of purposeWe reserve the right to amend this Data Protection Policy in consideration of stipulations under data-protection law. You will always be able to locate the current version here or another corresponding, easily locatable point of our website or app. If we are intending to process your data for other purposes, i.e. those for which it was collected, we will notify you about this in advance in compliance with the statutory provisions.