The basis of effective privacy protection is comprehensive information about the collection, processing and use of your data ("data processing"). Therefore we would like to inform you
- when and for which actions we process data
- which data we process and why
- who receives data
- of your rights due to the data handling by us.
This privacy policy merely governs the use of personal data on our website https://zalvus.com including the sub-pages. If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this data protection declaration.
You can access, print or download this data protection declaration at any time at https://zalvus.com/privacy.
I. Contact Information
The person responsible for data processing within the framework of this website and within the meaning of the General Data Protection Regulation of Germany (DSGVO) is:
ZALVUS GmbH
Schönhauser Allee 124
10437 Berlin
E-Mail: privacy@zalvus.com
Website: https://zalvus.com
Data protection officer according to Art. 37 – EU-DSGVO: Dr. Olaf Koglin
II. General Information on Data Processing
1. Scope of Processing of Personal Data
The use of the website requires the processing of various information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data specifically.
You are not obliged to provide us with personal data either when visiting our website or in case of an application. Refusing to provide us with personal data for your application may result in it not being processed or having fewer chances. As soon as the provision of personal data is technically connected with visiting our website, refusal to do so will prevent you from entering and using our website.
As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DSGVO.
2. Legal Basis for the Processing of Personal Data
The legal bases for the processing of personal data are presented below.
|
Processing Reason
|
Legal Basis in the DSGVO
|
Explanation
|
|
Performance of the contract or of pre-contractual measures or of the decision to establish, perform or terminate an employment relationship.
|
Art. 6 Abs. 1 b), § 26 Abs. 1 BDSG
|
Processing shall only take place to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless explicitly stated otherwise, we shall only process data to this extent.
|
|
Legitimate interest
|
Art. 6 Abs. 1 f)
|
Data processing takes place as long as we have a justified interest and no contrary overriding interests of the data subject are apparent. The concrete interest is explained in this data protection declaration in the context of the processing representation.
|
|
Consent
|
Art. 6 Abs. 1 a), § 26 Abs. 2 BDSG
|
Processing takes place if you have expressly agreed to the type and scope of data processing. You can revoke your consent at any time with effect for the future. However, the processing carried out up to this point in time will not be affected by this.
|
|
Legal obligation
|
Art. 6 Abs. 1 c)
|
Processing takes place as long as necessary for the fulfilment of German or European legal regulations.
|
3. Data Destruction and Storage Duration
We will delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases can also exist in conjunction with each other or, if a legal basis no longer exists, a new one can intervene, such as, for example, the obligation to store certain data in order to fulfil a legal obligation to retain data.
III. Data Processing for the Provision of the Website
In order for us to display the website to you, it is necessary to process certain information. This already happens when you access our website. In addition, we offer various functions on our website that require further data processing.
1. Connection Establishment
When you visit our website, your browser sends various information to our server, so-called server log files. We need these to establish and maintain the connection. This data also includes your IP address, which we treat as a personal data. The data is not stored by Zalvusand is deleted upon leaving the website.
2. Technically Required Cookies
We use cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be necessary for establishing a connection or improving the use of the website.
You may refuse the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do this you may not be able to use the full functionality of this website.
The use of technically required cookies and the associated data processing is based on our legitimate interest in a technically flawless and comfortable use of our website. Technical cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be accessed by you in your browser, for example.
3. Online Application to an Advertisement
If you would like to apply for a vacancy offered by Zalvus, you can take an assessment test. No personal data will be collected from you at this stage. If your profile matches the job offered, you can apply for it or leave feedback if you are not interested. Personal data is transmitted to us as part of the application process. Information required for the application is marked as mandatory fields. All other data that you transmit to us within the framework of your inquiry (also via the free text field or indirectly via documents to be uploaded, such as your curriculum vitae) are voluntary. As a matter of principle, we process your data only to the extent necessary to carry out our recruiting services for the customer as part of the application process.
The legal basis for the processing is the necessity for the initiation of an employment relationship. If Zalvus decides not to forward your application to the customer, your application data will be deleted after six months at the latest. In case of forwarding to the client, the client's deletion deadlines apply. If you have given us consent for further storage, we will delete the data after revocation of this consent.
If you are not interested in the position, you can give us feedback instead. In this context, we may store your personal data if you provide it voluntarily. The legal basis for the processing is our legitimate interest in making our job offers even more attractive to applicants. Your feedback will be deleted at the latest after two years if you do not object to the processing earlier.
4. Application at Zalvus
On our platform you will also find vacancies at Zalvus itself. If you apply hhere, paragraph 3 applies. If you send your application directly to us via e-mail, we collect, process and use your personal data only for the purpose of processing your application. Your data will be treated confidentially. Legal basis for this is § 26 Abs. 1 BDSG as well as § 26 Abs. 2 BDSG or Art. 6 Abs. 1 a) DSGVO for voluntary information. If there is no employment, your data will be deleted at the latest after six months, otherwise it will be processed within the scope of the employment relationship.
5. Contract Preparation and Execution at Zalvus
If you book services with Zalvus independently or as a contact person for your employer, we process your data, which is necessary for the execution of the contract. This includes in particular the communication for the coordination of the advertisement. Legal basis is the necessity for the contract initiation and execution.
6. Contact Form
You can send us an inquiry at any time using the contact form on our website. For some enquiries we use the Typeform service to collect and transmit data using forms. Typeform is a service of TYPEFORM, S.L., Bac de Roda 163, 08018 Barcelona, Spain ('Typeform S.L.'). Typeform does not, according to its own statements, store any data by which users can be personally identified (see Typeform: https://www.typeform.com/help/what-happens-to-my-data/ ). For more information on how we handle user data, please see Typeform's Privacy Policy: https://admin.typeform.com/to/dwk6gt. Typeform is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Article 6 paragraph 1(f) DSGVO. You can send us an inquiry at any time using the contact or Typeform form. The following information, among others, is requested:
- Name
- E-mail address
- Selection of topics
- Company size
- Staff needs
- Message
The information is marked as mandatory fields. All other data that you send us in the context of the inquiry, also via the free text field, is voluntary. We use this data exclusively for the purpose of answering your enquiry and the associated communication. The legal basis for this processing of your data depends on the content of your inquiry. Basically, our legitimate interest in providing the contact functionality and answering your transmitted inquiry applies here. If your inquiry is directed towards the conclusion of a contract with us, the processing will be carried out within the framework of this pre-contractual obligation. Your data will be deleted as soon as your inquiry has been finally processed. In case of a conclusion of a contract, we may process the data further for the fulfilment of the contract.
7. Newsletter
If you subscribe to our newsletter, the following data, which you have entered in the registration form and which is technically necessary for registration, will be transmitted to us:
- E-Mail address
- Date and time of registration
The newsletters sent by us also contain so-called tracking pixels. In the process, a graphic file is inserted into the e-mail newsletters sent in HTML format, on the basis of which a statistical evaluation of the newsletter campaigns can take place. By using the tracking pixels, we can recognize whether and when e-mails have been opened and links contained have been clicked. For the newsletter registration we use the so-called double opt-in procedure. After your registration, an e-mail will be sent to the specified e-mail address containing a confirmation link to receive the newsletter. Legal basis for the processing of your data for the dispatch of the newsletter as well as the use of counting pixels is the existence of a consent in accordance with art. 6 para. 1 a) DSGVO. The data required for sending the newsletter will be stored as long as the newsletter subscription is used. You can revoke your consent to receive the newsletter and thus to use the associated use of counting pixels at any time. You can revoke your consent by using the link provided in every newsletter or by sending a message to privacy@zalvus.com.
8. Contact via E-Mail
If you send us an e-mail to the addresses provided on these web pages, the data will be processed depending on the content of the message. The legal basis can then be your consent, the necessity for the fulfilment or initiation of a contract, the fulfilment of a legal obligation or our legitimate interest (see the legal basis section II.2). The storage period results equally from the content of the message.
9. Social-Media-Plugins
If you like contributions from our website, you can share them directly via buttons in various social media networks. For this purpose, corresponding social media plug-ins are integrated on our website. To regulate the data flow to the social media platforms, we use the open source software Shariff. This software prevents information from being automatically sent to the various platforms each time a website is visited. Only when a button is pressed is the data transfer started.
If you press the button of a social media network, your browser establishes a direct connection to the servers of the respective operators. When the connection is established, various information including your IP address is sent to the operators and stored by them. Since the operators are mostly based in the USA, the information is also stored there. The operators thus learn that your browser has called up the relevant subpage of our website. This also applies if you do not have a user account with the social media network or are not logged in there at the time you visit our website.
If you are logged into your social media account at the same time, the operator assigns your visit to our website and any further interaction with the plugin (activation of the respective consent buttons, comments) directly to your account and saves this information. These actions may also be visible to other users of the network. You can prevent this data processing by not pressing the buttons. You can also log out of your social media network before visiting our site. You can also use add-ons such as the script blocker "NoScript" (http://noscript.net/) to prevent your browser from executing social media plug-ins in general.
The legal basis for data processing is our legitimate interest in providing you with an easy way to share information from our website on social media networks, thereby increasing our visibility.
For further information on data processing, in particular its scope and legal basis as well as rights in this regard, please refer to the data protection information and terms of use of the respective networks.
Our website uses the following social media plugins:
Our website contains a social plugin of the social media network Facebook from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The corresponding button can be recognized by the Facebook logo.
Facebook's privacy policy can be found here: http://www.facebook.com/policy.php
Our website contains a social plugin of the Instagram microblogging service of Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA ("Instagram"). The corresponding button is indicated by Instagram's camera logo.
Instagram's privacy policy can be found here: http://instagram.com/about/legal/privacy/
Our website contains a social plugin of the network LinkedIn from the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The corresponding button can be identified by the LinkedIn logo.
LinkedIn's privacy policy can be found here: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Our website contains a social plugin of the microblogging service Twitter of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The corresponding button can be recognized by the Twitter bird.
Twitter's privacy policy can be found here: https://twitter.com/privacy
Our website contains a social plugin of the XING network from XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. The corresponding button can be recognized by the "X" logo.
XING's privacy policy can be found here: https://privacy.xing.com/en
Our Web site contains a social plugin of the WhatsApp messaging service from WhatsApp Inc, Attn: WhatsApp Copyright Agent, 1601 Willow Road, Menlo Park, California 94025, United States of America. The appropriate button is indicated by the "WhatsApp" logo.
WhatsApp's privacy policy can be found at: https://www.whatsapp.com/legal/#privacy-policy
10. Google Fonts
We use so-called web fonts from Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to display fonts.
Google is certified for the "Privacy Shield" (https://www.privacyshield.gov/), which is intended to ensure compliance with the level of data protection applicable in the EU.
Upon opening a page, your browser loads the web fonts you need into your browser to display text and fonts correctly. To do so, your browser connects to Google, which lets Google know that your IP address has been used to access our website.
The use of Google Fonts is in the interest of a uniform and appealing representation of our web pages. If your browser does not support Google Fonts or Web Fonts, your device will use a standard font.
For more information about Google Fonts and Google's privacy policy, please visit the web addresses below:
https://fonts.google.com/
http://www.google.de/policies/privacy
The legal basis for the processing of personal data when using Google Fonts is Art. 6 Para. 1 lit. f DSGVO (legitimate interest).
IV. Usage Analysis and Tracking
We would like to further improve the usability of this website and the attractiveness of its services. Thus, when visiting our website, we also collect data on user behavior, which we evaluate for this purpose. Therefore, the following tracking and analysis cookies are used on our website in addition to the technically required cookies mentioned above.
The legal basis for data processing for analysis purposes is our legitimate interest in the statistical evaluation of your user behaviour in order to constantly optimize and better market our website and services. Data processing for usage analysis takes place during your visit to our website and only up to the time of your effective objection.
- Google (Universal) Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google uses a cookie to collect information about your use of the website (including your IP address) in the United States and saves this information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened before transmission by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Google analyzes the information collected and provides us with reports on usage activities on our website and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. In addition to blocking all cookies by your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting cookies from this site in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Disable Google Analytics
For more information about Google Analytics, please see Google's privacy statement:
https://support.google.com/analytics/answer/6004245?hl=d
We also use the Doubleclick service by Google. A cookie is set, and your browser is assigned a pseudonymous identification number (ID). The cookie determines whether and which ads were displayed and clicked in your browser. We can thereby align ads even better with your interests. Since we have activated the IP anonymization of Google on this website, your IP address is also shortened within the framework of Doubleclick before Google transmits it within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases the full IP address is transmitted to Google in the USA and only shortened there. Google analyzes the information collected and sends us reports on the usage activities on our website and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
In addition to the general options to block cookies mentioned above, you can also prevent Google from storing the double-click cookie by specifically downloading an appropriate browser plugin. You will find this at: https://www.google.com/settings/u/0/ads/anonymous?sig=ACi0TChtUT7eAdC639QpiVip_9gqyfwexzQTkWdvRxWY57jwvvTDL0n4BmGv2-8Uvx98zRmg4kpnOnvydmx-klekXsUB9RMZ2jb8gncztXwUpPzleZdnHcs&hl=en-GB
We use so-called Facebook pixels on our websites. This is a function of a Facebook web analysis service. Facebook pixels are invisible graphic files that are incorporated into our website. When you visit our website, information from the pixel is stored in your browser. This allows us to track which of our subpages you have visited. We share this information with Facebook to better tailor our ads to your actual interests and to analyze the effectiveness of our ads on Facebook. Depending on how you use our website, Facebook will assign you to certain groups of interested parties known as custom audiences. The information generated by the cookies is usually transferred to a Facebook server in the USA and stored there. For more information on Facebook tracking pixel data collection, please visit https://de-de.facebook.com/about/privacy/ or https://business.facebook.com/pixels/tos/.
We have no control over Facebook's data processing operations. Facebook uses the data for purposes of advertising, market research and to optimize offers. In this regard, Facebook's privacy policy applies. We would like to point out that the use of such a tracking procedure enables the identification of users via numerous websites. You can turn off this function in the settings of your Facebook account for all devices used: https://www.facebook.com/settings?tab=ads. For more information, please refer to Facebook's Privacy Policy and Terms of Use.
Regardless of this, you can generally object to the use of such cookies via various third-party sites, e.g:
Our website uses Application Insights from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft") for the statistical evaluation of visitor access. The data collected in this way is used in anonymous form to analyze the use of the Zalvus website and to improve it. IP addresses are collected in Applications Insights, but only in anonymous form.
Our website uses the Bugsnag service of Bugsnag Inc. 939 Harri-son St, San Francisco, CA 94107, USA ("Bugsnag"). This service allows us to quickly identify bugs in the app that have caused a malfunction or crash and thereby improve our service. If an error occurs, the calling IP address (in anonymous form), data on your settings and details on the page of the app on which the error occurred and the data built into it are transmitted to Bugsnag for evaluation. Further information on data protection at Bugsnag can be found at: https://docs.bugsnag.com/legal/privacy-policy.
Our website also uses tracking features of the LinkedIn network. LinkedIn uses cookies when you visit our website. Your IP address, along with information about your use of our website and the devices you use, is sent to LinkedIn in the United States. In this way, your use of our website and other websites you visit can be analyzed and used as the basis for advertising displayed to you. You can deactivate the described tracking and storage of LinkedIn cookies here. If you have a user account with LinkedIn and are logged in, LinkedIn can assign your visit to our website to your account. We have no knowledge of the exact data flows between your browser and LinkedIn. You can find more information about this in LinkedIn's Privacy Policy and Cookie Policy:
We use the Twitter Ads of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter") service on our website.
When you visit our website, an ID in the form of a cookie is stored on your device. This ID enables us to recognize you when you use the site and to collect certain usage data. This usage data is used to create a pseudonymized usage profile. This data is stored by Twitter in the USA. If you visit Twitter subsequently, advertising will be displayed based on your website usage.
You can deactivate the described tracking and storage of Twitter cookies here. Further information on Twitter's privacy policy can be found by visiting the following Internet address: http://twitter.com/privacy.
We use the Twitter Analytics service of Twitter on our website.
Twitter Analytics uses cookies to store and process information about your user behaviour on our website. We use Twitter Analytics to statistically record and evaluate the user behaviour on our website. This serves our legitimate interest in improving the functionality and use of our services and adapting them to the needs of our customers. The legal basis is, insofar as Art. 6 Para. 1 S. 1 lit. f) DSGVO.
"Reddit Conversion Pixel", an analysis service of Reddit Inc., 520 Third Street, Suite 305, San Francisco, CA 94107, United States, is also used on our website.
This tool places a cookie on your PC when you come to our website via a Reddit ad. The cookie is not used for personal identification. If you visit our website, both we and Reddit will recognize that you have clicked on the corresponding advertisement and that you have been forwarded to our site via this advertisement. Conversion statistics are generated for us using the data collected by conversion cookies. This tells us the total number of users who have responded to our ad and then been directed to a web page with a Reddit pixel. This process does not provide us with any information that could personally identify you as a user. If you reject this tracking procedure, you can deactivate the storage of cookies via your Internet browser. If necessary, use the help function of your browser for further information. To learn more about Reddit's privacy policy, please visit https://www.reddit.com/help/privacypolicy/.
V. Possibility of Opposition and Removal
If the data processing is based on your consent or our legitimate interest, you have the right at any time to object to the processing or to revoke your consent. Your objection or revocation has only effect for the future. If the analysis cookies used offer their own technical possibilities for deactivation, this is shown there. You can contact privacy@zalvus.com at any time to exercise your right of objection or revocation. If you object to a processing based on our legitimate interest, we may nevertheless continue the processing if we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms.
VI. Rights of the Aggrieved Party
If data relating to your person is processed, you are the aggrieved party within the meaning of Art. 4 Para. 1 DSGVO. As the aggrieved party, you are entitled to the following rights regarding your personal data. To exercise these rights, you can contact us using the contact details stated above.
Right to Information pursuant to Art. 15 DSGVO
You have a right to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 DSGVO.
Right to Rectification pursuant to Art. 16 DSGVO
You have the right to have false personal data corrected without delay and to complete inaccurate personal data.
Right to Deletion pursuant to Art. 17 DSGVO
You have the right to demand the deletion of your personal data if one of the reasons stated in Art. 17 DSGVO applies, if there is no longer a legal basis for the processing.
Right to Limitation of processing pursuant to Art. 18 DSGVO
You have the right to demand the restriction of the processing of your personal data if one of the reasons stated in Art. 18 DSGVO applies, in particular at your request instead of the deletion of the data.
Right to Data Transferability pursuant to Art. 20 DSGVO
You have the right to request that all personal data we hold about you be disclosed to us in a structured, common and machine-readable format and to transfer this data to another responsible person without interference from the responsible person to whom the personal data was provided.
Right to Appeal to the Responsible Supervisory Authority, Art. 77 DSGVO
Pursuant to Art. 77 DSGVO, you have the right to file a complaint with the supervisory authority responsible for you.
VII. Recipients of Data
The processing of your personal data within the framework of the website is also partly carried out by contract processors, the hosting of the website, the sending of newsletters and the use of analysis tools. These are included exclusively based on an agreement to an order agreement in accordance with Art. 28 Para. 3 DSGVO.
VIII. Transfer of Data to Third Countries
The personal data that we collect from you within the framework of the website is also transferred to a certain extent to third countries outside the European Economic Area.
When using the tools of Google, Facebook, Twitter, LinkedIn, Microsoft, Reddit and Bugsnag, data is transferred to the operators to the extent described.
These are located in the USA and thus in a so-called "third country" pursuant to Art. 44 DSGVO. All operators are certified under the data protection agreement "EU-US Privacy Shield", which guarantees compliance with a European data protection level.
Last update: January 2020
Download: 2001_zalvus_privacy_policy.pdf
