Skip to main content

Processing of (personal) data by the entity in charge of the online application process

General information

We are pleased you have shown an interest in our website. Data privacy and data security have always taken high priority with us; therefore, we observe the legal provisions of the General Data Protection Regulation (GDPR), the German Teleservices Act (TMG) and other data protection provisions.
In the following, we will provide you with information about how your personal data is handled. Personal data according to the GDPR is all data with which you can be personally identified.

Name and contact details of the controller

The controller for data processing on this website is:

COMPO EXPERT GmbH
Krögerweg 10
48155 Münster
Deutschland

Phone.: +49 (0)251 297981-000
Fax.: +49 (0)251 297981-111
E-Mail: info@compo-expert.com

Contact details of the data protection officer:

Our data protection officer Mr André Korte can be reached using the aforementioned company address and at datenschutz@dsb-ms.de.

Scope and purpose of processing personal data

Visiting this website

When visiting our website, the Internet browser used by the visitor automatically sends data to the server of our website and stores it in a log file for a limited period of time. The following data will be stored without further entry by the visitor until automatic deletion:

  • the IP address of the visitor's device,
  • the data and time of access by the visitor,
  • name and URL of the page visited by the visitor,
  • website from which the visitor arrives at the website (referrer URL),
  • browser and operating system of the visitor’s device as well as the name of the access provider used by the visitor.
    Processing this personal data is justified in accordance with Article 6 Para. 1 Sentence 1 Lit. f GDPR. The company has a legitimate interest in data processing for the purpose
  • of quickly establishing a connection to the company’s website,
  • of enabling user-friendly use of this website,
  • of recognising and guaranteeing the security and stability of the systems and
  • to facilitate and improve the administration of this website.
  • Processing does not take place expressly for the purpose of gaining knowledge about the visitor of this website personally.

Contact form
You can send messages to the company via an online contact form on our website. We require your first and surname, an email address, a subject and a message to process your enquiry.
The legal basis for the processing is Article 6 Para. 1 Sentence 1 Lit. b GDPR for customer enquiries and otherwise Article 6 Para. 1 Sentence 1 Lit. f GDPR. The data is processed exclusively for the purpose of processing and responding to enquiries via the contact form. The personal data collected for using the contact form is automatically deleted as soon as the request has been dealt with and there is no legal basis for further storage.

Newsletter
Depending on the situation, receipt can be based on two principles.
The data subject is in business contact with us and we provide information about our company’s offers and services with the newsletter. The legal basis for processing is Article 6 Para. 1 Sentence 1 Lit. b GDPR for customer enquiries and otherwise Article 6 Para. 1 Sentence 1 Lit. f GDPR.
By registering to subscribe to the newsletter, the data subject expressly consents to the processing of his/her personal data. Entry of a visitor’s email address is all that is required to subscribe to the newsletter. The legal basis for processing the visitor’s personal data for the purpose of sending newsletters is consent in accordance with Article 6 Para 1 Sentence 1 Lit. a GDPR.
The visitor can cancel the receipt of future newsletters at any time. This can be done by using a special link at the end of the newsletter or by sending a simple message to the controller.

Disclosure of data
Personal data is transmitted to third parties if,

  • the data subject has expressly consented to this in accordance with Article 6 Para. 1 Sentence 1 Lit. a GDPR,
  • disclosure is necessary to assert, exercise or defend legal claims in accordance with Article 6 Para. 1 Sentence 1 Lit. f GDPR and there is no reason to assume that the data subject has an overriding legitimate interest in not disclosing his/her data,
  • there is a legal obligation for data transmission in accordance with Article 6 Para. 1 Sentence 1 Lit. c GDPR, and/or
  • this is required to fulfil a contractual relationship with the data subject in accordance with Article 6 Para. 1 Sentence 1 Lit. b GDPR.
    In other cases, personal data will not be passed on to third parties.

Cookies
So-called “cookies” are used on our website. They are data packets exchanged between this website’s server and the visitor’s browser. These are stored by the devices used (PC, notebook, tablet, smartphone, etc.) on visits to this website. In this respect, cookies cannot cause any damage to the devices used. In particular, they do not contain viruses or other malware. Information is stored in the cookies resulting from the specifically used device in each case. Under no circumstances can the company obtain direct knowledge of the identity of the visitor to this website.
Cookies are largely accepted according to the basic browser settings. The browser settings can be set so that cookies are either not accepted on the devices used or that a special message is displayed before a new cookie is created. However, it should be noted that deactivation of cookies may result in certain functions of this website not being used in the best possible way.
Cookies are used to make using the company’s online service more convenient. For example, session cookies can be used to determine whether the visitor has already visited individual pages of this website. These session cookies are automatically deleted after leaving this website.
Temporary cookies are used to improve user friendliness. They are temporarily stored on the visitor’s device. When the website is visited again, it is automatically recognised that the visitor has already visited the page at an earlier point in time and which entries and settings were made so that they do not have to be repeated.
Cookies are also used to analyse visits to this website for statistical purposes and to improve the service. These cookies make it possible to automatically recognise that the website has already been visited before by the visitor when he/she visits again. Cookies are automatically deleted here after a specified period of time.
The data processed by cookies are justified for the aforementioned purposes to safeguard the legitimate interests of the company in accordance with Article 6 Para. 1 Sentence 1 Lit f GDPR.

Analysis services for websites, tracking

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google An-alytics is Article 6 (1) sentence 1 lit. f GDPR. If a corresponding consent (consent to the storage of cookies) has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. This con-sent can be revoked at any time.
The transfer of data to the USA, which cannot be excluded when using Google services, is based on the standard contractual clauses of the EU Commission. Details can be found here:https://policies.google.com/privacy/frameworks, https://privacy.google.com/businesses/controllerterms/mccs/


Google Tag Manager

We use on our website "Google Tag Manager", a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). Google Tag Manager allows us as marketers to manage website tags through a single interface. The tool Google Tag Manager, which implements the tags, is a cookie-free domain and does not collect any personal data itself. Google Tag Manager triggers other tags that may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

The transfer of data to the USA, which cannot be excluded when using Google services, is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks, https://privacy.google.com/businesses/controllerterms/mccs/

Third-party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 Further information on data protection can be found on the following Google websites:

Privacy Policy: http://www.google.de/intl/de/policies/privacy

FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html

Terms of Use Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html

Applicants
This data is processed to fulfil the contract or to execute precontractual measures. Transfer to third parties is not planned and will not be carried out. The data will be deleted no later than 6 months after the end of the application procedure unless the applicant has expressly agreed to a longer retention period. There is no automated decision making, including profiling, for this purpose.

Employees
This data is processed to fulfil the contract and to fulfil legal obligations. Transmission to social insurance agencies, financial authorities and other bodies takes place regularly to fulfil legal obligations. The data is deleted upon expiry of the legal retention periods. There is no automated decision making, including profiling, for this purpose.

Customers
This data is processed to fulfil the contract and to fulfil legal obligations or with a legitimate interest of the controller. Transmission to financial authorities and other bodies takes place regularly to fulfil legal obligations. The data is deleted 2 years after last contact or upon expiry of the legal retention periods. There is no automated decision making, including profiling, for this purpose.

Suppliers
This data is processed to fulfil the contract and to fulfil legal obligations or with a legitimate interest of the controller. Transmission to financial authorities and other bodies takes place regularly to fulfil legal obligations. The data is deleted 2 years after last contact or upon expiry of the legal retention periods. There is no automated decision making, including profiling, for this purpose.

Right to information, correction, deletion, restriction of processing and objection
The data subject has the right to information, deletion, correction, restriction and objection against the processing of his/her personal data. An informal message to the controller using the aforementioned contact details is sufficient to exercise these rights.

Right to revocation
The data subject has the right to revoke his consent to data processing at any time without affecting the legality of the processing up to the revocation.

Right to complain
The data subject has the right to complain to the supervisory authority.

Status and updating this data privacy policy
This data privacy policy was last updated on 03 February 2023. We reserve the right to adapt the data privacy policy to the underlying data processing procedures at regular intervals.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.