Privacy Policy of Experteer GmbH

We welcome you on your visit to our website and are pleased at your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable personal data protection legislation, in particular the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementation laws applicable to us. With the help of this privacy policy, you will find comprehensive information on about the processing of your personal data by Experteer GmbH, and the rights granted to you thereby.

Personal data comprises information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, your employment record, telephone number, email address, as well as your IP address.

It is anonymous data, if no personal reference to the user can be made.

Purposes and legal bases of data processing

Experteer is your personal career service agency, which gives you access and transparency to the high-quality employment market. Our service will help you identify your position and opportunities in the employment market, and will help you take control of your career. You therefore confide in us with your career-related personal data, which we carefully store for these purposes, according to your preferences, and provided it to you as needed. Experteer provides you, with “Privacy by Design” in the view settings of your employment record, the ability to determine easily and in a distinguishable manner which data you wish to make visible to recruiters checked by us, and, in particular, provides the option to you to adjust this in varied ways for headhunters or for internal company recruiters.

You may create your employment record with your individual milestones, career goals and various attachments. This profile serves, on the one hand, to better match open positions and allows you, on the other hand, to make this profile available to headhunters and company recruiters in a simple, discreet and secure manner. You will be informed about relevant open positions via saved searches or the Experteer Career Newsletter.

Experteer is not an ad-supported business model and does not rely on marketing the “user as a product”. Our product comprises an online career service agency that we offer for professionals and executives. The candidate as the customer is the centre of our business model. Under this, you give us your trust and thereby give us considerable amounts of personal data about your career path and your goals. We commit ourselves to dealing with your data in full confidence and in your interest, and to support your career as best possible. Our business model is built precisely upon this, unlike free portals.

If you feel that we are not in keeping with the terms of this statement or the data protection provisions, please contact us at the following email address: privacy@experteer.co.uk.

For the processing of your personal data, the provisions of the EU GDPR and all other applicable data protection regulations are complied with. Legal bases for the data processing arise are provided for specifically in Art. 6 EU GDPR.

We use your data for business contact, to fulfil contractual and legal obligations, to perform on the contractual relationship, to offer products and services, and to strengthen the customer relationship, which may include marketing and direct advertising.

Data entered related to your employment record and your career goals are provided directly to headhunters, recruiters, and/or indirectly via recruitment software providers and applicant database providers. These data entries are the core purpose and value added of the Experteer service provision and will always be shared according to your personal preferences. These data are specifically entered by you in your employment record, your career goal and applications, as well as any attachments as well as your user account.

Furthermore, the data you provide will be used for the contractual relationship with Experteer.

For the purpose of a better product experience, usage-related data is also collected. This allows us, in particular, to provide better matching with relevant agencies and headhunter clients as well as customer communication on the website or via email. You may also adjust the frequency of communication via email in your account settings.

Your consent also comprises the data protection permission requirement. In this, we will inform you about the purposes of data processing and your right of withdrawal. Should the consent also refer to the processing of special categories of personal data, we will point this out to you in the consent.

A processing of special categories of personal data, for the purpose of Art. 9 para. 1 EU GDPR, only takes place when this is required on the basis of legal provisions, and there is no reason to believe that your legitimate interest prevails to the exclusion of this processing.

Responsible authority and data protection officer

Address
Experteer GmbH, Lenbachplatz 3, D-80333 München

Contact Information
info@experteer.co.uk, Tel +49 89 / 5527938 - 100
Fax: +49 89 / 5527938 - 110
Responsible person: Dr. Christian Göttsch

Contact for privacy policy issues
privacy@experteer.co.uk

Your Rights as a Data Subject

First of all, we would like to inform you about your rights as a data subject. These rights are standardised in Articles 15 - 22 EU GDPR. These include:

The right to be informed (Article 15 EU GDPR),
The right to erasure (Article 17 EU GDPR),
The right to rectification (Article 16 EU GDPR),
The right to data portability (Article 20 EU GDPR),
The right to restrict data processing (Article 18 EU GDPR),
The right to object to data processing (Article 21 EU GDPR).

To exercise these rights, please contact: privacy@experteer.co.uk. This also applies if you have questions about data processing in our company. You also have a right of appeal to a data protection supervisory authority.

Right to object

Please note the following in connection with the right to object:

If we process your personal data for the purpose of direct mail, you have the right to object to this data processing at any time without giving reasons. This also applies to the any, provided that it is related to the direct marketing.

If you object to the processing for direct marketing purposes, then your personal data shall no longer be processed for these purposes. This is possible vie email to privacy@experteer.co.uk at any time. This right to object is free and may take place without a form.

In the event that we process your data to protect justified interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling arising from these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds worthy of protection for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Third Party Sharing

We will only convey your data to third parties within the scope of the legal provisions or with the appropriate consent. Apart from that, it will not be convey to third parties unless we are required to do so based on mandatory legal provisions (disclosure to external authorities, i.e. supervisory authorities or law enforcement authorities).

Data recipients/Recipient categories

Within our company, we ensure that only those persons receive the data they need to fulfil the contractual and legal obligations.

In many cases, service providers support our departments in fulfilling their tasks. The required privacy policy agreement was concluded with all service providers.

Payment systems
- Adyen B.V.
- PayPal (Europe) S.à r.l. et Cie
Newsletter/Advertising purposes existing customers
- Emarsys eMarketing Systems GmbH
- Marketo EMEA Ltd.
Contact method/Customer service
- Freshworks Inc.
Advertising measurement/optimisation
- Google Inc.
- Criteo SA
- Microsoft Corporation
- LinkedIn Corporation
- Doubleclick
- Facebook
- Twitter Inc.
Monitoring/Webtracking
- Google Inc.
- Sentry (Functional Software Inc.)
- New Relic Inc.
- Hotjar Limited
CV service
- Textkernel
- Talent Inc (TopCV)

Sending to third country/Intention to send to third country

A data transfer to third countries (outside the European Union and/or the European Economic Area) may only take place if required by law, or if you have given us your consent to do so.

We transfer your personal data to a service provider outside the European Economic Area: specifically, the United States.
Compliance with data protection standards is guaranteed by the EU standard contractual clauses.

Data storage period

We store your data for as long as they are needed for the respective processing purpose. Please note that multiple retention requirements may require that data continue to be stored. This specifically involves commercial or tax-related retention requirements (i.e. commercial code, tax code, etc.). Unless there are further retention requirements, the data will be deleted after use, as a matter of routine.

In addition, we may retain data if you have given us your permission to do so, or if there are legal disputes and we use evidence within the statutory limitation period, which may be up to thirty years; the regular limitation period is three years.

Secure transfer of your data

In order to best protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we utilise appropriate technical and organisational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

Any data exchange from and to our website is encrypted. For transmission protocol, we use HTTPS for our website, with each transfer based on up-to-date encryption protocols.

Obligation to provide the data

Various personal data are necessary for the establishment, implementation and termination of the discharge of contract, and for the fulfilment of associated contractual and legal obligations. This also applies to the use of our website and the various functions it provides.

We have summarised the details in the above point. In certain cases, data must also be collected and/or made available based on legal regulations. Please note that it is not possible to process your request or fulfil the underlying discharge of contract without providing this information.

Categories, sources and origins of the data

Which data we process determines the respective context: This depends on whether you, i.e. enter your profile data, respond to a contact request from a headhunter, apply for a position, subscribe to a paid premium membership or submit a request on our contact form.

Please note that we may also make available information for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.

When visiting our website, we collect and process the following data:

Information on the website from which you are visiting us
Web browser and operating system used
The IP address assigned by your Internet Service Provider
Files requested, amount of data transferred, downloads/file export
Information on the websites that you access through us, including date and time
For reasons of technical security (in particular to defend against attempts to attack our web server), these data are stored as per Art. 6 para. 1 lit. F EU GDPR. Within no more than 30 days, this data will be deleted so that no connection to the user can be made.

As part of a contact request to our customer service, we collect and process the following data:

Last name, first name
Contact Information

As part of the order process, we process the following data:

Title
Last name, first name
Date of birth
Billing address
Email address

As part of answering a contact request of a recruiter or a headhunter, we collect and process the following data:

Title
Last name, first name
Email
Phone number
Experteer profile data, if necessary
personal response

For online applications, we collect and process the following data:

Last name, first name
Address
Contact Information
Experteer profile data
if appropriate, attachments such as resumes, certificates and cover letters

For newsletters, we collect and process the following data:

Last name, first name
Email address
Title
Analysis data from newsletter and website evaluation

Please note that when uploading your Experteers profile or, if you upload your resume when are applying for a job through our website, if necessary we will transfer these to the company Textkernel (Nieuwendammerkade 28A17, Amsterdam, Noord-Holland 1022 AB, The Netherlands) for evaluation. Your document is parsed there and sent back to us as an XML file. In the course of this, the following information is processed:

First Name
Last Name
City
Country
Phone number
Profile image
Title
Date of birth
Resume
Title
Academic title
Education
Work experience
Spoken languages
Skills

All data is thereby transmitted in encrypted form. More information on data protection at Textkernel can be obtained at https://www.textkernel.com/privacy-statement/.

Contact form / contact by email (Article 6 para. 1, lit. a, b EU GDPR)

On our website a contact form is available, which may be used for electronic contact. If you write to us via the contact form, we will process your data provided in the contact form in order to contact you and answer your questions and requests.

In doing so, we respect the principle of data economy and data avoidance, by providing only the information we need to contact you. These comprise your email address as well as the message field itself. In addition, your IP address is processed due to technical necessity as well as legal security.

If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request.

On our website and for customer service via email, we use the Freshdesk tool, an offering of Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA, which supports us in the processing of customer inquiries, in order to give you the best possible support. Freshworks handles your support request and contact information on our behalf when you send us an email to customer service.

More information on data protection at Freshworks can be obtained at https://www.freshworks.com/privacy/.

Registration / Customer account (Art. 6 para. 1 lit. a, b EU GDPR)

On our website, we offer users the opportunity to register by providing personal information. The advantage is that you may, in particular, store your profile data permanently, so that you may be found and contacted by headhunters and recruiters. In addition, when applying for job postings, you may easily share your profile information, significantly accelerating the application process.

The registration is therefore either necessary or option in order to fulfil a contract with you or to carry out pre-contractual measures.

In order to fulfil the services we offer, such as our CV check, which is intended to help you increase your chances of a successful job interview, we are supported by various service providers. A corresponding contract is set up with each of these service providers so that the protection of your personal data is guaranteed.

The principle of data economy and data avoidance is observed here, as only the data necessary for registration must be entered. These are, for example, the e-mail address and password including password repetition.

For the subscription to a premium membership, information on the billing address (title, first name, last name, address) must also be provided.

By registering on our website, the IP address of the user, the date and time of registration are also stored (technical background data). By clicking the “Register now” button, you give the consent to the processing of your data.

Please note: Your password will be stored in encrypted form by us. Employees of our company are not able to read this password. Therefore, they can give you no information, if you have forgotten your password.

In this event, use the “Forgot password” function, which will send you a link to re-enter your password via email. No employee is entitled to request your password by telephone or in writing. Please never give your password if you receive such requests.

Upon completion of the registration process, your data will be stored with us for the use of the protected customer area. Once you access our website with your email address with your username and password, this data will be made available for the actions you have carried out on our website (for example, for the subscription to a premium membership on our website). Completed orders may be tracked in the “My Account” area. Changes to the billing address may be entered here.

Registered persons are free to make any changes/corrections to the billing information in the “My Account” area. Changes/corrections will also be gladly carried out by our customer service, if you contact them. Naturally, you may also cancel or delete the registration and/or your customer account. You will find the description for that in the “My Account” area.

Experteer Premium membership (Art. 6 para. 1 lit. b EU GDPR)

We process the data provided by you as part of a subscription to an Experteer Premium Membership, only for the implementation and/or fulfilment of the contractual relationship, unless you agree to a further use.

We respect the principle of data economy and data avoidance, by providing only with the information we need to implement the contract and/or to fulfil our contractual obligations (i.e. your name, address, email address, and payment data needed for each payment method) or to collect it we are required by law.

In addition, your IP address is processed due to technical necessity as well as legal security. Without this data, we would have to unfortunately reject the execution of the contract, because we would then not be able to implement it or would have to, if necessary, terminate an existing contract. Naturally, you may also provide more data if you wish.

Payment systems (Art. 6 para. 1 lit. a, b EU GDPR)

On our website, you may pay by credit card, PayPal or direct debit (SEPA direct debit). For this, the relevant payment-related data is collected in order to execute your order and payment. In addition, your IP address is processed due to technical necessity as well as legal security.

We respect the principle of data economy and data avoidance, by providing us with only the data we need to perform the payment and fulfilment of the contract or to collect it we are required by law.

Without this data, we would have to unfortunately reject the execution of the contract, because we would then not be able to implement it.

Payments are processed by our partner Adyen BV, Simon Carmiggelstraat 6 - 50, 1011 DJ Amsterdam. To prevent and detect fraud, we send your IP address to Adyen BV. Your IP address will be stored by Adyen BV. All data is transmitted in encrypted form.

We would like to point out that Adyen B.V. transmits your personal data to other entities necessary for the fulfilment of the transaction, in particular, to the participating credit institutions, banks, credit card institutions. The processing of your personal data to process the payment also takes place.

Note on credit card payment: As is usual with credit card payments, credit card details are checked.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à r.l. and Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If the data subject selects “PayPal” as a payment option during the order process in our online shop, the data of the data subject will be automatically transmitted to PayPal.

By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing. The personal data transmitted to PayPal is usually a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing.

For the fulfilment of the purchase contract, those personal data, which are related to the respective order, are also necessary. Details on data protection at PayPal may be found at: https://www.paypal.com/webapps/mpp/ua/privacy-prev.

Note on direct debit: As usual with direct debit, your account details will be collected, in order to debit the corresponding amount from your account.

Newsletter / Advertising purposes existing customers / (Art. 6 para. 1 lit. f EU GDPR)

We are interested in maintaining the customer relationship with you and to provide you with information and offers about our products/services. Therefore, we process your data in order to send you the corresponding information and offers by email.

You may subscribe to a free newsletter on our website. The email address as well as your name provided during registration will be used to send you a personalised newsletter.

In doing so, we respect the principle of data economy and data avoidance, since only the email address (Name of the personalized newsletter) is marked as required. Due to technical necessity as well as legal security, your IP address will be processed when ordering the newsletter.

You may naturally terminate the subscription at any time, via the opt-out option provided in the newsletter and thus withdraw your consent. It is also possible to unsubscribe from the newsletter via our website at any time.

The technical handling of the newsletter is either via Emarsys eMarketing Systems GmbH, Märzstrasse 1, A-1150 Vienna or via Marketo EMEA Ltd., Cairn House, South County Business Park, Leopardstown Road, Dublin 18. For this purpose, all necessary data from your profile will be transmitted to Emarsys or Markto. The legal basis for this is Art. 6 para. 1 lit. f EU GDPR. We respect the principle of data economy and data avoidance, by providing only the data that we will need to perform the newsletter distribution. All data is transmitted in encrypted form. The data, which are necessary for the newsletter receipt, are not transmitted to other third parties.

For the evaluation of newsletter campaigns, newsletters contain tracking pixels. An email thumbnail formatted in HTML is embedded for this purpose, allowing us to see which email you have opened and when. In addition, we can determine which links in the email you have accessed.

Unsubscribing from the newsletter is possible at any time, and may be done via a dedicated link in the newsletter.

You can find further information on the technologies used in the privacy policy of Emarsys eMarketing Systems GmbH at https://www.emarsys.com/en-uk/privacy-policy/ and of Marketo EMEA Ltd. at https://documents.marketo.com/legal/privacy/.

If you do not wish this, you may object at any time to the use of your personal information for the purpose of direct marketing; this also applies to profiling if it is associated with direct mail. If you object, we will stop processing your data for this purpose.

The objection may be made without giving reasons, for free and free of form, and should be does as directly as possible online in your account settings, or by email to privacy@experteer.co.uk.

Location of data storage / hosting

For the purpose of operating our website, we use the services of infrastructure providers PlusServer GmbH (Hohenzollernring 72, 50672 Cologne), Amazon Webservices, Inc (410 Terry Drive Ave North, WA 98109-5210 Seattle, USA) and DigitalOcean (101 6th Ave, New York, NY 10013, USA). Personal data is stored exclusively in the EU at locations in Cologne and Frankfurt.

Automated individual decision-making

To improve search and recommendation resultswe may store information about your usage behaviour on our platform so that suitable job offers can be found for you. As part of this, we store which job offers you have viewed, which job offers you have applied to and which headhunters or recruiter you have contacted. This information is kept, however, in anonymous form, so that no direct personal reference to you can be made from only this data. The legal basis is from Art. 6 para. 1 f GDPR. Our legitimate interest is that, by storing this information, we want to ensure that you receive continuously improved search and recommendation results.

Cookies (Art. 6 para. 1 lit. f EU GDPR / Art. 6 para. 1 lit a EU GDPR with consent)

Our website uses cookies at several points. The help in making our site more user-friendly, effective and safer. Cookies are small text files that are stored on your device.

By means of these cookies, it allows us to analyse how users use our websites. We can thus design website content according to visitor needs. Through cookies, it also allows us to measure the effectiveness of a given ad and have it ranked, for example, depending on the user's preferences. The legal basis for this is Art. 6 para. 1 lit. f.

We use the following cookies:

Own cookies:
This type of cookie is controlled directly by us. Depending on the purpose, these remain permanently stored - even after the session has ended - (so-called "persistent cookies", e.g. implementation of opt-out) or are deleted when the browser session ends (so-called "session cookies", they are only valid for one browser session).

Third-party cookies:
This type of cookie is controlled by third parties. Third-party providers are providers who display advertising banners for us on other websites. They use cookies, for example, to transmit information that an advertising banner displayed by you has led to a purchase. (e.g. conversion tracking). So-called temporary/permanent cookies are used, which are automatically deleted after the specified time (usually 6 months). These temporary or permanent cookies are stored on your end device and are deleted automatically after the specified time. The cookies of our partner companies also only receive pseudonymous data, usually anonymous data. They enable our partners to track which products you have looked at, whether something has been purchased, which products have been searched for, etc. Some of our advertising partners also collect information about which pages you previously visited or, for example, which products you were interested in. This makes it possible to display individual advertisements. This pseudonymous data is never merged with your personal data.

Please note: If you deactivate the placing of cookies, our website becomes unusable.

Advertising measurement/optimisation

Criteo: On our website, we utilise the services of Criteo SA, 32 Rue Blanche, 75009 Paris, France, to target visitors to our website with personalised, interest-based advertisements based on their browsing habits. Criteo SA collects and stores information in anonymous form, for this purpose, on the browsing behaviour of visitors to our website. For this, Criteo uses anonymous browser cookies, which at no time collect personal data such as name or address. Identification of the website user is therefore impossible. Only the identifiers in the browsers used by the visitor (desktop, tablet or smartphone) are compared. There is no further use or disclosure of data. The storage of cookies may be prevented by a corresponding setting in your browser. You may permanently disable the use of Criteo cookies by following the link below and changing the cookie setting accordingly: http://www.criteo.com/privacy/. Further information on the technology used is in the Criteo SA Privacy Policy at: http://www.criteo.com/privacy/.

Google Adwords: We also use the Google AdWords Conversion Tracking feature of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States („Google“). Google AdWords uses cookies when you click on a Google ad

As long as the cookie is valid, Google and we, as the website owner, can see that you have clicked on an ad and reached a specific landing page (e.g. registration, job search). These cookies can not be tracked across multiple websites from different AdWords participants. The cookies generate conversion statistics in Google AdWords. These statistics include the number of users who clicked on any of our ads. In addition, it counts how many users have come to a landing page that has been tagged with a “Conversion tag”. However, the statistics do not contain any data that identifies you.