Privacy policy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You can find detailed information on the subject of data protection in our data protection declaration below this text.

1. Data collection on our website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. This can be, for example, data that you enter in a contact form.

Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of the page was viewed). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected in order to ensure that the website is error-free. Other data can be used to analyze your user behavior.

What are your rights with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions about data protection. You also have the right to lodge a complaint with the competent supervisory authority. You also have the right to request that the processing of your personal data be restricted under certain circumstances. Details can be found in the data protection declaration under “Right to restriction of processing”.

Analysis tools and third-party tools

When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. Your surfing behavior is usually analyzed anonymously; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following data protection declaration. You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

2. General information and mandatory information

data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how and for what purpose this is done. We point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:

Kinpoint Personalberatung GmbH

Graf-Recke-Strasse 231

40235 Düsseldorf

Telephone 0211 – 914 38 80

Email Info@kinpoint.de

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal e-mail to us is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)

If the data processing is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data concerned, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims ( Objection according to Art. 21 Para. 1 GDPR).

If your personal data are processed in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object, your personal data will then no longer be used for direct marketing purposes (objection according to Art. 21 Paragraph 2 GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation. The right of appeal exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done if it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, blocking, deletion and correction

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the test, you have the right to request that the processing of your personal data be restricted.

  • If the processing of your personal data happened / happens unlawfully, you can request the restriction of the data processing instead of the deletion.

  • If we no longer need your personal data, but you need them to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of being deleted.

  • If you have filed an objection in accordance with Art. 1 GDPR, your interests and ours must be weighed up. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be allowed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest processed by the European Union or a member state.

Objection to advertising emails

We hereby object to the use of the contact data published within the framework of the imprint obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails. Email info@kinpoint.de

3. Data collection on our website

Cookies

Some of the websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these will be treated separately in this data protection declaration.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version

  • operating system used

  • Referrer URL

  • Host name of the accessing computer

  • Time of the server request

  • IP address

This data will not be merged with other data sources. The collection of this data is based on Art. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website – the server log files must be recorded for this.

contact form

If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. An informal e-mail to us is sufficient. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

4. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de .

Objection against data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de .

Order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Our social media presence

Data processing through social networks

We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below.

Social networks such as Facebook, etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-related processing operations.

In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, however, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is recorded, for example, via cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot retrace all processing processes on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media appearances are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).

Responsible and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we and the operator of the social media platform are responsible for the data processing operations triggered during this visit. You can fundamentally exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) against us as well as claim against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the company policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions – esp. Retention periods – remain unaffected.

We have no influence on the storage duration of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified according to the EU-US Privacy Shield.

You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in:

https://www.facebook.com/settings?tab=ads

Details can be found in Facebook’s privacy policy:

https://www.facebook.com/about/privacy/

XING

We have a profile on XING. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in XING’s privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Data protection information according to Art. 13 and 14 GDPR for customers, interested parties, service providers and other data subjects

This data protection information informs you about the processing of personal data at Kinpoint Personalberatung GmbH (hereinafter: Kinpoint). Personal data belong to Art. 4 No. 1 GDPR all information that relates or can be related to a natural person, in particular by means of assignment to an identifier such as a name or an organization or personnel number with which your person can be identified.

KINPOINT processes personal data exclusively for a specific purpose and in good faith in accordance with the applicable data protection regulations.

* For reasons of better readability, the feminine and masculine names are not used. As far as neutral or masculine terms are used, they are to be understood as meaning both feminine and masculine persons.

Legal basis for the processing of personal data

The legal bases for processing personal data at KINPOINT are:

  • Art. 88 GDPR i. V. m. Section 26 BDSG – processing for the purposes of employment relationships

  • Art. 6 para. 1 (b) GDPR – processing for pre-contractual and contractual purposes

  • Art. 6 para. 1 (f) GDPR – processing in order to protect the legitimate interests of KINPOINT or a third party, unless the protection of interests, fundamental rights and fundamental freedoms of those affected prevail

  • Art. 6 para. 1 (c) GDPR – processing for the fulfillment of legal obligations

  • Art. 6 para. 1 (a) GDPR – processing with the consent of the data subject

Purposes of the collection and processing

KINPOINT collects, processes and uses personal data

  • for the purpose of implementing employment and other contractual relationships

  • for purposes permissible in the context of our business activities as well as safeguarding related legitimate interests, e.g. in connection with the initiation of an employment contract, a business relationship or an interested party

  • As part of the fulfillment of legal requirements and duties to cooperate.

Processing of personal data for purposes other than those mentioned above does not take place. Before processing personal data for purposes other than those mentioned above, KINPOINT will inform the data subjects about this processing and, if necessary, obtain their consent.

The purposes mentioned above can include, for example:

  • Initiation, implementation and termination of an employment or other contractual relationship

  • Acquisition of interested parties and new customers, maintenance of contacts and relationships with existing customers

  • Acquisition of customer orders

  • Order fulfillment and staffing, needs assessment

  • Advertising for our own service portfolio or that of affiliated companies

  • Uncovering possible breaches of contract or criminal offenses

  • Performance determination and performance management

  • Invoicing, billing and payment transactions, garnishments, credit insurance

  • Occupational safety

  • Compliance with legal requirements, e.g. B. according to labor law, tax law and social security law principles and legal obligations to cooperate

  • Application for employment promotion benefits

  • Internal administrative, organizational and statistical purposes, quality assurance

  • Ensuring the security and protection of processing methods and data against unauthorized access, falsification and unauthorized use

  • Protecting the company’s facilities, equipment and assets from theft and other damage

Personal information and personal data

KINPOINT collects and processes personal data and personal information for the above-mentioned purposes.

The collection and processing takes place in strict compliance with the principles of data economy and purpose limitation.

The provision of the data by the data subjects is voluntary outside of existing contractual relationships or the resulting legal obligations.

The processing of the data takes place in paper form as well as in digital form.

These data include in particular:

  • All types of master data (name, academic title, address, date and place of birth, gender, personnel number, etc.)

  • Heirs, creditors

  • Religion and nationality

  • All types of contract data (e.g. type of service, conditions and service fees, bank details, etc.)

  • Organizational data (e.g. job title, position, superior, location, management level, etc.)

  • Billing-relevant data

  • Performance data

  • Business contact and communication data including social media contact details

  • Profile data, certifications, information on school and vocational training, completed training courses for further training and qualifications, language skills, other qualifications such as first aid, disaster relief, fire and evacuation aid

  • Authorizations (e.g. access rights and access bookings, license plates, access rights to IT systems and data processing procedures, photo for the company ID, etc.)

  • IT log data, for example, on the operation and use of communication and data processing equipment, procedures and systems as well as records from the video surveillance system

  • Ergonomic data on workplace equipment and workplace design, material resources issued and company property used by those affected

  • Creditworthiness data as well as information on dunning and bankruptcy procedures

  • Personal data from e-mails and correspondence, out-of-office notes

  • History data

  • Data on residence status, work permit, legitimations (e.g. driver’s license)

Duration of storage

Personal data are only stored by KINPOINT as long as knowledge of the data is necessary for the aforementioned purposes for which they were collected or as long as statutory or contractual retention requirements exist.

Different statutory retention periods result from tax law, labor law and social security regulations. If the data are no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their temporary further processing is necessary for legal reasons.

Transmission of personal information and personal data

Personal data are only transmitted or disclosed by KINPOINT to external bodies insofar as there is permission to do so in accordance with data protection regulations.

This is the case, though

  • the transmission is prescribed by a legal norm.

  • the transmission serves to fulfill a contractual relationship.

  • There is a legitimate interest on the part of KINPOINT in the sense of the aforementioned purposes and the transmission is permissible according to the data protection regulations.

  • if the data subject’s consent has been obtained beforehand.

Recipients of your personal data can include, for example:

  • Clients, customers and interested parties

  • Agents and contractors who provide a service for KINPOINT (e.g. data processing tasks, execution of automated invoicing) as well as insurers and consultants

  • Authorities and insurance companies

  • Banks, auditors

  • Affiliated companies

  • Creditor, third party debtor

If KINPOINT transmits personal data to affiliated companies, agents, service providers or contractors, this is done exclusively within the framework of contracts for order processing.

If consent or separate notification of the person concerned is required for the transmission of personal data, KINPOINT will obtain the consent beforehand or inform the person concerned in advance.

Insofar as data is transferred to third countries or is disclosed to bodies in third countries, the additional requirements for this are observed. In accordance with these regulations, a contract according to the GDPR is concluded between KINPOINT and the processing agency in accordance with the EU standard contractual clauses.

This contract will ensure that the data subjects have an adequate level of data protection when their personal data is processed in third countries.

Your privacy rights

Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR as well as the right to data portability from Article 20 GDPR. The restrictions according to Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can revoke your consent to the processing of personal data at any time by contacting the responsible body. This also applies to the revocation of declarations of consent that were given to us before the EU General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is therefore not affected by a revocation.

For reasons that arise from your particular situation, you have the right at any time to object to the processing of personal data relating to you which is based on Article 6 Paragraph 1 e of the GDPR (data processing in the public interest) and Article 6 Paragraph 1 f GDPR (data processing on the basis of a weighing of interests) to object; This also applies to profiling based on this provision within the meaning of Article 4 No. DSGVO.

If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your rights, interests and freedoms, or it is used to assert, exercise or defend legal claims.

Responsible body for the processing of your personal data

The competent and responsible body for the collection, processing and use of your personal data is

Kinpoint Personalberatung GmbH

represented by the management

Alexander Ludowigs

Graf-Recke-Strasse 231

40235 Düsseldorf

Telephone 0211 – 914 38 80

Email Info@kinpoint.de

Questions about the processing of your personal data

If you have any concerns or a question about the processing of your personal data and information, you can contact Kinpoint GmbH. You can contact the supervisory authority for data protection.

Right of appeal

You have the right to contact the data protection supervisory authority for complaints in connection with compliance with data protection requirements.

Your privacy rights

Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR as well as the right to data portability from Article 20 GDPR. The restrictions according to Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can revoke your consent to the processing of personal data at any time by contacting the responsible body. This also applies to the revocation of declarations of consent that were given to us before the EU General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is therefore not affected by a revocation.

For reasons that arise from your particular situation, you have the right at any time to object to the processing of personal data relating to you which is based on Article 6 Paragraph 1 e of the GDPR (data processing in the public interest) and Article 6 Paragraph 1 f GDPR (data processing on the basis of a weighing of interests) to object; This also applies to profiling based on this provision within the meaning of Article 4 No. DSGVO.

If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your rights, interests and freedoms, or it is used to assert, exercise or defend legal claims.

If you have any questions about your rights and how to exercise your rights, please contact Kinpoint GmbH.

Responsible body for the processing of your personal data

The competent and responsible body for the collection, processing and use of your personal data is

Kinpoint Personalberatung GmbH

represented by the managing director

Alexander Ludowigs

Graf-Recke-Strasse 231

40235 Düsseldorf

Telephone 0211 – 914 38 80

e-mail Info@kinpoint.de

Questions about the processing of your personal data

If you have any concerns or a question about the processing of your personal data and information, you can contact Kinpoint GmbH. You can also contact the data protection supervisory authority.

Right of appeal

You have the right to contact the data protection supervisory authority for complaints in connection with compliance with data protection requirements.