Legal notice and Data protection

Welcome to our website. In the following you will find our privacy policy:

I. General information

Contact details of the data controller
Astrid Runzheimer
Wingertsbergweg 19
61348 Bad Homburg v.d.H.
Germany
Tel.: +49-(0)-6172-5939103
Fax: +49-(0)-6172-5939104
Email: contact@runzheimer.eu

II. Specific information for the collection of personal data

Visiting the website
1. Purpose of data collection and processing
  Every time a data subject accesses a page of our website and every time a data subject accesses a file stored on our website, access data regarding this process are saved in a log file. Each data set consists of:
  (1) the web page from which the file was requested,
  (2) the name of the file,
  (3) the date and time of the request,
  (4) the transmitted data volume,
  (5) the access status (file transmitted, file not found, etc.),
  (6) a description of the type of operating system and web browser used,
  (7) host name of the accessing computer,
  (8) the client IP address.
  We use these data to operate our website, especially in order to determine how much the website is used, if there are malfunctions of the website, and to make adjustments or improvements. The client IP address is used to transmit the quested data; once it is no longer required for technical reasons, it will be anonymised by deleting the last numeric block (Ipv4) or the last octet (Ipv6).
2. Duration of data processing
  The information are recorded each time a user accesses a file of our website and each time our website is accessed and are deleted as soon as they are no longer required for the purpose of recording, which is the case at the latest three months after the website visit.
3. Legal Base
  The temporary storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 lit. f of the General Data Protection Regulation of the European Union (hereinafter “GDPR”). The legitimate interest lies in the provision of our website and the examination of misuse.
4. Right of objection and deletion
  By refraining from using our website, the data subject may object to the processing and, subject to the conditions described in more detail in the “Rights” section below, request the deletion of data collected by him in this way by means of an informal declaration.
Cookies
1. Purpose of data collection and use of the data
  In order to technically facilitate the visit to our website and the ordering process, we transmit so-called cookies to the end device of the data subject. Cookies are small text files that can be used to identify the data subject’s end device, usually by recording the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. By storing the cookie on the device used – without interfering with the operating system – it is recognized again and enables us to make any presetting immediately available. We use this information to adapt our website and the services we offer to your needs and to speed up your visit to our website.
2. Duration of data processing
  The storage period of the various from cookie to cookies, but is no longer than two years. They are stored on your local device, not on our server, so the actual deletion time depends on how your browser software is configured. Please refer to the operating instructions of your browser software for information on how to delete cookies set by us automatically or on a case-by-case basis.
3. Legal Base
  The storage of the aforementioned data is based on Art. 6 para. 1 lit. f GDPR. The legitimate interest for the setting of cookies is on the one hand to be able to optimize the quality of our website through an analysis and on the other hand to enable the visit of our website; in particular, some functions on our website cannot be used without cookies, because otherwise the data subject and his settings already made would not be recognized when changing pages. Furthermore, the data is stored on the legal basis of Art. 6 para. 1 lit. b GDPR for the execution of the contract.
4. Right of objection and deletion
  The data subject can block the use of cookies in the device used or delete them after the use. Under certain circumstances, however, individual functions of our offer may not be usable. Information on how cookies can be blocked and cookies that have already been saved can be deleted can be found in the documentation of the used browser software.
Recruitment contract performance
1. Purpose of data collection and use of the data
  For the purpose of processing the recruitment contract agreement, we collect, store and process the name, address, e-mail address, telephone or fax number of our contact persons at the searching company (client).
  Personal data will only be passed on to third parties if this is necessary for the execution of the contract, such as the passing on to selected and suitable candidates.
2. Duration of data processing
  Personal data, which we collect and process for the purpose of executing recruitment contracts, will be stored for a period of three years at the end of the year after complete performance of the mutually performed obligations. Insofar as the data are the subject of business letters within the meaning of §§ 147 para. 1 No. 2 and 3, 257 para. 1 No. 2 and 3 HGB (German Commercial Code), the data will be deleted at the end of the year after six years. The same applies if they are part of other documents which are of importance for taxation in the sense of § 147 para. 1 No. 5 Tax Code (AO), unless shorter retention periods are permitted in other tax laws. If the data are part of accounting documents within the meaning of §§ 147 para. 1 No. 1, 4, 4a Tax Code (AO), 257 para. 1 No. 1 and 4 HGB (German Commercial Code), the data will be deleted after ten years at the end of the year.
3. Legal Base
  The aforementioned data is stored on the Legal Base Art. 6 para. 1 lit. b and lit. c GDPR in order to fulfil the obligations arising from the contract, to provide the services required for the execution of the contract and to comply with tax and commercial documentation obligations.
4. Right of objection and deletion
  Since there are legally standardized retention periods here and the data must remain stored and processed for the contract execution, an objection or a deletion is not possible.
Search for candidates
1. Purpose of data collection and use of the data
  We support you in increasing your chances on the job market and finding a new position. For this purpose, we collect, store and process the following personal data of potential candidates (employees) for the purpose of recruiting: name, address, e-mail address, telephone or fax number, age, date of birth, gender, performance and application documents such as certificates, assessments, training, professional career and experience, application photo, current references and assessment of personal and professional qualifications in comparison with the required specification, documentation of contacts with you such as consulting and placement notes. If you provide us with a reference that has agreed that we may contact you for the purpose of evaluating you, we will collect, process and store your name, address, e-mail address, telephone or fax number.
  The data are obtained either from the applicant himself or from public sources, in particular the Internet (and in particular professional social networks, company websites, reports and other journalistic texts), printed matter and recommendations.
  The personal data will only be passed on to our client after the candidate’s consent for the purpose of contract execution, i.e. for the purpose of merging with the potential employer.
2. Duration of data processing
  Personal data which we collect and process for the purpose of candidate search will be stored for a period of three years until the end of the year after the reciprocal performance obligations have been fully met. Insofar as the data are the subject of business letters within the meaning of §§ 147 Paragraph 1 No. 2 and 3, 257 Paragraph 1 No. 2 and 3 HGB (German Commercial Code), the data will be deleted at the end of the year on expiry of six years. The same applies if they are part of other documents which are of importance for taxation in the sense of § 147 para. 1 No. 5 Tax Code (AO), unless shorter retention periods are permitted in other tax laws. If the data are part of accounting documents within the meaning of §§ 147 para. 1 No. 1, 4, 4a Tax Code (AO), 257 para. 1 No. 1 and 4 HGB (German Commercial Code), the data will be deleted at the end of ten years at the end of the year.
3. Legal Base
  The aforementioned data is stored on the Legal Base Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the recruitment and consolidation of clients (employers) and candidates (employees) and in the fulfilment of contractual obligations towards our clients (employers).
4. Right of objection and deletion
  If there are legally standardized retention periods and the data must remain stored and processed for the execution of the contract, objection or deletion is not possible. If these conditions are not met, the data subject may, subject to the conditions described in more detail in the section “Rights” below, request the deletion of data collected by him in this way by means of an informal declaration.
Entry into our database
1. Purpose of data collection and use of the data
  In order to be able to consider you also for other positions of other (future) clients (employers), we offer to deposit your profile data in our database on our server. We will then check whether the job corresponds to you for new assignments. For this purpose, we store and process your name, address(es), e-mail address, telephone or fax number, age, date of birth, gender, performance, and application documents such as references, assessments, training, professional background and main areas of experience, application photo, current references and evaluation of personal and professional qualifications in comparison with the required specification, documentation of contacts with you such as consulting and placement notes. If a position is suitable for you, we will contact you. Only after consultation and prior consent from you, we pass on your data to the potential client (employer).
  The personal data will only be passed on to third parties with the consent of the data subject (candidate).
2. Duration of data processing
  The personal data will be deleted immediately after revocation of the consent by the candidate.
3. Legal Base
  The aforementioned data is stored on the Legal Base Art. 6 para. 1 lit. a GDPR.
  Right of objection and deletion
  If you have agreed to be included in our database for other (future) job enquiries, we will delete your personal data after your revocation. You have the right to revoke your consent at any time for the future without affecting the legality of the processing carried out on the basis of your consent until revocation.
Contacting
1. Purpose of data collection and use of the data
  An interested data subject can contact us by e-mail, fax or telephone. We will then save the data transmitted to us and provided by the data subject in order to process the request. These data are name, address, e-mail address, telephone and/or fax number, date and time of the request and the description of the request.
  The data will not be passed on to third parties. They are saved to handle the enquiry of the data subject.
2. Duration of data processing
  Personal data, which we collect and process for the purpose of establishing contact, is stored for a period of three years at the end of the year after complete performance of the mutually performed obligations. Insofar as the data are the subject of business letters within the meaning of §§ 147 para. 1 No. 2 and 3, 257 para. 1 No. 2 and 3 HGB (German Commercial Code), the data will be deleted at the end of the year on expiry of six years. The same applies if they are part of other documents which are of importance for taxation in the sense of § 147 para. 1 No. 5 Tax Code (AO), unless shorter retention periods are permitted in other tax laws. If the data are part of accounting documents within the meaning of §§ 147 para. 1 No. 1, 4, 4a Tax Code (AO), 257 para. 1 No. 1 and 4 HGB (German Commercial Code), the data will be deleted at the end of ten years at the end of the year.
3. Legal Base
  The aforementioned data is stored on the Legal Base Art. 6 para. 1 lit. b GDPR in the context of a contract initiation or performance or according to Art. 6 para. 1 lit. f GDPR. The person responsible has a legitimate interest in being able to process the contact request and prevent misuse of the contact request.
4. Right of objection and deletion
  The data subject has the right to object to storage at any time. Then the data stored for the process will be deleted. If a contract has been concluded, the above remarks on the keyword “execution of contract” shall apply.
Google Analytics
1. Purpose of data collection and use of the data
  The client IP address of the data subject is collected for use of the Google Analytics service. This website uses Google Analytics, a web analysis service of Google Inc. “(“Google”). Google Analytics uses so-called “cookies”, text files which are stored on the end device of the person concerned and which enable an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, Google will reduce the IP address of the person concerned within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and anonymized there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on the website activities and to provide the website operator with further services associated with the use of the website and the Internet. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
2. Duration of data processing
  As soon as the data are no longer necessary to achieve the purpose they have been recorde for, they will be deleted, which is the case when the anonymisation within the European Union has been completed. This takes less than a second.
  The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data for which the retention period has been reached are automatically being deleted once a month.
  For more information, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=en.
3. Legal Base
  The storage of the aforementioned data is based on Art. 6 S. 1 lit. f GDPR. The legitimate interest lies in the fact that we are able to analyse the use of the website by all data subjects in its entirety without drawing conclusions about the behaviour of identifiable persons; this enables us to optimise our website and our offers.
4. Right of objection and deletion
  The data subject can prevent the storage of cookies by a corresponding setting of the browser software; however, we point out to the data subject that in this case not all functions of this website may be completely functional. Furthermore, the data subject can prevent the collection of data generated by the cookie and related to the use of the website (including the IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link [http://tools.google.com/dlpage/gaoptout?hl=en].

III. Rights of the data subject

If “personal data” are processed by the data subject on our website, the person concerned has the following rights against the person responsible in accordance with the GDPR .

Right to information according to Art. 15 GDPR
The person concerned has the right to the following information:
1. processing purposes;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
5. the existence of a right of rectification or deletion of personal data concerning him or of a restriction on processing by the controller or of a right of opposition to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. where the personal data are not collected from the data subject, all available information on the origin of the data;
8. the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) GDPR, and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
9. where personal data are transferred to a third country or international organisation, the data subject shall have the right to be informed of the appropriate guarantees in accordance with Article 46 GDPR in relation to the transfer.
  We provide the data subject with a copy of the personal data that is the subject of the processing. For all other copies requested by the data subject, the data processor may charge an appropriate fee on the basis of the administrative costs.
Right to correction in accordance with Art. 16 GDPR
The data subject shall have the right to request the controller to rectify any inaccurate personal data concerning him/her without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
Right of deletion according to Art. 17 GDPR
The data subject has the right to request from the data controller to delete personal data concerning him/her without delay and the data controller is obliged to delete personal data without delay if one of the following reasons applies:
1. the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
2. the data subject withdraws his/her consent on which the processing was based pursuant to Art. 6 s. 1 lit. a or Art. 9 s. 2 lit. a GDPR and there is no other legal basis for the processing;
3. the data subject opposes processing in accordance with Article 21(1) of the GDPR and there are no overriding legitimate grounds for processing or the data subject opposes processing in accordance with Article 21(2) of the GDPR;
4. the personal data have been processed unlawfully;
5. the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject;
6. the personal data was collected in relation to information society services offered pursuant to Art. 8 s. 1 GDPR
Right to limitation of processing in accordance with Art. 18 GDPR
The data subject has the right to require the controller to restrict processing if one of the following conditions is met:
1. the accuracy of the personal data is disputed by the data subject for a period which enables the data controller to verify the accuracy of the personal data,
2. the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
3. the data controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the purpose of asserting, exercising or defending claims; or
4. the data subject has lodged an objection to the processing pursuant to Art. 21 s. 1 GDPR, as long as it is not yet clear whether the legitimate reasons of the data subject outweigh those of the data subject.
Right to information in accordance with Art. 19 GDPR
If the data subject has claimed from the data subject a correction with regard to his personal data in accordance with Art. 16 GDPR, a deletion Art. 17 s. 1 GDPR or a restriction on processing in accordance with Art. 18 GDPR, and if the data subject has informed all recipients to whom the data subject’s personal data have been disclosed of the data subject’s request (unless this was impossible or disproportionate), the data subject has the right to be informed by the data subject about the recipients.
Right to Data portability Art. 20 GDPR
The data subject has the right to receive the personal data concerning him/her that he/she has provided to a controller in a structured, current and machine-readable format and he/she has the right to transmit this data to another controller without our interference, provided that
1. processing is based on consent pursuant to Art. 6 s. 1 lit. a or Art. 9 s. 2 lit. a or on a contract pursuant to Art. 6 s. 1 lit. b GDPR and
2. processing is carried out by means of automated methods.
  The rights and freedoms of other persons must not be affected by this.
  When exercising the right to data transferability pursuant to paragraph 1, the data subject has the right to request that the personal data be transferred directly by us to another data controller, insofar as this is technically feasible.
  The exercise of the right to data transferability does not affect the right to cancellation pursuant to Art. 17 GDPR. The right to transferability shall not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
Right of objection according to Art. 21 GDPR
The data subject has the right to object at any time to the processing of personal data concerning him/her on the basis of Article 6(1)(e) or (f) of the GDPR for reasons arising from his particular situation; this also applies to profiling based on these provisions.
We no longer process personal data unless we can prove compelling grounds for processing that outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him/her for the purposes of such advertising, including profiling in so far as it is related to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
The data subject may revoke his/her consent at any time. However, the collection and processing that has taken place up to this point remains legal.
Automated decisions in individual cases incl. profiling according to Art. 22 GDPR
The data subject shall not be subject to a decision based exclusively on automated processing – including profiling – which has legal effect against him or significantly impairs it in a similar manner.
This does not apply if the decision
1. is necessary for the conclusion or performance of a contract between the party concerned and us,
2. is admissible by law of the Union or of the Member States to which we are subject and that law contains appropriate measures to safeguard the rights, freedoms and legitimate interests of the person concerned; or
3. with the express consent of the data subject.
  These decisions may not be based on special categories of personal data pursuant to Art. 9 s. 1 GDPR, unless Art. 9 s. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights, freedoms and legitimate interests of the data subject.
  In the cases referred to in points a) and c), we shall take appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person on our part, to state his own position and to challenge the decision.
Right of appeal to a supervisory authority in accordance with Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right of appeal to a supervisory authority, in particular in the Member State of his place of residence, his place of employment or the place of suspected infringement, if the data subject considers that the processing of personal data concerning him or her is contrary to this Regulation.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
The right to an effective judicial remedy under Art. 79 of the GDPR
Without prejudice to any available administrative or extrajudicial remedy, including the right of appeal to a supervisory authority under Article 77 GDPR, any data subject shall have the right to an effective judicial remedy if he considers that his rights under this Regulation have been infringed as a result of processing of his personal data in breach of this Regulation.
Any action against us or a processor shall be brought in the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may also be brought before the courts of the Member State in which the person concerned is resident, unless we or the processor is an authority of a Member State which has acted in the exercise of its sovereign powers.