The basis of effective privacy protection is comprehensive information about the collection, processing and use of your data ("data processing"). Therefore we would like to inform you
- when and for which actions we process data
- which data we process and why
- who receives data
- of your rights due to the data handling by us.
You can access, print or download this data protection declaration at any time at https://zalvus.com/privacy.
I. Contact Information
The person responsible for data processing within the framework of this website and within the meaning of the General Data Protection Regulation of Germany (DSGVO) is:
Schönhauser Allee 124
Data protection officer according to Art. 37 – EU-DSGVO: Dr. Olaf Koglin
II. General Information on Data Processing
1. Scope of Processing of Personal Data
The use of the website requires the processing of various information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data specifically.
You are not obliged to provide us with personal data either when visiting our website or in case of an application. Refusing to provide us with personal data for your application may result in it not being processed or having fewer chances. As soon as the provision of personal data is technically connected with visiting our website, refusal to do so will prevent you from entering and using our website.
As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DSGVO.
2. Legal Basis for the Processing of Personal Data
The legal bases for the processing of personal data are presented below.
Legal Basis in the DSGVO
Performance of the contract or of pre-contractual measures or of the decision to establish, perform or terminate an employment relationship.
Art. 6 Abs. 1 b), § 26 Abs. 1 BDSG
Processing shall only take place to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless explicitly stated otherwise, we shall only process data to this extent.
Art. 6 Abs. 1 f)
Data processing takes place as long as we have a justified interest and no contrary overriding interests of the data subject are apparent. The concrete interest is explained in this data protection declaration in the context of the processing representation.
Art. 6 Abs. 1 a), § 26 Abs. 2 BDSG
Processing takes place if you have expressly agreed to the type and scope of data processing. You can revoke your consent at any time with effect for the future. However, the processing carried out up to this point in time will not be affected by this.
Art. 6 Abs. 1 c)
Processing takes place as long as necessary for the fulfilment of German or European legal regulations.
3. Data Destruction and Storage Duration
We will delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases can also exist in conjunction with each other or, if a legal basis no longer exists, a new one can intervene, such as, for example, the obligation to store certain data in order to fulfil a legal obligation to retain data.
III. Data Processing for the Provision of the Website
In order for us to display the website to you, it is necessary to process certain information. This already happens when you access our website. In addition, we offer various functions on our website that require further data processing.
1. Connection Establishment
When you visit our website, your browser sends various information to our server, so-called server log files. We need these to establish and maintain the connection. This data also includes your IP address, which we treat as a personal data. The data is not stored by Zalvusand is deleted upon leaving the website.
2. Technically Required Cookies
The use of technically required cookies and the associated data processing is based on our legitimate interest in a technically flawless and comfortable use of our website. Technical cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be accessed by you in your browser, for example.
3. Online Application to an Advertisement
If you would like to apply for a vacancy offered by Zalvus, you can take an assessment test. No personal data will be collected from you at this stage. If your profile matches the job offered, you can apply for it or leave feedback if you are not interested. Personal data is transmitted to us as part of the application process. Information required for the application is marked as mandatory fields. All other data that you transmit to us within the framework of your inquiry (also via the free text field or indirectly via documents to be uploaded, such as your curriculum vitae) are voluntary. As a matter of principle, we process your data only to the extent necessary to carry out our recruiting services for the customer as part of the application process.
The legal basis for the processing is the necessity for the initiation of an employment relationship. If Zalvus decides not to forward your application to the customer, your application data will be deleted after six months at the latest. In case of forwarding to the client, the client's deletion deadlines apply. If you have given us consent for further storage, we will delete the data after revocation of this consent.
If you are not interested in the position, you can give us feedback instead. In this context, we may store your personal data if you provide it voluntarily. The legal basis for the processing is our legitimate interest in making our job offers even more attractive to applicants. Your feedback will be deleted at the latest after two years if you do not object to the processing earlier.
4. Application at Zalvus
On our platform you will also find vacancies at Zalvus itself. If you apply hhere, paragraph 3 applies. If you send your application directly to us via e-mail, we collect, process and use your personal data only for the purpose of processing your application. Your data will be treated confidentially. Legal basis for this is § 26 Abs. 1 BDSG as well as § 26 Abs. 2 BDSG or Art. 6 Abs. 1 a) DSGVO for voluntary information. If there is no employment, your data will be deleted at the latest after six months, otherwise it will be processed within the scope of the employment relationship.
5. Contract Preparation and Execution at Zalvus
If you book services with Zalvus independently or as a contact person for your employer, we process your data, which is necessary for the execution of the contract. This includes in particular the communication for the coordination of the advertisement. Legal basis is the necessity for the contract initiation and execution.
6. Contact Form
- E-mail address
- Selection of topics
- Company size
- Staff needs
The information is marked as mandatory fields. All other data that you send us in the context of the inquiry, also via the free text field, is voluntary. We use this data exclusively for the purpose of answering your enquiry and the associated communication. The legal basis for this processing of your data depends on the content of your inquiry. Basically, our legitimate interest in providing the contact functionality and answering your transmitted inquiry applies here. If your inquiry is directed towards the conclusion of a contract with us, the processing will be carried out within the framework of this pre-contractual obligation. Your data will be deleted as soon as your inquiry has been finally processed. In case of a conclusion of a contract, we may process the data further for the fulfilment of the contract.
If you subscribe to our newsletter, the following data, which you have entered in the registration form and which is technically necessary for registration, will be transmitted to us:
- E-Mail address
- Date and time of registration
The newsletters sent by us also contain so-called tracking pixels. In the process, a graphic file is inserted into the e-mail newsletters sent in HTML format, on the basis of which a statistical evaluation of the newsletter campaigns can take place. By using the tracking pixels, we can recognize whether and when e-mails have been opened and links contained have been clicked. For the newsletter registration we use the so-called double opt-in procedure. After your registration, an e-mail will be sent to the specified e-mail address containing a confirmation link to receive the newsletter. Legal basis for the processing of your data for the dispatch of the newsletter as well as the use of counting pixels is the existence of a consent in accordance with art. 6 para. 1 a) DSGVO. The data required for sending the newsletter will be stored as long as the newsletter subscription is used. You can revoke your consent to receive the newsletter and thus to use the associated use of counting pixels at any time. You can revoke your consent by using the link provided in every newsletter or by sending a message to firstname.lastname@example.org.
8. Contact via E-Mail
If you send us an e-mail to the addresses provided on these web pages, the data will be processed depending on the content of the message. The legal basis can then be your consent, the necessity for the fulfilment or initiation of a contract, the fulfilment of a legal obligation or our legitimate interest (see the legal basis section II.2). The storage period results equally from the content of the message.
If you like contributions from our website, you can share them directly via buttons in various social media networks. For this purpose, corresponding social media plug-ins are integrated on our website. To regulate the data flow to the social media platforms, we use the open source software Shariff. This software prevents information from being automatically sent to the various platforms each time a website is visited. Only when a button is pressed is the data transfer started.
If you press the button of a social media network, your browser establishes a direct connection to the servers of the respective operators. When the connection is established, various information including your IP address is sent to the operators and stored by them. Since the operators are mostly based in the USA, the information is also stored there. The operators thus learn that your browser has called up the relevant subpage of our website. This also applies if you do not have a user account with the social media network or are not logged in there at the time you visit our website.
If you are logged into your social media account at the same time, the operator assigns your visit to our website and any further interaction with the plugin (activation of the respective consent buttons, comments) directly to your account and saves this information. These actions may also be visible to other users of the network. You can prevent this data processing by not pressing the buttons. You can also log out of your social media network before visiting our site. You can also use add-ons such as the script blocker "NoScript" (http://noscript.net/) to prevent your browser from executing social media plug-ins in general.
The legal basis for data processing is our legitimate interest in providing you with an easy way to share information from our website on social media networks, thereby increasing our visibility.
Our website uses the following social media plugins:
Our website contains a social plugin of the social media network Facebook from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The corresponding button can be recognized by the Facebook logo.
Our website contains a social plugin of the Instagram microblogging service of Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA ("Instagram"). The corresponding button is indicated by Instagram's camera logo.
Our website contains a social plugin of the network LinkedIn from the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The corresponding button can be identified by the LinkedIn logo.
Our website contains a social plugin of the microblogging service Twitter of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The corresponding button can be recognized by the Twitter bird.
Our website contains a social plugin of the XING network from XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. The corresponding button can be recognized by the "X" logo.
Our Web site contains a social plugin of the WhatsApp messaging service from WhatsApp Inc, Attn: WhatsApp Copyright Agent, 1601 Willow Road, Menlo Park, California 94025, United States of America. The appropriate button is indicated by the "WhatsApp" logo.
10. Google Fonts
We use so-called web fonts from Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to display fonts.
Google is certified for the "Privacy Shield" (https://www.privacyshield.gov/), which is intended to ensure compliance with the level of data protection applicable in the EU.
Upon opening a page, your browser loads the web fonts you need into your browser to display text and fonts correctly. To do so, your browser connects to Google, which lets Google know that your IP address has been used to access our website.
The use of Google Fonts is in the interest of a uniform and appealing representation of our web pages. If your browser does not support Google Fonts or Web Fonts, your device will use a standard font.
The legal basis for the processing of personal data when using Google Fonts is Art. 6 Para. 1 lit. f DSGVO (legitimate interest).
IV. Usage Analysis and Tracking
We would like to further improve the usability of this website and the attractiveness of its services. Thus, when visiting our website, we also collect data on user behavior, which we evaluate for this purpose. Therefore, the following tracking and analysis cookies are used on our website in addition to the technically required cookies mentioned above.
The legal basis for data processing for analysis purposes is our legitimate interest in the statistical evaluation of your user behaviour in order to constantly optimize and better market our website and services. Data processing for usage analysis takes place during your visit to our website and only up to the time of your effective objection.
- Google (Universal) Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses a cookie to collect information about your use of the website (including your IP address) in the United States and saves this information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened before transmission by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Google analyzes the information collected and provides us with reports on usage activities on our website and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. In addition to blocking all cookies by your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting cookies from this site in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Disable Google Analytics
For more information about Google Analytics, please see Google's privacy statement:
We also use the Doubleclick service by Google. A cookie is set, and your browser is assigned a pseudonymous identification number (ID). The cookie determines whether and which ads were displayed and clicked in your browser. We can thereby align ads even better with your interests. Since we have activated the IP anonymization of Google on this website, your IP address is also shortened within the framework of Doubleclick before Google transmits it within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases the full IP address is transmitted to Google in the USA and only shortened there. Google analyzes the information collected and sends us reports on the usage activities on our website and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
In addition to the general options to block cookies mentioned above, you can also prevent Google from storing the double-click cookie by specifically downloading an appropriate browser plugin. You will find this at: https://www.google.com/settings/u/0/ads/anonymous?sig=ACi0TChtUT7eAdC639QpiVip_9gqyfwexzQTkWdvRxWY57jwvvTDL0n4BmGv2-8Uvx98zRmg4kpnOnvydmx-klekXsUB9RMZ2jb8gncztXwUpPzleZdnHcs&hl=en-GB
- Facebook-Custom Audience
We use so-called Facebook pixels on our websites. This is a function of a Facebook web analysis service. Facebook pixels are invisible graphic files that are incorporated into our website. When you visit our website, information from the pixel is stored in your browser. This allows us to track which of our subpages you have visited. We share this information with Facebook to better tailor our ads to your actual interests and to analyze the effectiveness of our ads on Facebook. Depending on how you use our website, Facebook will assign you to certain groups of interested parties known as custom audiences. The information generated by the cookies is usually transferred to a Facebook server in the USA and stored there. For more information on Facebook tracking pixel data collection, please visit https://de-de.facebook.com/about/privacy/ or https://business.facebook.com/pixels/tos/.
Regardless of this, you can generally object to the use of such cookies via various third-party sites, e.g:
- Networkadvertising: http://optout.networkadvertising.org/
- aboutads: http://www.aboutads.info/choices
- Youronlinechoices: http://www.youronlinechoices.com/uk/your-ad-choices/
- Applications Insights
Our website uses Application Insights from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft") for the statistical evaluation of visitor access. The data collected in this way is used in anonymous form to analyze the use of the Zalvus website and to improve it. IP addresses are collected in Applications Insights, but only in anonymous form.
Our website uses the Bugsnag service of Bugsnag Inc. 939 Harri-son St, San Francisco, CA 94107, USA ("Bugsnag"). This service allows us to quickly identify bugs in the app that have caused a malfunction or crash and thereby improve our service. If an error occurs, the calling IP address (in anonymous form), data on your settings and details on the page of the app on which the error occurred and the data built into it are transmitted to Bugsnag for evaluation. Further information on data protection at Bugsnag can be found at: https://docs.bugsnag.com/legal/privacy-policy.
- LinkedIn Analytics
- Twitter Advertising
We use the Twitter Ads of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter") service on our website.
When you visit our website, an ID in the form of a cookie is stored on your device. This ID enables us to recognize you when you use the site and to collect certain usage data. This usage data is used to create a pseudonymized usage profile. This data is stored by Twitter in the USA. If you visit Twitter subsequently, advertising will be displayed based on your website usage.
- Twitter Analytics
We use the Twitter Analytics service of Twitter on our website.
"Reddit Conversion Pixel", an analysis service of Reddit Inc., 520 Third Street, Suite 305, San Francisco, CA 94107, United States, is also used on our website.
- Google Adwords Conversion
Our website uses Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) conversion tracking. If you have reached our website via an ad placed by Google, a cookie will be set on your computer. The information obtained with the help of the conversion cookie is used to analyse user behaviour (e.g. clicks or other interactions) and to enable advertising tailored to our target groups. However, they do not contain any information with which users can be personally identified. If you do not wish to participate in tracking, you can deactivate the automatic setting of cookies in general or set your browser to block cookies from the domain "googleleadservices.com". You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout
Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
- Google Adwords Retarging
This website uses the remarketing function of Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). A cookie is stored in the browser of the website visitor, which enables the visitor to be recognised. This allows the visitor to be presented with advertisements that relate to content that the visitor has previously viewed on other websites. This allows us to identify target groups that are most likely to be interested in our advertising. According to its own information, Google does not collect any personal data during this process. You can deactivate this function under the following link: https://adssettings.google.com/
For sending e-mails, especially the newsletter, this website uses the e-mail provider MailChimp, The Rocket Science Group LLC, 675 Ponce de Leon Avenue NE, Suite 5000, Atlanta, GA 30308, USA ("MailChimp). If you register for our newsletter or you give us your email address as part of a registration, the data required for this (email address, language, country) will be transmitted to MailChimp in the USA and stored there. After registration, MailChimp sends you an email to confirm your registration (so-called "double opt-in"). In addition to the simple e-mail dispatch, MailChimp offers various analysis options to find out for us whether, when and where the sent newsletters are opened, used or rejected. For this purpose, MailChimp uses, among other things, cookies and similar technologies.
V. Possibility of Opposition and Removal
If the data processing is based on your consent or our legitimate interest, you have the right at any time to object to the processing or to revoke your consent. Your objection or revocation has only effect for the future. If the analysis cookies used offer their own technical possibilities for deactivation, this is shown there. You can contact email@example.com at any time to exercise your right of objection or revocation. If you object to a processing based on our legitimate interest, we may nevertheless continue the processing if we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms.
VI. Rights of the Aggrieved Party
If data relating to your person is processed, you are the aggrieved party within the meaning of Art. 4 Para. 1 DSGVO. As the aggrieved party, you are entitled to the following rights regarding your personal data. To exercise these rights, you can contact us using the contact details stated above.
Right to Information pursuant to Art. 15 DSGVO
You have a right to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 DSGVO.
Right to Rectification pursuant to Art. 16 DSGVO
You have the right to have false personal data corrected without delay and to complete inaccurate personal data.
Right to Deletion pursuant to Art. 17 DSGVO
You have the right to demand the deletion of your personal data if one of the reasons stated in Art. 17 DSGVO applies, if there is no longer a legal basis for the processing.
Right to Limitation of processing pursuant to Art. 18 DSGVO
You have the right to demand the restriction of the processing of your personal data if one of the reasons stated in Art. 18 DSGVO applies, in particular at your request instead of the deletion of the data.
Right to Data Transferability pursuant to Art. 20 DSGVO
You have the right to request that all personal data we hold about you be disclosed to us in a structured, common and machine-readable format and to transfer this data to another responsible person without interference from the responsible person to whom the personal data was provided.
Right to Appeal to the Responsible Supervisory Authority, Art. 77 DSGVO
Pursuant to Art. 77 DSGVO, you have the right to file a complaint with the supervisory authority responsible for you.
VII. Recipients of Data
The processing of your personal data within the framework of the website is also partly carried out by contract processors, the hosting of the website, the sending of newsletters and the use of analysis tools. These are included exclusively based on an agreement to an order agreement in accordance with Art. 28 Para. 3 DSGVO.
VIII. Transfer of Data to Third Countries
The personal data that we collect from you within the framework of the website is also transferred to a certain extent to third countries outside the European Economic Area.
When using the tools of Google, Facebook, Twitter, LinkedIn, Microsoft, Reddit and Bugsnag, data is transferred to the operators to the extent described.
These are located in the USA and thus in a so-called "third country" pursuant to Art. 44 DSGVO. All operators are certified under the data protection agreement "EU-US Privacy Shield", which guarantees compliance with a European data protection level.
Last update: July 2021