Privacy Policy

1. Overview privacy policy

The following information provides a brief overview of what happens to your personal data when you visit this website. Detailed information on the subject of data protection can be found further below in section 2 of our data protection declaration.

Data recording on this website

Who is responsible for data processing on this website?

Schauz HR Consulting GmbH is responsible for data processing on this website. The contact data can be found in the imprint.

How do we record your data?

On the one hand, your data is collected by you communicating it to us. This may, for example, involve data that you send to us by e-mail.
Other data is automatically collected by your browser when you visit the website and transmitted to our hoster.

What are the purposes we use your data for?

We use some of your data to ensure an error-free display of the website. When you visit this website, the surfing behaviour of all visitors to this website is evaluated anonymously for statistical purposes. If you contact us, we will use your data to process your request. If you send us applications, we will use your data to initiate the application process with the company to which you have applied.

What rights do you have as far as your information is concerned?

You have the right to receive information about your personal data processed by us. You also have the right, under certain circumstances, to request the rectification, completion, “blocking” or deletion of such data. In certain cases, you have the right to data transfer and opposition. You can revoke your consent. You can contact us at any time at the address given in the imprint or by e-mail. Furthermore, you have the right to appeal to the responsible supervisory authority.
In addition, you have the right to demand the “blocking” of your personal data.

2. General information

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations as well as this data protection explanation.
When you use this website, various personal data is collected. Personal information is information that personally identifies you (e.g., your name, e-mail address). This privacy statement explains what information we collect and for what purposes we use it.

Information about the responsible party (referred to as the „controller“ in the GDPR)

The data processing controller on this website is:
Schauz HR Consulting GmbH
Geschwister-Scholl-Str. 128 | 20251 Hamburg | Germany
Phone: +49 40 22 85 85 130
E-mail: privacy@schauz-hr.com

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3. Information about your rights

Revocation of your consent to the processing of data

Some data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The revocation only takes effect for the future and therefore has no effect on the legality of the processing that took place before the revocation.

Right to object to data processing in special cases or to direct marketing (Art. 21 GDPR)

If the data processing takes place on the legal basis of Art. 6 para. 1 lit. f GDPR (weighing of interests), you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. Whether the data processing is based on this legal basis can be seen from this data protection declaration. If you file an objection, we will no longer process your personal data concerned unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

In addition, you can object to the processing of your data for the purpose of advertising at any time without incurring any costs other than the transmission costs according to the basic tariffs. After objection, your personal data will no longer be used by us for the purpose of direct advertising.

In order to exercise your objection, you can contact us at any time at the address given in the imprint or by e-mail.

Right to data portability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to a third party, this will only be done to the extent that this is technically feasible. You can contact us at any time at the address given in the imprint or by e-mail.

Right of access, deletion, rectification and completion

Within the framework of the statutory provisions, you have the right to information as to whether we process data from you. If this is the case, you have the right to obtain information about this data, which includes information about the recipient and the purpose of the data processing. In the event that your personal data stored with us is incorrect or incomplete, you may request that this data be corrected and, if necessary, completed. To do this, you can contact us at any time at the address given in the imprint or by e-mail.

Right to “block” your data

You have the right to demand the restriction of the processing (“blocking”) of your personal data. You can contact us at any time at the address given in the imprint or by e-mail. The right to “block” exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the check, you have the right to demand the “blocking” of your personal data.
If the processing of your personal data is unlawful, you can request “blocking” instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the “blocking” of your personal data.
If you have filed an objection in accordance with Art. 21 Para. 1 GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests predominate, you have the right to demand the “blocking” of your personal data.

If your personal data have been blocked, these data – apart from their storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.

Right of appeal to the competent supervisory authority

In the event of infringements of the GDPR, you have the right to appeal to a supervisory authority, in particular in the Member State of your habitual residence, workplace or place of presumed infringement. The right of appeal is without prejudice to possible judicial remedies. Complaints can be submitted, for example, to the Hamburg Commissioner for Data Protection, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

4. Recording of data on this website

Server log files

The hoster of these websites collects, stores and automatically uses information on our behalf in so-called server log files, which your browser automatically transmits to our hoster when you visit our website. These are:

IP address
browser type, browser version and language settings
used operating system
referrer URL
hostname of the accessing computer
date and time of the server request
the files and subpages of this website that you accessed, the amount of data transferred and a message indicating whether or not you successfully accessed this website

We process this data so that you can load our website, and we can check and restore the security and function of our website and computers if necessary. The legal basis is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically error-free presentation of the website, the guarantee of IT security and optimisation of the website – for this purpose, the server log files must be recorded.

We store this data in log files for a maximum of 30 days. The transmission of this data is voluntary. For technical reasons, however, it is not possible to visit the website without processing this data.

Google Web Fonts

This page uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally on the web server of the host in Germany. There is no connection to Google servers.

Statistics

We create anonymous statistics of the page views of our website without assigning IP addresses and without creating a user profile. Only the data stored in the server log files without IP address is used for this purpose (see above).

5. Request by e-mail or telephone

If you contact us by e-mail or telephone, your inquiry including further personal data (name, if applicable further contact data) will be stored and processed by us for the purpose of processing your request.
This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR), as we have an interest in the effective processing of the enquiries addressed to us.
The data you send us via contact requests will remain with us until you legitimately request us to delete them or until the purpose for storing the data no longer applies (e.g., after your request has been processed, usually 3 months after receipt of your request). Mandatory legal provisions – in particular legal storage obligations – remain unaffected. If you are our customer or a candidate, different storage periods apply to you. The provision of this data is voluntary and not necessary for the conclusion of a contract with us.

6. Recruitment services for candidates

Dealing with applicant data

We offer you the opportunity to apply for job offers from our customers or on your own initiative (e.g., by e-mail or post).

Purpose and legal basis of data processing

If you send us an application, we process not only your name, e-mail address and address but also the personal data contained in the application (e.g., telephone number, qualification, previous employer). We process your data in particular for the following purposes:

Check whether your declared interests and qualifications meet the requirements of the job offers
Contact you in order to confirm receipt of your request and to let you know if we or our client would like to invite you for an interview.
Enforcement of and defence against possible legal claims

If you have applied to us on your own initiative, we will process your data additionally for the following purposes:

Storage of your application in the “applicant pool
Contact you to let you know if we have found a suitable job offer for you

The legal basis for this is Art. 6 para. 1 lit. f GDPR. If you have concluded a mediation contract with us, the legal basis is Art. 6 para. 1 lit. b GDPR. If you have given your consent, the legal basis is Art. 6 para. 1 lit. a GDPR. We have a legitimate interest in examining whether you could be a suitable candidate for our clients.

Your non-anonymised application documents or other personal data will only be passed on to our customers if you expressly request this, for example, to establish contact. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).

We also process your data to calculate and enforce the commission that a customer owes us if we have successfully referred you to that customer. The legal basis is Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in receiving a commission for a successful recruitment and, if necessary, to enforce it in court.

We do not ask you to provide us with any special categories of data (Art. 9 para. 1 GDPR) in your curriculum vitae which, for example, contain information about your ethnic origin, political, religious or ideological convictions, trade union membership, state of health, sexual identity or marital status. If you nevertheless provide us with such data, you consent to the processing of such data. The legal basis is Art. 9 para. 2 lit. a GDPR.

Voluntary transmission of your personal data to us

There is no obligation to provide your personal data. However, in order to conclude a contract with us, you must provide us with your name and address. Without application documents, we cannot determine whether job offers from our customers might suit you.

Retention period of the data

If you have applied for a specific job offer and your application has been rejected, we will delete your personal data after 7 months.

If and to the extent that you have consented to the processing of your personal data for a specific purpose, we will store your data for this purpose until you revoke your consent. At the latest after 3 years however also the personal data are deleted, which you transmitted to us due to a consent. The same applies in the case of an unsolicited application.

If we were able to successfully refer you to a customer and if our customer has paid us the agreed commission, we will delete your personal data within 7 months of receipt of the commission. As long as our customer has not yet paid his commission, we may store your personal data within the regular period of limitation of 3 years, whereby this period only begins at the end of a calendar year.

Insofar as we are legally obliged to store certain data pursuant to Art. 6 para. 1 lit. c GDPR, this also entitles us to store certain personal data until expiry of the storage periods specified in § 257 para. 1 German Commercial Code (HGB) and § 147 German Tax Code (AO). According to this, the storage periods are up to 10 years. They begin to run only at the end of a calendar year. In order to assert or defend legal claims, we may also store personal data in exceptional cases, if necessary, until the expiry of the maximum limitation periods.

7. Sources of data

As a rule, we receive your personal data from you. From the following sources we receive the following data from you:

Feedback from companies to whom we have shared your application or personal information with your consent (rejection or invitation to interview, notice of employment and your annual salary to calculate commission, possibly information that you left the company during the trial period)
public commercial and association registers, insofar as this is necessary for the enforcement or defence of legal claims (names, addresses)
Address investigators, if we cannot reach you at the address you have provided (names, addresses)

8. Recipient of the data

Hosters and other contract processors

This website is hosted by the external service provider Host Europe GmbH, Cologne (Hoster). Personal data which is collected on this website or which the operator otherwise receives from you is transmitted via the Internet and stored on the servers of the hoster.

Our hoster is a contract processor. This means that he will only process your data to the extent that this is necessary to fulfil his performance obligations and follow our instructions with regard to this data.

We may pass on at least some of your personal data to other contract processors in Germany who provide the following services: Remote maintenance of computers, destruction of data media.

Other recipients

In certain cases, we may share some of your personal information with other recipients. This may be the case if you have given your consent (Art. 6 para. 1 lit. a GDPR), if this is necessary to fulfil a contract with you (Art. 6 para. 1 lit. b GDPR), if we are legally obliged to do so (Art. 6 para. 1 lit. c GDPR) or if this is necessary to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR). These are the following recipients who receive data for the following purposes:

Companies to which we should share your application or non-anonymised information about you, if you specifically request it
Postal, logistics and telecommunications companies for dispatch and communication
law enforcement authorities and courts to enforce or defend legal claims
Auditors, lawyers or tax consultants
Insurances for the handling of claims
Companies in the field of sales, marketing and consulting
Collection companies for debt collection after sale of our claim

If companies with suitable job offers are based in the following countries, your data may be transferred to these countries. The European Commission has taken adequacy decisions to ensure that there is an adequate level of data protection in these countries:

The respective adequacy decisions are available at the links above.

If companies with suitable job offers are based in countries outside the EU, your data may be transferred to countries for which no European Commission adequacy decision has been issued. These countries may not protect your data as well as the EU. The transfer to these countries takes place either on the basis of your consent or to fulfil the contract concluded between you and us (Art. 49 para. 1 sentence 1 lit. a or b GDPR).

Last updated: February 10, 2023