Privacy statement

Privacy statement

This privacy policy applies to the use of our website www.provipanda.de, our web app at app.provipanda.com as well as our mobile app “ProviPanda App” for iOS and Android.

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract and is also not required to conclude a contract. You are not required to provide the data. Failure to provide it has no consequences, unless otherwise stated in the following processing processes.

“Personal data” is any information relating to an identified or identifiable natural person.

Unless expressly stated otherwise, the following information applies equally to the use of the website, the web app and the mobile app.

server log files

You can visit our website and web app without giving any information about yourself.

Each time you access our website or web app, usage data is transmitted to us or our web host or IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of the request, the IP address, the amount of data transferred and the requesting provider.

Processing is carried out on the basis of Article 6 (1) (f) GDPR out of our overriding legitimate interest in ensuring trouble-free operation and improving our offering.

When using our mobile app, technical data is also automatically processed every time you access our servers, such as IP address, device ID (e.g. Apple Identifier for Advertisers (IDFA) or Google Advertising ID), operating system version, app version, time of access and log files of the actions carried out in the app.

contact

person responsible

Please contact us if you wish. The person responsible for data processing is:

ProviPanda GmbH

An der Alster 6 20099 Hamburg

Telephone: 040 60944012

email: support@provipanda.de

Prompt contact with the customer via email

If you contact us by email, we collect your personal data (e.g. name, email address, message text) only to the extent that you provide it to us. The purpose of processing is to process and answer your request.

If the contact is made to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract that already exists between you and us, the processing is carried out on the basis of Art. 6 para. 1 lit. b DSGVO.

If you contact us for other reasons, processing is carried out on the basis of Article 6 (1) (f) GDPR out of our legitimate interest in processing and responding to your request. In this case, you have the right to object to this processing based on Article 6 (1) (f) GDPR at any time for reasons arising from your particular situation.

We will only use your email address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing.

contacting

You can contact us via email, telephone, or via our support chat (Intercom). When you contact us, we process your personal data (e.g. name, email address, telephone number, message text) only to the extent that you provide it to us. The purpose of processing is to process and answer your request.

If the contact is made to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract that already exists between you and us, the processing is carried out on the basis of Art. 6 para. 1 lit. b DSGVO.

If you contact us for other reasons, processing is carried out on the basis of Article 6 (1) (f) GDPR out of our legitimate interest in processing and responding to your request. In this case, you have the right to object to this processing based on Article 6 (1) (f) GDPR at any time for reasons arising from your particular situation.

We use your contact details exclusively to process your request. They will then be deleted in compliance with legal retention periods, unless you have consented to further processing.

Contact by phone, email and SMS after lead registration (B2B)

If you sign up via our form on the website or through our funnels, which we provide via the service Perspective.co operate, register and accept our privacy policy, you expressly agree that we may contact you by phone, email, or text message about our products and services.

Consent to data processing and contacting you is given by ticking the form and is voluntary. You can withdraw your consent at any time with effect for the future.

Legal bases for processing:

  • Art. 6 para. 1 lit. a GDPR (consent) — Processing your data and contacting you by phone, email or SMS about our products and services.
  • Art. 6 para. 1 lit. b GDPR (contract fulfilment/pre-contractual measures) — if you have made a specific request about our products or services.
  • Art. 6 para. 1 lit. f GDPR (legitimate interest — B2B direct marketing) — if we have a business interest in our offers, exclusively for business purposes, based on our legitimate interest in accordance with recital 47 GDPR.

Right of withdrawal:

After receipt of your withdrawal, we will no longer use your data for advertising purposes. The lawfulness of the processing carried out up to that point remains unaffected (Article 7 (3) GDPR). The withdrawal is free of charge and will be implemented as quickly as possible, but within 7 days at the latest.

Using Calendly

On our website, we use the “Calendly” appointment booking function provided by Calendly, LLC (BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA) for the purpose of making appointments and improving usability.

When you book an appointment via Calendly, we process the personal data you provide (e.g. name, email address, telephone number, message text, membership number, if applicable). In addition, technical data is transmitted to Calendly upon access, such as your IP address, the device used, information about the browser and operating system, and the date and time of access.

This processing is carried out to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR.

Data transfer to third countries

Calendly is certified under the EU-US Data Privacy Framework (DPF), which ensures an appropriate level of data protection when transferring data to the USA. In addition, standard contractual clauses (SCC) are used, which are listed under https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de are visible.

Calendly only uses cookies or comparable technologies with your consent in accordance with Section 25 (1) TTDSG in conjunction with Art. 6 (1) lit. a GDPR. You can withdraw this consent at any time with effect for the future — e.g. via the cookie settings in your browser or via the appropriate options in our consent banner.

For more information about Calendly's privacy policy, please visit: https://calendly.com/privacy

Registration and storage of data

If you register via our website, the web app (accessible via the login area on our website) or our mobile apps (iOS/Android), we process the data you provide during registration (e.g. name, email address, password, profile information). Companies that book paid services are redirected to our payment service provider Stripe (Stripe Payments Europe Ltd., Dublin, Ireland) for payment processing as part of registration or booking.

Your personal data is stored in our database at Supabase. According to the provider, Supabase's servers are located in Singapore. The transfer to a third country outside the EU/EEA is based on standard contractual clauses the European Commission in accordance with Article 46 (2) (c) GDPR, which ensure adequate protection of your data.

Our platform content is delivered via web servers operated by our hosting service provider Hetzner in Germany.

Your data is processed in accordance with Art. 6 para. 1 lit. b DSGVO to fulfill the user contract and, to the extent necessary, on the basis of Art. 6 para. 1 lit. f DSGVO out of our legitimate interest in the secure and stable operation of our platform.

Download from app stores

If you download our mobile app via the Apple App Store or Google Play Store, data processing is carried out by the respective store provider (Apple Inc. or Google LLC) in accordance with their own privacy policy. We have no influence on this processing. For more information, please see the providers' privacy policies: Apple Privacy Policy and Google Privacy Policy. App store providers can process additional data such as usage statistics, diagnostic data (crash reports) or device information as part of download and use. We have no influence on this data processing; it is based exclusively on the data protection regulations of the respective provider.

Collection, processing and transfer of personal data when using our service

Screening of sales profiles (manual & AI-supported)

As part of our matching and screening process for sales profiles, we process the data provided by users (e.g. profile information, curriculum vitae, information on professional experience) and — where necessary — publicly available job-related information, e.g. from LinkedIn profiles. The processing is used to evaluate professional suitability, to ensure the quality of our talent pool and to tailor the right placement with companies. The legal bases are Art. 6 para. 1 lit. b DSGVO (implementation of pre-contractual measures) and Art. 6 para. 1 lit. f DSGVO (legitimate interest in an effective and quality-assured selection process). An exclusively automated decision within the meaning of Art. 22 GDPR does not take place; every decision is finally reviewed by our team.

When using our platform — whether as part of a free registration or in connection with paid services — we only collect and process your personal data to the extent necessary to provide our offers, to process the contract and to process your inquiries.

Your data will only be passed on to the payment service providers you have selected (if paid services are booked), to service providers commissioned to process them and to our IT service providers. In all cases, we comply with legal requirements; the scope of data transfer is limited to the required minimum.

In order to use certain functions, verification is also required before creating the user account.

Using Supabase (database and hosting)

We use the Supabase service from Supabase, Inc. (970 Toa Payoh North #07 -04, Singapore 318992) to store your personal data. The database is operated on servers of our hosting service provider Hetzner Online GmbH in Germany. As part of support or maintenance services, Supabase can also access the stored data from outside the EU/EEA in individual cases.

There is no adequacy decision by the EU Commission for Singapore. Data is therefore transferred to this third country exclusively on the basis of the standard contractual clauses in accordance with Article 46 (2) lit. c GDPR, which guarantee an adequate level of protection.

Your data is processed on the basis of Art. 6 para. 1 lit. b DSGVO to fulfill the user contract and, in addition, on the basis of Art. 6 para. 1 lit. f DSGVO out of our legitimate interest in the secure and stable operation of our platform.

For more information about data processing by Supabase, see:

Advertisement Communication

Using the email address for newsletters and notifications

We use your email address — if you have expressly agreed to this — to send you our newsletter with information about new features, offers and relevant news about our platform. The legal basis is Article 6 (1) (a) GDPR (consent). You can withdraw your consent at any time with effect for the future without affecting the lawfulness of the processing carried out up to the revocation. You can unsubscribe via the corresponding link in every e-mail or by sending us a message.

In addition, as part of using our platform, we send you automated notifications via email (such as about applications, messages, changes to job ads, or other activity in your account). These notifications are required to provide the contractually agreed functions and are made on the basis of Art. 6 para. 1 lit. b DSGVO (contract performance or pre-contractual measures). It is only possible to unsubscribe from these system notifications if they are not absolutely necessary to use our platform.

Use of names, logos and job ads for self-promotion purposes

As part of our own advertising, we reserve the right to present company names, logos and published content such as job advertisements in an appropriate form. This is done exclusively for presentation and reference purposes and only to the extent necessary to protect our legitimate interests in accordance with Article 6 (1) (f) GDPR. If this concerns personal data, the processing is based on consent given or, to the extent permitted, also on the basis of our legitimate interests.

Using the email address for direct marketing to existing customers

If you have registered on our platform or used paid services, we may use your email address to send you information about similar offerings and features of the platform by email, unless you have objected to this use. Processing is carried out on the basis of Article 6 (1) (f) GDPR based on our overriding legitimate interest in direct marketing in accordance with recital 47 GDPR.

You can object to this use of your e-mail address at any time without incurring any costs other than the transmission costs at the basic rates. To do this, you can use the unsubscribe link in the email or send us a message to the contact details given in the legal notice.

Using SendGrid (Twilio)

We use the services of Twilio Germany GmbH (Unter den Linden 10, 10117 Berlin, Germany; “SendGrid”), which is part of Twilio Inc., to send emails. This includes both sending newsletters (with prior consent) and transactional and system-relevant emails as part of using our platform, such as registrations, account activity or status reports about your ads and applications. Data processing is carried out as part of order processing in accordance with Art. 28 GDPR. The information you provide during registration, newsletter subscription or other use (email address, first and last name, if applicable) will be forwarded to SendGrid. This data is used exclusively for sending and technical processing of emails.

To evaluate the effectiveness of email campaigns, newsletters sent may contain tracking technologies such as a 1x1 pixel (tracking pixel) or special tracking links. This makes it possible to determine whether an email has been opened and whether links contained in it have been clicked on. As part of this analysis, further technical data such as IP address, browser type, device used and time of opening may be collected. This information is stored pseudonymously and is not used for personal identification.

The processing of personal data as part of newsletter tracking is based on Article 6 (1) (a) GDPR (consent). The processing of personal data as part of sending system-relevant emails is based on Art. 6 para. 1 lit. b DSGVO (contract fulfillment) or Art. 6 para. 1 lit. f DSGVO (legitimate interest in secure and reliable communication). You can withdraw your consent to receive the newsletter at any time or object to processing for legitimate interest for reasons arising from your particular situation.

More information about data processing by SendGrid can be found at: https://www.twilio.com/en-us/legal/privacy

Payment service provider

Using the payment service provider Stripe

We use the Stripe payment service from Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The purpose of data processing is to be able to offer you payment via Stripe. By selecting and using Stripe, the data required for payment processing is transmitted to Stripe in order to be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Article 6 (1) (b) GDPR.

Stripe reserves the right to obtain credit reports based on mathematical-statistical methods using credit agencies, if applicable. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit report may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and include address data in their calculation. Your legitimate interests are taken into account in accordance with legal regulations. Data processing serves the purpose of credit checks to initiate a contract and is carried out on the basis of Art. 6 para. 1 lit. f DSGVO out of our overriding legitimate interest in protecting against payment default if Stripe makes advance payments.

For reasons arising from your particular situation, you have the right to object at any time to this processing of personal data concerning you based on Article 6 (1) (f) GDPR by notifying Stripe. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide this means that the contract cannot be concluded with the payment method you have chosen.

All Stripe transactions are subject to the Stripe Privacy Policy, which can be found at https://stripe.com/de/privacy find.

Device identifiers and comparable technologies in the app

Instead of browser cookies, our mobile app may use device-specific identifiers (such as IDFA for iOS or Google Advertising ID for Android) or similar technologies. These are used to provide certain functions, to analyze the use of the app and to enable push notifications. You can reset or deactivate these identifiers at any time in the settings of your mobile device.

Push notifications in the app

Our app uses push notifications to inform you about relevant events and information related to your account and use of our platform. This includes information about new messages, job ad updates, changes in the status of your applications, and important messages about your account. The processing of your personal data as part of the push service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO, which you give when you use the app for the first time. You can deactivate the receipt of push notifications at any time in the settings of your mobile device or withdraw your consent there. If you deactivate, you will no longer receive push notifications, but you can still use all features of the app. Push notifications can also be used to inform you about changes to the privacy policy or other contract terms relevant to the use.

cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user accesses our website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your device. Therefore, you have full control over their use. By making appropriate settings in your Internet browser, you can be notified before cookies are set, decide whether to accept them in individual cases and prevent the storage of cookies and the transmission of the data they contain. You can delete cookies that have already been saved at any time. However, we would like to point out that you may then not be able to fully use all functions of our website.

The links below tell you how to manage or disable cookies on the most important browsers:

Technically necessary cookies

Unless otherwise stated in this privacy policy, we only use technically necessary cookies to make our offer more user-friendly, effective and secure. These cookies enable our systems to recognize your browser even after a page change and to provide certain functions. Some functions of our website cannot be offered without these cookies, as they depend on the recognition of the browser.

The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. Your personal data is processed on the basis of Art. 6 para. 1 lit. f DSGVO out of our overriding legitimate interest in the optimal functionality of the website and the user-friendly and effective design of our offer.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Using Cookiebot

On our website, we use the consent management tool “Cookiebot” from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark.

This tool enables you to give consent to data processing via the website — in particular to the setting of cookies — and to withdraw any consent you have already given at any time. The purpose of data processing is to obtain and document the necessary consent and to comply with legal obligations.

Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which consent was sent, anonymous and encrypted key, consent status. This data will not be passed on to third parties.

Data processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.

You can find more information about Cookiebot's data protection at: https://www.cookiebot.com/de/privacy-policy/

Communication analysis

Using Fathom Analytics

We use the web analysis service on our website Fathom Analytics of Conva Ventures Inc., BOX 37058 Millstream PO, British Columbia 0E8, Canada (“Fathom”).

The purpose of data processing is to analyze this website and its visitors and to optimize it for marketing and advertising purposes. Fathom uses the information obtained to evaluate the use of the website on behalf of the operator of this website, to create reports on website activity and to provide other services related to website activity and Internet usage.

Fathom does not set any cookies, meaning that no personal data is processed using cookies. Only anonymous usage data, such as page views, bounce rates and browsers used, is collected.

This data can be transferred to Canada. For Canada, there is an adequacy decision from the EU Commission.

Processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO out of our legitimate interest in a reliable and privacy-friendly analysis of our website in order to optimally tailor our offer to customers and interested parties.

You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.

Further information on data processing can be found at: https://usefathom.com/privacy

Using Google Analytics

On our website, we use Google Analytics 4, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and comparable technologies that enable an analysis of your use of our website. The information generated in this process, including your IP address, is usually transmitted to a Google server in the USA and stored there.

We use Google Analytics exclusively with activated IP anonymization, so that your IP address within the member states of the European Union or in other states party to the Agreement on the European Economic Area is abbreviated before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), for which Google is certified.

Your data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. You can withdraw your consent at any time with effect for the future by changing the settings in our cookie consent tool. Alternatively, you can use the Google Analytics Opt-out Add-on: https://tools.google.com/dlpage/gaoptout.

For more information about Google's use of data, please see Google's privacy policy: https://policies.google.com/privacy.

Using Intercom

We use the communication service provided by Intercom, Inc. (55 Second Street, 4th Fl., San Francisco, CA 94105, USA) to communicate with prospects, salespeople and companies and to process support inquiries. You can use Intercom at https://intercom.help/provipanda/de/ Read help center articles and contact us directly via the integrated chatbot. Personal data such as your IP address, browser or device information and the messages you have entered are processed.

Processing is carried out on the basis of Article 6 (1) (a) GDPR, provided that you have agreed to the use of Intercom. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), for which Intercom is certified.

For more information, please see Intercom's privacy policy: https://www.intercom.com/legal/privacy.

Withdrawal: You can withdraw your consent at any time via the cookie settings or by deactivating cookies in your browser or app settings.

Using the Meta Ads Tracking Code

Our website uses the Meta Ads Tracking Code, provided by Meta Platforms, Inc. (1601 Willow Road, Menlo Park, CA 94025, USA) to measure the success of our advertising efforts, create target groups and optimize our offering. Cookies and similar technologies are used to collect usage data, which Meta may also combine with its own data and use it for targeting and remarketing purposes.

Processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, provided that you have given your express consent. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), for which Meta is certified.

For more information, see the Meta privacy policy.

Withdrawal: You can withdraw your consent at any time with effect for the future via the cookie settings or by adjusting your browser settings.

Using Trackdesk

We use the tracking tool from Trackdesk s.r.o. (Slezska 96, 130 00 Prague, Czech Republic) on our website to evaluate marketing campaigns and track user behavior on our website. Cookies and similar technologies can be used to collect data such as IP address, browser information, referrer URL, click behavior and time stamp. This information helps us measure and optimize the effectiveness of our marketing measures.

Processing is carried out exclusively with your consent on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The data may also be transferred to third countries outside the EU/EEA. Insofar as data is processed outside the EU/EEA, the transfer is carried out exclusively on the basis of the standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR.

For more information, see the Trackdesk Privacy Policy.

Withdrawal: You can withdraw your consent at any time with effect for the future via cookie settings or by adjusting your browser settings.

Plug-ins and more

Using Wistia

On our website, we use the Wistia video service from Wistia, Inc. (17 Tudor Street, Cambridge, MA 02139, USA) to embed and play videos. When you access a page with embedded Wistia video, a connection to Wistia's servers is established. Technical information such as your IP address, browser type, operating system, time of access and the page accessed is transmitted.

Wistia may use cookies or comparable technologies to generate statistical analyses of video usage, such as which videos have been viewed and for how long. Your personal data is processed on the basis of your consent in accordance with Section 25 (1) TTDSG in conjunction with Article 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by adjusting the cookie settings in your browser or deleting saved cookies.

Your data may be transferred to the USA. For the USA, there is an adequacy decision from the EU Commission (Trans-Atlantic Data Privacy Framework — TADPF). Wistia is not certified under the TADPF. The transfer of data is therefore based on standard contractual clauses as an appropriate guarantee for the protection of personal data. For more information about data processing by Wistia, please visit: https://wistia.com/privacy

Using single sign-on (SSO)

On our website or web app and in our mobile app, we offer you the option to log in via so-called single sign-on services (SSO). You can either log in via Google, Apple or LinkedIn.

When using one of these registration options, personal data, such as your email address, name and, if applicable, profile picture, is transferred to us by the respective provider. Data processing is carried out on the basis of Art. 6 para. 1 lit. b DSGVO to carry out the registration process.

Withdrawal and deletion

You can unlink your Google, Apple or LinkedIn account at any time by deleting your user account in the settings of the ProviPanda app or web platform. When the account is deleted, registration via the respective Single Sign-On service will also be deactivated and the personal data received by us in connection with the registration will be removed, unless there are legal storage requirements.

Further information on data processing by the respective providers can be found here:

Using Cloudfront

On our website, we use the Cloudfront CDN content delivery network from Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855, Luxembourg; “Cloudfront”).

This is a supra-regional network of servers in various data centers, to which our web server connects and is delivered via which certain content on our website is delivered.

The purpose of data processing is to optimize the loading times of our website and thus make our offer more user-friendly. Among other things, the following information may be collected: IP address, system configuration information, information about traffic from and to customer websites (so-called server log files).

Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudfront has certified itself in accordance with the TADPF and is therefore committed to complying with European data protection principles.

Your personal data is processed on the basis of Article 6 (1) (fGDPR) based on our overriding legitimate interest in designing the website in line with your needs and objectives. For reasons arising out of your particular situation, you have the right to object at any time to this processing based on Article 6 (1) (f) GDPR of personal data concerning you. More information on data protection when using Cloudfront can be found at https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html and at https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

Rights of data subjects and storage period

Deleting the user account

You can delete your user account yourself at any time using the appropriate functions in the web app or mobile app (iOS/Android). The deletion removes all personal data associated with your account from our active database.

However, for legal reasons (e.g. tax or commercial retention periods in accordance with Article 6 (1) (c) GDPR), certain data may remain stored for a period specified by law before they are finally deleted or anonymized.

If you have previously agreed to receive our newsletter separately, this consent remains unaffected by the account deletion. However, you can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by notifying us.

After deleting your account, you can register again at any time, but it is not possible to recover the deleted data.

Storage period

After the contract has been completed, your data will initially be stored for the duration of the warranty period. Further storage is then carried out taking into account legal, in particular tax and commercial law, retention periods. Tax-relevant data (e.g. invoices, booking data) is stored for up to 10 years in accordance with legal requirements. After expiry of these periods, the data will be deleted unless you have consented to further processing.

Rights of the person concerned

If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing and data portability.

Right to object

If the processing of your personal data is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR, you have the right to object at any time with effect for the future for reasons arising from your particular situation.

Following your objection, we will no longer process the data concerned unless we can prove compelling legitimate grounds that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct marketing purposes, you can object to this at any time. After receipt of your objection, your data will no longer be processed for direct marketing.

Amendment to the privacy policy

We reserve the right to change this privacy policy at any time in order to adapt it to changing legal situations or to changes in our services and data processing. We will inform you of significant changes that affect your rights or the scope of data processing by e-mail to the address stored in your user account or by means of a clearly visible notice on our website or in our app. The latest version is always available on our website and in the app. If you log in via a third-party provider (e.g. Apple, Google, LinkedIn) and if we do not have a valid or retrievable email address, the notification is sent exclusively within the user account. In this case, access to the platform may be restricted until you have confirmed the amended conditions.

Right to lodge a complaint with the supervisory authority

In accordance with Article 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data is not lawful.

Responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information

Ludwig-Erhard-Str. 22, 7th floor, 20459 Hamburg

Telephone: 040/428 54 - 4040

Fax: 040/4279 - 4000

email: mailbox@datenschutz.hamburg.de