The basis of effective privacy protection is comprehensive information about the collection, processing and use of your data ("data processing"). Therefore we would like to inform you
- when and for which actions we process data
- which data we process and why
- who receives data
- of your rights due to the data handling by us.
You can access, print or download this data protection declaration at any time at https://zalvus.com/privacy.
I. Contact Information
The person responsible for data processing within the framework of this website and within the meaning of the General Data Protection Regulation of Germany (DSGVO) is:
Schönhauser Allee 124
Data protection officer according to Art. 37 – EU-DSGVO: Dr. Olaf Koglin
II. General Information on Data Processing
1. Scope of Processing of Personal Data
The use of the website requires the processing of various information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data specifically.
You are not obliged to provide us with personal data either when visiting our website or in case of an application. Refusing to provide us with personal data for your application may result in it not being processed or having fewer chances. As soon as the provision of personal data is technically connected with visiting our website, refusal to do so will prevent you from entering and using our website.
As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DSGVO.
2. Legal Basis for the Processing of Personal Data
The legal bases for the processing of personal data are presented below.
a) Processing Reason: Performance of the contract or of pre-contractual measures or of the decision to establish, perform or terminate an employment relationship.
Legal basis according to DSGVO: Art. 6 Abs. 1 b), § 26 Abs. 1 BDSG
Explanation: Processing shall only take place to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless explicitly stated otherwise, we shall only process data to this extent.
b) Processing Reason: Legitimate interest
Legal basis according to DSGVO: Art. 6 Abs. 1 f)
Explanation: Data processing takes place as long as we have a justified interest and no contrary overriding interests of the data subject are apparent. The concrete interest is explained in this data protection declaration in the context of the processing representation.
c) Processing Reason: Consent
Legal basis according to DSGVO: Art. 6 Abs. 1 a), § 26 Abs. 2 BDSG
Explanation: Processing takes place if you have expressly agreed to the type and scope of data processing. You can revoke your consent at any time with effect for the future. However, the processing carried out up to this point in time will not be affected by this.
d) Processing Reason: Legal obligation
Legal basis according to DSGVO: Art. 6 Abs. 1 c)
Erläuterung: Processing takes place as long as necessary for the fulfilment of German or European legal regulations.
3. Data Destruction and Storage Duration
We will delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases can also exist in conjunction with each other or, if a legal basis no longer exists, a new one can intervene, such as, for example, the obligation to store certain data in order to fulfil a legal obligation to retain data.
III. Data Processing for the Provision of the Website
In order for us to display the website to you, it is necessary to process certain information. This already happens when you access our website. In addition, we offer various functions on our website that require further data processing.
1. Connection Establishment
When you visit our website, your browser sends various information to our server, so-called server log files. We need these to establish and maintain the connection. This data also includes your IP address, which we treat as a personal data. The data is not stored by Zalvusand is deleted upon leaving the website.
2. Technically Required Cookies
The use of technically required cookies and the associated data processing is based on our legitimate interest in a technically flawless and comfortable use of our website. Technical cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be accessed by you in your browser, for example.
3. Online Application to an Advertisement
If you would like to apply for a vacancy offered by Zalvus, you can take an assessment test. No personal data will be collected from you at this stage. If your profile matches the job offered, you can apply for it or leave feedback if you are not interested. Personal data is transmitted to us as part of the application process. Information required for the application is marked as mandatory fields. All other data that you transmit to us within the framework of your inquiry (also via the free text field or indirectly via documents to be uploaded, such as your curriculum vitae) are voluntary. As a matter of principle, we process your data only to the extent necessary to carry out our recruiting services for the customer as part of the application process.
The legal basis for the processing is the necessity for the initiation of an employment relationship. If Zalvus decides not to forward your application to the customer, your application data will be deleted after six months at the latest. In case of forwarding to the client, the client's deletion deadlines apply. If you have given us consent for further storage, we will delete the data after revocation of this consent.
If you are not interested in the position, you can give us feedback instead. In this context, we may store your personal data if you provide it voluntarily. The legal basis for the processing is our legitimate interest in making our job offers even more attractive to applicants. Your feedback will be deleted at the latest after two years if you do not object to the processing earlier.
4. Application at Zalvus
On our platform you will also find vacancies at Zalvus itself. If you apply hhere, paragraph 3 applies. If you send your application directly to us via e-mail, we collect, process and use your personal data only for the purpose of processing your application. Your data will be treated confidentially. Legal basis for this is § 26 Abs. 1 BDSG as well as § 26 Abs. 2 BDSG or Art. 6 Abs. 1 a) DSGVO for voluntary information. If there is no employment, your data will be deleted at the latest after six months, otherwise it will be processed within the scope of the employment relationship.
5. Contract Preparation and Execution at Zalvus
If you book services with Zalvus independently or as a contact person for your employer, we process your data, which is necessary for the execution of the contract. This includes in particular the communication for the coordination of the advertisement. Legal basis is the necessity for the contract initiation and execution.
6. Contact Form
- E-mail address
- Selection of topics
- Company size
- Staff needs
The information is marked as mandatory fields. All other data that you send us in the context of the inquiry, also via the free text field, is voluntary. We use this data exclusively for the purpose of answering your enquiry and the associated communication.
The legal basis of this processing of your data depends on the content of your inquiry. Basically, your consent to data processing in the context of your inquiry applies here when you use this type of contact functionality. If your request is directed towards the conclusion of a contract with us, the processing takes place within the framework of this pre-contractual obligation. Your data will be deleted as soon as your inquiry has been conclusively processed. In the event of a contract being concluded, we may process the data further in order to fulfill the contract.
If you subscribe to our newsletter, the following data, which you have entered in the registration form and which is technically necessary for registration, will be transmitted to us:
- E-Mail address
- Date and time of registration
The newsletters sent by us also contain so-called tracking pixels. In the process, a graphic file is inserted into the e-mail newsletters sent in HTML format, on the basis of which a statistical evaluation of the newsletter campaigns can take place. By using the tracking pixels, we can recognize whether and when e-mails have been opened and links contained have been clicked. For the newsletter registration we use the so-called double opt-in procedure. After your registration, an e-mail will be sent to the specified e-mail address containing a confirmation link to receive the newsletter. Legal basis for the processing of your data for the dispatch of the newsletter as well as the use of counting pixels is the existence of a consent in accordance with art. 6 para. 1 a) DSGVO. The data required for sending the newsletter will be stored as long as the newsletter subscription is used. You can revoke your consent to receive the newsletter and thus to use the associated use of counting pixels at any time. You can revoke your consent by using the link provided in every newsletter or by sending a message to email@example.com.
For sending e-mails, especially the newsletter, this website uses the e-mail provider MailChimp, The Rocket Science Group LLC, 675 Ponce de Leon Avenue NE, Suite 5000, Atlanta, GA 30308, USA ("MailChimp). If you register for our newsletter or you give us your email address as part of a registration, the data required for this (email address, language, country) will be transmitted to MailChimp in the USA and stored there. After registration, MailChimp sends you an email to confirm your registration (so-called "double opt-in"). In addition to the simple e-mail dispatch, MailChimp offers various analysis options to find out for us whether, when and where the sent newsletters are opened, used or rejected. For this purpose, MailChimp uses, among other things, cookies and similar technologies.
8. Contact via E-Mail
If you send us an e-mail to the addresses provided on these web pages, the data will be processed depending on the content of the message. The legal basis can then be your consent, the necessity for the fulfilment or initiation of a contract, the fulfilment of a legal obligation or our legitimate interest (see the legal basis section II.2). The storage period results equally from the content of the message.
9. Arrangement of a meeting
If you arrange an appointment via the corresponding function on our website, the following data entered by you in the registration mask as well as the data technically necessary for the registration will be transmitted to us:
- E-mail address
- Date and time of registration
- Telephone number
- Additional information provided by you
For this purpose, we use the "Microsoft Bookings" service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The connection to the service is only established when you access the online booking function via a button on our website.
Please note that you are not required to use Microsoft Bookings to make an appointment. If you do not wish to use the service, please use another of the contact options offered to make an appointment.
The legal basis for the data transfer, storage and processing is your consent (Article six paragraph one 1 lit. a DSGVO). The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. You have the option to revoke your consent to data processing or to object to the use of the data at any time. In this case, the intended contact with the user is no longer possible or communication that has already begun can no longer be continued.
You can obtain further information about Microsoft's data protection policy at the following Internet addresses: https://privacy.microsoft.com/de-de/privacystatement
If you like contributions from our website, you can share them directly via buttons in various social media networks. For this purpose, corresponding social media plug-ins are integrated on our website. To regulate the data flow to the social media platforms, we use the open source software Shariff. This software prevents information from being automatically sent to the various platforms each time a website is visited. Only when a button is pressed is the data transfer started.
If you press the button of a social media network, your browser establishes a direct connection to the servers of the respective operators. When the connection is established, various information including your IP address is sent to the operators and stored by them. Since the operators are mostly based in the USA, the information is also stored there. The operators thus learn that your browser has called up the relevant subpage of our website. This also applies if you do not have a user account with the social media network or are not logged in there at the time you visit our website.
If you are logged into your social media account at the same time, the operator assigns your visit to our website and any further interaction with the plugin (activation of the respective consent buttons, comments) directly to your account and saves this information. These actions may also be visible to other users of the network. You can prevent this data processing by not pressing the buttons. You can also log out of your social media network before visiting our site. You can also use add-ons such as the script blocker "NoScript" (http://noscript.net/) to prevent your browser from executing social media plug-ins in general.
The legal basis for data processing is our legitimate interest in providing you with an easy way to share information from our website on social media networks, thereby increasing our visibility.
Our website uses the following social media plugins:
Our website contains a social plugin of the social media network Facebook from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The corresponding button can be recognized by the Facebook logo.
Our website contains a social plugin of the Instagram microblogging service of Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA ("Instagram"). The corresponding button is indicated by Instagram's camera logo.
Our website contains a social plugin of the network LinkedIn from the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The corresponding button can be identified by the LinkedIn logo.
Our website contains a social plugin of the microblogging service Twitter of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The corresponding button can be recognized by the Twitter bird.
Our website contains a social plugin of the XING network from XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. The corresponding button can be recognized by the "X" logo.
Our Web site contains a social plugin of the WhatsApp messaging service from WhatsApp Inc, Attn: WhatsApp Copyright Agent, 1601 Willow Road, Menlo Park, California 94025, United States of America. The appropriate button is indicated by the "WhatsApp" logo.
IV. Implemented Technologies
An overview of all cookies and technologies used, their processing purposes and any data transfers to third parties can be found in the following list. You can adjust your decision as well as your language preference within the list here or in the footer of our website via the link "Cookie Settings".
V. Possibility of Opposition and Removal
If the data processing is based on your consent or our legitimate interest, you have the right at any time to object to the processing or to revoke your consent. Your objection or revocation has only effect for the future. If the analysis cookies used offer their own technical possibilities for deactivation, this is shown there. You can contact firstname.lastname@example.org at any time to exercise your right of objection or revocation. If you object to a processing based on our legitimate interest, we may nevertheless continue the processing if we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms.
VI. Rights of the Aggrieved Party
If data relating to your person is processed, you are the aggrieved party within the meaning of Art. 4 Para. 1 DSGVO. As the aggrieved party, you are entitled to the following rights regarding your personal data. To exercise these rights, you can contact us using the contact details stated above.
Right to Information pursuant to Art. 15 DSGVO
You have a right to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 DSGVO.
Right to Rectification pursuant to Art. 16 DSGVO
You have the right to have false personal data corrected without delay and to complete inaccurate personal data.
Right to Deletion pursuant to Art. 17 DSGVO
You have the right to demand the deletion of your personal data if one of the reasons stated in Art. 17 DSGVO applies, if there is no longer a legal basis for the processing.
Right to Limitation of processing pursuant to Art. 18 DSGVO
You have the right to demand the restriction of the processing of your personal data if one of the reasons stated in Art. 18 DSGVO applies, in particular at your request instead of the deletion of the data.
Right to Data Transferability pursuant to Art. 20 DSGVO
You have the right to request that all personal data we hold about you be disclosed to us in a structured, common and machine-readable format and to transfer this data to another responsible person without interference from the responsible person to whom the personal data was provided.
Right to Appeal to the Responsible Supervisory Authority, Art. 77 DSGVO
Pursuant to Art. 77 DSGVO, you have the right to file a complaint with the supervisory authority responsible for you.
VII. Recipients of Data
The processing of your personal data within the framework of the website is also partly carried out by contract processors, the hosting of the website, the sending of newsletters and the use of analysis tools. These are included exclusively based on an agreement to an order agreement in accordance with Art. 28 Para. 3 DSGVO.
VIII. Transfer of Data to Third Countries
The personal data that we collect from you within the framework of the website is also transferred to a certain extent to third countries outside the European Economic Area.
When using the tools of Google, Facebook, Twitter, LinkedIn, Microsoft, Reddit and Bugsnag, data is transferred to the operators to the extent described.
These are located in the USA and thus in a so-called "third country" pursuant to Art. 44 DSGVO. All operators are certified under the data protection agreement "EU-US Privacy Shield", which guarantees compliance with a European data protection level.
Last update: Oktober 2022