Kids Concept — Professional placement agency for nannies and childcare in Munich.
The purpose of this privacy policy is to inform you and the public about the nature, scope, and purpose of the personal data we collect, use, and process, and to inform you about your rights.
1. Definitions
Our privacy policy is based on the terminology of the General Data Protection Regulation (GDPR). When we use the following terms in our privacy policy, we mean the following:
personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). A person is considered “identifiable” if they can be identified, either directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
data subject
A person is a “data subject” when their personal data is processed by the controller.
processing
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.
profiling
“Profiling” means any form of automated processing of personal data used to evaluate, analyze, or predict certain personal aspects (particularly regarding work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements).
pseudonymization
Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
controller or controller responsible for processing
The controller or controller responsible for processing is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or Member State law, the controller or the specific criteria for its nomination may be provided for by Union law or Member State law.
processor
A processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
recipient
A recipient is a natural or legal person, public authority, agency, or other body to which personal data are disclosed, whether or not a third party. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union law or Member State law shall not be regarded as recipients.
third party
A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
consent
Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
2. Name and Address of the Controller
Tobias Dreilich
Dr.-Max-Straße 45
82031 Grünwald
Phone: +49 (0)89 — 321 64 99 66
Fax: +49 (0)89 — 321 64 99 88
Email: info@kids-concept.de
Web: www.kids-concept.de
3. Data Collection and Legal Basis for Processing
Collection of General Data and Information
When you access our website, information of a general nature is automatically collected. This information (so-called “server log files”) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, and similar information. No conclusions about your identity can be drawn from this information. This information is technically necessary to correctly deliver the content of web pages you request and is mandatory when using the Internet. Anonymous information of this kind is statistically evaluated by us in order to optimize our website and the underlying technology.
The following information is collected and stored when you access our website:
- IP address of your PC
- Access date
- Name and URL of the retrieved file
- Referrer URL
- Browser / Operating System / Access Provider
The data collection and storage serves the following purposes:
- Establishing connection to the website
- Technical use of the website
- System security
- Administration
The data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser address bar.
Data Processing by Commissioned Third Parties
Our database is hosted by the Agency for Communication and Marketing Immagine GmbH, Rosenheimer Straße 12 in 81669 Munich in cooperation with Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6 in 32339 Espelkamp.
The data collection and storage serves the following purposes:
- Establishing connection to the website
- Technical use of the website
- System security
- Administration
The data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Registration and Placement Process on Our Website
When you register on our website or create a user account, personal data is also collected from you. Please note that while registration may provide broader access to the content of our website, it is not a mandatory requirement for using our website. The personal data transmitted to the controller is determined by the respective input form used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. If the controller enters into a placement agreement with an applicant, the transmitted data will be passed on to the placement recipient for the purpose of processing the employment relationship in compliance with legal provisions, who will also use the personal data exclusively for internal purposes.
During a registration process on our website, the following data is collected from you and then stored by us:
- Name and address
- Email address
- Phone number
The purpose of data collection and storage is:
- Customer identification
- Processing and handling of the placement for correspondence with you
- Invoicing
- To process any existing liability claims and to assert any claims against you
- Technical administration of the website
- Administration
Your consent is obtained from you during the placement process before processing this data.
The data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
Data Protection for Applications in the Placement Process
The controller collects and processes the personal data of applicants for the purpose of handling the placement process. Processing may also be carried out electronically. This is particularly the case when an applicant submits corresponding application documents electronically, for example by email or via a web form on the website, to the controller. If the controller enters into a placement agreement with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal provisions. If no placement agreement is concluded with the applicant by the controller, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller prevent deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
The data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
Contact Options via the Website
If you send us inquiries via contact form or email, your information from the inquiry form or email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and/or contacting the data subject. We do not pass this data on to third parties. The legal basis for processing the data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Data processing based on your consent is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. The personal data collected for using the contact form is automatically deleted after your inquiry has been completed. You have the right to withdraw your consent to data processing at any time.
Chatbot
To collect and process contact inquiries, we use interactive elements on our website (e.g., forms, dialog boxes, or pop-ups). The data entered by the user (e.g., name, contact details, and content of the inquiry) is processed.
The data is first transmitted to servers of our service provider (This is K, https://thisisk.de/datenschutz) in Germany and then forwarded to us by email. Processing by the service provider takes place exclusively within the framework of data processing in accordance with Art. 28 GDPR. The data is transmitted and stored in encrypted form.
The data is processed for the purpose of handling inquiries, initiating contracts, and for marketing purposes on the basis of Art. 6 para. 1 lit. b and lit. f GDPR. The stored data will be deleted from the server after 90 days at the latest, unless there are legal retention obligations.
For technical provision and improvement of user guidance, information is stored in the browser’s local storage. This serves exclusively functional purposes and does not contain any personal data.
4. Storage Period
We store the personal data collected and transmitted to us for processing your order until the expiry of the statutory retention obligation. Your data will then be deleted by us, unless we are obliged to store it for a longer period in accordance with Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law retention and documentation obligations (from HGB, StGB, or AO), or you have consented to storage beyond this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
5. Obligation to Provide Data — Possible Consequences of Non-Provision
The provision of personal data is partly required by law (tax law) or may result from contractual provisions (transparency of the contracting party). Failure to provide personal data would prevent the conclusion of a contract and therefore does not occur. Any information about the legally or contractually required provision of personal data will be provided to you by the controller.
6. Existence of Automated Decision-Making
We do not use automated decision-making or profiling.
7. Routine Deletion and Blocking of Personal Data
When the storage period explained in more detail under 4. above has expired, the personal data will be routinely deleted.
8. Rights of the Data Subject
As a data subject, you have the following rights:
- Art. 15 GDPR: You have the right to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- Art. 16 GDPR: You have the right to request the rectification of inaccurate personal data or the completion of your personal data stored by us;
- Art. 17 GDPR: You have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- Art. 18 GDPR: You have the right to request restriction of processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
- Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission to another controller;
- Art. 7 para. 3 GDPR: You have the right to withdraw your consent to data processing. This means that we may no longer continue the data processing based on this consent for the future;
- Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority at your usual place of residence or workplace or at our company headquarters regarding data processing (right to lodge a complaint).
9. Cookies
In order to optimally design and continuously improve the functionality and technical presentation of our website, we use so-called “cookies.” These are small text files that are stored on your device. With the help of these “cookies,” data can be stored on your computer when you access our website. The cookies we use are deleted after the end of the browser session, i.e., after closing the browser (so-called session cookies). You have the option to prevent cookies from being stored on your computer by making appropriate settings in your browser.
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
If cookies are not accepted, the functionality or presentation of our website may be limited.
10. Social Media
Facebook
Part of our website is the integration of the so-called social plugin (“plugins”) of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Social Plugin from Facebook” or “Facebook Social Plugin.” An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the “Like” button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
https://de-de.facebook.com/about/privacy/ explains what settings Facebook offers to protect the privacy of the data subject.
Instagram
Part of our website is the integration of the so-called social plugin (“plugins”) of Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera.” An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/).
Further information and Instagram’s applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
Twitter
Part of our website is the integration of the so-called social plugin (“plugins”) of the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The plugins are marked with a Twitter logo, for example in the form of a blue “Twitter bird.” When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Twitter’s servers. The content of the plugin is transmitted by Twitter directly to your browser and integrated into the page. Through this integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in to Twitter. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. If you are logged in to Twitter, Twitter can directly associate your visit to our website with your Twitter account. If you interact with the plugins, for example by clicking the “Tweet” button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there. The purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your rights and settings options to protect your privacy, can be found in Twitter’s privacy policy: https://twitter.com/privacy If you do not want Twitter to directly associate the data collected via our website with your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the loading of Twitter plugins with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/).
Twitter’s applicable privacy policy can be found at https://twitter.com/privacy?lang=de.
Privacy Policy Regarding the Use of a XING Button
This website uses the “Share Button” from XING. Therefore, when you access this website, your browser establishes a connection to the servers of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. This provides the share functions (e.g., displaying the counter value). No storage of your personal data occurs when you access this website. In particular, XING does not store IP addresses. Nor is your usage behavior evaluated. Current information on data protection regarding the “Share Button” and other relevant information can be found at https://www.xing.com/app/share?op=data_protection.
11. Analysis Tools
Google Analytics (with Anonymization Function)
Part of our website is the integration of the so-called Google Analytics service. This is a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies.” These are small text files that are stored on your device and enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use the information obtained on behalf of the website operator to compile reports on website activity and to provide other services related to website usage and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by making appropriate settings in your browser software; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website: Disable Google Analytics
Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link: https://www.google.com/intl/de_de/analytics.
