Source: https://www.personio.com/privacy-policy/?__hstc=126461458.25f051a4cbaa77d18d62fe4c58f68f60.1500552234208.1544193226568.1544603051877.78&__hssc=126461458.3.1550656534779&__hsfp=143066032
Timestamp: 2020-01-24 19:51:03
Document Index: 790977809

Matched Legal Cases: ['Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 21', 'Art. 7']

Privacy Policy - Personio
Processing of (personal) data by the website operator (Personio)
This website is provided by the company Personio GmbH, a business with headquarters in Germany that offers human resource and applicant management software (https://www.personio.com/legal-notice/). We provide you with this data privacy policy to inform you of how we handle your personal data collected on this website.
3. Access and activity logs (“server logs”)
Each access to this website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual.
Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is section 15 subsection 1 of the German Telemedia Act (TMG), as well as article 6 (1) f of the GDPR.
Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web.
These access logs are stored for a period of up to 7 days. There is no right to object to this.
4. Error-Logs
So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is section 15 subsection 1 of the German Telemedia Act (TMG), as well as article 6 (1) f) of the GDPR.
When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected.
These error logs are stored for a period of up to 7 days. There is no right to object to this.
So-called cookies are used on parts of this website. They are small text files which are stored on the device with which you access this website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”).
6. Use of third-party provider tools
This website incorporates the API service “Google Maps” in order to be able to depict geographical information. The use of Google Maps makes it possible for Google to collect, process and use data on your use of the service.
You can find further information on the processing of your data by Google at the Google data privacy information.
managing so-called tags that are used during tracking in online marketing. In doing so, the tag manager does not process any personal data, since it merely serves to manage other services – e.g., Google Analytics, etc.
Moreover, Google is certified under the Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), and hence it ensures compliance with European data protection law.
Our website uses the service Google Analytics on an exclusively pseudonymous basis. Your IP address is only recorded in abbreviated form and is hence anonymized.
Note: If you use Personio’s German-language page – www.personio.de, then you must likewise carry out an opt-out in the data privacy policy presented there.
This website uses the service “Doubleclick by Google”. This service uses cookies in order to show you advertisements that are relevant for you. This occurs over a pseudonymized identification number (pID), which is received by your browser and is assigned to it. The service can use this pID to detect which advertisements have already been shown to you and which have been called up. The cookies used for this purpose do not contain any personal data. Rather, the cookies are used to position advertisements that overlap with a website by enabling Google to identify the pages that you have visited. The information generated by the cookies is transferred by Google to a server in the USA for analysis and stored there. Google transfers data to third-parties only based on legal regulations or in the context of data processing assignments. By no means will Google collate your data with other data that Google has collected.
By using our website, you consent to the processing of your data by Google in accordance with the description and purposes stated. You can prevent the use of cookies using the appropriate settings in your browser. These settings however may make it impossible to use the website in an unrestricted manner.
You can find further information on data privacy at Google at this address: https://policies.google.com/technologies/ads?hl=en
It is possible to sign up on this website using your Facebook Account.
Facebook Connect is an offering of Facebook, Inc. The use of Facebook Connect is subject to Facebook’s data privacy conditions and conditions for use.
If you use Facebook Connect, then your Facebook profile data and public data on Facebook are transferred to us from your Facebook profile. Furthermore, we can transfer data to your Facebook profile. Your transferred data are stored on our website and processed by us for the purpose of registration.
If you register on our website using Facebook Connect, then you consent to the transfer of profile data from your Facebook profile to us, as well as to the transfer of data on use of our website to Facebook. The data that are transferred are those that are publicly available data on your Facebook profile. We hereby notify you that if the data privacy conditions and conditions of use of Facebook change, then the “list of friends” of the Facebook profile owner could also be transferred if this list was marked as “public” in Facebook’s privacy settings.
The legal basis for the use of this service is article 6 (1) f) GDPR – justified interest. Our justified interest in the use of this service is to enable users to share content easily on Facebook.
You can find further information at: https://www.facebook.com/about/privacy/your-info-on-other
This website makes use of the Customer Relationship Management (CRM) service of the company Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA.
The legal basis for the use of this service is article 6 (1) f) GDPR – justified interest. Our justified interest in using this service is based on being able to respond quickly and efficiently to user queries.
Zendesk uses your data only for forwarding your queries to us. They are not forwarded to third parties. In order to use Zendesk, you must state at least a correct email address. The service can also be used on a pseudonymized basis. In the course of the processing of service queries, it may be necessary to collect further data (e.g., first name, last name, address, etc.).
The use of Zendesk is optional. If you do not consent to Zendesk collecting your data, then we offer you alternative contact options for submitting service queries by telephone or post.
You can find further information in Zendesk’s data privacy policy: https://www.zendesk.de/company/customers-partners/privacy-policy/.
a. Free offer of digital contents
In order to provide you with our downloadable content, we collect personal data from you. Below we explain these data.
Collected data: Email address, last name, first name, title, job title
Purpose of use: Customized sending of contents requested
Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. The data is deleted after sending of the contents.
Legal basis: article 6 (1) b) GDPR
See data privacy policy on “Web demo.”
See data privacy policy on “Newsletter.”
b. Personio events
For planning and holding of events, the event sponsor requires the participant’s personal data. The participant grants consent to the processing and use of his data for the initiation, holding and follow-up on the event.
Collected data: Email address, last name, first name, title, job title, city
Purpose of use: Management of invitations by email, sending of registration confirmations by email, sending of reminders before the event by email, sending of further information or short-term modifications to the registered event participants, optimization of event planning, general contract initiation.
Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. If we invite you to an event, then we will delete your data as soon as this data is no longer needed for organization and structuring of the event. In particular, however, we will promptly delete your data if we cannot invite you to an event. An exception to this applies if you have registered for our newsletter (optional).
See data privacy policy on “Event alarm.”
Revocation: You can unsubscribe from our newsletter at any time using a link included in each issue. We will then delete your email address from our distribution list. As an alternative, you can also unsubscribe from our newsletter at any time by sending an email to content@personio.de.
If you request an appointment for a web demo, then we use your data to contact you and coordinate together with you an appointment and to hold the appointment.
Collected data: Email address, last name, first name, telephone number, (business)
Purpose of use: Coordination and holding of the web demo, as well as preparation for and follow-up on the demo
Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. The data are stored as long as is needed to prepare, hold and follow-up on the appointment.
If you sign up for our event alarm, then we use your data to keep you up-to-date on planned events.
Purpose of use: Sending of the requested event alarm newsletters
Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. For the event alarm newsletter, the data are stored as long as it is expected that a newsletter will be sent and as long as you have not objected to the use of your data.
Revocation: You can unsubscribe from our event alarm newsletter at any time using a link included in each issue. We will then delete your email address from our distribution list. As an alternative, you can revoke your consent at any time by sending an email to events@personio.de.
If you register for a trial account, then we use your data to ensure that you receive the necessary information and to introduce you to the test account and the features of the software.
Collected data: Email address, last name, first name, telephone number
Purpose of use: Provision of the requested test account and explanation of the features of the software
Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. After the expiry of the test phase your data is deleted, if you do not become a customer.
If the company Personio GmbH processes personal data as data controller, then you as the data subject have certain rights derived from Chapter III GDPR, which depend on the legal basis and purpose of the processing. These rights include when relevant especially the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to cancellation (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to objection (Art. 21 GDPR). If the processing of personal data is based on your consent, then you have the right pursuant to Art. 7 III GDPR to revoke this consent granted under data protection law.
Please contact the Data Protection Officer of Personio GmbH (see Section 2) in order to assert you rights as data subject regarding the data processed for the operation of this website. Please be aware that you must contact the data controller directly to assert your rights as data subject derived from the processing by us, as data processor of our customers. We reserve the right not to respond to corresponding queries or to redirect them to the corresponding companies.
If Personio GmbH as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR.
Please contact the data protection officer of Personio GmbH to assert your rights with regards to the data processed for the operation of this software (see section 2). Please note that you must address yourself exclusively to the controller in order to assert your rights as a data subject from the processing of personal data by Personio as subprocessor on behalf of our customers. We reserve the right not to answer such questions or to pass them on to the controller of this data processing.
We would hereby like to inform you that pursuant to article 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that your personal data have been processed illegitimately by us.
You can object to the use of your data by making use of the corresponding opt-outs.
Personio reserves the right to adjust this data privacy policy at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced or modifications are made on the website. In this case, the new data privacy statement applies to any later visit of this software.