Data Protection Declaration Exgeniam Executive Search Personalberatung KG, Campus Kronberg 1, 61476 Kronberg im Taunus, Germany

All personal data will be handled in a confidential manner. Our data protection policy complies with the German Federal Data Protection Act (BDSG), the General Data Protection Regulation (GDPR) and the German Telemedia Act (TMG). Please find below information about the data protection details in our company.

1. The reasons for data recording

We record and process your data with the aim of setting up our website to give you the best possible service by facilitating easy access to our services.

2. Which data is recorded, processed or used?

If you access our website, our servers automatically record information of a general nature, in particular for the purpose of maintaining functions and system security. The information recorded includes the type of browser used, the operating system used, the domain name of the Internet Service Provider, the connection data of the computer used (IP address, the website from which you are visiting us (Referrer-URL), the pages you visit on our website as well as the date and duration of the visit. We are unable to work out your identity from this data as the data is anonymised. This data is not merged with other data sources. Other personal details such as your name, address, telephone number or e-mail address are not recorded unless this information is divulged by you voluntarily, e.g. when making a contact request or sending us information by e-mail.

3. Erasure

Personal data will be erased or blocked as soon as it no longer needs to be saved. Data will also be blocked or deleted in those cases in which a storage period specified by a named standard expires, unless there is a need to continue to save the data for the purposes of entering into a contract or fulfilling a contract or if you have granted your consent thereto.

4. Cookies

Cookies are used to make it easier to use our websites and to offer website users what they want. Cookies are text files placed on your hard disc to identify your browser should you return to the website.

You can prevent cookies from being saved on your hard disc by adjusting the setting on your browser appropriately. Cookies already used may be deleted at any time. Your browser instructions will tell you how to delete cookies or prevent them from being saved. If you do not accept cookies, this may result in the use of our website being sub-optimal.

5. Data security

We make our website and other systems secure by taking technical and organisational measures to prevent loss, destruction, access, modification or dissemination of your data by unauthorised persons. In spite of regular checks and on-going improvement of our security measures, it is not possible to offer full protection against all dangers.

6. Contact form

If you contact us via a contact form, your details including the contact data supplied by you on the contact form for the purpose of enabling us to handle your enquiry, and to deal with any subsequent queries will be saved by us. We shall not pass this information on without your consent.

7. Legal basis

Insofar as the user must grant his consent before his personal data can be, Article 6 Section 1 a) GDPR shall constitute the legal basis upon which personal data will be processed. If personal data is processed to carry out a contract, to which you are party, Article 6 Section 1 b) GDPR shall constitute the legal basis. This shall also apply for pre-contractual processing procedures. Insofar as personal data has to be processed to fulfil a legal obligation incumbent upon our company, Article 6 Section 1 c) GDPR shall constitute the legal basis. The legal basis for the temporary storage of your data in accordance with No 2 is Article 6 Section 1 f) GDPR.

8. The rights of persons affected

If your personal data is processed, you will be the person affected within the meaning of GDPR and you will be entitled to the following rights against us:

a) Right to information

You may request confirmation from us as to whether your personal data will be processed by us.
If we have processed your information you will be entitled to the following information:

  1. The purposes for which your personal data is to be processed;
  2. The categories of personal data which are to be processed;
  3. The recipient or the categories of recipients to whom your personal data has been disclosed or will be disclosed;
  4. The intended length of time over which your personal data will be stored or, if it is not possible to give a definitive response, the criteria upon which the length of time of storage will be decided;
  5. The existence of a right to correct or delete your personal information, of a right to restrict processing by the person responsible or the right to object to processing;
  6. The existence of a right to lodge a complaint with a supervisory authority;
  7. All available information about the source of the data if the personal data is not collected from the person to which it refers;
  8. The existence of an automatic decision making procedure including profiling in accordance with Article 22 Section 1 and 4 GDPR and – in these cases at least – meaningful information about the reasons involved as well as the extent of coverage and the impact sought with such processing for the person affected.

You shall be entitled to request information about whether the personal data relating to you will be sent to a third country or to an international organisation. In connection with this you may request that you are informed of the suitable guarantees in accordance with Article 46 GDPR in conjunction with the transfer of information.

b) Right to rectification

You will be entitled to have your personal data rectified and/or completed, provided that the processed personal data is incorrect or incomplete. Rectifications must be carried out straight away.

c) Right to restriction of processing

Subject to the following preconditions you may request that the processing of your personal data is restricted:

  1. If you contest the accuracy of your personal data for a period of time, enabling the person responsible to check the accuracy of your personal data;
  2. The processing is unlawful and you refuse to have your personal data deleted and instead of which request that the use of your personal data is restricted;
  3. The personal data is no longer required for the purposes for which it is being processed, but is required to assert claims, exercise or mount a defence against legal claims, or
  4. If you have objected processing pursuant to Article 21 Section 1 GDPR pending the verification whether the legitimate grounds of the controller override yours.

If the processing of your personal data has been restricted, this data may – apart from being saved – only be processed with your consent or to assert or exercise mount a defence against legal claims or to protect rights of another natural person or legal entity or for reasons of an important public interest of the European Union or a member state.
If the processing has been restricted in accordance with the above preconditions, you will be informed by the person responsible prior to the restriction.

d) The right to erasure

You may request that your personal data is erased undue delay and we shall have the obligation to erase your personal data without undue delay where one of the following grounds applies:

  1. Your personal data is no longer necessary to the purposes for which they were collected or otherwise processed;
  2. You withdraw your consent on which the processing is based according to Article 6 Section 1 a) or Article 9 Section 2 a) GDPR and where there is no other legal ground for the processing;
  3. You object to the processing pursuant to Article 21 Section 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 Section 2 GDPR;
  4. Your personal data was processed unlawfully;
  5. Your personal data has to be erased for compliance with a legal obligation in the European Union or a Member State law to which we are subject;
  6. Your personal data was collected in relation to the offer of information society services referred to in Article 8 Section 1 GDPR.

Exceptions

You will not be entitled to have your personal data deleted if processing is necessary:

  1. To exercise your right to freedom of expression and information;
  2. For compliance with a legal obligation to which requires processing by the European Union or a member state which we are subject to or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
  3. For reasons of public interest in the area of public health in accordance with Article 9 Section 2 h) and i) as well as Article 9 Section 3 GDPR;
  4. For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Section 1 GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  5. For the establishment, exercise or defence of legal claims.

e) Right to Notification

If you have asserted your right to have the processing of your personal data corrected, deleted or restricted, we shall be obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of data or restriction of processing unless it turns out to be impossible to do so or entails disproportionate expenditure. You shall be entitled to be informed of these recipients.

f) Right to data portability

You are entitled to receive your personal data you have provided us with in a structured, common format which can be read by computer. Besides which, you will be entitled to transfer this data to another responsible person without hindrance, provided that

  1. Processing is based upon consent in accordance with Article 6 Section 1 a) GDPR or Article 9 Section 2 a) GDPR or on a contract in accordance with Article 6 Section 1 b) GDPR and
  2. Processing takes place with the assistance of automated systems.

In exercising this right you will, moreover, be entitled to arrange for your personal data to be sent directly to another person responsible, provided that this is technically feasible. The freedoms and rights of other persons must not be impaired as a result thereof.
The right of data transferability shall not apply for processing personal data which is required for discharging a duty which is in the public interest or for exercising of public authority transferred to the person responsible.

g) Right to objection

You shall have the right to object on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on points (e) or (f) of Article 6(1), including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You will have the option of exercising your right of objection in connection with the use of the services of the information company – regardless of the directive 2002/58/EC – by means of automated systems in which technical specifications are used.

h) Right to revoke the data protection law declaration of consent

You will be entitled to revoke your declaration of consent provided for by German data protection law at any time. The lawful nature of the processing carried out up until revocation on the basis of consent granted shall not be affected by the revocation of consent.

9. Controller

Within the meaning of GDPR Exgeniam Executive Search Personalberatung KG, represented by its personally liable shareholder Sigrid Laubner-Peters, of the same address, shall be the data controller.

Contact: Sigrid Laubner-Peters
E-mail: datenschutz@exgeniam.de