Legal basis for the use of the technically necessary cookies listed above is Article 6(1)(b) GDPR. For all other services, your consent pursuant to Article 6(1)(a) GDPR and, if applicable, other data protection laws, is the legal basis. You can withdraw your consent at any time with effect for the future. The processing is based on contract initiation or contract execution.

​

Facebook Pixel

In the context of using the so-called Facebook Pixel, cookies are set on our website with your consent (see cookies with the provider or labeled "Facebook"). For the data processing associated with the Pixel, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) are joint controllers pursuant to Article 26 GDPR. You can access the agreement underlying the collaboration with Facebook here. The Pixel collects data about your use of our website and matches it with Facebook data to display tailored advertisements from us on Facebook's websites. Facebook also uses this data for its own advertising purposes and for the advertising purposes of third parties according to the Facebook Data Policy. In this policy, you will also find further information on how to assert your rights as an affected person regarding your data processed by Facebook directly with Facebook.

​

Embedding of YouTube Videos

On our websites, we embed videos that are not stored on our servers. To ensure that the loading of embedded third-party content (such as videos and maps) does not automatically occur when accessing our website, we initially display only locally stored preview images of the content. This ensures that the third-party provider does not receive any information.

Only after clicking on the preview image or giving consent through the cookie consent banner will the third-party content be loaded. As a result, the third-party provider will be informed that you have visited our site and will receive the technically necessary usage data. We have no control over the further data processing by the third-party provider. By clicking on the preview image, you give us consent to load third-party content. The embedding is based on your consent according to Article 6(1)(a) GDPR, provided you have given consent by clicking on the preview image. There is an adequacy decision for the United States, so data transfer can occur without further measures. You can view Vimeo's certification here.

​

Provider of the Video Service:

Google Ireland Limited/Google LLC (USA) ("YouTube")

​

Withdrawal of Consent

If you have clicked on a preview image, the third-party content will be loaded immediately. If you do not wish such content to be loaded on other pages, please refrain from clicking the preview images or withdraw your consent for loading via the cookie consent banner.

 

 

4. Local Embedding of "Google Fonts"

We use fonts ("Google Fonts") from Google on our website. Instead of loading the fonts directly from Google's servers and transmitting your IP address to servers in the USA, we have embedded the fonts directly on our servers. This means no connection is established to a US server.

​

5. APPOINTMENT BOOKING VIA CALENDLY

"Calendly" is an appointment scheduling tool that allows you to book an appointment with us directly. In this context, we collect your name, email address, and phone number as mandatory information. You may voluntarily provide any additional information. After booking, you will also receive a confirmation of the appointment, and a reminder message before the scheduled appointment via email.

The legal basis for data processing when booking via Calendly, as well as for sending confirmation and reminder emails, is your consent pursuant to Article 6(1)(a) GDPR.

To simplify appointment scheduling with us, we use the "Calendly" software provided by Calendly LLC, based in the USA, with whom we have entered into a data processing agreement pursuant to Article 28 GDPR. Calendly LLC has an active certification under the Data Privacy Framework. A list of Calendly's subprocessors, such as Stripe, Pendo, Usabilla, and Heap Analytics, can be found here. Furthermore, we do not share your data with third parties. Appointments will be deleted after 6 months.

​

II. Data Processing for Business Partners and Customers

1. Fulfillment of Contractual Obligations (Article 6(1)(b) GDPR)

The purposes of data processing arise from the execution of pre-contractual measures leading up to a contractual business relationship and the fulfillment of obligations under the concluded contract. To process our service agreement with you, we handle master data such as your first and last name, billing address, and billing and payment details, provided you are an individual. For accounting purposes, we use the data processor Lexware, based in Germany.

​

2. Fulfillment of Legal Obligations (Article 6(1)(c) GDPR)

The purposes of data processing in this case arise from legal requirements. These legal obligations include, for example, compliance with storage and identification duties in relation to tax control and reporting obligations and data processing in response to requests from authorities.

​

3. Fulfillment of Our Legitimate Interests (Article 6(1)(f) GDPR)

We process the contact details of contacts at customers, prospects, suppliers, and other business partners for communication by email, phone, and mail. The legal basis for the data processing is our legitimate interest under Article 6(1)(f) GDPR. This legitimate interest arises from the need to conduct or initiate business relationships with customers, prospects, suppliers, and other business partners, as well as to maintain personal contact with their contacts.

We exclude the sharing of your data with third parties outside of this scope. For communication by email, we use the data processor Microsoft Operations Ireland Limited. We have entered into a data processing agreement with them pursuant to Article 28 GDPR. The legal basis for the transfer of data to third countries that do not have an adequacy decision is the Standard Contractual Clauses (2021).

For accounting purposes, we use the data processor Lexware, based in Germany.

Personal data will be stored for as long as necessary to fulfill legitimate business interests. It may be necessary to process the personal data you provided beyond the actual fulfillment of the contract with business partners. These legitimate interests include, in particular, the selection of suitable business partners, compliance measures, assertion of legal claims, defense against liability claims, prevention of crimes, and the settlement of damages resulting from the business relationship.

​

4. Use of Zoho CRM

We store and use received contact data and information (such as business communication history) from customers and prospects to manage and initiate business relationships. The processing is based on (pre)contractual measures under Article 6(1)(b) GDPR. The provider is Zoho Corporation B.V., based in the Netherlands, with whom we have entered into a data processing agreement pursuant to Article 28 GDPR. The data is stored exclusively on Zoho's servers in the Netherlands/EU. You have the right at any time to request information about the data stored about you in the customer database and can request changes to the data or its deletion.

​

5. Direct Marketing via Mail

We may use your personal data for marketing purposes, particularly by mail. The purpose of data processing within marketing activities is to inform individuals about products and services. The legal basis for sending advertising by mail is Article 6(1)(f) GDPR. The legitimate interest arises from our interest in sending customers and prospects information about products and services.

You can object to receiving marketing communications at any time with effect for the future under Article 21 GDPR. Please send your objection to info@jobfuerzwei.de or use our contact form. Job For Two (jobfortwo.com).

We store your personal data as long as necessary for the purposes for which it was collected. If you object to receiving marketing communications, your data will be promptly blocked and subsequently deleted.

​

6. Who Receives the Personal Data You Provide?

In the context of contractual relationships, we may also engage processors or service providers who may have access to your personal data. Compliance with data protection requirements will be contractually ensured.

​

7. Retention Period

Personal data will be retained for as long as necessary to fulfill the purposes outlined above.

 

8. Data Processing for Documentation of Compliance with GDPR

If your data is processed based on consent under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, we process your data solely for the intended purpose and after providing separate information, to demonstrate our compliance with the accountability obligation under Article 5(2) GDPR, and to prove that you have consented to the relevant data processing.

If you assert your rights as an affected person under the GDPR, we also process and store your data to demonstrate compliance with the GDPR in handling your request, in accordance with the accountability obligation under Article 5(2) GDPR.

​

III. Data Processing in the Recruitment Process

To receive and manage job applications, and for the purpose of establishing an employment relationship, we use the recruiting tool "LinkedIn Talent Solutions." You can also submit applications to us via email. The legal basis for this data processing is Section 26(1) Sentence 1 BDSG (Federal Data Protection Act). As part of the recruitment process, we collect only the data necessary for establishing an employment relationship with us. You determine the extent of the data you wish to provide in your application. We process the data you provide exclusively for the purpose of candidate selection. No processing for other purposes takes place.

The provider of the "LinkedIn Talent Solutions" application is LinkedIn Ireland Unlimited Company, based in Ireland, with whom we have entered into a data processing agreement pursuant to Article 28 GDPR. Your provided data may also be transferred to servers in third countries that do not have an adequacy decision. The transfer is based on Standard Contractual Clauses concluded with LinkedIn.

Your data is generally not shared with external parties. Within our company, only those involved in the decision-making process will have access to your personal data.

If your application is successful, your personal data will be stored for the duration of your employment. After the employment relationship ends, your tax-relevant data will be archived in accordance with statutory retention periods. In the case of an unsuccessful application, your personal data will be deleted four months after the rejection.

​

IV. Communication via Microsoft Teams Video Conference System

We use the tool "Microsoft Teams" to conduct phone conferences, online meetings, and video conferences. You will receive a link to the scheduled meeting via email. By clicking on the link, you can enter the video room. Before joining, you can decide whether to enable your video or not. You will be muted by default and will need to manually unmute your microphone if desired. When you turn on your camera and/or microphone, the data from your microphone and video camera will be processed during the meeting.

​

If you are an external participant in an online meeting, you will receive a link to join the meeting via email from the meeting host. When you sign up for the online meeting, you will be asked to provide your name and possibly your email address.

The following additional data may be processed, depending on the type and extent of your specific usage:

​

• Personal information (e.g., first and last name, email address, profile picture)

• Meeting metadata (e.g., date, time, and duration of communication, meeting name, participant IP addresses)

• Device/hardware data (e.g., IP addresses, MAC addresses, client version)

• Text, audio, and video data (e.g., chat history, video, audio, and presentation recordings)

• Connection data (e.g., phone numbers, country names, start and end times, IP addresses)

​

Additionally, personal data may be processed depending on your use, such as the use of the chat and whiteboard features.

We would like to explicitly point out that any information you provide during the ongoing meeting will be processed at least for the duration of the meeting.

 

Legal Basis:

The legal basis for data processing for direct contractual partners is Article 6(1)(b) GDPR, and for business partners or contacts at external organizations, it is the legitimate interest under Article 6(1)(f) GDPR. The legitimate interest is related to the organization of virtual communication and web conferences.

Microsoft Teams is a service provided by Microsoft Corporation. For more information about how your data is processed when using "Teams," please refer to: https://privacy.microsoft.com/de-de/privacystatement and https://news.microsoft.com/de-de/datenschutz-und-sicherheit-in-microsoft-teams-nutzer. We cannot rule out that data routing may occur via internet servers located outside the EU or EEA. For data transfers to Microsoft in the U.S., the adequacy decision for the U.S. applies. You can view Microsoft’s certification here.

The provider, Microsoft, necessarily becomes aware of the aforementioned data to the extent required under our data processing agreement pursuant to Article 28 GDPR. No further recipients exist.

You are not obligated to communicate with us via Microsoft Teams. Alternatively, meetings can also take place via phone.

We delete personal data as a general rule when there is no further need for storage.

​

V. Operating Social Media Presences

We operate the following social media profiles:

• LinkedIn: https://www.linkedin.com/company/job-fuer-zwei-gmbh/

• Facebook: https://www.facebook.com/JobFuerZweiGmbH

• Instagram: https://www.instagram.com/jobfuerzwei/?r=nametag

• YouTube: https://www.youtube.com/channel/UCTCtzaKAHotbhsPiz50AY0A/featured

Instagram and Facebook are products of Meta Platforms Inc. (formerly Facebook Inc.). Instagram is a Facebook product: facebook.com/help/1561485474074139/?helpref=related

​

Data Processing by Us:

a. Operating the Above Social Media Pages

Personal data entered on social media pages, such as comments, videos, images, likes, public messages, etc., is published by the respective social media platform. We reserve the right to delete content if necessary. We may share content on our page and interact with you through the social media platform, such as via the offered messengers. The legal basis for this is our legitimate interest under Article 6(1)(f) GDPR, which lies in our public relations and communication interests.

​

b. Organizing Sweepstakes

We also organize sweepstakes in which you can participate, for example, by (re)posting or commenting. If you are registered under your full name (first and last name) on the respective social media platform, other users may recognize you; the same applies to your profile picture.

The data collected is processed solely for the purpose of conducting the sweepstake. This includes: determining the winners, notifying them, and if applicable, sending the prize (if it is a physical product). A winner announcement will only be made anonymously unless you provide voluntary and separate consent for the publication. You are under no obligation to participate in any publication related to the sweepstakes. Publication is a separate process.

The legal basis for this data processing within the context of the sweepstakes is the fulfillment of the prize contract under Article 6(1)(b) GDPR. After determining the winner, the data of the participants will be deleted. The original post of the sweepstakes may not be deleted. For further information, please refer to the privacy notices of the platform operators. Processing your data (profile name) is necessary for participation in the sweepstake.

​

c. Page Insights

Social media platforms provide anonymized statistics and insights, which help us gain insights into the actions that individuals take on our page (so-called "Page Insights"). These Page Insights are generated based on certain information about individuals who have visited our page.

​

The legal basis for this data processing is our legitimate interest under Article 6(1)(f) GDPR, which lies in obtaining information about the actions and visitors on our pages.

This processing of personal data is carried out by the social media platform and us as joint controllers under Article 26 GDPR. In the case of joint controllership, a separate agreement must be concluded.

 

LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum

Instagram and Facebook (META): https://www.facebook.com/legal/terms/page_controller_addendum

YouTube: https://business.safety.google/controllerterms/

​

If you would like to object to any specific data processing where we have influence, please contact us using the details provided above.

Note: Providing your data is neither legally nor contractually required, nor necessary for entering into a contract. You are not obligated to provide your personal data. If you do not provide your data, you will not be able to communicate with us, engage with us, or participate in any competitions via our social media pages. In that case, please contact us via email at: info@jobfuerzwei.de.

​

Data Processing by the Social Media Platform Provider

In addition to us, there is also the provider of the respective social media platforms. From a data protection perspective, this provider is also considered a separate data controller, conducting its own data processing activities. This means that the platform provider is considered an independent data controller under the GDPR. However, we have limited influence over the data processing by the platform provider. Where we can influence data processing (e.g., through configuration settings), we aim to ensure the provider complies with data protection principles. In many cases, though, we do not have control over the data processing and are not fully aware of what data the provider processes. The platform provider explains its own data processing practices in their privacy policy:

​

• LinkedIn: https://de.linkedin.com/legal/privacy-policy

• Facebook: www.facebook.com/help/568137493302217

• Instagram: help.instagram.com/519522125107875

• YouTube: https://policies.google.com/privacy?hl=en

​​

Note: The social media platform provider uses web tracking methods. Web tracking can occur even if you are not logged into the platform. As mentioned earlier, we have limited influence over the web tracking methods used by the platform provider and cannot disable them. Please be aware that it is possible that the platform provider may use your profile and behavioral data to analyze your habits, personal relationships, preferences, etc. We do not have control over the data processing conducted by the social media platform provider.

​

Data Transfer to Third Countries and Recipients

As part of using the social media platforms, your personal data is typically processed on servers located in third countries, especially the USA, by the platform provider. Certain third countries have been granted an adequacy decision by the European Commission. This means that the data protection laws in these countries are considered comparable to those in the EU or the EEA. Further information on countries with an adequacy decision can be found here. Certification under the adequacy decision for the USA, the "Data Privacy Framework," is in place for Meta Platforms Inc. (Facebook, Instagram) and Google (YouTube). In all other cases, we enter into Standard Contractual Clauses with the platform providers for the transfer of personal data to third countries.

Note: The platform provider uses web tracking methods. Web tracking can also occur independently of whether you are logged into the platform. As already stated, we have limited influence on these tracking methods and cannot deactivate them. It cannot be excluded that the platform provider will use your profile and behavioral data, for example, to analyze your habits or personal relationships and preferences. We do not have influence over the data processing by the social media platform provider.

​

VI. Rights of Data Subjects

Your Rights as a Data Subject

You have the right, under Art. 15(1) GDPR, to request free access to the personal data we hold about you. Furthermore, if the legal requirements are met, you have the right to request correction (Art. 16 GDPR), deletion (Art. 17 GDPR), and restriction of the processing (Art. 18 GDPR) of your personal data. If you provided the data yourself, you also have the right to data portability under Art. 20 GDPR.

Where the processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing under Art. 21 GDPR. If you object to the processing, we will cease such processing, unless we can demonstrate compelling legitimate grounds for continuing the processing, which override your interests in objecting.

​

Where the processing is based on your consent under Art. 6(1)(a), Art. 9(2)(a) or Art. 49(1)(a) GDPR, you can withdraw your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out before the withdrawal.

In these cases, or for any questions or complaints, please contact us in writing or via email at info@jobfuerzwei.de.

You also have the right to lodge a complaint with a supervisory authority. The complaint can be filed with the supervisory authority in the EU member state of your residence, place of work, or the location of the alleged infringement.

​

Bavarian Data Protection Authority
Postal address:
Postfach 1349, 91504 Ansbach
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Email: poststelle@lda.bayern.de

​

VII. No Automated Decision-Making

No automated decision-making or profiling takes place.

​

VIII. Provision of Data

Unless stated otherwise in the previous sections, the provision of personal data is neither legally nor contractually required, nor necessary for entering into a contract. If you do not provide your personal data, it may result in us being unable to respond to your inquiries.