Information on data protection in accordance with the General Data Protection Regulation (GDPR) on the processing of your personal data

We, Kienbaum, are regularly commissioned by well-known clients to fill attractive positions. For that we identify interesting specialists and managers in advance in order to be able to present suitable candidates to our clients if necessary. We would also like to use your profile for this purpose. Your data will not be used for any other purposes and will not be made available to any other recipients (e.g. our customers) without your consent. They will remain in our database without further use until we contact you separately with potentially suitable job proposals and then coordinate further steps with you if necessary.

With the following data protection information, we would like to inform you in detail about data processing.

Name and contact details of the data controller and the data protection officer

For Austria the controller responsible for data processing is

Kienbaum Consultants Austria GmbH, Tuchlauben 8, 1010 Vienna, Austria, phone: +43 1 533 51 88 47

For the Czech Republic the controller responsible for data processing is

Kienbaum & Partner GmbH, Lazarská 5, 110 00 Prague 1 – Nove Mesto, Czech Republic, phone: +42 022 494 81-68

For Germany the controller responsible for data processing is

Kienbaum Consultants International GmbH, Edmund-Rumpler-Straße 5, 51149 Cologne, phone: +49 (221) 801 72-0

Data protection officer of the controller: Dr. Gregor Scheja, Scheja & Partners GmbH & Co. KG, Adenauerallee 136, 53113 Bonn, phone: +49 (228) 227 226-0, contact form: https://www.scheja-partners.de/kontakt/kontakt.html

For Hungary the controller responsible for data processing is

Kienbaum Executive Consultants Kft., 1062 Budapest, Hungary, Andrássy út 100, phone: +36 12 67 09 44

For Poland the controller responsible for data processing is

Kienbaum Sp.z o.o., ul. S. Moniuszki 1°, 00-014 Warsaw, Poland, phone: +48 691 022 067

For Swzitzerland the controller responsible for data processing is

Kienbaum AG, Dufourstrasse 43, 8008 Zurich, Switzerland, phone: +41 44 306 42 40

For the USA the controller responsible for data processing is

Kienbaum Consultants, Inc., 2300 Lakeview Parkway, Suite 700, GA 30009 Atlanta, USA, phone: + 1 (310) 729 1451

Please also use the e-mail address dataprivacy.ES@kienbaum.com if you wish to object to the processing or no longer wish to be contacted and wish to be placed on our blacklist.

2 Purposes and legal bases of data processing

2.1 . Development and maintenance of a database to present vacant positions

2.1.1 The purpose is to build up and maintain a database of interesting specialists and managers in order to be able to present attractive positions to them.

2.1.2 The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lett. f) GDPR. Our legitimate interest lies in the creation and maintenance of a database with job-related information on individuals in order to be able to contact them for vacant positions at our customers or at our company.

If we pass on your data within the Kienbaum network, this is done on the basis of our legitimate interest and the legitimate interest of our network companies in accordance with Art. 6 para. 1 lett. f) GDPR.

If the data published by you contains special categories of personal data (e.g. health data, religious affiliation), the exception to the processing prohibition pursuant to Art. 9 para. 1 lett. e) GDPR applies.

Right to object in accordance with Article 21 of the General Data Protection Regulation (GDPR)

Unrestricted right of objection

You have the unrestricted right to object at any time to this processing of your personal data, which is carried out on the basis of Art. 6 para. 1 lett. f) GDPR (data processing on the basis of legitimate interests). In this respect, we grant you this right of objection beyond Art. 21 para. 1 GDPR without restriction and without the need to give reasons.

If you make use of this unrestricted right to object, we will no longer process your personal data for the purposes mentioned under 2.1.

The objection can be sent informally by writing to: dataprivacy.ES@kienbaum.com or by using a link that may be provided to you.

If you exercise your unrestricted right to object as described here, we will delete all your personal data in accordance with the statutory provisions. Please note, however, that this may result in us contacting you again in the future.

In order to avoid renewed contact, as an alternative to the unrestricted objection described above, you have the option of being added to a blacklist in accordance with section 2.2 below.

2.2 Addition to the blacklist

2.2.1 As an alternative to the unrestricted objection pursuant to section 2.1.2, you can have yourself added to a blacklist

The purpose of processing your personal data in our blacklist is to ensure that we do not process your personal data to contact you again and thus avoid contacting you multiple times. The data contained in the blacklist will not be used for purposes other than monitoring compliance with the data restriction.

2.2.2 The legal basis for this processing is our legitimate interest pursuant to Art. 6 para. 1 lett. f) GDPR. Our legitimate interest is to ensure that we do not write to you again and thus comply with your objection to data processing in accordance with section 2.1.

Right to object in accordance with Article 21 of the General Data Protection Regulation (GDPR)

Right to object on a case-by-case basis:

If you have been included in our blacklist, you have the right to object at any time, on reasons relating to your particular situation, to the processing of your personal data which is based on Art. 6 (1) (f) GDPR (data processing on the basis of legitimate interests). Please note that this may result in us contacting you again.

If you exercise this right to object, we will no longer process your personal data in our blocked list unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

The objection can be made informally by writing to: dataprivacy.ES@kienbaum.com or by using the link provided for the complete deletion of your data.

Categories of personal data

We process the following categories of personal data for the purpose stated under 2.1:

Name
Academic title
Contact details
Current employer
Current position
Other information that you may have published in professional networks, such as job title, education, current employer, industry, CV.

We process the following categories of personal data for the purpose stated under 2.2:

First and last name
Academic title
Contact details
Current employer
Current position

Source of the personal data

Insofar as we have collected your personal data from third parties, this comes from the following public sources:

Professional social networks such as Xing or LinkedIn
Internet information from the professional context, such as a company website
Other, publicly accessible, job-related sources.

Recipient of the personal data

In addition to the employees in the personnel consultancy who process your data, internal recipients are also employees of Kienbaum’s internal HR department, who may check the suitability of your profile for open positions at Kienbaum.

External recipients are companies of the Kienbaum Group within and outside the European Economic Area. You can view a list of the aforementioned companies at https://www.kienbaum.com/de/standorte.

If we involve other companies for data processing (so-called order processing, Art. 28 GDPR), they are contractually obliged to handle your data with care and neither to use it for their own purposes nor to pass it on to third parties – in compliance with data protection regulations and in accordance with our instructions.

Transfer of personal data to a third country or to an international organization

As part of data processing, your data will be passed on within the Kienbaum Group and to processors who are also located in countries outside the European Union. These companies take appropriate technical and organizational measures to protect your data in accordance with the requirements of the General Data Protection Regulation, they only process your data if the special requirements of Art. 44 et seq. GDPR are fulfilled, i.e. the processing is carried out on the basis of special guarantees, such as the use of the standard data protection clauses drawn up by the EU Commission for this purpose.

7 Duration of data storage or criteria for determining this duration

The personal data processed for the purpose stated in section 2.1 will generally be deleted after your objection, but no later than five years after our last contact with you.

If you have been added to our blacklist in accordance with your request and as described in section 2.2, the data listed there will not be deleted by us, but will be retained for the purpose of fulfilment your objection. The data will be stored in the blacklist for as long as you may be considered a data subject for the processing activity described in section 2.1.

Rights of data subjects

In addition to the rights of objection mentioned under chapter 2, you have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to data portability under Article 20 GDPR.

You can contact us at any time to claim your rights as a data subject. To do so, please use the contact details of the controller listed above under point 1.

If you believe that the processing of your personal data violates data protection law, you can also lodge a complaint with a supervisory authority, in particular in the EU member state or federal state of your habitual residence, place of work or the place of the alleged violation you are complaining about.

The list and contact details of the EU national data protection authorities as well as the supervisory authorities of the EFTA EEA States (IS, LI, NO) you can find here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

Version: 20.06.2024.