The protection of your personal data which we collect and process as a provider of staffing services is a key concern for us, Robert Half Deutschland GmbH & Co. KG (“Robert Half” or “we”/“us”). This privacy notice describes how we process your personal data and the rights you have.The services we offer, including this website, are not intended for children.
Data controller
Robert Half Deutschland GmbH & Co. KG
Mainzer Landstraße 50
60325 Frankfurt am Main
[email protected]Data protection officer
Olga Stepanova, lawyer
C/O bytelaw Koch Stepanova Veeck Partnerschaft von Rechtsanwälten mbB
Bockenheimer Landstraße 51-53
60325 Frankfurt am Main
[email protected]
In the section below we will describe how we process your personal data when you visit our website and use its functions. Please also note the special notes for candidates, job applicants, client contacts, supplier/service provider contacts and visitors to our premises.a. Visiting our website for information purposesWhen you visit our website exclusively for the purposes of obtaining information, the web browser you are using on your device will automatically collect and send information for technical reasons.Categories of personal data processed: Technical data (IP address, device type and model, operating system, web browser type and version, time zone and language settings, date and time of access, and the referrer URL – i.e. the website from which you were referred).Purpose of processing: We process these data categories to provide you with the contents of the web pages you access and to ensure the security of our IT systems. We will not use this data for any other purposes, in particular marketing.Data source: This data is collected directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. If you do not provide this data, you may not be able to view and use the full scope of functionalities provided on the web page.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interests in processing the data lie in providing the website and safeguarding the security of the IT systems used to do so.Duration of data retention: The data is retained only temporarily for the duration of the session. It will be deleted at the end of each session.Recipient category: NoneRecipient locations: -Guarantees for transfers to third countries: -b. Subscribing to our newslettersYou may subscribe to two different personalised newsletters on our website. When subscribing to our career newsletter, you will receive information on job searches, job applications, career development and the latest salary trends via email. When subscribing to our management newsletter, you will receive information on salary and job market trends as well as recruiting tips and research studies. Please feel free to subscribe to either one or both newsletters.Categories of personal data processed: Master data (first name, last name); contact details (email address); technical data (IP address, date and time of subscription).Purpose of processing: Personalising and sending the newsletter(s). We process your IP address and the time of your subscription to ensure that you personally subscribed to the newsletter(s), that your personal data was not misused and to have proof that you have given your consent to processing.Data source: This data is collected directly from you via the subscription form provided on our website and using the technical data transmitted by your browser.Obligation to provide data: You are under no legal or contractual obligation to provide this data. If you do not provide this data, we will not be able to send you the personalised newsletters.Legal basis: We process this data based on your consent to processing for a specific purpose according to Article 6(1)(a) GDPR which you have given via double opt-in.Duration of data retention: We will retain your data until you unsubscribe from our newsletter. You may unsubscribe simply by clicking the unsubscribe link provided in each newsletter. If we also received and process your name and email address for other purposes than sending you our newsletter, we will only delete this data upon your express request or when all purposes of processing have been fulfilled, we no longer require your data and they are no longer subject to any statutory retention obligations. If you only wish to unsubscribe, you will no longer receive our newsletters, but we will retain your data for such other purposes of processing.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.c. Contacting usPlease feel free to contact us using the contact details provided on our website. You may freely choose the medium for contacting us.Categories of personal data processed: Master data (first name, last name);contact details (postal address and/or email address, depending on your preferred method of contact); communication data (contents of your message).Purpose of processing: Receiving and responding to your communication.Data source: We receive this data directly from you via the contact medium you have chosen.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: If pre-contractual measures are initiated by the message or it was sent in connection with an existing contract, the data concerned is processed in accordance with Art. 6 para. 1 lit. b GDPR. If this is not the case, the processing is based on the so-called legitimate interest in accordance with Article 6(1)(f) GDPR. Our legitimate interest in processing is receiving and responding to your contact.Duration of data retention: Where your communication does not lead to subsequent collaboration, we will retain your data only until we have responded to your enquiry or the completion of correspondence with you. Where your initial communication results in subsequent collaboration, the retention periods for the processing purposes indicated will apply. In general, your data will be deleted after expiry of the limitation period, starting at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Providing feedback to our websiteYour feedback is important to us. This is why we have provided a special feedback form (referred to as “Webmaster Feedback”) on our website which you may use to give us feedback or communicate any other information.Categories of personal data processed:Master data (name); contact details (email address); communication data (subject and your feedback).Purpose of processing: Obtaining your feedback and possibly responding to your feedback or questions you may have. We will not use this data for any other purposes, in particular marketing.Data source: We will collect this data directly from you via the feedback form provided.Obligation to provide data: You are under no legal or contractual obligation to provide this data. If you do not provide this data, you will not be able to give us your feedback via the form and we will not be able to use your feedback or respond to it.Legal basis: The processing is based on your consent in accordance with Article 6 (1)(a) GDPR.Duration of data retention: After implementing and/or responding to your feedback, we will promptly delete this data. In individual cases certain content of your feedback may be useful for us for a longer period of time. In this case we will anonymise your feedback so that you can no longer be identified as an individual.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.e. Web analytics toolsWe use web analytics tools to gain insights as to how our website is used and to measure and improve its performance, contents and functionality. Since data protection is a key concern for us, we also use data protection technologies to improve the protection of your personal data. Our use of data protection technologies prevents third-party providers from identifying visitors to our website. As regards web analytics services, we rely on server-side tracking, meaning that tracking is outsourced to third-party service providers. This serves to better protect your privacy and enables us to conduct analyses without identifying you as an individual.We use server-side tracking provided by Tealium Inc. (9605 Scranton Rd., Ste. 600, San Diego, CA 92121), a service provider domiciled in the USA. Data is processed exclusively in Germany. Tealium Inc. does not retain the analytics data they process. After transmitting the anonymised data to analytics service provider Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA, Tealium Inc. deletes the processed data. This service provides server-side tracking via first-party cookies, and the anonymised analytics data is transmitted to Google without allowing visitors to be identified.It is used only if consent to the use of these cookies has previously been given. For more information on the use of cookies, please refer to the respective section below.Categories of personal data processed: Technical data (IP address, device type and device model, operating system, web browser type and version, time zone and language settings, date and time of access, and the referrer URL – i.e. the website from which you were referred).Purpose of processing: Measuring interaction with our website and the effectiveness of our online services and improving our website.Data source: This data is collected directly from you through the use of cookies.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data based on your consent to processing for a specific purpose according to Article 6(1)(a) GDPR which you have given via the cookie banner.Duration of data retention: The data is retained only temporarily for the duration of the session. It is promptly deleted as soon as the previously anonymised data has been transmitted.Recipient category: Software providerRecipient locations: EUGuarantees for transfers to third countries: -f. Consent-ManagementWe use a consent management service for cookie management on our website.Categories of personal data processed: Date and time of the visit, browser information, information on consent, information on the end device, IP address of the requesting end device.Purpose of processing: The purpose of data processing is to offer visitors to our website the opportunity to consent to the use of cookies. The documentation of such consent is required in accordance with the accountability obligation under Art. 5(2) GDPR and is necessary to ensure the revocation of consent and to control the setting of cookies.Data source: This data is collected directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: The processing of the above data is carried out on the basis of Art. 6(1)(c) GDPR in conjunction with. § 25(1) TTDSG.Duration of data retention: We delete your personal data when it is no longer required to fulfil the purpose for which it was processed. This is usually the case after three years, starting at the end of the year in which the data was collected.Recipient category: Software providerRecipient locations: EUGuarantees for transfers to third countries: -g. Whistleblower systemWe have established an appropriate compliance policy to meet legal requirements. In addition to pertinent policies, the monitoring of existing and new processes and other preventative and reactive measures, this compliance policy also provides for the comprehensive investigation and clarification of suspected breaches of regulations. To facilitate in-depth investigation, we have established a whistleblower system allowing employees and external informants to report suspected breaches. For further general information on our whistleblower system, please see Link.Categories of personal data processed: Whistleblower/informant:Master data (first name, last name; contact details (email address, telephone number, postal address – if voluntarily provided); communication data (contents of the report).Accused (where necessary for investigating the suspected breach and/or if indicated by whistleblower/informant): Business master data (first name, last name, position, profession); business contact details (email address, telephone number, postal address); factual data (information on the matter reported as provided by the whistleblower/informant); communication data (content of emails from accused employees); other business documents from or about accused employees; special categories of personal data according to Article 9 GDPR (where indicated by the whistleblower/informant).Purpose of processing: Checking the plausibility of reports, investigating potential breaches, implementing measures that may be required where breaches have been determined, adopting preventative measures to avoid future misconduct, establishing, exercising or defending legal claims, defending accused persons, fulfilling any obligation to collaborate in investigations conducted by prosecution authorities and/or other authorities involved to the extent required and permitted by law.Data source: This data is collected directly from you, provided by the whistleblower/informant and may also be collected from managers, colleagues or third parties where this is required for investigating the matter reported.Obligation to provide data: The whistleblower/informant is under no legal or contractual obligation to report a suspected breach via the whistleblower system. When the reported matter is investigated, the accused may be legally and/or contractually obligated to provide personal data. In this case, we will inform you accordingly upon request.Legal basis: We process this data for the purposes of for complying with legal obligations Article 6(1)(c) GDPR in conjunction with § 13,14 Whistleblower Protection Act (HinSchG)); if you voluntarily provide us with your personal data in the whistleblower form, you hereby give us your consent in accordance with Article 6(1)(a) GDPR for this processing; because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in defending legal claims and supporting the defence of the accused where applicable and the anonymisation of data to improve preventive measures.Duration of data retention: We will retain the personal data involved for as long as this is necessary for investigating the matter reported and adopting any appropriate measures and also until expiry of the legal retention period. If the whistleblower/informant withdraws the consent given, we will promptly delete their identification and contact details. We reserve the right to retain certain information for a longer period of time where we consider this necessary. In this case we will previously anonymise such information so that the persons involved can no longer be identified as individuals.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
a. Job searchOn our website, you may search for suitable job opportunities and apply for them. The job search is conducted based on the parameters you have selected in the web form. We will record your personal data only when you apply for a position. As long as you use our job search feature only for obtaining information, no personal data is recorded. If you decide to apply for a position listed on our website, you may do so by either uploading your CV directly or having your relevant data transmitted from LinkedIn or Xing to us. As a first step, you will receive a registration form in which we ask you to confirm that the information you have provided is correct and not misleading and that you wish to use the services provided by Robert Half. When we conduct searches to find other/additional job opportunities that we deem suitable for you, we will also use artificial intelligence (AI). For further information on the use of AI, please refer to the section “Automated decision-making and use of artificial intelligence”.Categories of personal data processed: The search parameters you have entered or selected (job title or search term, city/region, remote working (home office) preference, your specialisation and whether you are looking for job placement or temporary agency work); master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; any other information you may wish to provide via this means for your job application.Purpose of processing: Assessing your suitability for the position you are applying for, shortlisting candidates by our recruitment consultants according to the requirements of our clients, communicating with you regarding the position chosen and/or other job vacancies we may deem suitable for you, and drawing up a standardised candidate profile for potential presentation to the respective employer (please also refer to the section “Presentation to potential employers”).Data source: We will collect this data directly from you or, if you so wish and instruct, directly from LinkedIn or Xing.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data. If you choose not to provide individual items of the information listed above, we may not be in a position to present you to the potential employer you prefer because the employer expects this information and will not accept candidates without it.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR. We utilise artificial intelligence because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR in efficiently processing your job search.Duration of data retention: We will retain your data for as long as we are, upon your request, searching for a potential employer and/or a suitable position for you or you wish us to otherwise support you with your career. You may at any time ask us to stop searching for a potential job for you or otherwise supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. If you do not return the completed and signed registration form we send you, we will automatically delete your data after 90 days. In this case we will assume that you do not wish to use the services provided by Robert Half.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Job recommendations (candidate registration)If you have not found a suitable position orthrough our job search, would like to ask us to continue the job search on your behalf or if you wish to be generally included in our file of candidates to receive job recommendations, you may also upload your CV or have your data transmitted to us from Xing. As a first step, you will receive a registration form in which we ask you to confirm that the information you have provided is correct and not misleading and that you wish to use the services provided by Robert Half. When searching for suitable positions for you, we will also use artificial intelligence. For further information on the use of AI, please refer to the section “Automated decision-making and use of artificial intelligence”.Categories of personal data processed:Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you may wish to provide via this means for your job application.Purpose of processing: Searching for job vacancies that we deem to match your profile, communicating these to you via email and drawing up a standardised candidate profile for potential presentation to the respective employer (please also refer to the section “Presentation to potential employers”).Data source: We will collect this data directly from you or, if you so wish and instruct, directly from Xing.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR. We use artificial intelligence because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR in efficiently processing the job search.Duration of data retention: We will retain your data for as long as we are, upon your request, searching for a potential employer and/or a suitable position for you or you wish us to otherwise support you with your career. You may at any time ask us to stop searching for a potential job for you or otherwise supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. You may also unsubscribe from future job recommendations by clicking the link provided in the job alert emails. If you so wish, we will then promptly delete your personal data on file with us. If you do not return the completed and signed registration form we send you, we will automatically delete your data after 90 days. In this case we will assume that you do not wish to use the services provided by Robert Half.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUc. Online account (Candidate Web – available from 22nd of April 2024)When you are applying for a job vacancy found through our job search, filing an unsolicited job application or if you have already been included in our file of candidates, you may register for an online account (Candidate Web). Through this online account, you can manage your personal information yourself and keep it up to date.Categories of personal data processed: Login data (email address and password of your choice).Purpose of processing: Setting up and providing your online account, allowing you to manage your data yourself.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We will process this data in the performance of the usage agreement concluded with you according to Art. 6(1)(b) GDPR.Duration of data retention: We will retain this login data for as long as you wish to use your online account. If you are no longer interested in using your online account, please inform us accordingly. In this case we will delete your Login data immediately. Should you wish not only your online account but your entire candidate file to be deleted, please inform us accordingly as well. We will then promptly delete your data.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Participating in events/job fairsWe regularly organise events/job fairs for interested candidates and employers or participate in such events/job fairs organised by third parties. Where these events/job fairs cater to a restricted group of persons or we hold presentations at such events which you would like to receive afterwards as documents, we will process your personal data if you attend and wish to receive documents.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); requests/enquiries communicated at the event that you would like us to contact you about.Purpose of processing: Managing the event (checking whether you are authorised to attend, your invitation, welcoming you to the event); sending you the desired information materials after the event.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to invite you to events and/or send you the requested documents if you do not provide this data.Legal basis: This data is processed for the performance of the contract in accordance with Article 6(1)(b) GDPR.Duration of data retention: As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted or restricted immediately and only stored for the purpose of asserting or defending legal claims until the end of the three-year limitation period, starting at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage provider, event organisorRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUe. Satisfaction surveyIf you are registered with us as a candidate, we will from time to time or upon finalising a placement ask you to participate in a satisfaction survey. Taking part in such surveys is entirely voluntary; you are under no obligation to participate in them.Categories of personal data processed: Master data (first name, last name); contact details (email address); survey responses.Purpose of processing: Improving the services we offer candidates.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in improving the services we offer candidates.Duration of data retention: We will retain this data for as long as necessary for analysing the survey results and responding to any improvements you may have suggested or critical feedback you may have given us. Should you object to the processing of your data before that, we will promptly delete your data.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUf. Continued supportIf you have applied for a position or have filed an unsolicited application through our website, a job portal or on social media websites such as Xing, LinkedIn, Facebook, Instagram or X, or have informed us of your interest in being included in our file of candidates during a job fair, promotional event, networking or training session or have communicated your interest in our services through any other means and have subsequently returned the completed and signed registration form to us, we have included you in our file of candidates. We will support you not only in your current job search but will continue to do so following a successful assignment as a temporary agency employee, a job placement or the arrangement of a consultancy contract with a client of ours, assisting you in expanding your skills, updating and improving your candidate profile and thus promoting your further professional career.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; any other information you may wish to provide via this means for your career.Purpose of processing: Providing you with continuous advice for improving your skills, optimising your career or consultant profile; sending you job recommendations and career opportunities; offering interesting insights into professional and career development.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR.Duration of data retention: We will retain your data for as long as you wish us to support you with your career. You may at any time ask us to stop supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. You may also unsubscribe from future job recommendations by clicking the link provided in the job alert emails. If you so wish, we will then promptly delete your personal data on file with us.Recipient category: Software provider, cloud storage provider, training platformsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUg. Learning platform (e-learning)We understand staffing services to include more than just placing you in a job. We would also like to support you with continuing your education and training and expanding your specialist knowledge. You may send a request to the Robert Half branch of your choice, and we will provide you with personal login data for our learning platform where you will be able to attend online courses on a variety of subjects free of charge.Categories of personal data processed: Master data (first name, last name); contact details (email address); allocation data (branch of your choice); communication data (content of your enquiry); login data (email address, password).Purpose of processing: Generating and transmitting your login data.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to send you login data and you will not be able to use our learning platform without it if you do not provide some or all of this data.Legal basis: We will process this data in the performance of the usage agreement concluded with you according to Art. 6(1)(b) GDPR.Duration of data retention: We will retain this login data for as long as you wish to use our learning platform. If you are no longer interested in attending our free online courses, please inform us accordingly. We will then promptly delete your data.Recipient category: Software provider, cloud storage provider, training platformsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUh. Internal interviewsWhen we have found a potential position for you, we may invite you to an initial internal job interview before arranging a job interview with our client in order to better brief you and finally assess your suitability for the position.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you have provided to us for your career; interview contents.Purpose of processing: Briefing you for job interviews with our clients and finally assessing your suitability for the position.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data. If you choose not to provide individual items of the information listed above, we may not be in a position to present you to our clients because our clients expect this information and will not accept candidates without it.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR.Duration of data retention: We will retain your data for as long as you wish us to support you with your career. You may at any time ask us to stop supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. You may also unsubscribe from future job recommendations by clicking the link provided in the job alert emails. If you so wish, we will then promptly delete your personal data on file with us.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUi. Presentation to potential employers/users/contracting partiesWhen we have found a potential position for you and consider you a suitable candidate for our client, we will present you to our client provided that you have expressed interest in the position. Our client will initially receive an anonymised and standardised candidate profile. If our client informs us that they are interested in getting to know you as a candidate for the respective position, we will – upon consulting with you – transmit the personal information we have collected from you through the processes described above.Categories of personal data processed:Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you have provided to us for your career; interview contents (only if we have conducted an internal job interview with you).Your requirements regarding potential positions and the further development of your career that you have communicated to us; the information you have provided in your CV or transmitted to us via LinkedIn/Xing (your identity, contact details, education and training and other qualifications, professional background and other information you have provided to us via these means); as well as additional information and requests you have communicated to us in the course of your career and, if an internal job interview has been held, the contents of the interview. We store in your file which customers we have introduced you to and which decision was made.Purpose of processing: Presenting your profile and presenting you to our clients for potential placement/assignment.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data. If you choose not to provide individual items of the information listed above, we may not be in a position to present you to our clients because our clients expect this information and will not accept candidates without it.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR.Duration of data retention: We will not put your data on file again, but we will include in your file the clients we have presented you to and the decision made in each case. You may at any time ask us to stop supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. If you so wish, we will then promptly delete your personal data on file with us.Recipient category: Software provider, cloud storage provider, clientsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUj. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is usually the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
a. Applying for internal positionsIf you wish to start a career with Robert Half, we look forward to receiving your application. You are welcome to send us your job application and accompanying documents via postal service, email or our website.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you may wish to provide via this means for your job application.Purpose of processing: Organising the recruitment procedure.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data for the purposes of deciding whether to establish an employment relationship with you and taking steps prior to entering into a contract according to Article 6(1)(b) GDPR.Duration of data retention: We will retain this data for the duration of the recruitment procedure and, if we reject your application, for another six months following the end of the recruitment procedure. Upon successful recruitment, we will include your personal data in your personnel file and store it there for the duration of contract execution.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Inclusion in talent poolWe may have to reject your application to an internal position in the course of the recruitment procedure. If we consider your profile especially interesting, we will ask you whether you would like to be included in our talent pool. When you are listed in our talent pool, we can directly take you into account when filling future vacancies.Categories of personal data processed: The personal data you have provided in the course of the recruitment procedure.Purpose of processing: Including you in our talent pool to be able to consider you for future vacancies.Data source: We have collected this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data based on your consent to processing for a specific purpose according to Article 6(1)(a) GDPR. We will only ask you for your consent if we consider you suitable for inclusion in our talent pool.Duration of data retention: We will retain your data for a period of one year, unless you withdraw your consent earlier. Upon successful recruitment, we will include your personal data in your personnel file and store it there for the duration of contract execution.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.c. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is usually the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
a. Staffing requestYou are welcome to inform us of your staffing needs via email, telephone or using the web forms provided on our website.Categories of personal data processed: Search parameters (job title or professional area of your job vacancy, desired type of placement – temporary agency work, interim management, permanent employment or executive search); allocation data (nearest Robert Half branch); business master data (first name, last name, company/organisation name and legal status/structure, position); business contact details (email address, telephone number and postal code).Purpose of processing: Contacting you to further record your staffing needs and preparing the desired job placement services.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR; our legitimate interests lie in contacting you for the purpose of initiating a contract with your employer/company/organisation upon your request.Duration of data retention: We will retain this data for as long as you wish to receive staffing services or suggestions regarding your staffing needs from us. We will promptly delete this data upon your request.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Consultancy request In addition to staffing services in the narrow sense of the term, we can in collaboration with our affiliates Protiviti GmbH and Protiviti Services GmbH & Co. KG also offer you customised solutions tailored to your business. You are welcome to enquire about these by contacting us via telephone or email or by using the web form provided on our website. We will transmit your data to our affiliates only when you have given us your consent to do so.Categories of personal data processed: Communication data (your enquiry and the professional area you are interested in); allocation data (nearest Robert Half branch); business master data (first name, last name, company/organisation name and legal status/structure, position); business contact details (email address, telephone number and postal code).Purpose of processing: Contacting you to further record your consulting needs and preparing the desired contractual collaboration.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR; our legitimate interests lie in contacting you for the purpose of initiating a contract with your employer/company/organisation upon your request.Duration of data retention: We will retain this data for as long as you wish to receive services or suggestions regarding your consulting needs from us. We will promptly delete this data upon your request.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUc. Satisfaction surveyWhen we have successfully placed employees with your company/organisation on temporary assignments or in permanent employment, we may ask you to participate in a satisfaction survey. These surveys help us to better understand our clients’ needs and wishes and to continuously improve our services accordingly. Taking part in such surveys is entirely voluntary; you are under no obligation to participate in them.Categories of personal data processed: Master data (first name, last name); contact details (email address); survey responses.Purpose of processing: Improving our services to clients.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in improving the services we offer our clients.Duration of data retention: We will retain this data for as long as necessary for analysing the survey results and responding to any improvements you may have suggested or critical feedback you may have given us. Should you object to the processing of your data before that, we will promptly delete your data.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Participating in eventsWe regularly organise events/job fairs for interested candidates and employers or participate in such events/job fairs organised by third parties. Where these events/job fairs cater to a restricted group of persons or we hold presentations at such events which you would like to receive afterwards as documents, we will process your personal data if you attend and wish to receive documents.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); requests/enquiries communicated at the event that you would like us to contact you about.Purpose of processing: Managing the event (checking whether you are authorised to attend, your invitation, welcoming you to the event); sending you the desired information materials after the event.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to invite you to events and/or send you the requested documents if you do not provide this data.Legal basis: This data is processed for the performance of the contract in accordance with Article 6 (1)(b)Duration of data retention: As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted or restricted immediately and only stored for the purpose of asserting or defending legal claims until the end of the three-year limitation period, starting at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage provider, event organiserRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUe. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is usually the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
a. ProcurementCategories of personal data processed: Business master data (first name, last name, company/organisation name); business contact details (company’s email address, telephone number and postal address); contract data.Purpose of processing: Taking steps prior to entering into a contract, in particular conducting contract negotiations and associated communications.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we may not be able to conclude a supplier/service provider contract with you or your company/organisation if you do not provide this data.Legal basis: Where you personally are a potential supplier/service provider, we process this data for taking steps prior to entering into a contract according to Article 6(1)(b) GDPR. Where you are not personally our potential supplier/service provider (e.g. you are an employee), we process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in taking steps prior to entering into a contract with the potential supplier/service provider or its representatives.Duration of data retention: As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted or restricted immediately and only stored for the purpose of asserting or defending legal claims until the end of the three-year limitation period, starting at the end of the year in which the contractual relationship was terminated. In addition, we are obliged to store the data until the end of the statutory retention period, which can be 6 to 10 years.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Supplier checkPursuant to the German Supply Chain Due Diligence Act (also known colloquially as the Supply Chain Act) we check our suppliers to prevent or minimise human rights or environmental risks or to prevent or remedy a violation in accordance with our due diligence obligations.Categories of personal data processed: Business master data of the supplier contact (first name, last name); business contact details of the supplier contact (email address, telephone number and postal address); communication data (contents of the communications and documents and information provided).Purpose of processing: Fulfilling our due diligence obligations under the Supply Chain Due Diligence Act.Data source: We will collect this data directly from you or from your employer.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we may have to request the required documents via other channels or terminate our collaboration with you as the supplier concerned if you do not provide this data.Legal basis: We process this data in accordance with Article 6(1)(c) GDPR in conjunction with the due diligence obligations incumbent on us under §§ 3 and 10 of the German Supply Chain Due Diligence Act (Lieferkettensorgfaltspflichtgesetz)Duration of data retention: We will retain this data for the duration of our collaboration with our suppliers, at least seven years after the documentation has been created.Please inform us of any change of contact to allow us to amend the master data and contact details accordingly.Recipient category: Software provider, cloud storage provider, authorities (if required by law)Recipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUc. Contract performanceCategories of personal data processed: Business master data (first name, last name, company name); business contact details (company’s email address, telephone number and postal address); contract data; bank account details; invoice and payment data.Purpose of processing: Performing the contracts with our suppliers/service providers, including processing and paying invoices and performing any additional contractual services on our part, as well as the demand for fulfillment of the contract by the supplier.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we may not be able to perform the contract if you do not provide this data.Legal basis: Where you personally are a supplier/service provider, we process this data for the purposes of performing the contract according to Article 6(1)(b) GDPR. Where you are not personally our supplier/service provider (e.g. you are an employee), we process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in performing our contract with our supplier/service provider.Duration of data retention: We will retain this data for the duration of the contract and also until expiry of the legal retention periods, which may be six to ten years.Recipient category: Software provider, cloud storage provider, payment service providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is generally the case until the end of the three-year limitation period, beginning at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
a. Appointment and preregistrationWe want a visit to our offices to be a pleasant and enjoyable experience for you. We may therefore ask you to register with us prior to your visit. That way your contact can welcome you directly when you arrive without you first having to complete a form (see also “Visitor registration”) at our reception desk.Categories of personal data processed: Master data (first name, last name, company/organisation name, position); contact details (email address, telephone number); visit data (time and duration of visit, address of office visited); other information (vehicle number plate if you use our parking areas, any information communicated regarding special requirements such as accessibility needs).Purpose of processing: Verifying visitors’ identity, safeguarding the security of our premises and the equipment contained therein as well as our other property, our visitors and our employees. If indicated, ensuring accessibility for your visit or, if this is not possible without disproportionate effort, organising your visit in another office with guaranteed accessibility.Data source: We will collect this data directly from you. If you have asked one of your employees or colleagues to make the appointment and preregistration on your behalf, the data will be collected from them.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that in case of no preregistration we may have to require your onsite registration as a visitor to our premises for security reasons and that in the event of non-provision, entry to our premises may be prohibited for security reasons.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR; our legitimate interests lie in ensuring that your visit to our offices is a pleasant and enjoyable experience. We also process the data used to verify your identity and the time and duration of your visit to comply with our legal obligation to ensure an appropriate level of data security according to Article 6(1)(c) GDPR in conjunction with Article 32 GDPR.Duration of data retention: We will retain this data for the duration of your visit and another four weeks thereafter.Recipient category: NoneRecipient locations: -Guarantees for transfers to third countries: -b. Visitor registrationIf we did not ask you to register as a visitor prior to your visit or you declined to do so, we may ask you to register as a visitor at our reception desk.Categories of personal data processed:Master data (first name, last name, company/organisation name, position); contact details (email address, telephone number); visit data (time and duration of visit, address of office visited); other information (vehicle number plate if you use our parking areas, any information communicated regarding special requirements such as accessibility needs).Purpose of processing: Verifying visitors’ identity, safeguarding the security of our premises and the equipment contained therein as well as our other property, our visitors and our employees.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that for security reasons you may be denied access to our premises if you do not provide this data.Legal basis: We process this data to comply with our legal obligation to ensure an appropriate level of data security according to Article 6(1)(c) GDPR in conjunction with Article 32 GDPR.Duration of data retention: We will retain this data for the duration of your visit and another four weeks thereafter.Recipient category: NoneRecipient locations: -Guarantees for transfers to third countries: -c. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims and also until expiry of any legal retention periods.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
We use cookies on our website to ensure website functionality, analyse web traffic, personalise the advertising we show you and analyse the effectiveness of our advertising. For further information on the cookies and cookie categories used, refer to our “Cookie list” indicated below. Cookies that are not strictly necessary for technical reasons will be used only if you have given your consent to processing for a specific purpose according to Article 6(1)(a) GDPR via the settings on our cookie banner.
A cookie is a small piece of data (text file) that a website – when you visit it – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies which originate from a domain different to the domain of the website you are visiting. We use these cookies to support our advertising and marketing efforts.
You can manage your cookie choices and thus the consents you have given at any time via the cookie settings. You can access these settings at any time from any subpage of our website by clicking on the green cookie icon at the bottom left of the web page.
3. Cookie list
We use artificial intelligence (“AI”) in job placement to match our candidates’ CVs with our clients’ vacancies and find suitable jobs for our candidates.To achieve this, RH utilises a service provided by Textkernel BV, Nieuwendammerkade 26a5, NL-1022 AB Amsterdam (“TK”), a company based in the Netherlands/EU.This AI assists our recruitment consultants in conducting more efficient searches and matching suggested candidates with our clients’ vacancies. This allows our recruitment consultants to search a larger number of CVs and match our candidates’ datasets with our clients’ vacancies faster, disregarding irrelevant data. The AI generates a list of potential candidates for a client’s vacancy for our recruitment consultants. However, this does not result in automated decision-making and is only a tool that our consultants can use in addition to their own selection. Our recruitment consultants make decisions based on their expertise, knowledge of the job market, insights into the client’s business and role requirements, interviews with candidates, and other relevant criteria to shortlist candidates for a specific client position.The final decision in favour or against a candidate is always made by our clients. They decide which candidates will be invited for an interview, who will progress in any multi-stage interview process and who will be accepted for the position.You can object to the processing by TK AI at any time by contacting [email protected]. In this case, we will no longer use TK AI on your CV. This has nonegative consequences or impact on you, especially on your application or the search for suitable positions for you, as we always rely on our personal knowledge of you, the client and their business, the position and role requirements, and the market when making any decisions. If you object to the processing of your personal data by our AI tool, our recruitment consultants will continue to offer you job placement services but will employ alternative methods to search for job opportunities on your behalf. The personal data of candidates who are no longer available for employment, are no longer actively seeking a job, have recently taken up permanent employment, or have objected to the processing of their personal data by AI will be deleted by our AI service provider. More information about our AI tool can be found here.
As a group of companies with global operations, we organise some activities centrally at our affiliates for certain regions or worldwide. In doing so, personal data may be transmitted to these affiliates to ensure efficient and consistent business processes as well as appropriate control of our business operations. As some of our divisions rely on matrix management, employees may be reporting to managers employed at other affiliates; this means that these managers may have knowledge of personal data to ensure effective management and organisation within the group. Where this is the case, these affiliates act as our data processors, processing your personal data according to our instructions.We also commission third-party service providers to act as data processors. These service providers include software providers, cloud providers, marketing agencies, financial services providers, subcontractors and technical support companies that are necessary for fulfilling our business purposes and that support us in improving the quality of our services and offering innovative solutions.We commission these service providers subject to a data processing agreement that obligates them to comply with data protection regulations and does not permit them to process personal data for their own purposes.Personal data may also be transmitted to independent data controllers such as tax advisers, law offices, courts or government agencies to the extent permitted or legally required to comply with statutory requirements, ensure compliance and establish, exercise or defend legal claims.When working with data processors and independent data controllers, we attach great importance to their compliance with the level of data protection required in the European Union. Where these business partners are not already subject to EU data protection law, they undertake to comply with EU data protection standards by signing the standard contractual clauses provided by the European Commission. These contractual arrangements ensure that the transfer of personal data to third parties outside the European Union or the European Economic Area complies with the strict requirements of EU data protection law.For further information on the transmission of your personal data, please refer to the individual purposes of processing described in this privacy notice.
We have taken appropriate technical and organisational security measures to protect your personal data from accidental loss, unauthorised processing or access as well as alteration or disclosure.Furthermore, we limit access to your personal data to those employees, representatives, contractors and other third parties who need it for business purposes and are legally authorised to use it.We have put in place procedures to deal with any suspected personal data breach and we will notify you and the competent supervisory authority of a breach where this is necessary and we are legally required to do so.
Our website may contain links to third-party websites, plug-ins and applications. Clicking on these links or enabling these connections may allow third parties to collect and process your personal data. The processing of your personal data by these third parties is beyond our control and we ask you to consult their privacy notices to see how they process your data.
1. Right of accessYou have the right to request information on what personal data we process about you and how we process it at any time. Upon submitting such a data subject access request, you will also receive a copy of the personal data we hold on file about you. Where these copies also contain confidential information or personal data on other data subjects, we will either redact this information or we will inform you what personal data relating to you the copies contain and for which purposes.2. Right to rectificationWhere your personal data on file with us is inaccurate or incomplete, you have the right to request the prompt rectification and/or completion of your personal data at any time.3. Right to erasure (“right to be forgotten”)You have the right to request erasure of your personal data by us at any time. We will promptly fulfil your request unless we are subject to legal obligations that do not allow us to erase your personal data at that point in time. This may for instance be the case if we are obliged to retain your data for a longer period of time for tax purposes. Should this be the case, we will inform you accordingly in response to your request for erasure, restrict the processing of your personal data for all other purposes except retention and will promptly delete your personal data upon expiry of legal retention periods without requiring any additional request on your part.4. Right to restrict processingAs an alternative to your right to be forgotten, you also have the right to request that we restrict the processing of your personal data if:> you contest the accuracy of your personal data on file with us – until such time as we have been able to verify the accuracy of your data;> our processing of your personal data is unlawful, but you oppose erasure of your data and request that we restrict its use instead;> we no longer need your personal data, but you need this data for establishing, exercising or defending legal claims, or> you have objected to the processing pursuant to Article 21 GDPR – pending verification of whether our legitimate interests override yours. 5. Right to object to processingYou have the right to object at any time pursuant to the provisions of Article 21 GDPR. You may at any time object, on grounds relating to your particular situation, to the processing of your personal data which we process based on Article 6(1)(f) GDPR. This also applies to profiling based on those provisions. You may infer from the descriptions of processing above whether our processing is based on Article 6(1)(f). 6. Right to withdraw consentWhere we process your personal data based on your consent, you have the right to withdraw your consent at any time with future effect. The lawfulness of processing before your withdrawal will not be affected. Please note that we will no longer be able to offer you certain services such as sending you our newsletters if you withdraw your consent. 7. Right to data portabilityYou have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format where technically feasible. You also have the right to transmit this data to another data controller without hindrance on our part.8. Automated decision-making in individual cases, including profilingIn accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. However, we do not currently use such methods.9. Right to file a complaint with the supervisory authorityIrrespective of and in addition to the rights listed above, you have the right to file a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR.The competent supervisory authority is:Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Postfach 31 63, 65021 Wiesbaden
Telephone: +49 611 14080
Fax: +49 611 1408611
Email: [email protected]
Website: https://datenschutz.hessen.deBefore you contact the supervisory authority, we would ask you to give us the opportunity to discuss your concerns with you to find an easy and satisfactory solution for you. Please feel free to contact our data protection team by emailing [email protected] or our external data protection officer using the contact details shown at the beginning of this privacy notice.
This privacy policy was last updated on: 15th of March 2024Due to changing business requirements, legal or regulatory requirements and technical developments, it may be necessary to amend this privacy policy. We will inform you of any significant changes to the privacy policy. You can access the latest version of the privacy policy at any time on this website.Print this privacy statement using the print function in your browser or by pressing Ctrl+P on your keyboard.
