Privacy Policy
1. Basic information on data processing
This privacy policy informs you about how and for which purpose we use personal data in the scope of our online offer. You can access this information at any time on our website.
We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations. We collect, use and store personal data exclusively within the framework of the provisions of data protection laws. These are in particular the Data Protection Basic Regulation (DSGVO), the Federal Data Protection Act-New (BDSG-New) and country-specific data protection laws. Specifically, this means we will only use your data if this is permitted by law. This means that we may process your data if the data processing is necessary to provide our services (for example, processing of inquiries) or is required by law, if we have your consent, or if it is justified on the basis of our legitimate interests (economic operation of our business and the security of our online offering) to process the data.
The terms used, such as “personal data” or their processing” correspond to the definitions of the GDPR.
2. Responsible entity
The responsible entity for data processing is:
ONE HIRING
The Courtyard
35-37 St Mary’s Gate, Nottingham
NG1 1PU, United Kingdom
3. Contact details of the data protection officer
- Contact: Jack Roper
- Address: ONE HIRING, First Floor, The Courtyard, 35-37 St Mary’s Gate, Nottingham NG1 1PU, UK
- Phone: +44 0333 006 3994
- E-mail: jack.roper@thebig4.com
- Reference Number: ZB000027
4. Legal basis
We point out that the following legal bases for processing exist:
- Consents Art. 6 (1) a) and Art. 7 DSGVO.
- Processing for the fulfillment of our services, implementation of contractual measures, Art. 6 para. 1 b) DSGVO
- Fulfillment of our legal obligations, Art. 6 (1) c) DSGVO
- Safeguarding our legitimate interests, Art. 6 (1) f) DSGVO
5. Disclosure of data to third parties and third-party providers
We only share your data with third parties as required by law, for example, if this is necessary for contractual purposes on the basis of Art. 6(1)(b) DSGVO or is justified on the basis of legitimate interests under Art. 6(1)(f) DSGVO.
If we use third parties to provide our online offer, we take appropriate legal precautions and corresponding technical and organisational measures to ensure the protection of your personal data.
In certain cases, the transfer of your personal data may involve transferring your personal data to a location outside the European Economic Area (EEA) where data protection rules otherwise apply that are equivalent to those in the EEA; or to a country that does not have the same standards of protection for personal data as countries in the EEA, in which case we will take all steps required by law to ensure that sufficient measures are taken to protect your personal data, including, where appropriate, the imposition of contractual terms approved by the relevant regulatory authorities.
6. Collection and use of data
We collect and use personal data of each user to the extent necessary to enable the user to use our online offer. This includes, in particular, features to identify the user and information on the beginning and end as well as the extent of the use of our online offer.
We collect a series of general data and information each time our online offer is called up. This general data and information is stored in the log files of the server (see number 8 of this privacy policy).
7. Security
We maintain technical and organisational measures so that we can ensure data security. The security measures include in particular the encrypted transmission of data between your browser and our server.
However, we point out that data transmission over the Internet (for example, when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
8. Server logs
We collect data on each access to the server on which our online offer is located (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6 (1) f) DSGVO.
Your browser automatically transmits these server log files to us. The data collected in this way include the date and time of access, location, country, state, region, city, the URL (Internet address) of the referring website, the file retrieved, notification of successful retrieval, the browser type and version, and information about the user’s operating system.
We use this information exclusively for statistical purposes as well as for internal analysis purposes, such as the improvement of the offer. This data cannot be assigned to specific persons. A combination of this data with other data sources is not made.
9. Cookies
Our online offer uses cookies to make the offer attractive and to enable the use of certain functions. By using our website, you accept that we use cookies in the manner described below. Cookies are small text files that are stored on your computer and enable the recognition of your browser. They thus also serve to determine the frequency of use and the number of users of our website.
So-called “session cookies” are used on our websites, which are temporarily stored exclusively for the duration of the use of one of our Internet pages and are then automatically deleted. In addition, so-called “permanent cookies” are used to record information about users who repeatedly use our online offer. With the help of “permanent cookies”, we can recognise users and offer them optimal use of our Internet services.
You will be informed about the use of cookies in the context of pseudonymous range measurement within the scope of this data protection declaration. By changing the browser settings, cookies can be prevented from being stored on the computer of the user of our Internet offering. The storage of cookies can be prevented by selecting “do not accept cookies” in the browser settings. This may limit the range of functions of our online offer.
10. Contact form
If you send us inquiries via the contact form or via mailto links on our online offer, your data (in particular the data from the contact form including the contact data you provided there) will be stored in our customer relationship management system (“CRM system”) for the purpose of processing the inquiry and in case of follow-up questions.
The CRM system has Privacy Shield certification issued by the U.S. Department of Commerce to ensure appropriate safeguards for the transfer of personal data between the EU and the USA.
For more information on data protection at Bullhorn, please visit: https://www.bullhorn.com/uk/bullhorn-uk-and-eu-cookies-and-privacy-statement/
We do not share your data from the contact form without your consent (with the exception of the order processors that help us provide our online offer).
The processing is based on Art. 6 (1) b) DSGVO for processing the contact request and its handling. We delete the data on the inquiries after six years.
11. Registration
If you register on our online offer, you must state your name, e-mail address, city, telephone number and whether you are looking for a job or a new employee. In addition, you have the option of sending us a message when registering in order to specify your request. We process your data in order to contact you and, as requested, either place you in a job or help you find a new employee.
During the registration process, you also have the opportunity to send us your CV as an employee. By sending us your CV, you agree to our privacy policy and accept the use of your anonymised data (place of residence, job title, highest educational qualification, desired salary, period of notice, as well as your anonymised / censored CV) which we make accessible to potential employers relevant to you. The contact request and communication will be handled exclusively by our consultants, so that your personal data will not be passed on at any time before you have expressly requested an appointment for a first meeting with a potential employer.
Your details will be stored in our CRM system, Bullhorn. In this CRM system, we use the data to create a “contact profile” about you so that we can contact you about your enquiry.
The processing is based on Art. 6(1)(b) DSGVO for the purpose of processing your enquiry and handling it. We delete the data on enquiries after 24 months.
12. Online presences in social media
We maintain online presences in social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our company and our services there. This is done on the basis of our legitimate interests within the meaning of Article 6(1)(f) DSGVO. When calling up the respective networks and platforms, the terms and conditions and data processing policies of the respective operators apply.
We process the users’ data insofar as the users communicate with us on the social networks and platforms, for example when the users write posts on our online presences or send us messages.
13. Analysis of your use of our online offer
1. Google Analytics
For our online offer we use the functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law. We use Google Analytics on the basis of our legitimate interests within the meaning of Article 6 (1) f) DSGVO. The legitimate interest is our interest in the analysis, optimisation and economic operation of our online offer. Google Analytics uses cookies. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can find more information on how Google Analytics handles user data in Google’s privacy policy.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link.
We only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
You can find more information on data use by Google, setting and objection options on the websites of Google (“Data use by Google when you use websites or apps of our partners”), http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”), http://www.google.de/settings/ads (“Manage information that Google uses to display advertising to you”).
2. Google Remarketing
In addition, we use the marketing and remarketing services (Google Marketing Services for short) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”). This is done on the basis of our legitimate interests within the meaning of Article 6(1)(f) DSGVO, namely our interest in the analysis, optimisation and economic operation of our online offering. The Google marketing services allow us to display advertisements for and in our online offer in a more targeted manner in order to present users only with ads that are likely to match their interests. “Remarketing” means that users are shown advertisements for products in which they have shown interest on other websites.
For these purposes, Google executes a code and embeds so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) into a web page when users of our online offer and other web pages on which Google marketing services are active visit them. With the help of the (re)marketing tags, an individual cookie, i.e. a small file, is stored on the user’s device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This cookie file records which websites the user has visited, which content he or she is interested in and which offers he or she has clicked on. In addition, the file contains technical information on the browser and operating system, the referring websites, visiting times and other information on the use of the online offer. In addition, the IP address of the user is also recorded. However, within the scope of Google Analytics, we inform you that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transmitted in full to a Google server in the USA and shortened there. The IP address will not be merged with user data within other Google offerings.
The aforementioned information may also be combined by Google with such information from other sources. If the user subsequently visits other websites, he or she may be shown ads tailored to his or her interests. The user’s data will only be processed pseudonymously within the framework of Google’s marketing services. This means that Google does not store and process, for example, the name or email address of the user, but processes the relevant data in a cookie-related manner within pseudonymous user profiles. Thus, from Google’s perspective, the ads are not managed and displayed for a specifically identified person, but only for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymisation. The information collected by Google marketing services about users is transmitted to Google and stored on Google’s servers in the USA.
If you do not wish to use Google’s remarketing function, you can deactivate it in principle by making the appropriate settings at http://www.google.com/settings/ads.
Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp. Further information on Google
Remarketing and Google’s privacy policy can be found at: http://www.google.com/privacy/ads/.
For more information on Google’s use of data for marketing purposes, please visit: https://policies.google.com/technologies/ads and Google’s privacy policy is available at https://policies.google.com/privacy.
14. Your rights
You are entitled to rights according to Art. 15 to 22 DSGVO if the legal requirements are met. These are your rights to information, correction, deletion, restriction of processing and data portability.
You also have the right to object to processing based on Art. 6(1)(f) DSGVO and thus our legitimate interests.
You may object to the future processing of data concerning you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against processing for direct marketing purposes.
You can revoke your consent at any time for the future.
15. Right of appeal to the supervisory authority
In accordance with Art. 77 DSGVO, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
16. Deletion of data
The data stored by us will be deleted as soon as the data is no longer necessary for the purposes intended for you and the deletion does not conflict with any statutory retention obligations. The statutory retention periods are six years in accordance with § 257 HGB for commercial books, inventories, commercial letters, opening balances etc. and ten years in accordance with § 147 AO for books, records, vouchers and other tax-relevant documents.