Test kiwiHR now
Enhance your HR workflow and start your 30-day free trial today!
The protection and security of personal data is a high priority for us. Please find information about how we handle your information, which is collected through your use of our website. The processing of your data takes place in accordance with the statutory provisions on data privacy. We strictly adhere to the provisions of the German Federal Data Protection Act (BDSG) as well as the European General Data Protection Regulation (GDPR). Insofar as links are provisioned to other websites, we have neither influence nor control over the linked contents and the data privacy policies which are thereby applicable. We recommend that you cross-check the data privacy policies on the linked websites in order to be able to determine whether and to what extent personal data is collected, processed, used or made available to third parties.
Our data privacy statement should be easy and understandable for everyone. The data privacy statement usually uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 of the General Data Protection Regulation (GDPR).
When visiting this website, the web server automatically logs log files that cannot be assigned to a specific person. It is technically necessary that data is transmitted to our web server via your internet browser. The following data is logged during an ongoing connection for communication between your Internet browser and our web server:
We collect the data listed in order to ensure a smooth connection set-up of the website and to facilitate a comfortable use of our website by the users. In addition, the log file serves to evaluate system security and stability as well as administrative purposes. The legal basis for the temporary storage of the data or respectively the logfiles is Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR).
For reasons of technical security, in particular to ward off attacks on our web server, this data is stored by us where expedient for a short time. An inference to individual data subjects is not possible on the basis of this data. After seven days at the latest, the data is anonymized by truncating the IP address at the domain level, so that an inference to the individual user is no longer possible. There is no evaluation of this data except for statistical purposes in anonymous form. A merge of this data with data from other data sources is not effected.
Personal data shall only be collected or processed insofar as you voluntarily provide this information, e.g. within the framework of an online registration or contact by e-mail.
Insofar as you submit inquiries to us, via a contact form or e-mail, we shall save your details from the request form or respectively of your e-mail, including the contact details you have thereby provided, for the purpose of processing the request and in case of follow-up questions. We shall under no circumstances share this information without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request, pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) as well as where expedient Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR), insofar as your request pertains to the conclusion of a contract. Your data shall be deleted after the final processing of your request, as far as no applicable statutory retention requirements specify otherwise.
You have the possibility to register for specific services provisioned over our website and to as such thereby create a user profile. We collect and use the following personal data within the framework of the registration and set-up process:
This data is required to set up a company account for you. Insofar as not specified otherwise on account of necessary reasons in connection with a business processing, you reserve the right to at any given time, revoke the previously granted approval of your personal data storage with immediate effect, in writing (e.g. by e-mail). Your data shall not be disclosed to third parties, unless disclosure is required by law. The legal basis of the data processing in the case of consent, is Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR) or respectively Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR), insofar as the processing is required to provision the requested services. Your data shall be deleted as soon as the user account on our website is deleted and as far as no applicable statutory retention requirements specify otherwise. A change and / or deletion of your user account, including the data you have provided, can usually be effected directly in your user account after logging-on, or by sending a message to the controller designated in the introduction.
You have the opportunity to apply online for vacancies on our website. We collect and use the following personal data, within the framework of the application process:
Mandatory information, which must be provided for the purposes of the application, is indicated in the input mask, with an asterisk hint as a mandatory field. The legal basis of the data processing in the case of consent, is Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR) or respectively Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR), insofar as the processing is required to provision the requested services. Your data shall be deleted after 24 months, as soon as the application process is completed and as far as no applicable statutory retention requirements specify otherwise. You can accordingly arrange for a change and / or deletion of your applicant data by sending a message to the controller designated in the introduction.
Insofar as you apply via e-mail, we shall save your details from your e-mail, including the contact details you have thereby provided, for the purpose of processing the application and in case of follow-up questions. We shall under no circumstances share this data without your consent. Your data shall be deleted after 24 months, as soon as the application process is completed and as far as no applicable statutory retention requirements specify otherwise.
Insofar as you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail address as a mandatory entry. In the case of the shipment of the newsletter, we use the so-called double-opt-in procedure. This means that we shall only ship our newsletter to you via e-mail, insofar as you have expressly confirmed to us that you consent to the shipment of the newsletter. You shall to this end, by way of a first step, receive an e-mail with a link which you can use to confirm that you, as the owner of the respective e-mail address, wish to receive newsletters in the future. With the confirmation you in effect grant us your consent pursuant to Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR) that we may use your personal data for the purposes of the shipment of the desired newsletter.
When registering for the newsletter, we store, in addition to the e-mail address required for the shipment, also the IP address you used to subscribe for the newsletter, as well as the date and time of the registration and confirmation, in order to be in the position to trace possible misuse, at a later date.
You can unsubscribe from the newsletter at any given time via the link inserted in each newsletter or by way of an e-mail to the controller designated above. After the effected deregistration, your e-mail address shall be deleted immediately from our newsletter distribution list, as far as you have not expressly consented to a continued use of the collected data, or as far as the continued processing is otherwise permitted by law.
Our website uses Google Analytics, a web analytics service of the Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Analytics uses so-called cookies. These are text files which are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users, is truncated by Google, within member States of the European Union or in other contract States of the Agreement on the European Economic Area, whereby the inference to a data subject can be excluded. The Google Inc. with registered offices in the USA, is certified pursuant to the US-European Agreement on Data Privacy „Privacy Shield“, which ensures compliance with the level of data privacy in the EU. The processing is effected pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) or respectively § 15 (3) of the German Telemedia Act (TMG), on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
You can prevent the storage of cookies through a corresponding setting of your browser software; However, please be aware that if you do this you may not be able to use the full functionality of this website. You may also prevent Google's data collection (including your IP address) generated by the cookie from your use of the website, from being processed by Google, by downloading and installing the browser plug-in, available under the URL https://tools.google.com/dlpage/gaoptout?hl=en. Clicking on the following link prevents the collection by Google Analytics through the setting of a so-called opt-out cookie: Deactivation of Google Analytics
Please refer to the data privacy statement from Google, for further information on the handling of user data by Google Analytics under: https://support.google.com/analytics/answer/6004245?hl=en
We further as an AdWords customer also use the Google advertising tool „Google AdWords“; A service of the Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Insofar as you visit our website via one of our AdWords ads, a conversion cookie shall be placed on your computer. These "conversion cookies" lose their validity after 30 days and are not used for personal identification. Insofar as you visit our website or a specific webpage on our website, we and Google can discern that you clicked on one of our Google-placed AdWords ads and were redirected to our website. However, this is only possible insofar as the cookie is still valid and has not expired.
The information collected in this manner (using conversion cookies) helps Google to generate visit and conversion statistics for our website. As an AdWords customer, these statistics inform us about the total number of visitors, who clicked on our AdWords ad and which other webpages within our website were accessed. We and other Google AdWords customers at no given time receive information that would personally identify visitors.
The installation of the "conversion cookies" can be prevented or respectively rejected by an appropriate setting of the browser - for example, via a browser setting that disables the automatic setting of cookies in general. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "googleadservices.com".
Our website uses the web analytics service Hotjar of the Hotjar Ltd. Hotjar Ltd. is a European company with registered offices in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Tel.: +1 (855) 464-6788).
In the case of websites on which Hotjar is incorporated, this tool can be used to understand movements (so-called heat maps). For example, you can discern how far users are scrolling and which buttons users often click. The tool also allows the collection of feedback directly from the users of the websites. Most importantly, the services of Hotjar enhance the functionality of Hotjar-based websites by making them more user-friendly, more valuable, and easier to use for end users.
When using this tool, we pay particular attention to the protection of your personal data. We can as such only track which buttons are clicked, the mouse's progress, how far scrolled, the screen size of the device, device type and browser information, geographic location (country only) and preferred language for the display of our website. Sections of the websites in which personal data of you or of third parties is displayed, are automatically hidden by Hotjar and are thus at no given time traceable. In order to exclude a direct personal reference, IP addresses are stored and processed only anonymously. Hotjar uses various third-party services such as Google Analytics and Optimizely. It may therefore be the case that these services collect data transmitted by your browser within the framework of website inquiries. These can be, for example, cookies or your IP address. In these exceptional cases, this processing is effected pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
Hotjar offers every user the option of using a "Do-not-Track-Header" to prevent the use of the tool Hotjar, so that no data about the visit of the respective website is logged. This pertains to a setting which is supported by the current versions of all common browsers. For this purpose, your browser sends a request to Hotjar to disable the tracking of the respective user. Insofar as you use our website with different browsers or respectively computers, you shall need to set up the "Do-not-Track-Header" separately for each of these browsers or respectively computers.
Insofar as you visit a Hotjar-based website, you can at any given time prevent Hotjar from collecting your data, by visiting the Hotjar opt-out website https://www.hotjar.com/legal/compliance/opt-out and clicking on Disable Hotjar. More information about Hotjar Ltd. and about the Hotjar tool, can be found under: https://www.hotjar.com. The data privacy statement of the Hotjar Ltd. Can be found under: https://www.hotjar.com/privacy.
For the purposes of better communication and optimization of the user experience, we use the Intercom service of the Company Intercom Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111, USA. This is used to send messages via e-mail and for live chats. We transmit as personal data, the data entered in the course of the registration (such as name, e-mail, company). As part of our service agreement, Intercom collects publicly available contact information and other personally identifiable information (such as gender, photos, job title, social networks and addresses) with the aim of improving your user experience.
Intercom, Inc. has joined the Safe Harbor program, which seeks to achieve a higher level of data privacy for non-EU companies. More information about Intercom's privacy practices can be found at under: http://docs.intercom.io/privacy.
Insofar as you continue to use this website, you shall be deemed to grant your consent to the above processing of the data by Hotjar and its third-party providers within the framework of their data privacy statements.
In some cases, the cookies are used to simplify website processes by storing settings (e.g. the provision of already selected options). Insofar as personal data is also processed by us through the individual cookies implemented by us, the processing is effected pursuant to Article 6 (1) lit. b of the General Data Protection Regulation (GDPR), either for the execution of the contract or pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.
You can set your browser so that you are informed about the setting of cookies and thereby permit cookies only in individual cases, enable the acceptance of cookies in certain cases, or generally exclude the setting of cookies as well as enable the automatic deletion of cookies when closing the browser. The cookie settings can be managed under the following links for the respective browsers.
Internet Explorer http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
You can also individually manage the cookies of many companies and functions, which are used for advertising. You should for this purpose use the appropriate user tools, accessible under https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called "Do-Not-Track feature" this allows you to specify that you do not want to be "tracked" by websites. With this feature enabled, your browser shall notify ad networks, websites, and applications that you do not want to be tracked for behavior-based advertising and the like. For more information and instructions on how to use this feature, please refer to the links provided below, depending on the provider of your browser:
Mozilla Firefox: https://www.mozilla.org/en/firefox/dnt/
Please note that disabling cookies may limit the functionality of this website.
A transmission of your personal data to third parties does not take place, unless
We also use external service providers for the processing of our services, who we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us, and with whom, we have where expedient concluded commissioned data processing contracts, pursuant to Art. 28 of the General Data Protection Regulation (GDPR). These are service providers for web hosting, sending emails, as well as the service and maintenance of our IT systems etc. The service providers shall not disclose this data to third parties.
Below please find information on which data subject rights the applicable data privacy law grants you, vis-à-vis the controller, with regard to the processing of your personal data:
The right to demand information about your personal data processed by us, pursuant to Art. 15 of the General Data Protection Regulation (GDPR). In particular, you thereby reserve the right to require that information is provided to you about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been disclosed or respectively shall be disclosed, the planned retention period, the right of rectification, deletion, restriction of processing or objection, the existence of a right to complain, the source of your data, insofar as it was not collected by us, as well as the existence of an automated decision-making process including profiling and where expedient, meaningful information on the details in this regard.
The right, pursuant to Art. 16 of the General Data Protection Regulation (GDPR), to demand the immediate correction of incorrect or complete personal data stored by us.
The right, pursuant to Art. 17 of the General Data Protection Regulation (GDPR), to demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
The right, pursuant to Art. 18 of the General Data Protection Regulation (GDPR), to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful and although we no longer need the data, also the right to reject its deletion, due to the fact that you need it for the purposes of the assertion, exercise or defense of legal claims or you have pursuant to Art. 21 of the General Data Protection Regulation (GDPR) raised an objection against the processing.
The right, pursuant to Art. 20 of the General Data Protection Regulation (GDPR), to demand to receive your personal data, which you have provided to us, in a structured, common and machine-readable format, or to demand the transmission thereof to another controller.
The right, pursuant to Art. 77 of the General Data Protection Regulation (GDPR) to file a complaint to a competent supervisory authority. As a rule, you can in this regard contact the competent supervisory authority of the federal state of our abovementioned registered offices or, the competent supervisory authority for your habitual place of residence or place of employment.
Right to revoke granted consent pursuant to Art. 7 Abs. 3 of the General Data Protection Regulation (GDPR): You reserve the right to revoke your granted consent for the processing of your data at any given time with future effect. In the case of the revocation of your granted consent, we shall immediately delete the data concerned, insofar as the further processing cannot be based on a legal basis for consent-less processing. The revocation of your granted consent shall not affect the legality of the processing hitherto effected on the basis of the granted consent up to the time of the revocation thereof.
Right of objection:
Insofar as your personal data is processed by us, on the basis of legitimate interests, pursuant to Art. 6 (1) sentence 1 lit. f of the General Data Protection Regulation (GDPR), you reserve the right, pursuant to Art. 21 of the General Data Protection Regulation (GDPR), to raise an objection against the processing of your personal data, to the extent that it is for reasons that arise from your particular situation. Insofar as the objection is directed against the processing of your personal data is directed against the purposes of direct marketing, you have a general right of objection without the requirement of specifying a particular situation.
Insofar as would like to exercise your right of revocation or objection, it is sufficient to send an e-mail to firstname.lastname@example.org.
We reserve the right to modify or update this data privacy statement, if necessary, in compliance with applicable data privacy regulations. In this way we can adapt it to the current statutory requirements and take into account changes in our services, e.g. in the case of the launch of new services. Applicable for your visit is the latest version of this data privacy statement.
Status of this data privacy statement: