Data protection for clients (companies)Data protection for clients (companies)I. Name and contact information of the data controller
Your contact, who is the data controller as defined in the European General Data Protection Regulation (“EU GDPR”) and in other domestic data privacy legislation of the member states or any other data privacy law related provisions is:
Interim Excellence GmbH
Arcisstr. 61
80801 München
Tel.: +498941414270
E-Mail: support (please no spam) @ (please no spam) interim-x.com
II. Data processing in connection with the use of our portal as an interim manager
1.Interim-X-Portal
a. Account registration
(1) Description and scope
On our website, we offer you the opportunity to register as a contact person for our clients. This enables you to advertise projects in our portal and thus find interim managers for your available vacancies.
The following personal data is processed as part of the registration process:
- Title
- Academic degree
- First name
- Last name
- Job title
- Company
- Company address
- Branch of the company
- Website of the company
- Number of employees
- Company turnover
- Telephone number
- Mobile number
- Fax number
- E-Mail address
- How you became aware of us
(2) Legal basis
Fulfillment of the contract, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.
(3) Purpose
The purpose of data processing is to provide your account and potentially to provide additional content and services via our portal.
(4) Retention period
Your personal data will be stored for the duration of the provision of your account.
(5) Objection and removal option
You have the option of deleting your customer account at any time. In this case, your personal data will be deleted unless statutory retention periods prevent deletion.
b. Project tendering in self-service
(1) Description and scope
On our website, we offer you the opportunity to independently advertise projects in our portal in order to find interim managers for your vacant positions.
As part of the project advertisement, the following personal data will be processed in addition to the personal data of your created account:
- Project name
- Scope of the project
- Availability of the interim manager
- Location of assignment
- Country of assignment
- Daily rate
- Branch
- Function
- Performance
- Position
- Main tasks
- Personnel and budget responsibility
- Requirements
- Language skills
(2) Legal basis
Fulfillment of the contract, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.
(3) Purpose
The purpose of data processing is the tendering of projects by you.
(4) Retention period
Your personal data will be stored until the purpose no longer exists. This usually occurs when the project term you have selected ends.
(5) Objection and removal option
You have the option to object to the processing of your personal data in the context of the tendering of projects for the future at any time. In this case, however, we will no longer be able to consider your tendered project.
All personal data stored in the course of the tender will be deleted in this case, unless statutory retention periods prevent deletion. Your personal data will then be blocked until the end of the statutory retention periods.
c. Project tendering in full-service
(1) Description and scope
On our website, we offer you the opportunity that we advertise your projects in our portal for you in order to find interim managers for your vacant positions.
As part of the project advertisement, the following personal data will be processed in addition to the personal data of your created account:
- Project name
- Scope of the project
- Availability of the interim manager
- Location of assignment
- Country of assignment
- Daily rate
- Branch
- Function
- Performance
- Position
- Main tasks
- Personnel and budget responsibility
- Requirements
- Language skills
(2) Legal basis
Fulfillment of the contract, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.
(3) Purpose
The purpose of data processing is the tendering of your projects by us.
(4) Retention period
Your personal data will be stored until the purpose of the processing no longer exists. This usually occurs when you deactivate the advertised project.
(5) Objection and removal period
You have the option to object to the processing of your personal data in the context of the tendering of projects for the future at any time. In this case, however, we will no longer be able to consider your tendered project.
All personal data stored in the course of the tender will be deleted in this case, unless statutory retention periods prevent deletion. Your personal data will then be blocked until the end of the statutory retention periods.
d. Messaging and support function
(1) Description and scope
We offer you the opportunity to contact us directly via our website using the message and support function.
The following personal data is processed as part of the message and support function:
- Subject of your message
- Content of your message
In addition, we process the personal data of your created account that is required to process your message or support request.
(2) Legal basis
Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR
(3) Purpose
The purpose of data processing is to process your messages and support requests regarding your account in our portal.
(4) Retention period
Your personal data will be stored until the purpose of the processing no longer exists. This usually occurs when your request is processed, unless longer retention periods apply.
(5) Objection and removal option
You have the option to object to the processing of your personal data in the context of contacting us for the future at any time. In this case, however, we will no longer be able to process your request. All personal data stored in the course of contacting us will be deleted in this case, unless statutory retention periods prevent deletion. Your personal data will then be blocked until the end of the statutory retention periods.
2. Sale of services
a. Description and Scope
We offer you the opportunity to purchase our services directly via our website.
As part of the sale of our services, the following personal data is processed:
- First name
- Last name
- Company
- Company address
- E-Mail address
- Telefone number
- Payment data
We do not process your payment data as part of the contract initiation process.
b. Legal basis
Fulfillment of the contract, Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.
c. Purpose
The purpose of data processing is the initiation of contracts and their fulfillment.
d. Retention period
Your personal data will be stored until the purpose of the processing no longer exists. This usually occurs with the fulfillment of the contract and the expiry of the subsequent 3 years, unless longer retention periods are relevant. For business communication this is 6 years, for invoices 10 years.
e. Objection and removal option
The processing of your personal data in the context of the sale of services is absolutely necessary for the fulfillment of the contract. Consequently, there is no possibility for you to object.
3. Data protection and the law
a. Exercising of the rights you have as a data subject pursuant to Art. 12 et seq. EU GDPR
(1) Description and Scope
In conjunction with the management of the rights of data subjects, we will process your personal data. To that end, we will process any contact information you have shared in this context only to process and respond to your message and to subsequently document that the processing was in compliance with the applicable laws within the scope of our accountability obligations.
The following personal data will be processed in conjunction with the management of data subject rights:
- First name
- Last name
- Postal address
- Email address
- Phone number
(2) Legal basis
Legal obligation, Art. 6 Sect. 1 S. 1 lit. c) in combination with Art. 12 et seq. EU GDPR.
Legitimate interest in the subsequent documentation, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
(3) Purpose
Managing your data subject rights in compliance with the law.
(4) Retention period
Data must be archived for 3 years after the processing of the respective transaction has concluded, § 41 BDSG in combination with § 31 Sect. 2 Nr. 1 OWIG.
(5) Objection and removal option
You have the option to object to the processing of your personal data in conjunction with the management of your data subject rights, which will affect all future transactions. However, in this case we will not be able to further manage your data subject rights.
The documentation of the compliant handling of your rights as the data subject is mandatory. Consequently, you do not have the option to object.
b. Legal defense and enforcement of the law
(1) Description and Scope
Your personal data will be processed by us if you file legal claims targeting us or if we file claims and enforce rights targeting you.
(2) Legal basis
Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.
(3) Purpose
The data processing purpose is to raise a defense against illegitimate claims and the legal enforcement of claims and rights.
This also constitutes our legitimate interest.
(4) Retention period
Your personal data will be stored until the processing purpose no longer exists. As a rule, this will be the case once the respective ruling becomes legally effective.
(5) Objection and removal option
The processing of your personal data within the scope of the legal defense and enforcement of the law is mandatory for us to ensure that we raise a legal defense or can enforce the applicable laws. Hence, you do not have any option to object.
III. Categories of Recipients
Within our company, we will share your personal data with those positions and departments that need them for all the above-mentioned purposes. In addition, we will, in some cases, use the services of different providers and will share your personal data with these other trustworthy recipients. These may, for instance, include the following:
- Banks
- Scanning services
- Printing services
- Letter shops
- IT service providers
- Cooperative partners
- Attorneys and courts of law
IV. Transfer to Non-EU and Non-EEA Countries
In conjunction with the processing of your personal data, it is possible that we share your personal data with trustworthy service providers in non-EU and non-EEA countries. These countries are nations that are not within the European Union (EU) or the European Economic Area (EEA).
In this context, we cooperate only with such service providers who are in a position to give us qualified guarantees aiming at the protection of your personal data and who are in a position to warrant that your personal data will be processed in compliance with the stringent European Data Protection Standards. A copy of these qualified guarantees may be reviewed at our business.
If we share any personal data with recipients in non-EU and non-EEA countries, this will be done on the basis of a so-called adequacy decision of the European Commission, or, if such a decision is not available, on the basis of so-called standard contractual clauses, which also have been passed by the European Commission.
V. Your Rights
You are entitled to the following rights you may exercise in your relationship with us:
1. Right of access
You have the right to receive information as to whether and which personal data of yours we process. In this case, we will provide additional information on:
- The processing purpose
- The categories of data
- The recipients of your personal data
- The envisaged retention period or the criteria to determine the envisaged retention period
- Your additional rights
- In the event that you have not shared your personal data with us: All available information as to its origin
- If available: The existence of any automated decision making as well as information on the logic used, the expanse and the desired effects of the processing
2. Right to rectification
You are entitled to have your data corrected and/or completed if the personal data processed by us is incorrect or incomplete.
3. Right to restriction of processing
You are entitled to the restriction of the processing of your data if:
- We are reviewing the correctness of your personal data processed by us
- The processing of your personal data is illegal
- You need the personal data processed by us to pursue your rights after the purpose of processing the data has ended
- You have filed an objection against the processing of your personal data and we are in the process of reviewing your objection
4. Right to erasure
You are entitled to having your data deleted if:
- We no longer need your personal data for the original purpose
- You revoke your consent and if there is no further legal basis for the processing of your personal data
- You have objected to the processing of your personal data and – if the matter in question is not direct marketing – there are no priority grounds for continued processing of the data
- The processing of your personal data is illegal
- The deletion of your personal data is mandated by law
- Your personal data refers to minors for information society purposes
5. Right to notify
If you have exercised your right to have data corrected, deleted or restricted in terms of processing, we will notify all recipients of your personal data, to correct, delete or restrict the processing of such data.
6. Right to data portability
You have the right to receive any personal data you have provided to us based on consent or to perform a contract in a structured, commonly used and machine-readable format and to have same transferred to another data controller. If this is technically feasible, you have the right to instruct us to send this data directly to another data controller.
7. Right to object
In the event that special grounds apply, you have the right to object to the processing of your personal data. In this case, we will no longer process your personal data, unless we are in a position to raise mandatory protection worthy grounds for continued processing.
If your personal data is being processed for the purpose of direct marketing you do, at any time, have the option to object.
8. Right to revoke consent
You have the right to revoke any consent you have given us at any time. The revocation of consent does not affect the legitimacy of any prior processing on the basis of consent.
9. Right to file a complaint with a supervisory authority
Any other administrative or court enforced legal remedies notwithstanding, you shall have the right to file a complaint with the competent supervisory authority, if you are of the opinion that the processing of your personal data by us is in violation of the EU GDPR.
The competent supervisory authority for our company is:
Bayrisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
