Website Users: Relevant if you use our Website.

Enabling a functioning visit of our website(s). Please note that there may be dedicated portals for candidates respectively clients on some of our websites.

Potential Data Subjects: Any user of our website.
 
Potentially concerned Personal Data
- IP address
- Host name of the accessing computer
- Website from which the website was accessed
- Date and time of access
- Websites accessed via the website
- Visited page on our website
- Message whether the retrieval was successful
- Amount of data transmitted
- Information about the browser type and version used
- Operating system

Origin and recipient
We may receive the data from:
- Data Subject

The data may be forwarded to:
- IT service providers

Legal basis
The temporary storage of the abovementioned data is necessary for the technical functionality of a website visit. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. These purposes constitute our legitimate interests in data processing (Art. 6 (1) f) GDPR).

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For website visits, this is when the relevant session is ended. The log files are kept up to 24 hours directly and exclusively accessible to administrators. After that, they are only available indirectly through the reconstruction of backup media and are permanently deleted after the end of that routine.

As data controller we will ensure that any data processors protect your information as well as ourselves, and that they are bound by the same limitations as we are regarding the use of your data.


Candidates: Relevant if you provide us directly or indirectly Personal Data for the purposes of finding a suitable consulting opportunity with our clients.

For the sake of clarification, candidates are experts that are stored in our data base for potential vacancies. In contrast, consultants are experts who are placed with a client.
 
Description of the purpose
Adding professional experts to our database and maintaining the data in order to match consulting resources with the needs of our clients.

Potential Data Subject
Candidates (professional experts seeking temporary consulting projects)
 
Potentially concerned categories of data
- surname, first name
- e-mail addresses
- telephone numbers
- postal addresses
- social media IDs
- photograph
- date of birth
- nationality
- education and credentials
- professional career (CV)
- professional references
- information on services offered
- email correspondence 
 
Legal basis
The storage of your data with us is made to fulfil our obligations under agreement with you. Before you enter your data, you will be informed that this involves a mandate for us to find client requests that match your profile.
 
Retention period
Records of candidates are retained in the database for up to three years from the last business contact with that person.


Consultants: Relevant if you have accepted a consulting opportunity with one of our clients.

For the sake of clarification, consultants are experts who are placed with a client. In contrast, candidates are all experts that are stored in our data base for potential vacancies.
 
Description of the purpose
Deploying professional experts on temporary consulting roles with our clients.
 
Potential Data Subjects
- Consultants (experts who have contracted with us for a consulting role)
 
Potentially concerned categories of data
- surname, first name
- e-mail addresses
- telephone numbers
- postal addresses
- social media IDs
- photograph
- date of birth
- nationality
- immigration status / work permit
- education and credentials
- professional career (CV)
- professional references
- information on services offered
- email correspondence 
- identification documents
- background check results
- VAT identification number
- Social/tax attestations
- bank details
- contracts, invoices and related documentation

Legal basis
The data must be processed for the preparation, follow-up and execution of contracts for potential future business. The legal basis for this processing is Art. 6 (1) b) GDPR.
 
Retention period
Personal Data of Consultants are retained per tax, legal and regulatory requirements which may be for up to six (6) years from the end of the year in which the contractual relationship terminated.



Applicants: Relevant if you apply for employment with us.

For clarification, applicants for temporary work, as a subset of general applicants, are also candidates for future placements with clients. Therefore, section on candidates applies to each temporary work applicant, too.
 
Description of the purpose
Personal Data is collected, processed and used for the purpose of assessing the suitability for and establishing employment relationships. As soon as an employment contract is closed, further information on the data processing will be given together with the contract documents.
 
Potential Data Subjects
- applicants for general employement
- temporary work applicants
- applicants for deployment as trainees/interns/students/volunteers
 
Potentially concerned categories of data
- surname, first name (if applicable: birth name)
- e-mail addresses
- telephone numbers
- postal addresses
- social media IDs
- photograph
- date of birth
- nationality
- education and credentials
- professional career (CV)
- professional references
- identification documents
- social security number
- bank details
- tax identifiers/codes

Legal basis
Insofar as the personal data are required for the preparation of the employment contract, the basis for their processing is Art. 6 (1) b) GDPR. With regard to special categories of data (e.g. health status), processing may be necessary and therefore permissible under Art. 9 (2) b) GDPR with regard to the rights and obligations of the controller under labour and social law. Otherwise, pursuant to Art. 9 (2) a) GDPR, express consent must be obtained.
 
Retention period
Employed applicants will receive further information on the processing and retention of their personal data with their contractual documents. Data of rejected applicants will be retained for up to six (6) months after the rejection.


Clients: Relevant if we supply goods or services to you.

 
Description of the purpose
The provision of advice or professional services as a consultant or intermediary.

 
Potential Data Subjects
- client employees

 
Potentially concerned categories of data
- surname, first name
- e-mail addresses
- telephone numbers
- postal addresses
- social media IDs
- photograph

 
Legal basis
Insofar as personal data must be processed for the preparation, follow-up and execution of contracts, the basis for their processing is Art. 6 (1) b) GDPR. Insofar as client's data is collected and stored in our data base for potential future business, the basis for this is our legitimate interest in accordance with Art. 6 (1) f) GDPR: We assume that as a personnel service provider we have a legitimate and recognisable interest in successfully placing job seekers or other market participants.


 
Retention period
Your data will be retained for as long as we have a contractual relation for the purposes originally envisaged in that relation. In addition, and however, the retention period will be contingent upon tax, legal and other regulatory requirements which in some instances demand storage for up to six (6) years from the end of the year in which the contractual relationship ceased.

 
Data Subject Rights
The applicable data protection law grants you comprehensive data protection rights (rights of information and intervention) vis-à-vis us with regards to the processing of your personal data, about which we inform you below:

 Right of access (Art. 15 GDPR)
In particular, you have a right of access to your personal data processed by us and further information as listed in Art. 15 GDPR

Right to rectification (Art. 16 GDPR)
You have the right to have incorrect data concerning you corrected and/or incomplete data held by us completed without delay.

Right to erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

Right to restriction of processing (Art. 18 GDPR)
You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data which you dispute is verified in the following circumstances:
- You oppose deletion of your personal data and requests restriction instead in case of unlawful processing;
- You require your personal data to be kept in order to establish, exercise or defend a legal claim after we no longer need these data since the purpose has been achieved;
- You have lodged an objection for reasons relating to your particular situation, and we are considering whether our legitimate grounds override yours.
- You contest the accuracy of your personal data and we are verifying it.

Right to notification (Art. 19 GDPR)
If you have asserted the right to correction, deletion, or restriction of processing vis-à-vis us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed as part of this correction, deletion or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data that you have provided us with in a structured, common, and machine-readable format or to request transmission of those data to another controller, insofar as this is technically feasible.

Right to withdraw consents (Art. 7 (3) GDPR)
You have the right to withdraw at any time any consent you have given to the processing of data. In the event of revocation, we will immediately delete the concerned data. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

Right to lodge a complaint (Art. 77 GDPR)
If you believe that the processing of personal data relating to you is in breach of the data protection legislation, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged breach occurs.

Right to object (Art. 21 GDPR)
If we process your personal data on the basis of our legitimate interest, you have the right to object on grounds relating to your particular situation to this processing at any time.

If you exercise your right to object, we will no longer process your personal data. However, we reserve the right to keep processing of your personal data if we can prove that there are compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If your personal data are processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. You can exercise the right to object as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.