Winter Personalberatung

Privacy Policy

Last update: 01.08.2022

Data protection declaration according to § 5 and § 13 of the Telemedia Act (TMG) and information according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

Legal Notice

This English translation is provided solely for the convenience of the users of this website.
In all cases where there are any differences between the German terms and conditions and the English translation, the German terms and conditions have legal precedence and are legally binding. 

Thank you for visiting my website and for your interest in my services in the field of personnel consulting. I take the protection of your personal data very seriously. Transparent action and the discreet and very confidential handling of candidate and company data are important components of my corporate culture. I collect and process your personal data exclusively in compliance with the applicable statutory data protection regulations and this data protection declaration. Definitions of the terms used (e.g. ‚personal data‘, ‚processing‘ or ‚person responsible‘) can be found in Art. 4 GDPR. This data protection declaration is intended to inform the users of this website about the type, scope and purpose of the collection of personal data and also provides comprehensive information about the rights of the users.

Responsible body for data processing

WINTER PERSONALBERATUNG
DESTOUCHESSTRAßE 73
80796 MUNICH
GERMANY

REPRESENTED BY
Ursula Winter

CONTACT
Mobile: +49 (0) 151 20 2222 06
Mail: contact(at)winter-personalberatung.de

Sources and data on the processing of personal data

We process personal data that we receive from you as part of your internet use or that you have sent to us via the contact form.
Data is stored in server log files, which are collected and automatically stored by the provider and are mostly transmitted to us by your browser. These are:

  • Referrer URL
  • Host name of the accessing computer
  • Date and time of server request
  • Name of the requested file
  • Page from which the file was requested
  • Web browser and operating system used
  • (Full) IP-Address of the requesting computer
  • Amount of data transferred

Furthermore, we may process other data comparable to the categories mentioned.

We collect the listed data in order to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data or log files is Article 6 Paragraph 1 Letter f) GDPR.

Purpose of data processing and legal basis

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

We collect the data listed above in order to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. We also store your data for reasons of technical security, in particular to ward off attempts to attack our web server.

Examples in this context:

  • Review and optimization of procedures for needs analysis and direct customer contact;
  • Assertion of legal claims and defense in legal disputes;
  • Ensuring IT security and IT operations;
  • Measures for business management and further development of services and products;

We are also subject to various legal obligations. Insofar as data is processed in this regard, this is done exclusively on the basis of these regulations.

Transfer of data

Processors employed by us (Article 28 GDPR) may receive data for certain purposes. These are companies in the categories of IT services, telecommunications, advice and consulting as well as sales and marketing.

With regard to the transfer of data to recipients outside the company, it should be noted that we only pass on your data if this is permitted or required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data e.g. public authorities and institutions (e.g. public prosecutor’s office, police, supervisory authorities) if there is a legal or official obligation.

Other data recipients may be those bodies for which you have given us your consent to data transmission.

Safety measures

We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. This includes ensuring the confidentiality, integrity and availability of data by controlling physical access to the data as well as accessibility, input, disclosure, ensuring availability and its separation.

Data transfer to third countries

Data is only transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary for the operation of our website, is required by law or if you have given us your consent. If required by law, we will inform you separately about the details.

Contact and email inquiries

If you send us inquiries via the contact form or e-mail, your details from the inquiry form or your e-mail, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. An e-mail address is required for contact information, as well as your name. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Article 6 Paragraph 1 Letter f) GDPR and, if applicable, Article 6 Paragraph 1 Letter b) GDPR, if your request aims at the conclusion of a contract. Your data will be deleted after your request has been processed, provided there are no legal storage requirements to the contrary. In the case of Art. 6 Para. 1 lit. f) GDPR, you can object to the processing of your personal data at any time.

Voluntary submission of (unsolicited) applications

By submitting your personal data and application documents, you consent to us storing this data in an applicant database. This data is stored for the purpose of contacting us for suitable vacancies on the basis of a voluntarily given consent in accordance with Art. 6 Para. 1 lit a DSGVO and processed as part of the applicant pre-selection process. This includes, for example, viewing the application documents, conducting job interviews and selecting the candidates who will be recommended to the respective client as suitable. Personal data will only be passed on to third parties or clients in individual cases with your consent. Your data will be deleted after one year at the latest if you do not agree to extended storage. You are entitled at any time to withdraw a submitted application and to revoke your consent to the storage, processing or disclosure of your data. or to request the deletion of your data. An informal message by e-mail is sufficient for this. The legality of the data processing operations that took place up until the revocation remains unaffected by the revocation.

Duration of storage of personal data

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfill the respective purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies in particular to data that must be retained for commercial or tax reasons.

Your rights

In the following paragraph you will find information as per which data subject rights the applicable data protection law grants you in relation to the person responsible with regard to the processing of your personal data:

Right to information:
In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us.

Right to rectification:
In accordance with Art. 16 GDPR, the right to immediately request the correction of incorrect or incomplete personal data stored by us.

Right to erasure:
In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend us against legal claims.

Right to restriction of processing:
In accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you use them for the need to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR.

Right to data portability according to Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible

Right of appeal:
You have the right to complain to a supervisory authority in accordance with Art. 77 GDPR.

Right of withdrawal:
Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e) GDPR (data processing in the public interest) and Article 6 Paragraph 1 lit. f) of the General Data Protection Regulation (data processing on the basis of a balance of interests) to lodge an objection; this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be made informally and should be addressed to:

contact(at)winter-personalberatung.de

Obligation to provide data

When using the Internet, you only have to provide the personal data that is required for use or that we are legally obliged to collect. Without the data provided, meaningful use may be limited or impossible.

External links

Insofar as there are links to other websites, we have neither influence nor control over the linked content and the data protection regulations there. We recommend checking the data protection declarations of these websites when accessing linked websites in order to be able to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.

Automated decision-making in individual cases

A fully automated decision-making according to Art. 22 GDPR does not take place. If we use these procedures in individual cases, we will inform you separately if this is required by law.

Data use for profiling (scoring)

We do not process your data with the aim of evaluating certain personal aspects (profiling). As part of data collection by tracking services, your data will be used to evaluate your usage behavior and possibly to create movement profiles.