- for what type of activities we process data and when
- what types of data we process and the purposes for processing
- who will receive the data
- what your rights are associated with our processing of your data.
The transmission of information to or from this website is secured with TLS encryption.
I. Contact Information
Responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):
20457 Hamburg, Germany
ICO Registration Number: A8927111
Further information can be found in the Site notice section of this website.
For additional support, we have appointed a Data Protection Officer (DPO), who can be contacted at: firstname.lastname@example.org.
II. General Information on Data Processing
1. Collecting and processing personal data
The service of providing this website requires the processing of various types of information. Furthermore, the scope of data processing depends on your use of the functionalities of the website, e.g. whether you register in the job portal, communicate with us via the contact form or consent to the processing of data.
You are not required to provide us with personal data. However, if the provision of data is technically required when you access our site, refusal will result in your being unable to access and use our website.
As a visitor to our websites, you are not subject to any automated decision-making within the meaning of Art. 22 GDPR.
2. Legal basis for the processing of personal data
The legal basis for the processing of personal data is explained in the following section.
|Reason for processing||Legal basis as per GDPR||Comments|
|Contract fulfillment or precontractual activities||Art. 6 para. 1 b)||Processing will only take place to the extent necessary to carry out and exercise the rights and obligations arising from the contract. Unless expressly stated otherwise, data will only be processed by us to this extent.|
|Consent||Art. 6 para. 1 a)||The data will be processed if you have expressly consented to the type and scope of data processing in question. You may withdraw your consent at any time going forward. However, this will not affect what has already been processed up until that point in time.|
|Legal obligation||Art. 6 para. 1 c)||Processing will occur to the extent it is necessary to fulfill German or European statutory requirements.|
3. Data deletion and duration of storage
If there is no longer a legal basis for processing your data, it will be deleted. In some cases, however, a legal basis may exist in a separate arena, or, a rationale that is no longer applicable may be replaced by a new one, e.g. the obligation to retain certain data as a statutory record keeping requirement.
III. Data Processing for the Provision of Services Associated with this Website
In order to set up a fully functionable website for you, it is necessary to process certain types of information. This happens each time you visit our website. In addition, we offer various functionalities on our website which require additional data processing.
1. Log Files
When you visit our website, information about your visit is stored on our servers (so-called log files). The data stored include your IP address which we treat as personal data. In addition, the following data is collected:
- Date and time of the server request
- Browser type and version
- Operating system/version
- Retrieved data volume
- Http Response Code
- URL retrieved
- Web server process ID
The data cannot be merged with any other data sources. The storage of log files including your IP address serves the legitimate interest of providing our website and preventing its misuse. Stored log files shall be deleted after 70 days at the latest, unless longer storage is necessary, for example, to fend off or investigate an attack on our website.
2. Cookies required for technical reasons
The use of technically required cookies and the associated data processing springs from our legitimate interest in providing you with a website that has a solid architecture and is easy to use. Technically required cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The following technically required cookies are used on our website:
|Cookies||Data collected||Storage period||Purpose|
|Localization cookie||cityName, countryCode, countryName, currency, latitude, locale, longitude, radiusRangeList (for searching), radiusUnit (for searching), regionName, timezoneName, timezoneOffset, version, worldRegion||1 year||For correct display and processing of localized content (language, units, currency, etc.)|
|Known user cookie||UserID (hashed), if user has a user account||1 year||User recognition|
|Server ID cookie||Web server on which session is running||Session||Directing all requests to the same web server|
|Session Cookie||Session ID||Session||Receipt of session, technical implementation of website.|
|Cloudflare cfduid Cookie||Cloudflare Id||1 year||Use of the Cloudflare content delivery network|
|JobLeadsUserAutoLogin Cookie||UserID (hashed)||1 month||Automatic login (if enabled by user)|
How long persistent cookies are stored is determined by the provider and can also be checked by you in your browser.
3. Registration with JobLeads
Access to this website’s basic functionalities and the job portal always requires registration. The scope of data to be provided during registration can vary in detail. Mandatory fields are clearly marked. The following data must always be provided: Last name, first name, email address, gender and a password to be selected: The data processing in question has its legal basis in the necessity to initiate and fulfill the services offered on this platform. The data processing in question has its legal basis in the necessity to initiate and fulfill the services offered on this platform.
4. Application via JobLeads
Once you have registered, you may add various other personal information to your profile and upload documents such as CV and certificates to complete it. Any additional information is provided voluntarily. Your data will be processed accordingly on the basis of your consent.
We use your required and voluntary additional information exclusively for purposes of providing the job portal and its functionalities. This also applies to data that you enter in the uploaded documents. You may define the visibility of your data in the settings of your profile. If you share your information as part of an application or make it publicly visible in your profile, we will transmit it accordingly or present it in such a way that it can be viewed by these users. Publicly visible data may also be accessed by headhunters or other recruiters for recruitment purposes. Your data cannot be viewed by third parties outside the job portal.
If you use the portal’s “Apply” function to apply to a job ad, we will only share your application documents with the respective employer. In all other cases, the data is collected directly via a frame by the employer or the service provider used for the candidate search.
As a rule, the legal basis for the processing of your data is the necessity to fulfill our contractual obligations. If you submit an application independently, the legal basis consists of your consent to share your data.
5. Resume review by TopCV
6. Applying for positions via JobLeads
The website https://www.jobleads.company/ offers you the option to apply directly to positions via JobLeads.
In order to manage applicants, we require your contact data (first and last name, telephone number, email address), information on your education, details about your professional career, and skills. In some cases, information on your further education and training (resume and cover letter) is also required.
We process such data insofar as this is necessary in accordance with Art. 26 of the Federal Data Protection Act (BDSG) to carry out the application process or if you have given us your consent in accordance with Art. 6 (1) (a) GDPR. We may also be required to process the data as based on the legal provisions of Art. 6 (1) (c) GDPR.
The data of applicants who have not been offered employment shall be deleted after six months.
The data you submit as part of your application will be transmitted using TLS encryption and stored in a database. The database is operated by our service provider GREENHOUSE SOFTWARE, INC., 18 West 18th Street, 11th Floor, New York, NY 10011, USA. We have concluded an agreement for contract data processing with GREENHOUSE SOFTWARE, INC. in accordance with Art. 28 GDPR. Further information on GREENHOUSE SOFTWARE, INC. is available at: https://www.greenhouse.io/privacy-policy
GREENHOUSE SOFTWARE, INC. is located in the USA and is therefore based in a so-called “Third country” in accordance with Art. 44 GDPR.
7. Payment processing
8. Contact form
You may send us an inquiry at any time using the various contact forms on our website. To facilitate your inquiry, we request that you submit the following information: Email address, subject and content of your request (if you contact our sales team, also include: industry). The information is marked as mandatory fields. The provision of any other data you transmit to us as part of the inquiry, also via free text field or in documents uploaded and attached to your inquiry, is voluntary.
We use this data exclusively to respond to your inquiry and to facilitate associated communications. The legal basis of this type of data processing depends on the content of your request. As a rule, our legitimate interest in providing contact functionality and responding to your inquiry by using the transmitted data applies here. If your request is aimed at entering into a contract with us, any processing is based on the extent of this precontractual obligation.
Your data will be deleted as soon as your request has been processed. In the event of a contract being entered into, we may conduct additional processing to fulfill our contractual obligation.
9. Email notifications/Newsletters
An essential component of our services offered on the job portal is to notify you of interesting job opportunities. If you register, we will also use your email address to send you email notifications and newsletters informing you about suitable job opportunities and services offered by JobLeads. You can unsubscribe from these notifications at any time by clicking on the unsubscribe link at the bottom of each newsletter and in the notification settings in the “My Account” section of your account. You will not incur any additional costs. To the extent required for the processing of services offered on the job portal and for the provision of information about our own range of services, the legal basis for the processing of your data is our legitimate interest in maintaining and expanding existing usage arrangements.
10. Google Maps
On our website, we use the map service Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to show our location.
When you enter the page on which the Google map is integrated, our website sends various pieces of information including your IP address to Google USA where they will be stored on its servers. If you have a Google Account and are logged in at the time you visit our site, the information will be associated directly with your account. But even without a user account, Google will create a user profile about you. This happens regardless of whether Google provides a user account that you are logged in to or no such user account exists.
Our transfer of data to Google supports our legitimate interest in offering you the map function of Google Maps on our website.
More information about Google and the use of Google Maps can be found here:
- Google Terms of Service: http://www.google.de/intl/en/policies/terms/regional.html
- Google Maps/Google Earth Additional Terms of Service: https://www.google.com/intl/en_US/help/terms_maps.html
11. Google Fonts
The website www.jobleads.company uses so-called web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to display fonts.
When a page is loaded, your browser loads the requisite web fonts into your browser in order to display texts and fonts correctly. To do so, the browser you use connects to Google’s servers and then tells Google that our website was accessed via your IP address.
Google Fonts are used in the interest of a uniform and appealing presentation of our website. If your browser does not support Google Fonts or web fonts, a standard font from your terminal device will be used.
To permanently improve our performance, we constantly analyze our systems for errors and weak points. To do this we also use the Sentry service of Functional Software, Inc., 132 Hawthorne Street, San Francisco, California, USA ("Sentry"). When an error occurs, information is sent to Sentry, including the user who has encountered the error. As a rule, only one user ID is sent, but under certain circumstances the following data can also be transmitted to Sentry, some of which may also have personal reference:
- IP address
- Date and time of the server request
- Browser type / version
- Operating system / version
- Retrieved data volume
- HTTP Response Code
- URL retrieved
- Web server process ID
- Name or address of user
- User input in form fields
- Preferred Language
Data processing is based on our legitimate interest to detect problems and errors in our systems at an early stage, to fix them and thereby steadily increase the security of personal data. Your data will be deleted as soon as it is no longer needed to correct the error. The legal basis in this regard is Article 6 (1) (f) GDPR.
IV. Usage analysis and tracking
We would like to further improve the usability of this website and the appeal of our services. For this reason, we also collect data on usage behavior that we evaluate for this purpose when you visit our website. For this reason, the following tracking and analysis cookies are used on our website in addition to the technically required cookies described below.
1. Google (Universal) Analytics
This website uses Google Analytics, a web analysis service by Google. Using a cookie, Google collects information about your use of this website (including your IP address) in the USA and stores this information. We use Google Analytics exclusively using an anonymization feature. This means that, before transmitting it, Google will shorten the IP address of users within member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in rare cases will the full IP address be transmitted to a Google server in the USA and shortened there. Analyzing the information collected, Google sends us reports on usage activities on our website while providing us with additional services for this purpose. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.
In addition to your browser blocking all cookies, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting information from this website in the future. This opt-out cookie only works in this browser and only for this domain. If you want to delete your cookies in this browser, you must click the link again: Disable Google Analytics.
2. Google AdWords
Our website uses Google's AdWords advertising tool including its conversion and remarketing function.
The remarketing tool allows us to display targeted advertising on other websites you visit. For this purpose, Google analyses your use of our website and stores a corresponding ID in your browser. This ID allows us to assign you to a specific user group and to recognize you when you visit websites that are part of Google's advertising network. These websites can then display advertisements related to your use of our website. During this process, Google does not collect any personal data; you are assigned to a specific user group exclusively through your browser. The collected data is stored and processed in the USA.
We use conversion tracking to determine how successful advertising for our services is on other websites. To do this, a conversion cookie is set when you click on one of our ads. We use this cookie to recognize that you came to our site through this ad. With such usage statistics, we create statistics to evaluate the conversion of our ads. We do not obtain any personal information. The conversion cookie that is set in your browser is unique and cannot be used by other Google AdWords customers for their statistics.
You can prevent remarketing by deactivating the function at https://www.google.com/settings/ads/plugin.
JobLeads also uses Google's Doubleclick service. As part of this service, a cookie is set and a pseudonymous identification number (ID) is assigned to your browser. The cookie determines whether and which advertisements were displayed and clicked in your browser. This enables us to tailor your advertising even closer to your interests. Since we have activated Google's IP anonymization on this website, your IP address is also shortened within the scope of Doubleclick before being transmitted by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Analyzing the information it collects, Google sends us reports on usage activities on our website while providing us with additional services for this purpose. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.
In addition to the above-mentioned general options for preventing cookies, you can also prevent Google from saving the Doubleclick cookie by downloading a browser plugin. It is available here.
4. Facebook-Custom Audience
We use Facebook pixels on our websites. This pertains to the function of a web analysis service provided by Facebook. Facebook pixels are invisible graphic files built into our website. When you visit our website, information from the pixel is stored in your browser. This enables us to track which of our subpages you have visited. We share this information with Facebook to better match our ads there to your real interests and to analyze the effectiveness of our ads on Facebook. Depending on your use of our website, Facebook assigns you to certain groups of interested parties known as custom audiences. The information generated by the cookies are usually transferred to a Facebook server in the USA and stored there. Further information on how Facebook’s tracking pixel captures data is available at https://www.facebook.com/about/privacy/ or at https://business.facebook.com/pixels/tos/.
5. LinkedIn Insight tag
On our website we also use the Insight tag provided by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, represented by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland (“LinkedIn”). By doing this, a cookie is placed on your browser that allows for the collection of various data when accessing our website. Your IP address will also be collected and sent to LinkedIn. If you are an active member of LinkedIn, more information from your profile might be added.
The data is first encrypted at LinkedIn and anonymized within 7 days. LinkedIn does not share personal data with us, but only provides general reports on the use of our website. The data can also be used by LinkedIn for retargeting. This allows us to review the success of our advertising campaigns.
The anonymized data will be deleted by LinkedIn after 90 days. As a LinkedIn member, you can prevent LinkedIn from processing data to display ads in your account settings. Click on the following link to opt out of LinkedIn Retargeting:
Irrespective of this, you can generally object to the use of such cookies via various third-party sites, e.g.:
- Network advertising initiative: (http://optout.networkadvertising.org/)
- AboutAds: (http://www.aboutads.info/choices)
- YourOnlineChoices: (http://www.youronlinechoices.com/uk/your-ad-choices/)
The legal basis of our data processing activities for analytical purposes is our legitimate interest in obtaining a statistical analysis of your user activities in order to improve services and marketing of our website on an ongoing basis.
During your visit to our website, data processing for usage analysis only occurs until the time you withdraw your consent.
6. Bing Ads/Universal Event Tracking
Our website uses the Universal Event Tracking (UET) service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
UET is a mechanism that allows us to notify Microsoft Advertising of user activity on our website after a user has clicked on our ad. It enables us to determine the effectiveness of our advertising. According to Microsoft, no personal information on the user’s identity is shared in this process.
Further information on Microsoft’s Privacy Statement is available here: https://privacy.microsoft.com/en-us/privacystatement
V. Opt-out and deletion option
If any data processing is linked to your consent or legitimate interest, you have the right to object to the processing or to revoke your consent at any time. Your objection or revocation has forward-looking effect only. If the analytics cookies used carry their own technical options for deactivation, this is shown in the explanation above. You may at any time exercise your right of objection or revocation by contacting email@example.com. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons for protecting processing which outweigh your interests, rights and freedoms.
VI. Rights of the data subject
If personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As the data subject, you have the following rights with regard to your personal data. To exercise these rights, please contact us using the contact details above.
Right of access according to Art. 15 GDPR
You have a right of access to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.
Right to rectification according to Art. 16 GDPR
You have the right to correct incorrect personal data without delay and to amend incorrect personal data.
Right to erasure according to Art. 17 GDPR
You have the right to request the deletion of your personal data if one of the reasons mentioned in Art. 17 GDPR takes precedence, in particular if there is no longer a legal basis for the processing.
Right to restriction of processing according to Art. 18 GDPR
Instead of having your data deleted, you also have the right to demand that the processing of your personal data be restricted, if one of the reasons mentioned in Art. 18 GDPR prevails, especially if any restrictive action is triggered by your request.
Right to data portability according to Art. 20 GDPR
You have the right to access all personal data stored by us about you in a structured, current and machine-readable format and to share this data with another person authorized to handle it without obstruction by the person responsible to whom the personal data was originally provided.
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR
According to Art. 77 GDPR, you have the right to file a complaint with the appropriate authority in your jurisdiction.
VII. Recipients of data
Processing of your personal data within the context of providing this website and the job portal is in part carried out by contracted processors. In particular, this applies to payment processing, hosting of the website, maintenance and servicing of the IT systems, sending emails, answering user inquiries and the use of analytical tools. Such activities are included exclusively on the basis of a supplemental agreement to an order agreement in accordance with Art. 28 para. 3 GDPR.
VIII. Data transfer to third countries
The personal data we collect from you through the website will not generally be transferred to third countries outside the European Economic Area.
In the exceptional cases described above and when Google Analytics and Google Fonts are used, your IP address may first be shortened after transmission to Google. When using Google Maps, your IP address will also be transmitted.
The use of Facebook Custom Audience and the LinkedIn Insight tag also result in the transmission of data to Facebook in the USA. Google, Facebook and LinkedIn are domiciled in the USA and thus in a so-called "third country" according to Art. 44 GDPR.
In each case, these transfers are carried out based on standard contractual clauses in accordance with Art. 46 (2) (C) GDPR.
The transfer to the US-based TopCV is carried out on the basis of your express consent in accordance with Art. 49 (1) (A) GDPR after you have been informed of the possible risks of such transfers associated with you due to the absence of an adequacy decision and appropriate safeguards.
IX. Social Media Pages
We operate our own pages on the social networks Facebook, LinkedIn, Twitter, and Xing. These networks process your personal data, for example, to create user profiles which match your interests. Cookies may be stored on your device for this purpose. In-depth information on how the individual networks process data can be found in the networks’ respective privacy policies and, if applicable, cookie policies:https://www.facebook.com/about/privacy/
In addition, these privacy policies contain information about what type and scope of data is processed by the respective networks as well as the options available to you to assert your rights as a data subject (right of access, right of confirmation, right to rectification, right to erasure, right to restriction of processing, right to data portability, and right to lodge a complaint with the supervisory responsible for data protection).
We do not know which user data is processed by the social networks. We are not granted full access to collected user data or user profiles. We are only able to access public profile information. You can change the information that is made available to the public by making adjustments in your account settings.
If available, we utilize user data from the chat functions to answer your questions. We use the collected customer data to contact the user and provide the information and offers which have been requested.
Based on the legitimate interest to use our site, social networks may send us anonymous statistics, such as on
- Followers: number of people following us – including growth and development over a defined period of time.
- Reach: number of persons who have viewed a specific post. Number of interactions with a post. This allows you, for example, to determine what content does better in the community as other content.
- Advertising performance: how many people viewed and interacted with an ad or post.
- Demographic: average age of visitors, gender, place of residence, language, industry.
These statistics are used to continuously improve our online content and to better serve our users’ interests. We are not able to link the statistical data with the profiles of our fans or individual users. You can use your account settings on social networks to decide what type of targeted advertising you would like displayed to you.
Special information on Facebook
Alongside Facebook, we are responsible for operating the Facebook fan page in accordance with data protection law. The data controller in Europe is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Shared responsibility is outlined on Facebook’s page "Information about Page Insights" which is available at https://www.facebook.com/legal/terms/page_controller_addendum. Further information on the processing of Page Insights data is provided at https://www.facebook.com/legal/terms/information_about_page_insights_data.
Under certain circumstances, data may be processed outside Europe by Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
Special information on LinkedIn
Alongside LinkedIn we are responsible operating the company page on LinkedIn in accordance with data protection law. The data controller in Europe is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Shared responsibility is outlined on the “Page Insights Joint Controller Addendum” which is available at : https://legal.linkedin.com/pages-joint-controller-addendum.
Under certain circumstances, data may be processed outside Europe by LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA.
Version: April 2021