Data Protection Declaration

All personal data will be treated confidentially. Our Data protection practice is in compliance with the German Data Protection Law (BDSG) and the general Data Protection Regulation (GDPR). In what follows, we would like to inform you of the details of data protection:

CONTROLLER WITHIN THE MEANING OF THE GDPR AND BDSG

The controller within the meaning of the GDPR is:
Dr. Bühler Unternehmens- und Personalberatung
An der Dornwiese 8
82166 Gräfelfing
Tel.: +49 (0)89 - 51 65 73 - 0
Fax: +49 (0)89 - 51 65 73 - 90
E-Mail: contact@buehler-up.de

The person to contact at the controller is:
Dr. Arndt Bühler
Tel.: +49 (0)89 - 51 65 73 - 0
Fax: +49 (0)89 - 51 65 73 - 90
E-Mail: contact@buehler-up.de

1. THE REASONS FOR RECORDING DATA

We record and process your data in order to operate our website and to be able to provide you with the best possible service through the ease of access to our services as well as to enable us to inform you of our current employment offers.

2. WHICH DATA ARE RECORDED, PROCESSED OR USED?

When you access our websites, our servers automatically record data of a general nature, particularly for the purpose of establishing a link as well as to ensure the functionality and security of the system. This information includes the type of browser and operating system used, the Internet service provider?s domain name, the connection data of the computer used (IP address), the website from which you are visiting us (referrer-URL), the pages on our website that you visit as well as the data and duration of the visit. Pseudonymisation makes it impossible for us to draw any conclusions from this data on certain individuals. These data are not amalgamated with other data sources. The data are erased seven days after your visit. The legal basis for the processing is article 6 para. 1 f) GDPR.

3. ERASURE

Personal data are erased or barred as soon as the purpose of storing the data no longer applies or you demand that the data be erased. The data is also erased should a storage deadline stipulated by the specified norm have expired, unless continued storage of the data is necessary in order to conclude or implement a contract or you have given your consent to continued storage.

4. COOKIES

Cookies are used in order that use of the website and website users? preferences can be designed in an attractive manner. They enable, for example, your input on the selection of a language to be stored. Cookies are text files that are stored on your fixed disc in order to enable the browser to be identified should the website be retrieved again. You may prevent the storage of cookies on your fixed disc by way of the appropriate browser settings. Cookies that have already been set may be erased at any time. How to erase cookies or to prevent them being stored may be found in the relevant browser user instructions. Should you not accept any cookies, this may impair use of the services we offer in the Internet. The legal basis for the processing of cookies is article 6 para. 1 f) GDPR.

5. DATA SECURITY

We secure our website and other systems against loss, destruction, access, alteration or the dissemination of your data by unauthorised persons by means of technical and organisational measures. Data is transmitted dependent on the browser used with a 128 Bit to 256 Bit SSL-encoding. In spite of regular checks and continued improvements in our protective measures, complete protection against all dangers is not possible.

6. APPLICATIONS

We record and process candidates? personal data for the purpose of carrying out selection procedures on behalf of our clients. This processing may also take place be electronic means. This is always the case should the candidate have transmitted the application documents to us by electronic means, i.e. by e-mail.

7. INTEGRATION OF GOOGLE MAPS

We use the offer of Google Maps on this website. This enables us to display interactive maps directly in our website and enables you to use the maps function with ease. When our website is visited, Google receives the information that you have retrieved the appropriate sub-page of our website. In addition, the IP-address, data and time of the enquiry, the difference in time zone to Greenwich Mean Time (GMT), content of the request (actual page), access status/HTTP status code, quantity of data transferred, website from which the request comes, browser, operating system and its surface, language and version of the browser software. This is done irrespective of whether Google provides a user account through which you are logged on or whether no user account exists. If you are logged on with Google, your data are allocated directly to your account. Should you not want the allocation together with your profile with Google, you must log out prior to activating the button. Google stores your data as a user profile and uses this data for the purposes of advertising, market research and/or the user-friendly design of its website. Such an evaluation is carried out particularly (even for users who are not logged on) in order to provide advertising suitable to requirements and to inform other users of the social network of your activities on our website.

You are entitled to object to the creation of user profiles, whereby you must refer to Google in order to exercise this right.

You will receive additional information on the purpose and scope of the recording and processing of data through the plug-in providers from the providers? data protection declarations. This source will also provide you with additional information on your rights in this regard and setting opportunities in order to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal information in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing is article 6 para. 1 f) GDPR.

8. DATA SUBJECTS' RIGHTS

Should your personal data be processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller:

8.1. RIGHT OF ACCESS

You may demand a confirmation from the controller whether we process personal data relating to you.

Should such processing be carried out, you may demand access to the following information:

the purposes for which your personal data are processed;
the categories of personal information that are processed;
the recipients or the categories of recipients to whom personal data relating to you is disclosed or will be disclosed;
how long it is planned to store personal data relating to you or, should specific data on this subject not be possible, the criteria used in establishing how long the data will be stored;
the existence of a right to correct or erase personal data relating to you, a right to restrict processing by the controller or a right to object to processing;
the existence of a right to complain to a supervisory authority;
all available information on the origin of the data should the personal data not be obtained from the data subject.

8.2. RIGHT TO RECTIFICATION

You have the right to demand rectification and/or additional data by the controller should the personal data processed relating to you be incorrect or incomplete. The controller is required to rectify the data immediately.

8.3. RIGHT TO A RESTRICTION OF PROCESSING

Subject to the following conditions, you may demand that processing of personal data relating to you should be restricted:

should you contest the correctness of personal data relating to you for a period of time that enables the controller to verify the correctness of the personal data;
should the processing be illegal and should you reject the erasure of the personal data and demand instead that use of the personal data should be restricted;
should the controller no longer require for the purposes of processing but you require the data in order to assert, exercise or defend legal claims or
should you have objected to processing in accordance with article 21 para. 1 GDPR and it has not yet been established whether the controller?s legitimate reasons outweigh your reasons.
should processing of the personal data relating to you have been restricted, apart from their storage, these data may only be processed subject to your consent or in order to assert, exercise or defend legal claims or to protect the rights of some other natural or legal person or for reasons of an essential public interest of the Union or of one of its member-states. Should the restriction of processing in accordance with the conditions referred to above itself be restricted, you will be notified by the controller before the restriction is lifted.

8.4. RIGHT TO ERASURE

OBLIGATION TO ERASE DATA

You may demand that the controller delete personal data relating to you immediately and the controller is required to erase this data immediately provided that one of the following reasons apply:

The personal data relating to you are no longer required for the purposes for which they were recorded or were otherwise processed.
You revoke your consent on which processing in accordance with article 6 para. 1 a) or article 9 para. 2 a) GDPR is based and there is no other legal basis for the processing.
You object to the processing in accordance with article 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with article 21 para. 2 GDPR.
The personal data relating to you have been processed illegally.
The erasure of personal data relating to you is required to fulfil a legal obligation in accordance with EU law or the law of a member-state to which the controller is subject.
The personal data relating to you was recorded by the information company with regard to services offered in accordance with article 8 para. 1 GDPR.

INFORMATION TO THIRD PARTIES

Should the controller have made personal information relating to you public and should he be required to erase this information in accordance with article 17 para. 1 GDPR, he will take appropriate measures, taking account of the available technology and costs of implementation, also of a technical nature, to inform the controllers responsible for processing the data that you as the data subject have demanded from them the erasure of all links to these personal data or of copies or replications of this personal data.

EXCEPTIONS

There is no right to erasure should processing be required

in order to exercise the right to the free expression of opinion and information;
in fulfilment of a legal obligation required by EU law or the law of the member-states to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority, which has been vested in the controller;
for reasons of public interest in the field of public health in accordance with article 9 para. 2 h) and i) as well as article 9 para. 3 GDPR;
in order to assert, exercise or defend legal claims.

8.5. RIGHT TO BE INFORMED

Should you have asserted the right to rectify, erase or restrict processing vis-à-vis the controller, the controller is required to inform all recipients to whom personal data relating to you have been disclosed of this rectification, erasure or restriction of processing unless this proves to be impossible or would entail disproportionate expense. You have the right via-a-vis the controller to be informed of these recipients.

8.6. RIGHT TO DATA PORTABILITY

You have the right to to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, provided that

the processing is based on consent in accordance with article 6 para. 1 a) GDPR or article 9 para. 2 a) GDPR or a contract in accordance with article 6 para. 1 b) GDPR and
the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data relating to you transmitted directly from one controller to another controller, provided this is technically feasible. This right may not adversely affect the rights and freedoms of others.

8.7. RIGHT TO OBJECT

You have the right, for reasons relating to your particular situation, to object at any time to the processing of personal information relating to you carried out on the basis of article 6 para. 1 e) or f) GDPR; this also applies to profiling based on these provisions.

The controller no longer processes the personal data relating to you unless he is able to prove compelling reasons for processing worthy of protection, that outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

Should the personal data relating to you be processed in order to carry out direct advertising, you have the right at any time to object to the processing of personal data relating to you for the purposes of such advertising; this also applies to profiling should it be linked to such direct advertising. Should you object to processing for reasons of direct advertising, the personal data relating to you will no longer be processed for these purposes.

Irrespective of EU Guideline 2002/58, you have the opportunity, in connection with the use of the information company?s services, to exercise your right to object by means of automated processes in which technical specifications are used.

8.8. RIGHT TO REVOKE A DECLARATION OF CONSENT IN TERMS OF DATA PROTECTION LAW

You have the right to revoke your declaration of consent in terms of data protection law at any time. The revocation of consent will not affect the legality of processing carried out on the basis of the consent up to the time of the revocation.

8.9. RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY

Irrespective of any other legal remedies provided for by administrative law or by the judiciary, you have the right to complain to a supervisory authority, particularly in the member-state of your place of residence, your place of work or the place where it is is believed the infringement took place should you be of the opinion that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint was submitted informs the complainant of the current status and results of the complaint, including the possibility of a judicial legal remedy in accordance with article 78 GDPR.