Responsible with regards to the EU Data Protection Ordinance (GDPR) and other national data protection laws is
The People Business
The People Business operates with the highest degree of discretion and confidentiality, the strict protection of all data and information entrusted to us is our working basis. We have always taken extensive measures to ensure that the processed data is protected against unauthorized access, loss, destruction or manipulation. Please note, however, that data transmission over the Internet is not 100% secure, e.g. when communicating by e-mail. A complete protection of your data against access by third parties is not possible.
We collect, process and use your personal data as described in this data protection declaration and in compliance with all data protection laws. Your data will not be passed on to third parties unless we are legally obliged to do so or you have given us your consent. We use your data only for the purpose for which you have made them available to us, e.g. to accompany you in your career planning and to realize your next professional steps and to recommend you for selected positions.
2. Contact form
We are pleased if you contact us via our contact form or the indicated e-mail address. This is done on a voluntary basis, you agree to the use of your data for the purpose of supporting you in your request. When collecting the information we limit ourselves to what is necessary, i.e. we only collect the data necessary to contact you (e-mail address or telephone number). These data will only be processed for the purposes of your inquiry. The legal basis is Art. 6 (1) lit. b GDPR.
By sending the contact request you agree to the processing of the data for the respective purpose formulated in the request.
3. Sending your documents
We are pleased if you send us your CV by mail, Xing, LinkedIn or via our form on this website. We work with the information and data you provide us with to ensure a sustainable and therefore long-term career planning as described on our website. This may require a longer period of time. After successful placement your data will be deleted, unless you agree to further use for long-term career support. By sending us your documents, you agree that your data will be stored and processed for the purposes of career planning and search for a suitable function. The legal basis is Art. 6 (1) lit. b GDPR.
A recommendation of your person and thus forwarding of your data to a potential new employer will only take place after an intensive and in-depth discussion of the position in order to advise you on your further career planning and, of course, only with your clear agreement. Data will not be passed on to third parties without your agreement. Excluded from this are the employees of our team, who are also obliged to follow the regulations of the GDPR.
4. Use of our website
The use or the visit of our website is principally possible without the indication of personal data. We only require this information to provide a functional website, our content and services. Personal data will only be collected and used with the user's consent. An exception to this principle applies in cases where processing of data is permitted by law or where prior consent cannot be obtained for de facto reasons.
The legal basis for the processing of personal data results from Art. 6 para. 1 lit. a GDPR if the data subject gives his consent, Art. 6 para. 1 lit. b GDPR in the case of processing for the fulfilment of a contract to which the data subject is a party. This also includes processing procedures that are necessary to carry out pre-contractual measures, Art. 6 para. 1 lit. c GDPR for processing required to fulfil a legal obligation, Art. 6 para. 1 d GDPR, if vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. f GDPR, if the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest.
Every time you visit our website, the system automatically collects data and information from your computer system. The following information is collected: Browser type and version used, operating system, visited subpages, date/time, IP address, service provider and referrers.
Temporary storage of your IP address is required to enable the website to be delivered to the user's computer. No conclusions are drawn about your person. The legal basis for the temporary storage of data is Art.6 Par.1 lit.f GDPR. Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This page uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest to present our online services in an appealing way and to easily find the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find more information on the handling of user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/.
6. Google Analytics
For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f GDPR or, with the consent Art. 6 Para. 1 S. 1 lit. A GDPR.
7. Online presence in social media
We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties and users to inform them about our services.
We would like to point out that user data could be processed outside the European Union. This could result in risks for users because enforcing users' rights could be made more difficult. US providers certified under the Privacy Shield, have agreed to comply with EU data protection standards. Furthermore, user data is usually processed for market research and advertising purposes. Thus, for example, user behavior and interests can be deducted from user profiles. The users' profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are saved. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to these).
The processing of the personal data of users is carried out on the basis of our legitimate interests in effective information of users and communication with users pursuant to Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers for consent to data processing (i.e. to give their consent e.g. by ticking a checkbox or confirmation by a button), the legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.
For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the information given by the providers linked below.
Also in the case of a request for information and the assertion of user rights, we point out that these can be claimed most effectively to the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information.
– Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Data privacy statement: https://policies.google.com/privacy?hl=en, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
– LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland), Data privacy statement https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
– Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany), Data privacy statement/ Opt-Out: https://privacy.xing.com/en/privacy-policy.
8. Deletion and storage time
Users' personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Further storage may take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
9. Right to information
You have the right to receive information as to whether we process personal data concerning you.
In addition, you may request the following information: purpose of data processing; the categories of personal data processed; the recipients or categories of recipients to whom the personal data have been or are still being disclosed; the planned duration of the storage of the personal data or, if specific information on this is not possible, criteria for determining the storage period; the existence of a right to have your personal data corrected or deleted, a right to have processing restricted by the controller or a right to object to such processing; the existence of a right of appeal to a supervisory authority; any available information on the origin of the data if the personal data are not collected from the data subject; the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
Finally, you also have the right to request information as to whether your personal data is transferred to a third country or to an international organisation. In this case you can request information on the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
You can assert your right to information at firstname.lastname@example.org
10. Right to rectification
If the personal data we process are incorrect or incomplete, you have the right to correct and/or complete them. The correction shall be made immediately.
11. Right of limitation
The right to restrict the processing of personal data concerning you may be exercised in the following cases: the accuracy of the personal data is disputed for a period of time which enables the person responsible to check the accuracy of the personal data; the processing is unlawful and the deletion of the personal data will be refused and instead the restriction of the use of the personal data will be demanded; the data controller no longer needs the personal data for the purposes of the processing, but the data subject needs them in order to assert, exercise or defend legal claims or the data subject has filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the data responsible outweigh the reasons of the data subject.
If the processing of personal data concerning you has been restricted, apart from its storage, such data may only be processed with your consent or for the purpose of asserting, exercising or defending rights or for the protection of the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
In case of a restriction of the processing according to the described principles, you will be informed by us before the restriction is lifted.
12. Right to deletion
If the following reasons are given, you can request that the personal data concerning you be deleted immediately. The person responsible is obliged to delete these data immediately. The reasons are: the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed; the processing is protected by a consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and you revoke the consent. Another requirement is that there is no other legal basis for processing; you file an objection to the processing (Art. 21 para. 1 GDPR) and there is no overriding legitimate reason for the processing. Another possibility is that you file an objection against the processing pursuant to Art. 21 para. 2 GDPR; the processing of personal data concerning you is unlawful; the deletion of personal data concerning you is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which the data controller is subject; the personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
We point out that the right of deletion does not exist if the processing is necessary to exercise the right of freedom of expression and information; for the performance of a legal obligation required for processing under the law of the European Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller; for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR; for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the law referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or for the assertion, exercise or defence of legal claims.
13. Right to notification
If you have exercised your right to correct, delete or limit the processing, we are obliged to inform the recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of the processing, unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.
14. Right to Data Transferability
According to the GDPR, you also have the right to request that the personal data concerning you is made available to you in a structured, standard and machine-readable format. Furthermore, you have the right to pass this data on to another data controller without hindrance by the data controller to whom the personal data was initially made available, provided that processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and processing is carried out using automated methods.
Finally, in exercising the right of data transferability, you have the right to have the personal data concerning you transferred directly from one responsible person/data controller to another responsible person/data controller, provided that this is technically feasible and does not impair the freedoms and rights of other persons.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
15 Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. We would like to point out that the revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until revocation.
16. Right of objection
Furthermore, for reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The personal data will no longer be processed, unless compelling reasons justify continuation and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
17. Right of appeal to a supervisory authority
Finally, if you consider that the processing of your personal data infringes the GDPR, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or the place where the alleged violation occurred.