Welcome to jobilities GmbH, Rotebühlstraße 63, 70178 Stuttgart, firstname.lastname@example.org.
We deem it a matter of course to follow statutory data protection provisions to protect your personal data. Your personal data is stored and processed in accordance with the statutory data protection provisions, particularly the German Telemedia Act (TMG), the EU General Data Protection Regulation (EUGDPR), and the supplementary regulations of the new German Federal Data Protection Act (BDSG neu).
This data protection policy consists of a general and a special section. The guidelines in the General Section apply to any visit to our website, irrespective of whether you apply for a job directly through our job portal or would like to create a personal application profile, simply view job openings, or visit our website for a different reason. In the Special Section of this data protection policy, we inform you how your personal data is collected, processed, and utilised within the scope of recruitment, application and customer procedures.
A. Responsible party
In the sense of Art. 4 No. 7 of the GDPR, the following party is responsible for data processing on this website, as well as within the scope of application processes:
Phone +49 (0)711 618083
Fax +49 (0)711 617217
Represented by: Michaela Averkorn, Michael Dahms (Management)
– hereinafter referred to as jobilities –
B. Subject of the data protection
I. General Section
1. Collection, processing and use of your personal data
Your personal data includes information such as your name, address, phone number or your email address. We only collect, process, and/or use personal data if you provide this to us of your own volition, e.g. for justification purposes, to formulate the content of or change a contractual relationship concluded between yourself and us, or to use personalised services. Furthermore, your personal data will be processed only if you have previously given your consent.
2. Use of data for specific purposes
We use data for specific purposes. All the above-mentioned data is only processed by us for the purposes already specified.
Transferring personal data to third parties, outside the scope described here, is not permitted without explicit consent.
Transfer to state institutions and authorities that are authorised to receive information is only implemented within the scope of the legal obligations to provide information, or if a court decision obliges us to provide information.
3. Processing of personal data in the scope of website use
It is essentially possible to use this website without providing personal data. However, the IP address is an exception to this. This is an essential requirement in the short term.
In computer networks, an IP address is a form of address allowing web servers and/or individual end devices to be contacted and reached. The web server and end devices cannot communicate without an IP address – and therefore nothing can be displayed. The web server hosted on this website is thus pinged with a data request from you; after all, you wish to use the website. In order to provide the data, the web server needs to know the IP address. Then the web server has to process your IP address when retrieving data. To do so, the web server receives the information regarding which website or file is being called up, and which browser and which operating system is being used to do so. Normally, this data is stored completely in web server log files, on a long-term basis. However, for technical reasons, jobilities only stores the user IP addresses for a further 7 days from the time of the necessary processing described here, in order to be able to detect brute force attacks, identify and ward off hacker attacks and, if necessary, to be able to prosecute any criminal offences. After this, the log files, including IP address, are automatically deleted.
The legal basis for this data processing is usually Art. 6 para. 1 b) of the GDPR, as we require your IP address to be able to send you the website and the information contained therein.
Below we explain the use, integration and application of
- Universal Analytics (Google Analytics)
- Social media
Cookies are small text files which websites store onto a computer in order to
- Make the site usable in the first place, for example by using cookies to store the status of a shopping cart during a session or to specify that no cookies may be stored (necessary cookies) or
- To be able to define long-term preferences, such as the user’s language output or to personalise content (preference cookies)
- Or to enable the analysis of website usage (statistics cookies)
- Or to be able to provide third parties with user information (marketing cookies).
We would also like to explain the specifics of the integration of Universal Analytics (Google Analytics) as well as the use of our social media plugins.
3.2. Universal Analytics (Google Analytics)
a) Google Tag Manager:
For the purposes of transparency, we would like to make it clear that this website uses Google Tag Manager. Google Tag Manager itself does not gather any personal data. Tag Manager makes it easy for us to integrate and manage our tags. Tags are small elements of code, which among other things, serve to track traffic and visitor behaviour, record the impact of online advertising and social channels, establish remarketing to, and alignment with, certain target groups as well as test and optimise websites. If you deactivate something, Google Tag Manager will take this deactivation into account. For further information on Google Tag Manager, refer to: https://www.google.com/intl/de/tagmanager/use-policy.html
b) Google Analytics:
This website uses Google Analytics from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). On behalf of the website operator, Google will evaluate your use of the website in order to compile reports on the website activity and to provide further services to the website operator in connection with website and Internet use.
You can also prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being transferred to Google, as well as this data from being processed by Google, by downloading and installing the browser add-on. If you click here, an opt-out cookie is set to prevent collection of your information when you visit this website in the future: https://tools.google.com/dlpage/gaoptout or deactivate Google Analytics https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable).
The data that we collect as part of the Universal Analytics usage profile is automatically deleted after 26 months.
This website uses conversion tracking and retargeting technology from Adform ApS, Hovedvagtsgade 6, 1103 Copenhagen K, Denmark.
Conversion tracking: This website uses Adform conversion tracking. The temporary cookie for conversion tracking is set when a user connects with an ad placed by Adform.
If you do not wish to participate in tracking, you can deactivate the cookie from Adform or Google via your Internet browser, or object to data collection and storage at any time in the future. Cookies already stored on your computer can be removed by deleting temporary websites.
Retargeting: This website uses retargeting technology by Adform. This makes it possible to use websites to target certain Internet users with advertising, if they have already shown interest in our website and our products. With retargeting, advertising is inserted using cookie-based analysis of previous visitor behaviour. This is a temporary cookie that becomes invalid after 60 days. If you do not wish to receive advertising from Adform, based on your interests, you can object to the collection and storage of your data at any time in the future here: https://site.adform.com/datenschutz-opt-out/ Further information on Adform’s data protection provisions can be found here http://site.adform.com/privacy-policy/de.
e) Google Dynamic Remarketing
On our website, we use the “Google AdWords” dynamic remarketing function, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The technology enables us to generate targeted advertising automatically after you visit our website. The ads are based on the products and services you clicked on when you last visited our website.
This information is only used to assign the web browser to a specific computer. It cannot be used to identify a person.
If you do not wish to receive user-based advertising from Google, it is possible to opt out of receiving ads via Google’s ad settings.
f) Google AdWords & Conversion Tracking
To draw attention to our products, we place ads for Google Adwords and use “Google Conversion Tracking”, a service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These ads are displayed following search queries on websites in the Google advertising network. We can combine our ads with certain search terms. Cookies allow us to provide ads based on a user’s previous visits to our website.
If an ad is clicked on, Google puts a cookie on the user’s computer. Further information on the cookie technology used can also be found in Google’s notes on website statistics and in the data protection provisions.
Using this technology, we as a customer, and Google, gain information about when a user has clicked on an ad and been redirected to our websites. The information obtained in this process is used exclusively for statistical evaluation to optimise advertising. However, we do not receive any information that can be used to personally identify users. The statistics that Google provides us with include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a site on our website marked with a conversion tag. Based on these statistics, we can track which search terms led to particularly frequent clicks on our ad and which ads led to the user contacting us via the contact form.
If you do not want this to be tracked, you can reject the cookies needed for this technology, via your browser settings, for example. Then your visit is not included in the user statistics.
g) Indeed Conversion Tracking
This website uses conversion tracking from Indeed Ireland Operations Limited. It places a cookie whenever a user clicks on a job advertisement that we have placed with Indeed. These cookies become invalid after 30 days and are not used for personal identification purposes. Once an application is completed, the cookie sends this information to the conversion tracker, which counts the application receipt, i.e. one conversion. Every Indeed user receives a different cookie. Therefore, cookies cannot be tracked via the websites of Indeed ad customers. Information obtained via the conversion cookies is used to create conversion statistics. As a customer, we determine the total number of users that have clicked on our ad and completed an application. However, we do not receive any information that can be used to personally identify users. Personal data and the IP address are not collected. The same applies for Indeed Ireland Operations Limited.
3.3. Share buttons (Facebook, Twitter, XING, LinkedIn, WhatsApp)
These websites feature “share buttons” (effectively a button that shares content on certain social networks). These are integrated in such a way that you – or the browser – only send personal data to the respective social network service if you activate (click) a share button (referred to as the Shariff solution). Without the Shariff tool, simply by opening the website, this data would have already been sent to the social network service.
By activating (clicking) a share button, various data is sent to the respective social network. Please read the explanations given below in detail, for each service.
a) Facebook share button
We have a share button on the Facebook social network, which is operated by facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If your habitual residence is in the European Union, you are offered services by facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The share button can be recognised by the characteristic Facebook logo.
By clicking the share button, the following data is sent to Facebook:
- Date and time of visit
- The Internet address/website URL which you are currently visiting
- Your IP address
- Traffic data (data on the device and browser used, operating system)
- Your Facebook user ID, if you are logged in to Facebook in your browser
- Plus, the fact that you used this specific plugin on our site.
b) Twitter share button
c) XING share button
We use the XING share button on the XING social network. If you activate the share button, a connection to the servers of XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany, is established. XING stores no personal data when the website is opened. In particular, no IP addresses are stored. There is also no evaluation of user behaviour.
The latest data protection information on the XING share button and additional information can be found here.
d) LinkedIn button
The following information is provided by LinkedIn:
If you click the button, LinkedIn also places cookies on your device and automatically receives the URL of the website you came from. Advertisers also receive the URL of this information. LinkedIn also obtains the Internet Protocol (“IP”) address of the computer or proxy server via which you access the Internet, as well as information about the computer operating system and the web browser used, the mobile device (including the mobile device ID available via your mobile device’s operating system), your mobile device’s operating system (if you access through a mobile device), and the name of the Internet service provider or mobile network operator. LinkedIn may also acquire location data transmitted by third party services or from GPS-enabled devices which are active.
More information about LinkedIn’s data processing procedures is available here.
e) WhatsApp button (only in mobile view)
In the mobile view, there is a WhatsApp button provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The WhatsApp button is however a simple hyperlink (<a href=“WhatsApp://send?text=Your Text + URL“>Share to WhatsApp</a>), which generates a native Deeplink in WhatsApp. By doing so, no personal data is transmitted and/or tracked – except the usual referrer data (incl. the IP address, refer to clause 4.1). Referrer data is inevitably created each time a link is called up on the Internet.
3.4. Facebook, Custom Audiences and Facebook marketing services
Given our legitimate interests in analysis, optimisation and the financial operations of our homepage and our applicant management system, the Facebook pixel of the Facebook network is used, as operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With the help of the Facebook pixel, it is possible for Facebook to determine the target group for displaying adverts (“Facebook ads”). Correspondingly, we use the Facebook pixel to display the Facebook ads we place only to Facebook users who have shown interest in our homepage and applicant management system, or who have certain characteristics (e.g., interests in certain topics or services determined by the websites visited) that we transfer to Facebook (known as “custom audiences”).
Using the Facebook pixel, we also wish to ensure that our Facebook ads correspond to potential user interests and are not a nuisance. Thanks to the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes, by seeing whether users have been directed to our website after clicking on a Facebook ad (“conversion”).
Facebook pixel is directly integrated through Facebook when you open our websites and can store a cookie on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our homepage is tracked in your profile. The data collected about you is anonymous to us, meaning we cannot draw any conclusions about user identity.
Furthermore, when using Facebook pixel, we use the additional function of “extended matching”, whereby data for the formation of target groups (“Custom Audiences” or “Look Alike Audiences”) is transmitted to Facebook in encrypted form.
We also use the social network Facebook, Inc.’s method “Custom Audiences from File”. In this instance, newsletter recipient email addresses are uploaded to Facebook. Uploads are encrypted. The upload is only used to target the recipients of our Facebook ads. By doing so, we aim to ensure that the ads are only displayed to users interested in our information and services.
Data processing by Facebook is within the scope of Facebook’s Data Use Policy. Specific information and details about the Facebook pixel and how it works can be found in the Facebook help section.
You may object to the collection and use of your information via the Facebook pixel to display Facebook ads.
To manage the types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions on usage-based advertising settings. The settings apply regardless of your platform (desktop or mobile).
II. Specific Section
1. Data processing within the scope of recruitment procedures
1.1 Candidate data
In order to recruit personnel, jobilities also undertakes active recruiting (known as “sourcing”), meaning that jobilities actively searches for potential employees in social networks, forums or other generally accessible places online.
Within the scope of these active recruitment procedures, jobilities processes data that has been made public by those persons, such as
- Data on professional qualifications
- E-mail addresses
- Account names/links to social media profiles (profile URLs, Twitter names etc.)
- Telephone numbers
Such candidate data is processed by jobilities on the basis of Art. 6 I f) GPDR in conjunction with Art. 9 para. 2 e) of the GDPR. jobilities has a legitimate interest in processing the personal data of potential employees, which they themselves have made public, for the purpose of personnel recruitment. There is no apparent opposing overriding interest from candidates that this data is not to be collected by jobilities for these purposes, since only data made public by the candidates and belonging to the social sphere is processed. In accordance with the legal requirements, this data is also only stored for the period of time specified here, until the deletion deadline, if the consent of the persons concerned is obtained.
Due to the disproportionate effort involved, it is not possible to notify those candidates whose data is processed in the scope of an active recruitment procedure for the purpose of creating the first talent pool, but who are ultimately not contacted with regard to the position in question and whose data is deleted after six months, in accordance with Art. 14 para. 5 b) of the GDPR and, as it were, in accordance with Art. 14 para. 5 b) of the GDPR is informed here about the data processing carried out.
2. Data processing within the scope of application procedures
2.1. Application activities in our job portal
We only process your personal data in our job portal if and when you have given us prior authorisation to do so. As such, the purpose of the data processing is also determined by your consent.
If you applied for a job that we advertised and provided us with your personal information only in connection with this recruitment process, then we will process your data only for the purpose of processing your application and giving you a quick reply with information on the desired job.
We would be happy to keep your applicant profile in our applicant pool, even after completing the application process, but of course this only occurs with your permission. In this case, your personal data will also be used to send you additional appropriate job openings. To do so, we specifically match your applicant profile with incoming job openings. This gives you the opportunity to be considered for jobs you may be interested in during the recruitment process, even without a separate application.
We process your data similarly if you send us a speculative application on our website.
If you have opted to subscribe to our free newsletter or job subscriptions, we will furthermore process your data for the purpose of providing you these things.
Lastly, we process your identification data, namely your e-mail address from the applicant profile you created, to send you the login details for your personal login area and afterwards give you the ability to log in at any time.
Your application will not be checked by machine, neither during the pre-selection process nor the subsequent selection process. Your application will be viewed and reviewed by HR employees and by employees and, if necessary, managers in the notified department of our company. All persons who are involved in processing applications are particularly obliged to maintain secrecy and process your data with strict confidentiality. If you have sent us an open application or have furthermore given us permission to use your applicant profile for searches for additional jobs as well, only your applicant profile will be automatically compared with incoming job openings. If there are matches, then additional processing will be carried out manually. Your data is stored on servers in Germany.
2.2 Data sharing in the application process
Personal data is not shared with third parties without your explicit consent. However, we can only process applications for jobs that must be filled through temporary staff assignment or personnel placement if you authorise us to send your personal data to the customers in question as well. Here, “customer” refers to the company from which the job opening originated.
In the case of speculative applications, we cannot yet predict which future job opening will match your applicant profile. To process speculative applications, we therefore require your consent to send the data to an indefinite number of our customers. The same applies if you have applied for a specific job but would like to be considered for other suitable jobs. In both cases, however, we will send your personal data only if you are interested in the job that is found. As such, we will contact you beforehand. We will, as a minimum, disclose to you the industry to which the client company belongs, its size, and the region in which the customer is headquartered, if this information is not already in the job opening.
Please be assured that we will send your personal data if and when the customer requires it only. Moreover, we always strive to provide our customers with anonymised profiles only.
We will not share your data with other third parties unless we are legally obligated to do so. We particularly guarantee that we will not sell your personal data or commercially exploit it in any other way.
2.3 Deletion deadlines in the application process
Your personal data will remain saved for as long as an application is in the application process. If your application is successful, your applicant profile will be deleted immediately; otherwise, it will be deleted within 180 days. If you have previously or in the meantime applied to one or several additional jobs, the 180-day deletion time period will be determined by the last ongoing application process.
We will keep your applicant profile in our applicant pool for 24 months under the condition that you have consented to long-term storage of your personal data. Once this time period has lapsed, your applicant profile will be deleted, unless otherwise stipulated with you on an individual basis.
Furthermore, we will naturally delete your applicant profile at any time if you request that we do so. Moreover, you can fully or partially remove your personal data from your applicant profile yourself in your personal login area.
We reserve the right to anonymise your personal data instead of deleting it. In this case, your data will be altered in a manner that makes it impossible
to identify you personally. Anonymised data is not personal data as set forth in the data protection law; as such, an anonymisation fully complies with statutory erasure obligations.
3. Data processing within the scope of customer procedures
If you contact us as a customer or interested party via email, then you must as a minimum provide or transfer the following personal data:
- E-mail address
- First name and surname
- Telephone number
- Your query
Here the legal basis of this data processing is also Art. 6 para. 1 b) of the GDPR, as after all, we cannot respond to you or your outlined query if we receive no personal data from you.
When you make contact with us (e.g., via contact form or e-mail), we store your details for the purpose of processing the enquiry and in the event that subsequent questions arise. We only store and use personal data if you give your consent or if this is legally permissible without special consent.
III. Your rights
You have the right to access, rectify and erase information regarding the processing and use of your personal data at any time. You can also assert these rights free of charge against jobilities GmbH via e-mail: email@example.com or via the following address Rotebühlstraße 63, 70178 Stuttgart.
1. Right to access
In accordance with Art. 15 of the GDPR, you have the right to receive information from us regarding the processing of your personal data.
2. Right to rectification
In accordance with Art. 16 of the GDPR, you have the right to request a rectification of any of your personal data that is inaccurate or incomplete.
3. Right to erasure
You have the right to request the erasure of your data if the preconditions set forth in Art. 17 of the GDPR apply. Furthermore, you may request erasure if we process your data based on your consent and you revoke this consent. We expressly point out that there may be legal obligations – such as storage obligations – to further store data. In this case, data can only be restricted. This means that the data is processed solely for the purpose of fulfilling the legal obligations and is not used otherwise.
4. Right to restrict processing
You have the right to request that the processing of your data be restricted if the preconditions set forth in Art. 18 of the GDPR apply. For instance, this is the case if you dispute the accuracy of your data. You may then request that the processing be restricted for as long as the accuracy of the data is verified.
5. Right to object
In accordance with Art. 21 of the GDPR, you have the right to object to the processing of your data if the processing concerns a predominant interest or if your data are used for direct advertising purposes. An objection is permissible if the processing is performed either in the public interest or in the exercise of public authority or due to a legitimate interest of jobilities GmbH or a third party. If you object, we please ask that you send us your reasons for objecting to the data processing. Furthermore, you also have the right to object to data processing for direct advertising purposes. This also applies to profiling to the extent that it is associated with direct advertising.
6. Right to data portability
If the data processing is based on consent or the fulfilment of a contract and it is furthermore carried out by using automated processing, in accordance with Art. 20 of the GDPR, you have the right to receive your data in a structured, common, and machine-readable format and send it to another data processor.
7. Right to revocation
If the data processing is based on consent, in accordance with Art. 7 of the GDPR, you have the right to revoke the data processing associated with the consent at any time with effect for the future, free of charge. The withdrawal of consent to data processing or objection to data usage does not affect the legitimacy of data processing up to the time of withdrawal or objection.
8. Right to file a complaint
In accordance with Art. 77 of the GDPR, you also have the right to complain to the supervisory authority (competent supervisory authority: The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg) about our processing of your data.
If you have additional questions regarding data protection at jobilities GmbH or would like to provide suggestions regarding the matter, feel free to send your concerns by e-mail or post to the following address:
Data Protection Officer at jobilities GmbH