Privacy 

In this data protection declaration, we, Doris Fink Recruiting & Consulting GmbH, describe how we collect and process personal data. This data protection declaration does not represent an exhaustive description; If necessary, other declarations relating to data protection regulate specific issues. For the purposes of this data protection declaration, personal data refers to all information that relates to a specific or identifiable person.

Responsible body and contact

Doris Fink Recruiting & Consulting GmbH is responsible for the data processing that we describe here. Data protection inquiries can be sent by email to [email protected]. Proof of identity is required. [email protected] gerichtet werden. Ein Identitätsnachweis ist erforderlich.

 

Collection and processing of personal data

We process personal data in particular in the following processing categories 

• Customer data for which we provide or have provided services 
• Personal data that we received indirectly from our customers when providing services 
• When you visit our website 
• When using our newsletter 
• When attending one of our events 
• For other contractual relationships, e.g. as a supplier, service provider or consultant 
• When applying 

 

Categories of personal data

Which personal data we process depends on your relationship with us and the purpose for which we process it. In addition to your contact details, we also process other information about you or people who are in a relationship with you. Under certain circumstances, this information may also be particularly sensitive personal data. 

We collect the following categories of personal data depending on the purpose for which we process it: 

• Contact information (e.g. last name, first name, address, telephone number, email) 
• Customer information (e.g. date of birth, nationality, marital status, profession, title, job title) 
• Financial information (e.g. data on bank details) 
• Mandate data, depending on the order (e.g. projects, contracts) 
• Website data (e.g. IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.) 
• Application data (e.g. CV, job references) 
• Marketing information (e.g. newsletter registration) 
• Security and network data (e.g. visitor lists, access controls, network and mail scanners, telephone call lists) 

 

Purposes of data processing and legal basis

 Provision of services 

We primarily process the personal data that we receive from these and other people involved as part of our client relationships with our customers and other contractual relationships with business partners. 

The personal data of our customers includes in particular the following information: 

• Contact information (e.g. last name, first name, address, telephone number, email, other contact information) 
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, etc.) 
• Financial information (e.g. data on bank details) 

We process this personal data for the purposes described based on the following legal bases: 

• Conclusion or execution of a contract with the data subject or for the benefit of the data subject 
• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, to ensure safety, to manage risk, to enforce our rights, to defend ourselves against claims or to check possible conflicts of interest) 
• Consent (e.g. to send you marketing information) 

 

Indirect data processing from service provision 

When we provide services to our customers, it may happen that we also process personal data that we have not collected directly from the data subjects or personal data from third parties. These third parties are usually employees, contact persons or people who have a relationship with the customers or the data subjects for other reasons. We need this personal data to fulfill contracts with our customers. We receive this personal data from our customers or from third parties commissioned by our customers. Third parties whose information we process for this purpose will be informed by our customers that we are processing their data. Our customers can refer to this data protection declaration. 

The personal data of people who have a relationship with our customers includes, in particular, the following information: 

• Contact information (e.g. last name, first name, address, telephone number, email, other contact information, marketing data) 
• Personal information (e.g. date of birth, nationality, marital status, profession, title, job title, etc.) 

We process this personal data for the purposes described based on the following legal bases: 

• Conclusion or execution of a contract with the data subject or for the benefit of the data subject (e.g. when we carry out our contractual obligations) 
• Safeguarding legitimate interests, in particular our interest in providing optimal service to our customers. 

 

Use of our website 

In order to use our website, no personal data must be disclosed. However, with each call, the server records a series of user information, which is temporarily stored in the server's log files. 

When using this general information, there is no association with a specific person. The collection of this information or data is technically necessary to display our website and to ensure its stability and security. This information is also collected to improve the website and analyze its use. 

This particularly concerns the following information: 

• Contact information (e.g. last name, first name, address, telephone number, email) 
• Further information that you provide to us via the website 
• Technical information automatically transmitted to us or our service providers, information about user behavior or website settings (e.g. IP address, UDI, device type, browser, number of clicks on the page, opening the newsletter, clicking on links, etc. 

We process this personal data for the purposes described based on the following legal bases: 

• Safeguarding legitimate interests (e.g. for administrative purposes, to improve our quality, analyze data or publicize our services) 
• Consent (e.g. to the use of cookies or the newsletter) 

 

Newsletter usage 

If you subscribe to our newsletter, we will use your email address and other contact details to send you the newsletter. You can subscribe to our newsletter with your consent. Mandatory information for sending the newsletter is your full name and your email address, which we save after you register. The legal basis for the processing of your data in connection with our newsletter is your consent to sending the newsletter. You can revoke this at any time and unsubscribe from the newsletter. 

Participation in events 

If you take part in an event organized by us, we collect personal data in order to organize and carry out the event and, if necessary, to send you additional information afterwards. We also use your information to inform you about further events. We may photograph or film you at these events and we may publish this footage internally or externally. 

This particularly concerns the following information: 

• Contact information (e.g. last name, first name, address, telephone number, email) 
• Personal information (e.g. profession, function, title, employer company, eating habits) 
• Images or videos 
• Payment information (e.g. bank details) 

We process this personal data for the purposes described based on the following legal bases: 

• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (enabling participation in the event) 
• Safeguarding legitimate interests (e.g. holding events, disseminating information about our event, providing services, efficient organization) 
• Consent (e.g. to send you marketing information or create images) 

 

Direct communication and visits 

If you contact us (e.g. via telephone, email or chat) or we contact you, we will process the necessary personal data. We also process this personal data when you visit us. In this case, you may be required to leave your contact details before your visit or at reception. We keep these for a certain period of time to protect our infrastructure and information. 

To conduct telephone conferences, online meetings, video conferences and/or webinars (“online meetings”), we use the “Microsoft Teams” service or list the video conference service providers you use 

We process the following information in particular: 

• Contact information (e.g. last name, first name, address, telephone number, email) 
• Marginal data for communication (e.g. IP address, duration of communication, communication channel) 
• Recordings of conversations, e.g. during video conferences 

Other information that the user uploads, provides or creates while using the video conferencing service, as well as metadata used to maintain the service provided. Additional information about the processing of personal data by Microsoft Teams can be found in their privacy policies. 

• Personal information (e.g. profession, function, title, employer company) 
• Time and reason for the visit 
• We process this personal data for the purposes described based on the following legal bases: 
• Fulfillment of a contractual obligation with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement (provision of a service) 

• Safeguarding legitimate interests (e.g. security, traceability and processing and administration of customer relationships) 

 

Applications 

You can submit your application for a position with us using the email address provided on our website. The application documents and all personal data provided to us will be treated as strictly confidential, will not be disclosed to any third parties and will only be processed for the purpose of processing your application for employment with us. Without your consent to the contrary, your application dossier will either be sent back to you or deleted/destroyed after the application process has been completed, unless it is subject to a legal retention requirement. The legal basis for processing your data is your consent, the fulfillment of the contract with you and our legitimate interests. 

• We process the following information in particular: 
• Contact information (e.g. last name, first name, address, telephone number, email) 
• Personal information (e.g. profession, function, title, employer company) 
• Application documents (e.g. letter of motivation, references, diplomas, CV) 
• Assessment information (e.g. assessment of HR consultants, reference information, assessments) 

 

We process this personal data for the purposes described based on the following legal bases: 

• Safeguarding legitimate interests (e.g. hiring new employees) 
• Consent 

 

Suppliers, service providers, other contractual partners 

If we enter into a contract with you to provide a service for us, we process personal data about you or your employees. We need this to communicate with you and use your services.  

We process the following information in particular: 

• Contact information (e.g. last name, first name, address, telephone number, email) 
• Personal information (e.g. profession, function, title, employer company) 
• Financial information (e.g. data on bank details) 

We process this personal data for the purposes described based on the following legal bases: 

• Conclusion or execution of a contract with the data subject or for the benefit of the data subject, including contract initiation and possible enforcement 
• Safeguarding legitimate interests (e.g. avoiding conflicts of interest, protecting the company, enforcing legal claims)

 

Tracking technologies

We use cookies on our website. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. 

The cookie stores information that arises in connection with the specific end device used. However, this does not mean that we receive direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our site. 

In addition, to optimize user-friendliness, we also use temporary cookies that are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically be recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. 

The data processed by cookies is necessary for the stated purposes. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all functions of our website.

Web analytics

In order to obtain information about the use of our website, to improve our Internet offering and to be able to address you with advertising on third-party websites or on social media, we use the following web analysis tools and re-targeting technologies: Google Analytics . 

These tools are provided by third parties. As a rule, the information collected for this purpose about the use of a website is transmitted to the third-party server through the use of cookies or similar technologies. Depending on the third-party provider, these servers are located abroad. 

The data is usually transmitted by shortening the IP addresses, which prevents the identification of individual devices. A transfer of this information by third parties only takes place due to legal regulations or as part of order data processing. 

Google Analytics 

We use Google Analytics, the web analysis service provided by Google LLC, Mountain View, California, USA, on our websites; Google Limited Ireland (“Google”) is responsible for Europe. To deactivate Google Analytics, Google provides a browser plug-in at https://tools.google.com/dlpage/gaoptout?hl=de. Google Analytics uses cookies. These are small text files that make it possible to store specific, user-related information on the user's device. These enable Google to analyze the use of our website. The information collected by the cookie about the use of our pages (including your IP address) is usually transmitted to a Google server in the USA and stored there. We would like to point out that on this website Google Analytics includes the code “gat._anonymizeIp();” has been expanded to ensure anonymized collection of IP addresses (so-called IP masking). If anonymization is active, Google shortens IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area, which is why no conclusions can be drawn about your identity. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google may associate your IP address with other Google data. For data transfers to the USA, Google has committed to signing and complying with the EU Standard Contractual Clauses.  

Google Maps 

On our website we use Google Maps (API) from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Google Limited Ireland, “Google”) is responsible for Europe. Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, you will be shown our location and any journey will be made easier. When you access the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. 

For data transfers to the USA, Google has committed to signing and complying with the EU Standard Contractual Clauses. 

Social media plugins 

We use the social plug-ins below on our website to make our company better known. The underlying advertising purpose is to be viewed as a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The responsibility for data protection-compliant operation must be ensured by the respective provider. The data processing in connection with these plug-ins takes place with your consent when you use these plug-ins. 

If you use the services of these social networks independently or in connection with our website, the social networks evaluate your use of the plug-in. In this case, information is forwarded to the social networks via the plug-in. 

1. a) Instagram

Our website uses the Instagram social network plug-in, which is offered by Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA. 

The data is only sent to the social media provider when the user activates the social media plug-ins by clicking on the selected plug-in. So the user can choose when they want to activate it. In this case, Facebook can establish a direct connection with the user during your visit to the website, which allows Facebook to know the user's visit and analyze the corresponding information. Further processing of personal data is the responsibility of Facebook in accordance with data protection laws and the data protection guidelines published on its website (https://help.instagram.com/ 519522125107875/?helpref=hc_fnav&bc[0]=Instagram help area&bc[1]=Guidelines and messages). Please read the privacy statements of your social networks carefully for detailed information about the collection and transfer of personal data, your rights and how you can achieve satisfactory data protection settings.https://help.instagram.com/ 519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20 Meldungen). Bitte lesen Sie die Datenschutzerklärungen Ihrer sozialen Netzwerke sorgfältig durch, um detaillierte Informationen über die Erhebung und Übermittlung personenbezogener Daten, Ihre Rechte, und wie Sie zufriedenstellende Datenschutzeinstellungen erreichen können, zu erhalten.  

1. b) LinkedIn

Plugins from the social network LinkedIn Corporation, 1000 West Maude Avenue Sunnyvale, California 94085, USA, are installed on our website. You can recognize the LinkedIn plug-in (“LinkedIn Recommended” button) by the LinkedIn logo. When you access a page on our website that contains such a plug-in, a direct connection is established between your browser and the LinkedIn server. LinkedIn thereby receives the information that you have visited our site with your IP address. If you click the LinkedIn button while you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This allows LinkedIn to assign your visit to our pages to your user account. We would like to point out that, as providers of the pages, we have no knowledge of the content of the data transmitted or how it is used by LinkedIn. Further information can be found at: www.linkedin.com/legal/privacy-policy. www.linkedin.com/legal/privacy-policy.   

1. c) XING

Plug-ins from the social network XING, which is operated by New Work SE, at Strandkai 1, 20457 Hamburg, are installed on our website. You can recognize the LinkedIn plug-in (“XING” button) by the XING logo. When you access a page on our website that contains such a plug-in, a direct connection is established between your browser and the XING server. LinkedIn thereby receives the information that you have visited our site with your IP address. If you click the XING button while you are logged into your XING account, you can link the content of our pages to your XING profile. This allows XING to assign your visit to our pages to your user account. We would like to point out that, as providers of the pages, we have no knowledge of the content of the data transmitted or how it is used by XING. Further information can be found at: www.xing.com/app/share?op=data_protection. www.xing.com/app/share?op=data_protection. 

Data sharing and data transmission

We only pass on your data to third parties if this is necessary to provide our services, if these third parties provide a service for us, if we are legally or officially obliged to do so or if we have an overriding interest in passing on the personal data. We will also pass on personal data to third parties if you have given your consent or requested us to do so. 

The following categories of recipients may receive personal data from us: 

• Candidates as part of a collaboration 
• Service providers (e.g. IT service providers, hosting providers, suppliers, consultants, trustees, insurance companies, lawyers) 
• Third parties within the scope of our legal or contractual obligations 

We conclude contracts with service providers who process personal data on our behalf that oblige them to guarantee data protection. The majority of our service providers are located in Switzerland or the EU/EEA. Certain personal data may also be transferred to the USA (e.g. Google Analytics data) or, in exceptional cases, to other countries worldwide. If data transfer to other countries that do not have an adequate level of data protection is necessary, this will take place on the basis of the EU standard contractual clauses (e.g. in the case of Google) or other suitable instruments).

Duration of retention of personal data

We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations or for other purposes pursued by the processing, i.e. for example for the duration of the entire business relationship (from initiation, processing to termination of a contract) as well as in accordance with the legal retention and documentation obligations. It is possible for personal data to be retained for the period in which claims can be asserted against our company (i.e. in particular during the statutory limitation period) and to the extent that we are otherwise legally obliged to do so or legitimate business interests require this (e.g. for evidentiary and documentation purposes). As soon as your personal data is no longer required for the purposes mentioned above, it will generally be deleted as far as possible. 

Data security

We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymization and controls.  

Doris Fink Recruiting & Consulting GmbH may use third parties as data processors to collect and process your personal data. The data processors we commission will only process your personal data in accordance with our instructions and are legally obliged to take strict security precautions when handling personal data. 
Unfortunately, the transmission of information over the Internet is not entirely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our website; any transmission is at your own risk. For this reason, you are free at any time to transmit your personal data to us by other means, e.g. by telephone. Once we have received your data, we use strict procedures and strict security measures to prevent unauthorized access.

Obligation to provide personal data

As part of our business relationship, you must provide the personal data that is necessary for the establishment and implementation of a business relationship and the fulfillment of the associated contractual obligations (you generally do not have a legal obligation to provide us with data). Without this data we will not be able to conclude or process a contract with you. The website cannot be used if certain information to ensure data traffic (such as IP address) is not disclosed.

Your rights

In connection with our processing of personal data, you have the following rights: 

• Right to information about your personal data stored by us, the purpose of processing, the origin and recipients or categories of recipients to whom personal data is passed on 
• Right to rectification if your data is incorrect or incomplete 
• Right to restrict the processing of your personal data 
• Right to request the deletion of the processed personal data 
• Right to data portability 
• Right to object to data processing or to revoke consent to the processing of personal data at any time without giving reasons 
• Right to complain to a competent supervisory authority, if provided for by law 

Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (to the extent that we are entitled to rely on this) or use them for the assertion of requirements. If you incur any costs, we will inform you in advance.

Changes to the privacy policy

We expressly reserve the right to change this data protection declaration at any time.