CAPITALENT is committed to protecting personal data as well as sensitive personal data in accordance with applicable data protection law. This privacy statement explains how we collect and process data.
1. Who is responsible for data processing on this website?
CAPITALENT GmbH is responsible for the processing of your personal data on this website. Please refer to the imprint for more information on the controller and contact options.
The controller has appointed a data protection officer who can be contacted via: firstname.lastname@example.org
2. What data do we collect on this website?
2.1 Technical data when visiting the website
When you visit our website, the browser on your device automatically sends data to the server of our website. The server temporarily stores this information in a log file. This concerns in particular the following data:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the accessed file
- Amount of data transferred
- Access status (file transferred, file not found, etc.)
- Browser and operating system used
- Provider of the user's internet access
- Website from which the access is made.
2.2 Tracking and cookies
2.3 When you contact us
You have the opportunity to contact us in order to make use of our services or to obtain information about our services. In doing so, you sometimes provide us with personal data about yourself. In addition to contact data, this may also include information about your family situation, income situation and information we have compiled in relation to our services.
2.4 Data we collect about you
While providing our services, we also collect personal data about you from publicly available sources, such as professional social networks, publications, news portals or company websites.
3. For what purposes do we process your data and on what legal basis do we base the processing?
3.1 Technical data
We process technical data automatically collected during your visit to the website to enable the use of the website (connection establishment), system security and the technical administration of the network infrastructure. A comparison with other data or a transfer to third parties, even in extracts, does not take place. The legal basis is the protection of our legitimate interests in accordance with Art. 6(1)(f) GDPR. Our legitimate interest is the provision of a fast, user-friendly and secure website.
3.2 Tracking and cookie data
3.3 Data transmitted by you
Insofar as you transmit personal data to us in connection with our services, we process this data for the conclusion of a contract with you or to fulfill our contractual obligations to you in the context of personnel services according to Art. 6(1)(b) GDPR.
Insofar as you transmit data to us that is not related to our personnel services, you consent to the processing of your data by us when transmitting it. In this case, we process the data on the basis of your according to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future, for example by contacting us via the e-mail address in the imprint.
3.4 Data we collect about you
When we collect personal data about you, we process it in order to fulfill our contractual obligations to you within the scope of our personnel services according to Art 6(1)(a) GDPR.
3.5 Legitimate interests
In addition, we may process your personal data to protect our legitimate interests, provided that no conflicting interests on your part prevail. This may occur, for example, to document the services we have provided or to assert or defend against possible legal claims.
4.1 Necessary cookies
The use of necessary cookies is done to provide the website secure and user-friendly. If you want to use the website without the benefits of our necessary cookies, you can read in the help function of your browser how to set your browser to prevent it from accepting new cookies or deleting existing cookies. There you can also find out how to block your browser from accepting all new cookies or what settings you need to make in order to receive a notification of new cookies.
4.2 Statistical / Analytical Cookies
We only use statistical and analytical cookies if you have given us your consent to do so via the cookie banner when you first visit our website. The purpose of these cookies is to analyze your behavior on the website in order to optimize the website and adapt it according to the wishes of the users.
We use the following statistical / analytical cookies from Google LLC on our website to use the Google Analytics service:
- _ga (to identify individual users; duration 2 years),
- _gat (to protect against a too high request rate; duration 1 minute),
- _gid (to identify individual users; duration 1 day).
5. Google Analytics
The information generated by the cookie about the use of the website is usually transmitted to and stored by Google on servers in the United States. We have extended Google Analytics by the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (so-called IP masking). This means that the IP addresses of users are shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In this way, the full IP address is only transmitted to a Google server in the USA in exceptional cases and shortened there. In these cases, Google secures the data transfer by concluding EU standard contractual clauses.
Google uses this information to evaluate the use of the website by users, to compile reports on website activity and to provide us with other services related to website and internet usage. According to Google, the IP address transmitted by a user's browser as part of Google Analytics is not merged with other Google data. However, we do not have a precise insight into how Google processes your data.
6. Data transfer to third parties
Within the controller, your data will be processed by those departments that require it in order to fulfill our contractual and legal obligations.
If we are legally obligated to do so, we may have to transfer your data to authorities or courts. In this case, this data transfer is justified according to Art. 6(1)(c) GDPR.
As described in section 5, we also transfer some personal data to Google as part of Google Analytics.
In addition, we may transfer your personal data to companies affiliated with us pursuant to Sec. 15 et seq. German Stock Corporation Act (Aktiengesetz), which work closely with us and support us in the fulfillment of contractual obligations and in marketing.
In the course of fulfilling our contractual obligations, and after consultation with you, we may also transfer your personal data to business partners, customers or service providers cooperating with us (for example, for the purpose of presenting you as a candidate to one of our customers). Under certain circumstances, these service providers may be located in a third country outside the European Economic Area, which has a lower level of protection for personal data.
Furthermore, we use service providers from the categories of IT service; website hosting, website design and writing services. The service providers work exclusively in accordance with our instructions, which we ensure through strict contractual regulations according to Art. 28(3) GDPR, through technical and organizational measures and through supplementary controls.
7. Use of videotelephony
We also use Microsoft Teams ("Teams") videotelephony solutions to conduct interviews, appointments, and presentations. In doing so, we will enter your personal data to be processed by teams for the use of the videotelephony solution. The processing of your personal data is based on your consent (Art. 6 para. 1 lit. a) DSGVO). Among the data processed are your name, email address, and meeting details (e.g. date, time, meeting ID, phone numbers, location).
To use Teams, you must accept the appropriate cookies, which are necessary for Teams to function. In addition, we have agreements with Teams as is required by data protection law. Conversations conducted via Teams are not recorded.
For more information, see Microsoft Teams – Privacy - Microsoft Teams | Microsoft Docs.
8. How long will my data be stored?
We store personal data for as long as it is required or permitted by law, or is necessary to provide the service you have requested, or is specified in a corresponding consent, or until a consent on which we based the processing has been revoked.
9. What rights do I have?
You may at any time and free of charge request information about the scope, origin and recipients of the stored data as well as the purpose of storage; in addition, you have the right to rectification, deletion or restriction of the processing of your data, the right to object to processing and the right to data portability in accordance with the provisions of data protection law.
You also have the right to complain to a competent supervisory authority. The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information.
If you have any questions about your rights or wish to assert them, please feel free to send us an email: email@example.com.
10. How long is this privacy statement valid?