Privacy Policy

This privacy notice aims to give you information on how we collect and process your personal data through your use of this website, including any data you may provide through this website when you sign up to our newsletter, use a service or take part in a competition.

This website is not intended for children and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

Personal data are any data that are personally attributable to you, e.g., name, address, e-mail addresses, user behaviour. Which data is processed in detail and how it is used depends largely on which of our services is used.

   

Who is responsible for data processing and whom can I contact?

Responsible is:

Staffgroup Ltd,

33 Soho Square

W1D 3QU

+44 (0)20 7803 0606

gdpr@staffgroup.com

You can contact our Data Protection Officer at:  

mip Consult GmbH

Rechtsanwalt Asmus Eggert

Wilhelm-Kabus-Str. 9

10829 Berlin, Germany

+49 (0)30 300 1406

gdpr@staffgroup.com

www.sofortdatenschutz.de

 

   

Which sources and data do we use?

We process personal data that we receive from you as part of your use of our website and, if applicable, our business relationship.

In the case of purely informative use of the website, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following access data that we technically require to display our website and to ensure stability and security. The access data include the IP address, date and time of the visit, time zone difference compared to Greenwich mean time (GMT), content of the request (i.e., name of the specific visited web page), access status/HTTP status code, respective amount of transmitted data, referrer URL (previously visited page), browser type and version, operating system and its interface, language and version of the browser software, message about successful retrieval.

In addition, we obtain your personal data if you contact us by using our contact form or by e-mail.  Personal data here include e.g., name, company, e-mail, phone number, subject, message text (hereinafter called "contact information"). As a recruitment consultancy, we additionally process personal data of freelancers and applicants for permanent positions, such as your CV data.

---

 

   

What do we process your data for (purpose of processing) and on what legal basis?

We process personal data for the following purposes and on the following legal bases:

   

Purposes	Legal basis
Insofar as you consent  to the processing of personal data for specific purposes, in particular for contacting you (e.g. via our contact form or by e-mail for handling and processing the request, advertising by telephone, e-mail, SMS, etc.) or to send you newsletter, such processing is legal as you have consented. Your consent may be withdrawn at any time. Please note that any withdrawal is effective for the future only. It does not affect any processing that was done prior to the withdrawal. Any withdrawal may be addressed to the above-mentioned contact data or to gdpr@eurostaffgroup.com.	Consent
If you contact us (via contact form or e-mail), your data will be processed for the purpose of handling your contact request and its processing.	Steps taken at the request of the data subject prior to entering into a contract
When you first visit our website you will be asked if you would like to accept just necessary cookies or all cookies – if you select all cookies this will also enable us to perform marketing activity based on your interactions with the website, other marketing channels and other third parties such as social network. To find out more about cookies, including how to manage and delete them, see the Cookie section below.	Consent
As a recruitment consultancy, we process the personal data of freelancers and applicants for permanent positions for the purpose of assisting in the search for projects or assisting in the application process with our clients. The processing begins when the application form located on our website is sent to us. By submitting the application form, you consent to the corresponding transfer of your personal data to potential clients or potential employers. If we do not find a customer or employer for you, the application documents will be deleted at the latest six months after we have announced the final rejection decision, provided that no other legitimate interests on our part oppose deletion or you have given us your consent to further storage of the data for future offers.	Consent & To take steps at the request of the data subject prior to entering into a contract
When you contact us (via contact form or e-mail) in connection with your application for a position in our company, we process your data in order to check your suitability for the position (or other open positions in our company, if applicable) and to carry out the application process. Your applicant data will be screened by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. There, a decision will be made on the further procedure. In principle, only those persons in the company have access to your data who require this for the proper conduct of our application process.	To take steps at the request of the data subject prior to entering into a contract & Legitimate interest  after completion of the application process and in the event of rejection to protect against claims & Consent
To register you as a new supplier	Performance of a contract with you
To enable you to partake in a prize draw, competition or a complete a survey	Performance of a contract with you  & our legitimate interest (to study how customers use our services, to develop them and grow our business)
We process your access data (see data specified under item 2 above) to safeguard our legitimate interests or those of third parties. In particular, we pursue the following legitimate interests :   Ensuring IT security, in particular the security of the Website; we also store the IP address if someone leaves behind illegal content using the comment function (insults, prohibited propaganda, etc.) and we must be able to determine the author's identity for our own legal protection. Advertising or market and opinion research, unless you have objected to the use of your data; Assertion of legal claims and defense in case of legal disputes;	Legitimate interest

 

   

4. Who can access my data?

Within the organization, persons that need to know your data to fulfill our contractual and regulatory obligations can access your data.

In addition, processors engaged by us may also obtain access to data for the above-mentioned purposes. These are companies in the categories IT services, logistics, printing services, telecommunications, accounting, sales and marketing. If we use processors to provide our services, we will take appropriate legal precautions as well as the relevant technical and organizational measures to protect personal data in accordance with applicable law.

Any transfer of data to third parties will be made only within the scope of legal requirements. We will disclose user data to third parties only if this is required, for example, if you have consented to the data transfer. If the Website is used for purely informational purpose, we generally do not disclose any data to third parties.

 

   

5. How long will my data be retained?

For security reasons (e.g., to investigate abusive or fraudulent activities) log-file information is retained for a maximum of four weeks and then deleted (see item 2 above). Data that must be retained further for evidential purposes are exempted from deletion until the respective incident has been finally clarified.

If necessary, we process and retain your personal data for the duration of our business relationship.

Applicant data will be deleted after 6 months in the event of a rejection. In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted if you withdraw your consent or after 5 years at the latest. Should we fill the advertised position with you, your data will be stored in our personnel management system.

The storage period is also assessed according to the statutory limitation periods, which, for example, may be up to 10 years .

 

   

6. Are data transferred to a third country or to an international organization?

The data provided will be processed within the European Union, the United Kingdom as well as in the USA. For countries without an adequate level of data protection compared to the UK or EU, such as the USA, we usually agree standard data protection clauses with the recipients of your data or obtain your consent for the data transfer.

Note: The protection of personal data in the USA does not correspond to the level of data protection required by the EU or UK. In particular, there are no enforceable rights that safeguard the protection of your data against access by government agencies. Thus, there is a risk that these government agencies can access the personal data without us or the recipient in the US being able to effectively prevent this.

   

7. What are my data protection rights?

You have the following rights with regard to your data and our processing of your data:

• the right of access (i.e. you have the right to request information about your personal data stored by us at any time),
• the right to rectification (i.e. in the event that your personal data is inaccurate or incomplete, you may request that it be corrected),
• the right to erasure and the right to restriction of processing (i.e. you may have the right to request the deletion or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and legal retention obligations do not require the continued storage),
• the right to data portability (i.e. you may have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller without hindrance).

In addition, you may withdraw consent in principle with effect for the future. You furthermore have the right to lodge a complaint with a supervisory authority. We would also like to note your right to object:

   

Information about your right to object You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you (data processing in the public interest and data processing based on balancing of interests); this also includes profiling, which we use – inter alia - for advertising purposes. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves the purposes of asserting, exercising or defending legal claims. In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for such purposes. Objections do not require a particular form and no costs are incurred, other than the transmission costs according to the basic tariffs. If possible, any objection should be addressed to Eurostaff Group Limited, Chevron House, 346 Long Lane, Hillingdon, Uxbridge, Middlesex UB10 9PF or by e-mail to: gdpr@eurostaffgroup.com

   

8. To what extent do you apply automated individual decision-making, including profiling?

We do not use fully automated decision-making. Should we use such procedures in individual cases, we will notify you separately. We do not process your data automatically with the objective of evaluating certain personal aspects (profiling).

   

9. Am I under any obligation to provide data?

On our Website, you must provide the personal data necessary for using our Website for technical or IT security reasons. You cannot use our Website unless you provide the above-mentioned data.

When contacting us via form or by e-mail, you only need to provide the personal data required to process your request. Otherwise, we will be unable to process your request.

 

   

10. Newsletter

With the following details we inform you about our newsletter as well as the newsletter registration, dispatch and evaluation procedure and inform you about your right of objection. If you subscribe to our newsletter, you agree to receive the newsletter and to the procedures described.

Newsletter content: We send newsletters, e-mails and other electronic notifications containing promotional information (hereinafter "newsletters") only with the consent of the recipients or based on legal permission. If we specifically describe individual newsletters as part of the registration process, this description is decisive for the consent of a newsletter subscriber. If there is no separate description, you will receive information about our products, offers and promotions as well as information about our company in our newsletters.

Double-Opt-In : The subscription to our newsletter via our website is done by double opt-in. That means after registration for the newsletter we will send you an e-mail asking you to confirm your subscription. This confirmation serves to ensure that only people who have access to the e-mail address provided subscribe to our newsletter. We log the subscriptions for the newsletter to be able to prove the subscription process according to the legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. The changes to your data stored with the newsletter service provider will also be logged. Alternatively, a subscription to our newsletter can also be made in the course of a face-to-face or telephone conversation.

The newsletters contain a so-called web beacon, which is a pixel-sized file that is retrieved from the server of the newsletter service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our nor the service provider's endeavour to observe individual users. The evaluations serve us to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

The dispatch of the newsletter and the performance measurement are carried out on the basis of the recipient's consent. The subscription process is logged based on our legitimate interests in proving consent to send the newsletter. You can unsubscribe from our newsletter at any time, which means that you withdraw your consent. You will find a link to cancel the newsletter at the end of each newsletter . If users have only subscribed to the newsletter and cancelled their subscription, their personal data will be deleted.

 

   

11. Cookies

11.1  General

We use cookies on our website. Cookies are small text files, usually consisting of letters and numbers, which are placed on the user's computer when visiting certain websites.

Some of these cookies are essential for the functioning of our website, while other cookies help us to improve our website by giving us insight into how you use the website.

By default, we only use essential cookies. Essential cookies enable the core functionalities of our website. The website may not display correctly, or some areas may not function properly without these cookies. Essential cookies can only be prevented by appropriate settings in your browser.

We only use cookies that are not essential for the website to function ("non-essential cookies") if you have given your consent via our cookie banner. You can return to our data protection information at any time and withdraw your consent or make changes to your cookie selection.

Click here for information about the cookies we use. We will also explain the use of cookies in the context of website tracking in the following sections.

If you do not want cookies to be stored on your computer, you may disable the corresponding option in your browser's system settings. Stored cookies may be deleted in the browser's system settings. Please note that disabling cookies may limit the functionality of this Website.

You may object to the use of cookies for website tracking and advertising purposes through the network advertising initiative http://optout.networkadvertising.org/ or the American website http://www.aboutads.info/choices or the European website http: //www.youronlinechoices.com/uk/your-ad-choices/.

 

   

11.2 Third party providers that use cookies

11.2.1 Google Analytics

We use the web analytics service Google Analytics from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google") based on your consent.

The web analysis service Google Analytics uses cookies. The information generated by the cookies about the use of our website is usually transmitted to a Google server in the USA and stored there. There are risks associated with the processing of your data in the USA as described above. By giving your consent via our cookie banner, you consent to the processing of your data in the USA despite potential access by US authorities.

The processing of the data is a joint responsibility between Google and us. It is agreed with Google that the primary responsibility under data protection law for the processing of personal data lies with Google and that all obligations regarding the processing of personal data will be fulfilled by Google (in particular the information obligations, ensuring data subject rights, notification of data breaches). Google processes the data to evaluate the use of our website by visitors, to create reports about the activities within our website and to provide other services related to the use of the website. In the process, pseudonymous usage profiles of website visitors are created from the processed data.

We use Google Analytics with IP anonymization enabled. This means that the users' IP address is shortened by Google. The full IP address is sent to a Google server in the USA and shortened there in exceptional cases only.

The IP address transmitted by the user's browser is not merged with other data provided by Google. Users may prevent the storage of cookies by setting their browser software accordingly; in addition, users may also prevent the collection of the data generated by the cookie and their transfer to Google as well as the processing of such data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about data processing by Google, settings, and options to object, please visit the websites of Google at: https://www.google.de

Alternatively, you can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website:

Click here to set the opt-out cookie for Google Analytics. This opt-out cookie is only valid for the device on which you have accessed this link and only as long as this cookie is not deleted.

We use Google Analytics Remarketing to display the ads we place with Google or its partners only to users who have also shown an interest in our website (e.g., interests in certain topics on our website), which we transmit to Google (so-called "remarketing"). With the help of remarketing, we want to ensure that our ads correspond to the interests of the users and do not have a harassing effect.

   

12. Third-party services that do not set cookies

12.1  Google Web Fonts  (Online- Integration)

We use external web fonts of Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland, https://www.google.com/fonts. The integration of Google Fonts takes place via a server call at Google (usually in the USA). Google thereby receives the information that our website was called up from the IP address of your device.

Since the processing of data within the scope of this service also takes place in the USA, the standard data protection clauses issued by the EU Commission have been concluded with Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Despite the conclusion of standard data protection clauses with Google, there are corresponding risks associated with the processing of your data in the USA.

By giving your consent via our cookie banner, you consent to the processing of your data in the USA despite potential access by US authorities

Google's privacy information can be found at https://policies.google.com/privacy and an opt-out is possible at https://adssettings.google.com/authenticated

 

   

13. Our social media presences

You can find us on social networks so that we can communicate with you there as well and inform you about our services there. We would like to point out that your data may be processed outside the European Union and that the data is usually processed for market research and advertising purposes. Usage profiles can be created from the usage behaviour and resulting interests of the users. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies may be stored on the users' computers, in which the users' usage behaviour and interests are stored. Other data may also be stored in these usage profiles, especially if the users are members of the respective platforms and are logged in to them.

The processing of the users' personal data is based on consent and is carried out under joint responsibility between the platform providers and us. It is agreed with them that the primary responsibility for the processing of personal data lies with the platform providers and that all obligations under data protection law with regard to the processing of personal data are fulfilled by the respective platform providers (in particular, the information obligations, ensuring data subject rights, notification of data breaches).

For information on the respective processing and the respective objection options, please refer to the data protection information of the providers linked below:

• Facebook  (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland), Facebook pages based on an agreement on joint processing of personal data - privacy notice: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com,
• Google/ YouTube  (Google Ireland Limited (Register number: 368047), Gordon House, Barrow Street, Dublin 4, Irland) – privacy notice: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated,.
• Instagram  (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – privacy notice/ Opt-Out: http://instagram.com/about/legal/privacy/.
• Twitter  (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRLAND) – privacy notice: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization,
• LinkedIn  (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) – privacy notice: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out,
• Xing  (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – privacy notice/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
• Vimeo  (Vimeo, Inc. 555 West 18th Street ,New York, New York 10011, Privacy@vimeo.com – Datenschutzinformation (https://vimeo.com/privacy).

In the event that data subject rights are asserted, we recommend that these be asserted with the platform providers, as the providers have direct access to the data. If you would still like our support, please feel free to contact us using the above contact details.