Privacy

Processing of applicant data in accordance with Art. 13 GDPR

Dear applicant,

Thank you for your interest in KNISTR GmbH. Due to the requirements of the EU General Data Protection Regulation (GDPR), we are obliged to provide you with certain information regarding the processing of your personal data at KNISTR GmbH. Below, we therefore provide you with information about the nature, scope and purposes of the processing of your personal data in the context of the application process, as well as your rights..

Information about the responsible company:

Responsible party

KNISTR GmbH, Hugh-Greene-Weg 2, 22529 Hamburg,

telephone: 040-734404-01, e-Mail: hello@knistr.com

Legal representatives

Managing Directors: Jochen Hahn, Michael Bregulla

Data Protection Officer:

Data Protection Officer at KNISTR GmbH, Hugh-Greene-Weg 2, 22529 Hamburg, privacy@knistr.com

Information on data processing:

Categories of personal data that are processed:	Purpose of processing:	Legal basis:	Storage period:
Name and contact details, application-related data and application documents (e.g. CV, references, certificates, application photo, salary requirements)	Implementation of the application process Processing of applications (responses to job advertisements, unsolicited applications Recruitment via external service providers	Art. 88 DSGVO i.V.m. § 26 Abs. 1 S. 1, Abs. 3 BDSG (neu) und Art. 6 Abs. 1 S. 1 lit. a) DSGVO	Deletion generally takes place 6 months after (unsuccessful) completion of the application process Exceptions: longer storage with the applicant's consent (inclusion in the talent pool) Upon hiring, the data and documents are transferred to the personnel file

Recipients of the data / contractors in accordance with Art. 28 GDPR:

Applicant management: Applicants contact the email address provided in the job advertisement. We handle applicant management via our careers page. Below, we provide you with the relevant information:

1. Provision of the website

When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information (e.g. via a contact form), we collect the following technical information (log file data):

Operating system of the device you use to visit our website
Browser (type, version & language settings)
The amount of data retrieved
The current IP address of the device you use to visit our website
Date and time of access
The URL of the previously visited website (referrer)
The URL of the (sub)page you are accessing on the website
The internet service provider of the accessing system

The collection of this data is technically necessary in order to display our website to you and to ensure stability and security. We (and our service provider) are generally not aware of who is behind an IP address. We do not combine the above data with other data.

The legal basis for the storage of data/log files is Art. 6 (1) (f) GDPR. Storage in log files ensures the proper functioning of the website and also serves to improve and secure our systems. Any further evaluation of this data (e.g. for marketing purposes) does not take place in this context.

The data stored by KNISTR GmbH is deleted as soon as it is no longer required for the purpose for which it was collected. This is the case after six weeks at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

2. Application process

For applications, we use the services of our partner, rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg. rexx systems processes the application data on behalf of KNISTR GmbH. We will, of course, use your information exclusively for the purpose of processing your application. During the application process, your personal data will be processed; this may vary depending on the vacancy. The legal basis for the processing of your personal data in the context of the application process is Section 26 of the German Federal Data Protection Act (BDSG) and Article 6(1)(a), (b) and (f) of the General Data Protection Regulation (GDPR). If no contract is concluded, your personal data will be deleted 3 months after completion of the application process, unless you have given us your express consent to store your data for a longer period.

3. Cookies

This website uses so-called ‘cookies’, which serve to make the Internet presence more user-friendly, effective and secure. Cookies are small text files that are stored on your computer system. We would like to point out that some of these cookies are transferred from our server to your computer system, most of which are so-called ‘session cookies’. ‘Session cookies’ are characterised by the fact that they are automatically deleted from your hard drive at the end of the browser session. Other cookies remain on your computer system and enable us to recognise your computer system on your next visit (so-called permanent cookies). When accessing the website, the user is informed about the use of cookies and their consent to the processing of the personal data used is obtained. No personal data is stored in the cookies used. We only receive anonymised information based on the cookies. You can, of course, refuse cookies at any time, provided your browser allows this. Please note that certain functions of this website may not be available or may be restricted if your browser is set to not accept cookies (from our website).

The legal basis for the possible processing of personal data using cookies and their storage period may vary. If you have given us your consent, the legal basis is Art. 6 (1) (a) GDPR. If data processing is based on our overriding legitimate interests, the legal basis is Art. 6 (1) (f) GDPR. The stated purpose then corresponds to our legitimate interest.

Technically necessary cookies serve to simplify the use of websites. The user data collected by technically necessary cookies is not used to create user profiles. Analysis cookies are used to improve the quality of the websites and their content. Analysis cookies tell us how the website is used and enable us to continuously optimise our offering.

Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

4. Disclosure of personal data/recipients

Your personal data will not be disclosed to third parties unless we are legally obliged to do so, or the disclosure of data is necessary for the execution of the contractual relationship, or you have expressly consented to the disclosure of your data in advance.

Your data will only be passed on to affiliated companies and service partners if they are acting on our behalf and supporting KNISTR GmbH in the provision of its services. Your personal data will be processed by commissioned service providers within the scope of order processing in accordance with Art. 28 GDPR. The aforementioned service provider only has access to personal information that is necessary for the performance of the respective activity. This service provider is prohibited from passing on your personal information or using it for other purposes, in particular for its own advertising purposes. Insofar as external service providers come into contact with your personal data, we have ensured through legal, technical and organisational measures as well as regular checks that they also comply with the applicable data protection regulations. Specifically, these are the following recipients:

1. Data centres

We work with various data centres for our SaaS customers.

noris network AG
Thomas-Mann-Straße 16 – 20
90471 Nürnberg

Green Datacenter AG / green.ch AG
Industriestraße 33
CH-5242 Lupfig
Schweiz

2. Consulting companies

HRexcellent GmbH (rexx gruppe, Schwesterunternehmen der rexx systems GmbH)
Süderstrasse 75-79
D-20097 Hamburg

FORTIS IT-Services GmbH
Weg beim Jäger 224
D-22335 Hamburg

rexx systems GmbH Austria
Burggasse 117/15
A-1070 Wien
Österreich

NXI GmbH & Co. KG
Schopenstehl 13
D-20095 Hamburg

rexx systems Schweiz AG
Badenerstrasse 623
CH-8048 Zürich
Schweiz

mashcon OG
Hirschentanz 96
A-2384 Breitenfurt
Österreich

Reload HR GmbH & Co. KG
Hofheimer Str. 6
D-65830 Kriftel

3. Other

GOHiring GmbH, Friedelstraße 40, 12047 Berlin

When using the Multiposting Add On, personal data is transmitted to our service provider, GoHiring GmbH, Friedelstraße 40, 12047 Berlin, and processed by them. For more information on the data processing procedures when using the multiposting tool, please refer to the privacy policy of GoHiring GmbH at https://rexx-systemsapp.jobstream.io/privacy_policy. For the processing of data in the USA, the company offers guarantees in the form of standard contractual clauses within the meaning of Art. 46 GDPR.

exciting AG, Dornhofstr. 38A, 63263 Neu-Isenburg
Partner zur Unterstützung für unseren technischen Support bei einigen
Ticketanfragen.

360Dialog GmbH, Torstraße 61, 10119 Berlin
Für Bewerbungen via Whatsapp.

DeepL GmbH, Maarweg 165, 50825 Köln
Translation API, https://www.deepl.com/de/privacy/

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Translation API
https://cloud.google.com/translate/data-usage?hl=de

https://cloud.google.com/terms/data-processing-terms?hl=de

5. Matomo

This website uses the web analytics service Matomo (www.matomo.org) to collect and store data for marketing and optimisation purposes. This data is used to create usage profiles under a pseudonym, for which cookies are used. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. Cookies enable the internet browser to be recognised. The data collected using Matomo technology (including your anonymised IP address) is transferred to our server and stored for usage analysis purposes, which helps us to optimise our website. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. You can prevent the use of cookies and thus participation in tracking by adjusting your browser software settings accordingly, but in this case you may not be able to use all functions of this website to their full extent. The legal basis for the processing of users' personal data is Art. 6 (1) (a) GDPR.
The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of the website. This helps us to continuously improve the website and its user-friendliness. Data collection and storage only takes place with express consent in accordance with Art. 6 (1) (a) GDPR.
The storage period is a maximum of five months and 28 days. For more information on the privacy settings of the Matomo software, please visit the following link:https://matomo.org/docs/privacy/.

Personnel recruitment: Various partners; in this case, also information from the recruiter about the outcome of an application (for billing purposes)

Further processing: Hiring department (internal)

Data is not transferred to third countries outside the European Union or the European Economic Area.

Legal rights of data subjects

Right to information, Art. 15 GDPR	Right to information about the personal data processed and further information relating to the data processing that concerns you (e.g. processing purposes, data recipients).
Right to rectification, Art. 16 GDPR	Right to rectification of inaccurate personal data concerning you or to completion of incomplete personal data.
Erasure (‘right to be forgotten’), Art. 17 GDPR	Right to erasure of personal data concerning you under certain conditions (e.g. no longer necessary for the purpose, withdrawal of consent).
Restriction of processing, Art. 18 GDPR	Right to restriction of processing of personal data concerning you under certain conditions (e.g. disputed accuracy of the data during the period of review).
Objection, Art. 21 GDPR	Right to object to the processing of personal data concerning you under certain conditions.
Data portability, Art. 20 GDPR	Right to receive personal data concerning you that you have provided in a structured, commonly used and machine-readable format, in order to be able to transfer the data to another body, or right to have the data transferred directly to another body, where technically feasible, under certain conditions.
Right to lodge a complaint with a supervisory authority, Art. 57 Abs. 1 lit. f), Art. 77 GDPR	Right to lodge a complaint with a supervisory authority for data protection if you believe that the processing of personal data concerning you violates the GDPR.
Right of withdrawal, Art. 7 Abs. 3 GDPR	Right to withdraw consent to the processing of personal data concerning you at any time with effect for the future.

To assert your statutory rights as a data subject and for all other questions regarding data processing, please contact us in writing at the above address or by email at privacy@knistr.com.

Further information on data processing:

Legal obligation to provide personal data:	No.
Contractual necessity to provide personal data:	Yes, for the above-mentioned purposes (in particular recruitment).
Possible consequences of non-provision:	It will not be possible to carry out the application process and, if applicable, recruitment.
Is automated decision-making used?	No.
What is the source of the personal data? (If not collected from the data subject)	Not relevant.