Privacy Policy of Experteer GmbH

We welcome you on your visit to our website and are pleased at your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable personal data protection legislation, in particular the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementation laws applicable to us. With the help of this privacy policy, you will find comprehensive information on about the processing of your personal data by Experteer GmbH, and the rights granted to you thereby.

Personal data comprises information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, your employment record, telephone number, email address, as well as your IP address.

It is anonymous data, if no personal reference to the user can be made.

Purposes and legal bases of data processing

Experteer is your personal career service agency, which gives you access and transparency to the high-quality employment market. Our service will help you identify your position and opportunities in the employment market, and will help you take control of your career. You therefore confide in us with your career-related personal data, which we carefully store for these purposes, according to your preferences, and provided it to you as needed. Experteer provides you, with “Privacy by Design” in the view settings of your employment record, the ability to determine easily and in a distinguishable manner which data you wish to make visible to recruiters checked by us, and, in particular, provides the option to you to adjust this in varied ways for headhunters or for internal company recruiters.

You may create your employment record with your individual milestones, career goals and various attachments. This profile serves, on the one hand, to better match open positions and allows you, on the other hand, to make this profile available to headhunters and company recruiters in a simple, discreet and secure manner. You will be informed about relevant open positions via saved searches or the Experteer Career Newsletter.

Experteer is not an ad-supported business model and does not rely on marketing the “user as a product”. Our product comprises an online career service agency that we offer for professionals and executives. The candidate as the customer is the centre of our business model. Under this, you give us your trust and thereby give us considerable amounts of personal data about your career path and your goals. We commit ourselves to dealing with your data in full confidence and in your interest, and to support your career as best possible. Our business model is built precisely upon this, unlike free portals.

If you feel that we are not in keeping with the terms of this statement or the data protection provisions, please contact us at the following email address: privacy@experteer.co.uk.

For the processing of your personal data, the provisions of the EU GDPR and all other applicable data protection regulations are complied with. Legal bases for the data processing arise are provided for specifically in Art. 6 EU GDPR.

We use your data for business contact, to fulfil contractual and legal obligations, to perform on the contractual relationship, to offer products and services, and to strengthen the customer relationship, which may include marketing and direct advertising.

Data entered related to your employment record and your career goals are provided directly to headhunters, recruiters, and/or indirectly via recruitment software providers and applicant database providers. These data entries are the core purpose and value added of the Experteer service provision and will always be shared according to your personal preferences. These data are specifically entered by you in your employment record, your career goal and applications, as well as any attachments as well as your user account.

Furthermore, the data you provide will be used for the contractual relationship with Experteer.

For the purpose of a better product experience, usage-related data is also collected. This allows us, in particular, to provide better matching with relevant agencies and headhunter clients as well as customer communication on the website or via email. You may also adjust the frequency of communication via email in your account settings.

Your consent also comprises the data protection permission requirement. In this, we will inform you about the purposes of data processing and your right of withdrawal. Should the consent also refer to the processing of special categories of personal data, we will point this out to you in the consent.

A processing of special categories of personal data, for the purpose of Art. 9 para. 1 EU GDPR, only takes place when this is required on the basis of legal provisions, and there is no reason to believe that your legitimate interest prevails to the exclusion of this processing.

Responsible authority and data protection officer

Address
Experteer GmbH, Lenbachplatz 3, D-80333 München

Contact Information
info@experteer.co.uk, Tel +49 89 / 5527938 - 100
Fax: +49 89 / 5527938 - 110
Responsible person: Dr. Christian Göttsch

Contact for privacy policy issues
privacy@experteer.co.uk

Your Rights as a Data Subject

First of all, we would like to inform you about your rights as a data subject. These rights are standardised in Articles 15 - 22 EU GDPR. These include:

• The right to be informed (Article 15 EU GDPR),
• The right to erasure (Article 17 EU GDPR),
• The right to rectification (Article 16 EU GDPR),
• The right to data portability (Article 20 EU GDPR),
• The right to restrict data processing (Article 18 EU GDPR),
• The right to object to data processing (Article 21 EU GDPR).

To exercise these rights, please contact: privacy@experteer.co.uk. This also applies if you have questions about data processing in our company. You also have a right of appeal to a data protection supervisory authority.

Right to object

Please note the following in connection with the right to object:

Third Party Sharing

We will only convey your data to third parties within the scope of the legal provisions or with the appropriate consent. Apart from that, it will not be convey to third parties unless we are required to do so based on mandatory legal provisions (disclosure to external authorities, i.e. supervisory authorities or law enforcement authorities).

Data recipients/Recipient categories

Within our company, we ensure that only those persons receive the data they need to fulfil the contractual and legal obligations.

In many cases, service providers support our departments in fulfilling their tasks. The required privacy policy agreement was concluded with all service providers.

• Payment systems
  • Adyen B.V.
  • PayPal (Europe) S.à r.l. et Cie
• Newsletter/Advertising purposes existing customers
  • Emarsys eMarketing Systems GmbH
• Contact method/Customer service
  • Freshworks Inc.
• Advertising measurement/optimisation
  • Google Inc.
  • Criteo SA
  • Microsoft Corporation
  • LinkedIn Corporation
  • Doubleclick
  • Facebook
  • X Corp. (Twitter)
• Monitoring/Webtracking
  • Google Inc.
  • Sentry (Functional Software Inc.)
  • Reddit
• CV service
  • Textkernel
  • Talent Inc (TopCV)

Sending to third country/Intention to send to third country

A data transfer to third countries (outside the European Union and/or the European Economic Area) may only take place if required by law, or if you have given us your consent to do so.

We transfer your personal data to a service provider outside the European Economic Area: specifically, the United States.
Compliance with data protection standards is guaranteed by the EU standard contractual clauses.

Data storage period

We store your data for as long as they are needed for the respective processing purpose. Please note that multiple retention requirements may require that data continue to be stored. This specifically involves commercial or tax-related retention requirements (i.e. commercial code, tax code, etc.). Unless there are further retention requirements, the data will be deleted after use, as a matter of routine.

In addition, we may retain data if you have given us your permission to do so, or if there are legal disputes and we use evidence within the statutory limitation period, which may be up to thirty years; the regular limitation period is three years.

Secure transfer of your data

In order to best protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we utilise appropriate technical and organisational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

Any data exchange from and to our website is encrypted. For transmission protocol, we use HTTPS for our website, with each transfer based on up-to-date encryption protocols.

Obligation to provide the data

Various personal data are necessary for the establishment, implementation and termination of the discharge of contract, and for the fulfilment of associated contractual and legal obligations. This also applies to the use of our website and the various functions it provides.

We have summarised the details in the above point. In certain cases, data must also be collected and/or made available based on legal regulations. Please note that it is not possible to process your request or fulfil the underlying discharge of contract without providing this information.

Categories, sources and origins of the data

Which data we process determines the respective context: This depends on whether you, i.e. enter your profile data, respond to a contact request from a headhunter, apply for a position, subscribe to a paid premium membership or submit a request on our contact form.

Please note that we may also make available information for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.

When visiting our website, we collect and process the following data:

• Information on the website from which you are visiting us
• Web browser and operating system used
• The IP address assigned by your Internet Service Provider
• Files requested, amount of data transferred, downloads/file export
• Information on the websites that you access through us, including date and time
• For reasons of technical security (in particular to defend against attempts to attack our web server), these data are stored as per Art. 6 para. 1 lit. F EU GDPR. Within no more than 30 days, this data will be deleted so that no connection to the user can be made.

As part of a contact request to our customer service, we collect and process the following data:

• Last name, first name
• Contact Information

As part of the order process, we process the following data:

• Title
• Last name, first name
• Date of birth
• Billing address
• Email address

As part of answering a contact request of a recruiter or a headhunter, we collect and process the following data:

• Title
• Last name, first name
• Email
• Phone number
• Experteer profile data, if necessary
• personal response

For online applications, we collect and process the following data:

• Last name, first name
• Address
• Contact Information
• Experteer profile data
• if appropriate, attachments such as resumes, certificates and cover letters

For newsletters, we collect and process the following data:

• Last name, first name
• Email address
• Title
• Analysis data from newsletter and website evaluation

Please note that when uploading your Experteers profile or, if you upload your resume when are applying for a job through our website, if necessary we will transfer these to the company Textkernel (Nieuwendammerkade 28A17, Amsterdam, Noord-Holland 1022 AB, The Netherlands) for evaluation. Your document is parsed there and sent back to us as an XML file. In the course of this, the following information is processed:

• First Name
• Last Name
• City
• Country
• Phone number
• Profile image
• Title
• Date of birth
• Resume
• Title
• Academic title
• Education
• Work experience
• Spoken languages
• Skills

All data is thereby transmitted in encrypted form. More information on data protection at Textkernel can be obtained at https://www.textkernel.com/privacy-statement/.

Contact form / contact by email (Article 6 para. 1, lit. a, b EU GDPR)

On our website a contact form is available, which may be used for electronic contact. If you write to us via the contact form, we will process your data provided in the contact form in order to contact you and answer your questions and requests.

In doing so, we respect the principle of data economy and data avoidance, by providing only the information we need to contact you. These comprise your email address as well as the message field itself. In addition, your IP address is processed due to technical necessity as well as legal security.

If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request.

On our website and for customer service via email, we use the Freshdesk tool, an offering of Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA, which supports us in the processing of customer inquiries, in order to give you the best possible support. Freshworks handles your support request and contact information on our behalf when you send us an email to customer service.

More information on data protection at Freshworks can be obtained at https://www.freshworks.com/privacy/.

Registration / Customer account (Art. 6 para. 1 lit. a, b EU GDPR)

On our website, we offer users the opportunity to register by providing personal information. The advantage is that you may, in particular, store your profile data permanently, so that you may be found and contacted by headhunters and recruiters. In addition, when applying for job postings, you may easily share your profile information, significantly accelerating the application process.

The registration is therefore either necessary or option in order to fulfil a contract with you or to carry out pre-contractual measures.

In order to fulfil the services we offer, such as our CV check, which is intended to help you increase your chances of a successful job interview, we are supported by various service providers. A corresponding contract is set up with each of these service providers so that the protection of your personal data is guaranteed.

The principle of data economy and data avoidance is observed here, as only the data necessary for registration must be entered. These are, for example, the e-mail address and password including password repetition.

For the subscription to a premium membership, information on the billing address (title, first name, last name, address) must also be provided.

By registering on our website, the IP address of the user, the date and time of registration are also stored (technical background data). By clicking the “Register now” button, you give the consent to the processing of your data.

Please note: Your password will be stored in encrypted form by us. Employees of our company are not able to read this password. Therefore, they can give you no information, if you have forgotten your password.

In this event, use the “Forgot password” function, which will send you a link to re-enter your password via email. No employee is entitled to request your password by telephone or in writing. Please never give your password if you receive such requests.

Upon completion of the registration process, your data will be stored with us for the use of the protected customer area. Once you access our website with your email address with your username and password, this data will be made available for the actions you have carried out on our website (for example, for the subscription to a premium membership on our website). Completed orders may be tracked in the “My Account” area. Changes to the billing address may be entered here.

Registered persons are free to make any changes/corrections to the billing information in the “My Account” area. Changes/corrections will also be gladly carried out by our customer service, if you contact them. Naturally, you may also cancel or delete the registration and/or your customer account. You will find the description for that in the “My Account” area.

Experteer Premium membership (Art. 6 para. 1 lit. b EU GDPR)

We process the data provided by you as part of a subscription to an Experteer Premium Membership, only for the implementation and/or fulfilment of the contractual relationship, unless you agree to a further use.

We respect the principle of data economy and data avoidance, by providing only with the information we need to implement the contract and/or to fulfil our contractual obligations (i.e. your name, address, email address, and payment data needed for each payment method) or to collect it we are required by law.

In addition, your IP address is processed due to technical necessity as well as legal security. Without this data, we would have to unfortunately reject the execution of the contract, because we would then not be able to implement it or would have to, if necessary, terminate an existing contract. Naturally, you may also provide more data if you wish.

Payment systems (Art. 6 para. 1 lit. a, b EU GDPR)

On our website, you may pay by credit card, PayPal or direct debit (SEPA direct debit). For this, the relevant payment-related data is collected in order to execute your order and payment. In addition, your IP address is processed due to technical necessity as well as legal security.

We respect the principle of data economy and data avoidance, by providing us with only the data we need to perform the payment and fulfilment of the contract or to collect it we are required by law.

Without this data, we would have to unfortunately reject the execution of the contract, because we would then not be able to implement it.

Payments are processed by our partner Adyen BV, Simon Carmiggelstraat 6 - 50, 1011 DJ Amsterdam. To prevent and detect fraud, we send your IP address to Adyen BV. Your IP address will be stored by Adyen BV. All data is transmitted in encrypted form.

We would like to point out that Adyen B.V. transmits your personal data to other entities necessary for the fulfilment of the transaction, in particular, to the participating credit institutions, banks, credit card institutions. The processing of your personal data to process the payment also takes place.

Note on credit card payment: As is usual with credit card payments, credit card details are checked.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à r.l. and Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as a payment option during the order process in our online shop, the data of the data subject will be automatically transmitted to PayPal.

By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is usually a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.

For the fulfilment of the purchase contract, those personal data, which are related to the respective order, are also necessary. Details on data protection at PayPal may be found at: https://www.paypal.com/webapps/mpp/ua/privacy-prev.

Note on direct debit: As usual with direct debit, your account details will be collected, in order to debit the corresponding amount from your account.

Newsletter / Advertising purposes existing customers / (Art. 6 para. 1 lit. f EU GDPR)

We are interested in maintaining the customer relationship with you and to provide you with information and offers about our products/services. Therefore, we process your data in order to send you the corresponding information and offers by email.

You may subscribe to a free newsletter on our website. The email address as well as your name provided during registration will be used to send you a personalised newsletter.

In doing so, we respect the principle of data economy and data avoidance, since only the email address (Name of the personalized newsletter) is marked as required. Due to technical necessity as well as legal security, your IP address will be processed when ordering the newsletter.

You may naturally terminate the subscription at any time, via the opt-out option provided in the newsletter and thus withdraw your consent. It is also possible to unsubscribe from the newsletter via our website at any time.

The Newsletter is distributed by Emarsys eMarketing Systems GmbH, Märzstrasse 1, A-1150 Vienna. For this purpose, all required data from your profile will be transferred to Emarsys. The legal basis for this is Art. 6 para. 1 lit. f EU-GDPR. The principle of data minimisation and data avoidance is observed in that we only transfer the minimum data required to send the newsletter. All data is transmitted in encrypted format. The data required to receive the newsletter will not be disclosed to other third parties.

For the evaluation of newsletter campaigns, newsletters contain tracking pixels. An email thumbnail formatted in HTML is embedded for this purpose, allowing us to see which email you have opened and when. In addition, we can determine which links in the email you have accessed.

Unsubscribing from the newsletter is possible at any time, and may be done via a dedicated link in the newsletter.

Further information on the utilised technologies can be found in the privacy policy of Emarsys eMarketing Systems GmbH at https://emarsys.com/privacy-policy/.

Location of data storage / hosting

For the purposes of operating our website, we use the services of the infrastructure providers Google Inc (1600 Amphitheatre Parkway in Mountain View, California 94043, USA), Amazon Webservices, Inc (410 Terry Drive Ave North, WA 98109-5210 Seattle, USA) and DigitalOcean (101 6th Ave, New York, NY 10013, USA). Personal data is stored exclusively in the EU, namely at the Frankfurt facility.

Automated individual decision-making

To improve search and recommendation resultswe may store information about your usage behaviour on our platform so that suitable job offers can be found for you. As part of this, we store which job offers you have viewed, which job offers you have applied to and which headhunters or recruiter you have contacted. This information is kept, however, in anonymous form, so that no direct personal reference to you can be made from only this data. The legal basis is from Art. 6 para. 1 f GDPR. Our legitimate interest is that, by storing this information, we want to ensure that you receive continuously improved search and recommendation results.

Cookies (Art. 6 para. 1 lit. f EU GDPR / Art. 6 para. 1 lit a EU GDPR with consent)

Our website uses cookies at several points. The help in making our site more user-friendly, effective and safer. Cookies are small text files that are stored on your device.

By means of these cookies, it allows us to analyse how users use our websites. We can thus design website content according to visitor needs. Through cookies, it also allows us to measure the effectiveness of a given ad and have it ranked, for example, depending on the user's preferences. The legal basis for this is Art. 6 para. 1 lit. f.

We use the following cookies:

Own cookies:
This type of cookie is controlled directly by us. Depending on the purpose, these remain permanently stored - even after the session has ended - (so-called "persistent cookies", e.g. implementation of opt-out) or are deleted when the browser session ends (so-called "session cookies", they are only valid for one browser session).

Third-party cookies:
This type of cookie is controlled by third parties. Third-party providers are providers who display advertising banners for us on other websites. They use cookies, for example, to transmit information that an advertising banner displayed by you has led to a purchase. (e.g. conversion tracking). So-called temporary/permanent cookies are used, which are automatically deleted after the specified time (usually 6 months). These temporary or permanent cookies are stored on your end device and are deleted automatically after the specified time. The cookies of our partner companies also only receive pseudonymous data, usually anonymous data. They enable our partners to track which products you have looked at, whether something has been purchased, which products have been searched for, etc. Some of our advertising partners also collect information about which pages you previously visited or, for example, which products you were interested in. This makes it possible to display individual advertisements. This pseudonymous data is never merged with your personal data.

Please note: If you deactivate the placing of cookies, our website becomes unusable.

Advertising measurement/optimisation

Criteo: On our website, we utilise the services of Criteo SA, 32 Rue Blanche, 75009 Paris, France, to target visitors to our website with personalised, interest-based advertisements based on their browsing habits. Criteo SA collects and stores information in anonymous form, for this purpose, on the browsing behaviour of visitors to our website. For this, Criteo uses anonymous browser cookies, which at no time collect personal data such as name or address. Identification of the website user is therefore impossible. Only the identifiers in the browsers used by the visitor (desktop, tablet or smartphone) are compared. There is no further use or disclosure of data. The storage of cookies may be prevented by a corresponding setting in your browser. You may permanently disable the use of Criteo cookies by following the link below and changing the cookie setting accordingly: http://www.criteo.com/privacy/. Further information on the technology used is in the Criteo SA Privacy Policy at: https://www.criteo.com/privacy/.

Google Adwords: We also use the Google AdWords Conversion Tracking feature of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States („Google“). Google AdWords uses cookies when you click on a Google ad

As long as the cookie is valid, Google and we, as the website owner, can see that you have clicked on an ad and reached a specific landing page (e.g. registration, job search). These cookies can not be tracked across multiple websites from different AdWords participants. The cookies generate conversion statistics in Google AdWords. These statistics include the number of users who clicked on any of our ads. In addition, it counts how many users have come to a landing page that has been tagged with a “Conversion tag”. However, the statistics do not contain any data that identifies you.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f EU GDPR and our legitimate interest in the analysis, optimisation and economic operation of our website.

More information on how Google uses conversion data and Google's privacy policy may be found at: https://policies.google.com/privacy and https://support.google.com/google-ads/answer/93148?ctx=tltp.

Bing Ads: on our website, we also use technologies from Bing Ads (bingads.microsoft.com), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Microsoft uses a cookie on your device if you have reached our website via a Microsoft Bing ad. Microsoft and we can see, in this way, that someone clicked on an ad, was redirected to our site, and reached a predefined Conversion site. We only become aware of the total number of users who clicked on a Bing ad and were then redirected to the Conversion site. Microsoft uses the cookie to collect, process and utilise information that is used to create usage profiles using pseudonyms. These usage profiles are utilised to analyse visitor behaviour and are used to display advertisements. No personal information about the identity of the user is processed.

If you do not want information about your behaviour to be used by Microsoft as explained above, you may refuse the necessary setting of a cookie - i.e. via a browser setting that generally disables the automatic setting of cookies. In addition, you may prevent the collection of data generated by the cookie and related to your use of the website as well as the processing of this data by Microsoft, by using the following link http://choice.microsoft.com/opt-out to explain object.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f EU GDPR and our legitimate interest in the analysis, optimisation and economic operation of our website.

For more information about privacy and cookies used on Microsoft and Bing Ads, visit the Microsoft website at https://privacy.microsoft.com/privacystatement.

LinkedIn Remarketing/Retargeting: On our website, we also use the analysis and Conversion Tracking technology of the social network LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. When you visit our pages, remarketing tags create a direct connection between your browser and the LinkedIn server. LinkedIn receives the information that you have visited our site with your IP address. This allows LinkedIn to associate the visit to our pages with your user account. We can use this information to display LinkedIn ads. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their utilisation by LinkedIn. Further information on this may found in the Privacy Policy of LinkedIn at https://www.linkedin.com/legal/privacy-policy.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f EU GDPR and our legitimate interest in the analysis, optimisation and economic operation of our website.

Using the link below, learn how to decline interest-based advertising on LinkedIn: https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences.

Doubleclick by Google: On our website, we also use DoubleClick by Google (“DoubleClick”). DoubleClick uses cookies to present ads that are relevant to you, to improve the reports on ad campaign performance or to prevent you from seeing the same ads multiple times. In addition, DoubleClick uses cookies to track conversions related to ads. That would be the case for example, if you see a DoubleClick ad and later use the same browser to visit our website and register with us. According to Google, DoubleClick cookies do not contain personally identifiable information.

Based on the marketing tools used, your browser automatically establishes a direct connection to the Google server. By including DoubleClick, Google receives the information that you have accessed the relevant part of our website or have clicked on an ad from us. If you are registered with a service provided by Google, Google may associate the visit with your account. Even if you are not registered with Google and/or have not logged in, Google may be able to find and store your IP address.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f EU GDPR and our legitimate interest in the analysis, optimisation and economic operation of our website.

More information on DoubleClick by Google can be obtained at https://www.google.com/doubleclick, as well as on data protection at Google in general: https://www.google.com/policies/privacy. Alternatively, you may visit the website for the Network Advertising Initiative (NAI) at https://thenai.org/.

Facebook Custom Audience: As part of use-based online advertising, the Custom Audiences product of Facebook (Facebook Custom Audiences 1601 S. California Avenue, Palo Alto, CA, 94304) is also used on our website. Basically, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which may be transmitted to Facebook for analysis and marketing purposes. For this purpose, a Facebook tracking pixel is used on our website. Information is collected on your activities on the website (i.e. browsing behaviour, visited subpages, etc.). For the geographical guiding of advertising, your IP address is stored and used.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f EU GDPR and our legitimate interest in the analysis, optimisation and economic operation of our website.

For more information on the purpose and scope of the data collection and the further data processing and utilisation, as well as the privacy settings, please refer to the Privacy Policy of Facebook (https://www.facebook.com/policy.php).

X Corp. advertising (Twitter): We also use the tracking code of X Corp. on our website (X Corp., Attn: Privacy Policy Inquiry, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA). A Twitter cookie is set in the process. Information about your activities on the website (e.g. surfing behaviour, subpages visited, etc.) is collected. Your IP address is stored and used for geographical targeting of advertising.

If you live in the USA or another country outside the European Union, the EFTA states or the United Kingdom, the controller of your personal data is X Corp. at the following address:

X Corp.
Attn: Privacy Policy Inquiry
1355 Market Street, Suite 900
San Francisco, CA 94103, USA

If you live in the European Union, EFTA States or the United Kingdom, the data controller for your personal data is Twitter International Unlimited Company with the following address:

Twitter International Unlimited Company
Attn: Data Protection Officer
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07 IRELAND

The legal basis for the processing of your data is Art. 6 para. 1 lit. f EU-GDPR and our legitimate interest in the analysis, optimisation and commercial operation of our website. Further information on the purpose and scope of data collection and the further processing and use of the data, as well as the privacy settings, can be found in X Corp.‘s privacy policy (https://x.com/privacy).

Google Tag Manager: For reasons of transparency, we would like to point out that we use Google Tag Manager. Google Tag Manager does not collect personally identifiable information. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that can be used, among other things, to measure traffic and visitor behaviour, track the impact of online advertising and social channels, set up remarketing and audience targeting, and test and optimise websites. If you have opted out, this opt out is taken into account be the Google Tag Manager. For more information on Google Tag Manager see: https://www.google.com/tagmanager/use-policy.html.

Monitoring / Web tracking process

Google Analytics: Our website uses Google Analytics, a web analytics service provided by Google Inc. (Google). Google Analytics uses cookies, which are text files that are stored on your computer and that allow your use of the website to be analysed. Google Analytics also uses, among other things, the DoubleClick cookie mentioned above, to target, optimise, and present ads based on previous visits by a user to our site. The cookie stores, among other things, information on the IP address, the browser type and the operating system of the requesting computer as well as the URL of the referring website. The information generated by the cookies related to your use of our website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymity is enabled for our website, anywhere within the member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area, your IP address will first be abbreviated by Google. Your full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. Google will use this information on behalf of this website’s operator to evaluate your use of our website, to create reports about the website activities, and to provide additional services connected with the website and Internet use to the website operator. The IP address transmitted from your browser as part of Google Analytics is not associated with any other data held by Google. You can prevent cookie storage by selecting the appropriate settings in your browser; however, we would like to point out that in such cases you might not be able to use all of the functionality of our website. In addition, you may prevent the tracking of the data created by the cookie related to your use of our website (incl. your IP address) to Google, and the processing of this data by Google, by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout.

On our website, we use Google Analytics that also includes the functions of Universal Analytics. Universal Analytics makes it possible to analyse the activities on our pages across devices (e.g. access via laptop/tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such an assignment takes place, for example, when you register for a customer account and/or log in to your customer account. To prevent this tracking, please use the following link: http://tools.google.com/dlpage/gaoptout.

Sentry: We use Sentry to collect error messages from our online platform. In the process, usage data (called URL, website status) and technical data (browser information, IP) are collected and processed. We collect this data on the basis of legitimate interests for the purpose of Art. 6 para. 1 lit. f EU GDPR, in order to constantly improve our systems and to prevent security gaps.

We have entered into a data processing agreement with Functional Software Inc. (Sentry), which commits Sentry to compliance with EU data protection standards. Sentry is also certified under the Privacy Shield Agreement, providing an additional guarantee to comply with European data protection law: https://www.dataprivacyframework.gov/list.

More information may be found in the Privacy Policy of Functional Software Inc. (Sentry) at https://sentry.io/privacy/.

Reddit Pixel: We use the Reddit tracking pixel of the social network Reddit, which is operated by Reddit, Inc, 548 Market St. #16093, San Francisco, California 94104, USA, on our website to measure the effectiveness and optimisation of our ads (‘conversion’). The company Reddit Ireland Limited (Reddit EU Data Inquiries, Georges Quay Plaza, Floor 2 - 101, Dublin D02 F856, Ireland) is responsible for the European area. The Reddit Pixel is used on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a EU-GDPR, § 25 para. 1 TTDSG, which you can revoke here at any time.

We use the Reddit Pixel for marketing and optimisation purposes, in particular to analyse the use of our website and to improve individual functions and offers as well as the user experience. By statistically evaluating user behaviour, we want to improve our offer and make it more interesting for you as a user. 

By using the pixel, a cookie is placed on your computer via the Reddit tracking pixel, which interacts with a JavaScript code from Reddit. This allows your behaviour to be tracked across multiple pages. Tracking allows the effectiveness of Reddit advertisements to be evaluated for statistical and market research purposes and to optimise future advertising measures. User actions (including type of action, time, browser type of end device) are automatically collected and forwarded to Reddit. As a result, we gain insight into consolidated statistics regarding the success rate of the adverts placed on the Reddit portal.

Please note that this service may transfer the collected data outside the European Union and the European Economic Area and to a country that does not offer an equivalent level of data protection. Reddit may transfer personal data to the USA. In this case, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. Nonetheless, we take the possible measures required under data protection law in accordance with Art. 44 et seq. EU GDPR to establish the level of data protection in the non-EU countries. 

We delete the data collected by the Reddit Pixel as soon as it is no longer necessary for our purposes. This is regularly the case after 6 months.

Reddit is responsible for data processing in connection with the distribution of our adverts within the social network. You can find more information about Reddit's data processing on the following website: https://www.redditinc.com/policies/privacy-policy.

Social network social plugins

Facebook: We use social plugins of the Facebook.com social network, which is operated by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA. The Like button also uses such a social plugin. If such a plugin is called by our users, the user browser establishes a direct connection to the Facebook servers. As a result, the information on which Experteer websites were visited by the user is automatically transmitted to the Facebook server. For users who are logged in to Facebook, Facebook assigns this information automatically their personal Facebook account and stores them. A cookie may also possibly be installed on your computer, but deleted when the browser is closed. The purpose and scope of the data collection and the further utilisation of the data by Facebook may be found in the Facebook Privacy Policy at http://www.facebook.com/policy.php.

X Corp (Twitter): On our website we use features of the service X (Twitter), which is offered by the company X Corp. When you access a website with an integrated X (Twitter) button and it is loaded, X Corp. receives your IP address and the information that our website was visited from this IP address. To be able to use X, you need an account with X.
If you are logged into your X profile and click on the X (Twitter) button on Experteer, you share the content of the page on which the button is integrated with other X users. X then saves the information that you have clicked on this button together with information about the respective page and makes this data available to other X users. If you do not want X to assign the data collected via our website directly to your X profile, you must log out of X before visiting our website. For more information on data collection and use by X and your related rights, please refer to X's privacy policy at https://x.com/privacy.

Using the Shariff solution: Use of the Shariff solution: We are pleased when you recommend and discuss content from our pages on social media. For this purpose, we use the buttons provided by the c't project ‘Shariff’. Conventional social media buttons transfer user data each time a page is accessed and provide social networks with precise information about your surfing behaviour (user tracking). You do not need to be logged in or a member of the network to do this. The Shariff social button only establishes direct contact between the social network and the visitor when the latter actively clicks on the share button. If the user is already logged in to a social network, Facebook does this without an additional window. With X (Twitter), a pop-up window appears in which the text of the tweet can still be edited. You can find more information on this at heise.de.

Links to other providers

Our website also contains - clearly recognisable - links to the Internet sites of other companies. Although there are links to the websites of other providers, we have no influence on their content. Therefore, no guarantee and liability can be assumed for such content. The relevant providers or operators of these sites are always responsible for their contents.

The linked pages were checked at the time of linking for possible legal violations and identifiable infringements. No illegal content was identifiable at the time of linking. However, we cannot be expected to continuously monitor the contents of linked pages if there are no specific indications that an infringement of rights has occurred. If we become aware of infringements of rights, such links will be removed immediately.

Application portal (Art. 6 para. 1 lit. a, b EU GDPR)

If you apply to Experteer as an employee: We are glad to hear of your interest in working for Experteer GmbH. We are aware of the importance of your data and process the personal data provided by you within the application form only for the purpose of the effective and correct fulfilment of the application process and for contact purposes during the application process. No transfer of data to third parties takes place without your consent.

Your application should ideally be sent by email. You will be asked to provide personal information. In so doing, we respect the principle of data economy and data avoidance by providing us with only the data we need to fully review your application documents, i.e. your resume or to collect it we are required by law. Without this data, we would unfortunately not be able to carry out an examination of your application documents.

In order to best protect the security and confidentiality of your data, we implement appropriate security measures.

We store your data for the above purpose until the application process is completed, a maximum of 6 months. For longer storage we require your consent, which you may give us by email. You may naturally revoke your consent at any time without giving any reason with effect for the future, by post to Experteer GmbH, Lenbachplatz 3, D-80333 München.

Minor

Persons under 16 years of age may not submit any personal data to us without the consent of the legal guardian and/or a declaration of consent is provided. We encourage parents and guardians to actively participate in the online activities and interests of their children.

Munich, October 8, 2024