Data protection information when using our website karriere.hypoport.de

We treat the protection of your personal data with great responsibility. The collection, processing and use of your personal data are performed in accordance with the legal provisions, the applicable data protection laws, and in particular with the General Data Protection Regulation of the European Union. The following statement will familiarize you with the manner in which we guarantee the protection of your personal data, with the types of data being collected as well as with the purposes of such collection.
Personal data comprise information that refers to an identified or identifiable person. This primarily includes information that allows making inferences about your identity, such as your name, phone number, address or email address. The statistical data that we collect, for instance, when you visit our website, cannot be related to your identity and therefore do not fit into the concept of personal information.
Data processing is the responsibility of Hypoport SE, Heidestraße 8 D-10557 Berlin.
You can find our full contact details here
You can contact Hypoport SE’s Data Protection Officer at: datenschutz (at) hypoport.de.

Data processing on the website

Information purposes when visiting the website

Every time you use our website, we collect the access data that your browser automatically transmits to allow your visit to the website. Access data more specifically include:

• IP address of the requesting device;
• date and time of the request;
• address of the website being accessed as well as that of the requesting website;
• information about the browser and operating system being used;
• online identifiers (e.g., device identifiers, session IDs)

The information processing of such access data is required to allow a visit to the website and to guarantee the continuous functionality and security of our systems. The legal basis for such data processing is set forth in Article 6 (1) (1) (b) of the General Data Protection Regulation (GDPR).

In addition, for the aforementioned purposes, access data is temporarily stored in internal logs to generate statistical information about the use of our website, to further develop our website in view of the habits of use by our visitors (e.g., increasing the relative share of mobile devices used for log into the pages) and in general for the administration of our website. The legal basis for this data processing is set forth in Article 6 (1) (f) of GDRP, taking into consideration our justified interest in the appropriate optimization of our website

The information stored in the log files does not allow us to draw direct conclusions about you in person – in particular, after 7 days, we only keep the IP addresses in abridged, anonymous form. Log files are stored for 30 days and archived after subsequent anonymization.

Contact and application process

There are several ways to contact us: this can be done via email or phone call. In this case, as well, we process data solely for the purpose of communicating with you. The legal basis therefor is contained in Article 6 (1) (b) of GDRP , if the contact is established in order to initiate a contract. Otherwise your question will be answered in our mutual interest in accordance with Article 6 (1) (f) of GDRP. The information we collect when you contact us will be automatically deleted once your request has been fully processed, unless we still need the information submitted on your part in order to fulfill contractual, pre-contractual or legal obligations (please refer to Storage Period section)

We process data of applicants solely for the set purpose and as a part of the application process in accordance with the requirements laid down by the law. The processing of the applicant’s data is performed in order to fulfill our (pre) contractual obligations within the application process within the meaning of Article 6 (1) (b) of GDRP  and Article 6 (1) (f) of GDRP, for instance, if data processing proves necessary for us in relation to a litigation (§26 of the Federal Law on Personal Data Protection also applies in Germany).

When you provide us with personal information as a part of the application process, these will be separated in the process of collecting, processing and / or using the following types and categories of data:

• personal data (name and surname, date of birth, address, education);
• contact information (fixed line and mobile phone numbers, fax number, email address)
• information obtained from third parties, such as directory websites or public registers);
• data regarding the qualification and assessment within the application process;
• education data (school, vocational training, civilian / military service, study, PhD study)
• data about previous professional careers, diplomas and job letters of reference;
• information on other qualifications (e.g., language skills, computer skills, volunteering activities)
• a photo;
• information on the desired salary;
• application history;
• data voluntarily provided to us on your part within the application process by additional uploading or submitting same via other means.

The priority legal basis therefor is provided for under Article 6 (1) (b) of GDRP and § 26 para. 1 of the Federal Law on Personal Data Protection. The processing of special categories of personal data is based on your consent in compliance with Article 9 (2) (a) of GDRP

Processing of requests

The company Softgarden e-Recruiting GmbH (softgarden), Tauentzinstrasse 14, 10789 Berlin provides the software for application data processing. The softgarden company processes the data on our behalf.

The data protection officer of softgarden e-Recruiting GmbH is:

Marco Tessendorf, procado Consulting, IT – & Medienservice GmbH, Warschauer Straße 58a, 10243 Berlin

Email: eDSB@procado.de

 

Processing of request data by softgarden e-Recruiting GmbH Career Portal

Talent pool

If you choose to be included in the Talent Pool, the entire company may be granted access to your personal data when there are open job positions available. You may join the talent pool by accepting the talent recruitment invitation. You may leave the talent pool at any time. Send a message to your Recruiting Partner or to the email address specified above.

Applicant satisfaction survey

We would like to establish the satisfaction of our applicants with the application process. You will receive an email from us at the end of the application process irrespective of the outcome of your application. We do not use personalized links for participation and will only require minimal information about your application. We assess the results only based on average values, and the assessment always includes at least four participants. If you do not want to participate in the survey, send a message to your Recruiting Partner or to the address specified above.

Cookies and web analytics

Some of our services require us to use cookies. A cookie is a small text file that is stored on your device through the browser. Cookies are not used to run programs or upload viruses to your computer.

In fact, the main purpose of our own cookies is to provide a customized offer and to save a maximum amount of your time when you use our services.

More specifically, we use our own cookies:

• for load distribution;
• to record that you have been shown information placed on our website so as to prevent its reappearance the next time you visit the website;
• to temporarily store records that you have made on our website in case you reload the page.

In such a way, we want to provide you with the opportunity to use our website in a more convenient and personalized manner. These services are based on our legitimate interests described above and as the legal grounds thereof is set forth in Article 6 (1) (f) of GDRP

You may prevent the saving of cookies by refusing to accept cookies through this website in your browser settings. Failure to accept cookies may, in individual cases, result in significant functional restrictions on our website

We also use cookies and related technologies (such as web beacons) from partners for the purposes of analytics and marketing. The legal basis for the processing of the data described in the following sections is Article 6 (1) (f) of GDRP  and is based on our legitimate interest in continuous optimization of our website through a design that is customized subject to the particular needs.

Google services

Our Website uses various services from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA („Google“). Data generated within this context may be transmitted by Google to a server in the USA for evaluation and may be stored there. In cases where personal data are transferred to the United States, Google complies with the EU-U.S. Privacy Shield

If you use a Google Account, depending on the settings stored in the latter, Google may relate the data collected as a part of the Services, in particular your browser history for web visits and applications used with your Google Account, to information from your Google Account in order to personalize ads. If you do not want this identification through your Google Account, you must sign out of Google before visiting our contact page

You may find further information in that regard in Google’s privacy policy.

Google Analytics – systematic computational analysis of data or statistical arrays

Google Analytics uses cookies and similar technologies in order to analyze and enhance our website based on your user behaviour. Within this process however, your IP address will be abridged before the review of statistical data about usage so as to prevent the drawing of any conclusions about your identity. For that purpose, Google Analytics has been expanded on our website with the code „anonymizeIP“ to ensure anonymous coverage of IP addresses.

Google will process the information obtained via cookies in order to analyze website usage, to draw up activity reports regarding website visits for the website operator, and to provide other services related to the use of the website and the Internet.

You may configure your browser to reject cookies or to the recording of data generated  via cookies and related to the use of our websites by changing the cookie settings in the Google Privacy Statement. In addition, you may also prevent Google from processing such data by downloading and installing the browser add-on provided by Google (the latter does not function on mobile devices).

YouTube

On our website we have integrated videos that are stored on YouTube and can be played directly in our site. YouTube is a service of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, United States; „Google“). We embed videos in such a manner that Google receives the information that you have watched the video on our website only when you play it, not when you visit our site. This happens whether or not you are logged in to your Google or your YouTube account. If you are logged in, the video playback information will be assigned directly to your Google Account and your YouTube account. If you do not wish this, you must log out before playing the video. Google stores your data and possibly uses it for advertising, marketing, and website design purposes, as needed. Such analysis is performed even for users who are not logged in. As explained here in above, you may configure your browser in such a manner as to reject cookies, or you may prevent the collection of cookie-related data when using this website and the processing of this data by Google by going to Google Ads Settings and by disabling the „Customized Web Advertising“ button. In this case, Google will only show general advertising, also in respect of YouTube, which has not been selected based on the information collected for you.

Google processes your data also in the USA, and therefore accordingly offers guarantees in the form of an EU-US Privacy Shield certification that ensure the compliance with European data protection principles. The legal basis for integrating YouTube and related data processing is set forth under Article 6 (1) (f) of GDRP, based on our legitimate interest in integrating videos and images to render our website more attractive.

Links to other websites and online offers

Our website may refer the users to websites and online offers of third parties who are not associated with us. If you click on these links, we certainly no longer have any influence on what data are collected by the respective provider and what data are recorded by such provider. You may find detailed information on the collection and use of data in the privacy statement of the respective provider. As the collection and processing of data from third parties falls beyond our control, we do not accept any responsibility in that regard.

Social media

Twitter Feed and Follow Plugin

The functions of Twitter service are integrated into our website. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. With the use of Twitter and the „Re-Tweet“ function, the websites you visit already connect to your Twitter account and become known to other users. Data are also transmitted to Twitter as well. We would like to emphasize that as a website provider we do not have any knowledge about the content of the data being transmitted or about the manner of its usage by Twitter. Further information can be found in the Twitter Privacy Statement at: https://twitter.com/en/privacy.

You may change your Twitter data settings in your account settings at: https://twitter.com/settings/personalization and https://twitter.com/settings/your_twitter_data.

Data disclosure

Your personal data will be known only to persons who participate in the application process and in the subsequent implementation of the employment relationship. Your data will only be used by Hypoport group (you may find a list of the companies that are part of the group at https://www.hypoport.com/company-profile/). All employees to whom the processing of data is assigned are required to keep confidentiality in respect of your data.

The data that we collect will be disclosed only:

• pursuant to Article 6 (1) (f) of GDRP , you have provided your explicit consent for that;
• pursuant to Article 6 (1) (f) of GDRP, the disclosure is required for the purpose of lodging, pursuing or defending legal claims, in respect of which there is no reasonable assumption that you have a priority legal interest in not disclosing your data;
• pursuant to Article 6 (1) (c) of GDRP , we are obliged to disclose such data; or
• pursuant to Article 6 (1) (b) of GDRP the data are necessary for fulfilment of contractual relations with you or for implementation of pre-contractual measures to be carried out at your request; in particular, this may be the case when applying for a position with our franchise partners

A part of the processing may be carried out by our service providers. In addition to the service providers mentioned in this privacy statement, the data centres that store our website and our databases, the IT service providers that support our systems, and the consulting companies may also be referred in this respect. When we transmit data to our service providers, they may use these only in order to complete their tasks. The service providers have been meticulously selected on our part and obligations have been assigned to the latter. They are contractually bound by our instructions, have in place  appropriate technical and organizational measures for protection of the rights of data subjects and are regularly inspected on our part.

Furthermore, data disclosure related to official inquiries, court orders and court proceedings may be made if necessary for the purposes of prosecution or enforcement

Storage period

Once the application process is completed, your data will be stored for a period of 6 months in the event of rejection. After the deadline, the data will be anonymized to be available for later statistical evaluation. This does not apply if legal provisions prevent deletion or if further storage is required, e.g. in a procedure under the General Equal Treatment Act [Allgemeines Gleichbehandlungsgesetz – AGG] for the purpose of providing evidence, or if you have provided your consent for a longer storage period.

In the event of successful application, the information provided on your part may be further processed by us for employment purposes.

Rights of data subjects

Your rights

You are entitled to request information about the processing of your personal data on our part at any time. We will explain the data processing to you for the sake of your awareness and will further provide you with an overview of the data stored about you.

If your data stored by us are incorrect or outdated, you are entitled to request the correction of such data.

You may also request the deletion of your data. If deletion is not possible due to other legal provisions, the data will be blocked so as to accessible for such legal purpose only.

Moreover, you may also restrict the processing of your data, e.g. if you consider that the data we have stored are incorrect. You are also entitled to data portability, which means that upon request we can send you a digital copy of the personal data provided on your part.

In order to exercise your rights described above, you may contact us at any time by using the aforementioned contact details. This also applies if you wish to receive copies of guarantees proving an adequate level of data protection.

In addition, you are entitled to object to the processing of data pursuant to Article 6 (1) (e) or (f) of GDRP. Ultimately, you are entitled to lodge a complaint with the data protection supervisory authority in charge of our company. You may exercise this right through a supervisory authority in the Member State of residence, subject to your place of work or the place of the alleged infringement. The responsible supervisory authority in Berlin is: the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstrasse. 219, 10969 Berlin.

Data security

We maintain and update technical measures in order to ensure the security of your data, and more specifically, to ensure the protection of your personal data from the risks ensuing from data transmission as well as from any third parties becoming aware thereof. These measures are in any case adapted to the current state of the art. To protect the personal data that you have provided through our website, we use Transport Layer Security (TLS) (the standard protocol for ensuring secure web communications) that encrypts the information entered on your part.

Changes to this Privacy Policy

From time to time we update this privacy statement, for instance if we are adapting our website or if legal or formal requirements change.

Contact

If you have any questions, complaints, suggestions, or if you are uncertain about this privacy statement, or if you would like to obtain information about the use or disclosure of your personal data, as well as if you would like to correct, supplement or delete your personal data, or if you would like to withdraw your consent to the processing of your personal data, please email us at:  datenschutz@hypoport.de