Data Privacy Statement
The protection and security of personal data is a high priority for us. Please find information about how we handle your information, which is collected through your use of our website. The processing of your data takes place in accordance with the statutory provisions on data privacy. We strictly adhere to the provisions of the German Federal Data Protection Act (BDSG) as well as the European General Data Protection Regulation (GDPR). Insofar as links are provisioned to other websites, we have neither influence nor control over the linked contents and the data privacy policies which are thereby applicable. We recommend that you cross-check the data privacy policies on the linked websites in order to be able to determine whether and to what extent personal data is collected, processed, used or made available to third parties.
Controller (Responsible body) within the meaning of the data privacy lawYooniQ solutions GmbH and affiliated companies
Rüdesheimer Str. 21, 80686 Munich
Contact details of the data privacy officer:
Our data privacy statement should be easy and understandable for everyone. The data privacy statement usually uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 of the General Data Protection Regulation (GDPR) .
Data processing triggered by the visit to our website
When visiting this website, the web server automatically logs log files that cannot be assigned to a specific person. It is technically necessary that data is transmitted to our web server via your internet browser. The following data is logged during an ongoing connection for communication between your Internet browser and our web server:
- Visited domain
- Date and time of the request
- Referrer URL (URL of the previously visited website)
- Access status (file transmitted, file not found, etc.)
- Web browser and operating system used
- IP address of the requesting computer
- Amount of data transmitted
We collect the data listed in order to ensure a smooth connection set-up of the website and to facilitate a comfortable use of our website by the users. In addition, the log file serves to evaluate system security and stability as well as administrative purposes. The legal basis for the temporary storage of the data or respectively the logfiles is Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR).
For reasons of technical security, in particular to ward off attacks on our web server, this data is stored by us where expedient for a short time. An inference to individual data subjects is not possible on the basis of this data. After seven days at the latest, the data is anonymized by truncating the IP address at the domain level, so that an inference to the individual user is no longer possible. There is no evaluation of this data except for statistical purposes in anonymous form. A merge of this data with data from other data sources is not effected.
Use of personal data in the case of the registration
Personal data shall only be collected or processed insofar as you voluntarily provide this information, e.g. within the framework of an online registration or contact by e-mail.
Contact form and contact via e-mail
Insofar as you submit inquiries to us, via a contact form, resource download form, or e-mail, we shall save your details from the request form or respectively of your e-mail, including the contact details you have thereby provided, for the purpose of processing the request and in case of follow-up questions. We shall under no circumstances share this information without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request, pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) as well as where expedient Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR), insofar as your request pertains to the conclusion of a contract. Your data shall be deleted after the final processing of your request, as far as no applicable statutory retention requirements specify otherwise.
You have the possibility to register for specific services provisioned over our website and to as such thereby create a user profile. We collect and use the following personal data within the framework of the registration and set-up process:
- Company name
- E-mail address
- Desired password
- Date and time of the registration
This data is required to set up a company account for you. Insofar as not specified otherwise on account of necessary reasons in connection with a business processing, you reserve the right to at any given time, revoke the previously granted approval of your personal data storage with immediate effect, in writing (e.g. by e-mail). Your data shall not be disclosed to third parties, unless disclosure is required by law. The legal basis of the data processing in the case of consent, is Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR) or respectively Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR), insofar as the processing is required to provision the requested services. Your data shall be deleted as soon as the user account on our website is deleted and as far as no applicable statutory retention requirements specify otherwise. A change and / or deletion of your user account, including the data you have provided, can usually be effected directly in your user account after logging-on, or by sending a message to the controller designated in the introduction.
Use of personal data when applying
You have the opportunity to apply online for vacancies on our website. We collect and use the following personal data, within the framework of the application process:
- First name Last name
- Address, postcode, city
- E-mail address
- Personal message
- Uploaded documents such as CV or certificates
Mandatory information, which must be provided for the purposes of the application, is indicated in the input mask, with an asterisk hint as a mandatory field. The legal basis of the data processing in the case of consent, is Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR) or respectively Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR), insofar as the processing is required to provision the requested services. Your data shall be deleted after 24 months, as soon as the application process is completed and as far as no applicable statutory retention requirements specify otherwise. You can accordingly arrange for a change and / or deletion of your applicant data by sending a message to the controller designated in the introduction.
Insofar as you apply via e-mail, we shall save your details from your e-mail, including the contact details you have thereby provided, for the purpose of processing the application and in case of follow-up questions. We shall under no circumstances share this data without your consent. Your data shall be deleted after 24 months, as soon as the application process is completed and as far as no applicable statutory retention requirements specify otherwise.
Insofar as you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail address as a mandatory entry. In the case of the shipment of the newsletter, we use the so-called double-opt-in procedure. This means that we shall only ship our newsletter to you via e-mail, insofar as you have expressly confirmed to us that you consent to the shipment of the newsletter. You shall to this end, by way of a first step, receive an e-mail with a link which you can use to confirm that you, as the owner of the respective e-mail address, wish to receive newsletters in the future. With the confirmation you in effect grant us your consent pursuant to Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR) that we may use your personal data for the purposes of the shipment of the desired newsletter.
When registering for the newsletter, we store, in addition to the e-mail address required for the shipment, also the IP address you used to subscribe for the newsletter, as well as the date and time of the registration and confirmation, in order to be in the position to trace possible misuse, at a later date.
You can unsubscribe from the newsletter at any given time via the link inserted in each newsletter or by way of an e-mail to the controller designated above. After the effected deregistration, your e-mail address shall be deleted immediately from our newsletter distribution list, as far as you have not expressly consented to a continued use of the collected data, or as far as the continued processing is otherwise permitted by law.
For sending the newsletter we use the services of Mailchimp. Supplier is Rocket Science Group LLC, 675 Ponce de Leon Ave. NE, Suite 5000, Atlanta, GA 30308, USA. For the purpose of sending the newsletter, we will send the e-mail address and the name to Mailchimp. Mailchimp organizes and analyzes the sending of our newsletter. MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States. We have a so-called "Data Processing Agreement" with MailChimp, in which we commit MailChimp to protect the data of our customers and not to pass them on to third parties. For more information on data privacy at Mailchimp, visit https://mailchimp.com/legal/privacy/.
Our website uses Google Analytics, a web analytics service of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; "Google". Google Analytics uses so-called cookies. These are text files which are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users, is truncated by Google, within member States of the European Union or in other contract States of the Agreement on the European Economic Area, whereby the inference to a data subject can be excluded. The Google Inc. with registered offices in the USA, is certified pursuant to the US-European Agreement on Data Privacy „Privacy Shield“, which ensures compliance with the level of data privacy in the EU. The processing is effected pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) or respectively § 15 (3) of the German Telemedia Act (TMG), on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
You can prevent the storage of cookies through a corresponding setting of your browser software; However, please be aware that if you do this you may not be able to use the full functionality of this website. You may also prevent Google's data collection (including your IP address) generated by the cookie from your use of the website, from being processed by Google, by downloading and installing the browser plug-in, available under the URL https://tools.google.com/dlpage/gaoptout?hl=en . Clicking on the following link prevents the collection by Google Analytics through the setting of a so-called opt-out cookie: Deactivation of Google Analytics
Please refer to the data privacy statement from Google, for further information on the handling of user data by Google Analytics under: https://support.google.com/analytics/answer/6004245?hl=en
We also partly use the Signals function from Google Inc. The Google Signals function recognises individual users across different devices (so-called cross-device tracking). We ourselves only have anonymous data available in the form of a report that shows patterns in user behaviour. The function is only active if you
- have a Google account
- are logged in to your Google account when you access the kiwiHR website
- and have activated the "personalised advertising" function in your Google account.
If you do not wish to use this function, you must deactivate the "personalised advertising" function in your Google account.
We use this technology to recognise users across devices and to present them with interest-based advertisements.
We use the Google products described above if you have consented to them. We obtain your consent when you call up our websites via the cookie banner, Art. 6 par. 1 referred to GDPR.
We further as an AdWords customer also use the Google advertising tool „Google AdWords“; A service of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; "Google". Insofar as you visit our website via one of our AdWords ads, a conversion cookie shall be placed on your computer. These "conversion cookies" lose their validity after 30 days and are not used for personal identification. Insofar as you visit our website or a specific webpage on our website, we and Google can discern that you clicked on one of our Google-placed AdWords ads and were redirected to our website. However, this is only possible insofar as the cookie is still valid and has not expired.
The information collected in this manner (using conversion cookies) helps Google to generate visit and conversion statistics for our website. As an AdWords customer, these statistics inform us about the total number of visitors, who clicked on our AdWords ad and which other webpages within our website were accessed. We and other Google AdWords customers at no given time receive information that would personally identify visitors.
The installation of the "conversion cookies" can be prevented or respectively rejected by an appropriate setting of the browser - for example, via a browser setting that disables the automatic setting of cookies in general. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "googleadservices.com".
To protect our sign-up form, we use Google reCAPTCHA from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; “Google”. With reCAPTCHA we can determine whether a sign-up is done by a real person or an automated script. To achieve this, Google reCAPTCHA evaluates various information such as IP address, how long the visitor has been on the website or mouse movements made by the user. This analysis starts automatically as soon as the website visitor approves the cookie-policy. The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place in the background and the visitors are not advised that such an analysis is taking place. We have a legitimate interest in protecting our site, especially the sign up form, from abusive automated scripts.
You can learn more about reCAPTCHA on Google’s web developer page at developers.google.com/recaptcha/. More information about which data is collected by Google and what this data is used for can be found at https://policies.google.com/privacy.
For the purposes of better communication and optimization of the user experience, we use the Intercom service of the Company Intercom Inc., 98 Battery Street, Suite 402, San Francisco, CA 94111, USA. This is used to send messages via e-mail and for live chats. We transmit as personal data, the data entered in the course of the registration (such as name, e-mail, company). As part of our service agreement, Intercom collects publicly available contact information and other personally identifiable information (such as gender, photos, job title, social networks and addresses) with the aim of improving your user experience.
Intercom, Inc. has joined the Safe Harbor program, which seeks to achieve a higher level of data privacy for non-EU companies. More information about Intercom's privacy practices can be found at under: https://www.intercom.com/legal/privacy .
Insofar as you continue to use this website, you shall be deemed to grant your consent to the above processing of the data by Intercom and its third-party providers within the framework of their data privacy statements.
This website uses Hotjar, an analysis software from Hotjar Ltd. ("Hotjar") (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). Hotjar enables the measurement and analysis of usage behavior (clicks, mouse movements, scrolling heights, etc.) on our website. The "tracking code" and "cookie" generate information about your visit to our website. These are transmitted to the Hotjar servers in Ireland and stored there. The following information is collected by the tracking code:
The following information can be recorded by your device and browser:
- The IP address of your device (collected and saved in an anonymized format)
- Your e-mail address and name if you have made this available to us via our website
- Screen size of your device
- Device type and browser information
- Geographical location (country only)
- Mouse events (movement, position and clicks)
The following data is automatically created by our server when Hotjar is used
- Referring domain
- Pages visited
- Geographical location (country only)
- The preferred language to display our website
- Date and time when the website was accessed
Hotjar uses this information to evaluate your use of our website, to compile usage reports and other services relating to website usage and internet analysis of the website. Hotjar also uses services from third-party companies, such as Google Analytics and Optimizely, to provide services. These third-party companies can save information that your browser sends when you visit the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use the data, please see their respective privacy policies.
The cookies that Hotjar uses have a different "lifespan"; some stay up to 365 days, some stay valid only during the current visit. You can prevent Hotjar from collecting the data by clicking on the following link and following the instructions there: https://www.hotjar.com/privacy/do-not-track/.
Our website offers the possibility to arrange an online demo. To request and select an appointment, we use "Calendly", a product from Calendly LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA.
By using our online demo you will automatically use the services of calendly.com. Your entered data (name, email, company, date and time of the desired date) will be sent to us for contacting you. This data will only be used to organize and perform the requested online demo and will not be shared with third parties. For more information about data privacy at Calendly, visit https://calendly.com/pages/privacy
Our website uses a tracking code from Capterra, a service of Capterra, Inc. https://www.capterra.com, 1201 Wilson Blvd, 9th Floor, Arlington, VA 22209.
Capterra uses "cookies" that are stored on your computer. If you, as a Capterra visitor, sign up for kiwiHR on one of our websites, the information about this conversion will be sent to the Capterra servers. This way it can be recorded for our company.
In these cases, this processing is effected pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
You can prevent Capterra from collecting your data at any time at https://www.capterra.com/legal/cookie-policy. The data protection declaration of Capterra, Inc. can be found at: https://www.capterra.com/legal/privacy-policy
Our website uses a tracking code from Trustpilot, a service of Truspilot, https://www.trustpilot.com, Trustpilot A/S, Pilestraede 58, 5th floor, DK-1112 Copenhagen K.
Trustpilot uses "cookies" that are stored on your computer. If you, as a Truspilot visitor, sign up for kiwiHR on one of our websites, the information about this conversion will be sent to the Trustpilot servers. This way it can be recorded for our company.
In these cases, this processing is effected pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
You can prevent Truspilot from collecting your data at any time at https://legal.trustpilot.com/for-everyone/cookie-policy. The data protection declaration of Trustpilot can be found at: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms.
Our website uses a tracking code from Appvizer, a service of Cloud is Mine SAS, https://www.appvizer.fr; 72 Boulevard Pénélope, 34000 Montpellier, France.
Appvizer uses "cookies" which are stored on your computer. If, as a visitor to Appvizer, you visit one of our websites, or subscribe to kiwiHR on one of our websites, information about those visits and conversions will be sent to Appvizer's servers. In this way, it may be recorded for our company.
In this case, this processing is carried out in accordance with Article 6 (1) lit. f of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
You can prevent Appvizer from collecting your data at any time at https://www.appvizer.com/about/privacy-policy. The Appvizer data protection declaration can be found at https://www.appvizer.com/about/privacy-policy#5
This website uses the "LinkedIn Insight Tag", a conversion tool from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight tag creates a unique LinkedIn browser cookie in the visitor's browser and enables the following data to be recorded for this cookie: metadata such as IP address, time stamp and page events.
Further information on LinkedIn's data protection declaration can be found at https://www.linkedin.com/legal/privacy-policy
Social media links
In some cases, the cookies are used to simplify website processes by storing settings (e.g. the provision of already selected options). Insofar as personal data is also processed by us through the individual cookies implemented by us, the processing is effected pursuant to Article 6 (1) lit. b of the General Data Protection Regulation (GDPR), either for the execution of the contract or pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR) to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.
You can set your browser so that you are informed about the setting of cookies and thereby permit cookies only in individual cases, enable the acceptance of cookies in certain cases, or generally exclude the setting of cookies as well as enable the automatic deletion of cookies when closing the browser. The cookie settings can be managed under the following links for the respective browsers.
Internet Explorer http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
You can also individually manage the cookies of many companies and functions, which are used for advertising. You should for this purpose use the appropriate user tools, accessible under https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices .
Most browsers also offer a so-called "Do-Not-Track feature" this allows you to specify that you do not want to be "tracked" by websites. With this feature enabled, your browser shall notify ad networks, websites, and applications that you do not want to be tracked for behavior-based advertising and the like. For more information and instructions on how to use this feature, please refer to the links provided below, depending on the provider of your browser:
Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
Mozilla Firefox: https://www.mozilla.org/en/firefox/dnt/
Internet Explorer: https://support.microsoft.com/en-us/help/17288/windows-internet-explorer-11-use-do-not-track
Please note that disabling cookies may limit the functionality of this website.
You can adjust the settings at any time under this link.
Data sharing and recipients
A transmission of your personal data to third parties does not take place, unless
- we have explicitly pointed out to the respective data processing in the description.
- you have granted your express consent hereto, pursuant to Art. 6 (1) sentence 1 lit. a of the General Data Protection Regulation (GDPR),
- the disclosure pursuant to Art. 6 (1) sentence 1 lit. f of the General Data Protection Regulation (GDPR) is required to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding legitimate interest in not disclosing your information,
- a legal obligation exists in the cases of the disclosure pursuant to Art. 6 (1) sentence 1 lit. c of the General Data Protection Regulation (GDPR) and
- insofar as this is necessary pursuant to Art. 6 (1) sentence 1 lit. b of the General Data Protection Regulation (GDPR) for the purposes of the settlement of contractual relationships with you.
We also use external service providers for the processing of our services, who we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us, and with whom, we have where expedient concluded commissioned data processing contracts, pursuant to Art. 28 of the General Data Protection Regulation (GDPR). These are service providers for web hosting, sending emails, as well as the service and maintenance of our IT systems etc. The service providers shall not disclose this data to third parties.
Below please find information on which data subject rights the applicable data privacy law grants you, vis-à-vis the controller, with regard to the processing of your personal data:
The right to demand information about your personal data processed by us, pursuant to Art. 15 of the General Data Protection Regulation (GDPR). In particular, you thereby reserve the right to require that information is provided to you about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been disclosed or respectively shall be disclosed, the planned retention period, the right of rectification, deletion, restriction of processing or objection, the existence of a right to complain, the source of your data, insofar as it was not collected by us, as well as the existence of an automated decision-making process including profiling and where expedient, meaningful information on the details in this regard.
The right, pursuant to Art. 16 of the General Data Protection Regulation (GDPR), to demand the immediate correction of incorrect or complete personal data stored by us.
The right, pursuant to Art. 17 of the General Data Protection Regulation (GDPR), to demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
The right, pursuant to Art. 18 of the General Data Protection Regulation (GDPR), to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful and although we no longer need the data, also the right to reject its deletion, due to the fact that you need it for the purposes of the assertion, exercise or defense of legal claims or you have pursuant to Art. 21 of the General Data Protection Regulation (GDPR) raised an objection against the processing.
The right, pursuant to Art. 20 of the General Data Protection Regulation (GDPR), to demand to receive your personal data, which you have provided to us, in a structured, common and machine-readable format, or to demand the transmission thereof to another controller.
The right, pursuant to Art. 77 of the General Data Protection Regulation (GDPR) to file a complaint to a competent supervisory authority. As a rule, you can in this regard contact the competent supervisory authority of the federal state of our abovementioned registered offices or, the competent supervisory authority for your habitual place of residence or place of employment.
Right to revoke granted consent pursuant to Art. 7 Abs. 3 of the General Data Protection Regulation (GDPR): You reserve the right to revoke your granted consent for the processing of your data at any given time with future effect. In the case of the revocation of your granted consent, we shall immediately delete the data concerned, insofar as the further processing cannot be based on a legal basis for consent-less processing. The revocation of your granted consent shall not affect the legality of the processing hitherto effected on the basis of the granted consent up to the time of the revocation thereof.
Right of objection:
Insofar as your personal data is processed by us, on the basis of legitimate interests, pursuant to Art. 6 (1) sentence 1 lit. f of the General Data Protection Regulation (GDPR), you reserve the right, pursuant to Art. 21 of the General Data Protection Regulation (GDPR), to raise an objection against the processing of your personal data, to the extent that it is for reasons that arise from your particular situation. Insofar as the objection is directed against the processing of your personal data is directed against the purposes of direct marketing, you have a general right of objection without the requirement of specifying a particular situation.
Insofar as would like to exercise your right of revocation or objection, it is sufficient to send an e-mail to email@example.com .
Changes to this data privacy statement
We reserve the right to modify or update this data privacy statement, if necessary, in compliance with applicable data privacy regulations. In this way we can adapt it to the current statutory requirements and take into account changes in our services, e.g. in the case of the launch of new services. Applicable for your visit is the latest version of this data privacy statement.
Status of this data privacy statement: 01.01.2021