Data Privacy

Data protection information

Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.

The following data protection information is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.

Our data protection information is structured as follows:

Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing
Information about us as controllers of your data

The party responsible for this website (the “controller”) for purposes of data protection law is:

i-potentials GmbH
Zimmerstraße 79/80
10117 Berlin

Telefon: 030 609 899 300
Telefax: 030 609 899 29
E-Mail:

The controller’s data protection officer is:

LOROP GmbH
Dennis Schulz
Landgrafenstraße 16
10787 Berlin

Telefon: 030 330 96 26 27
Telefax: 030 330 96 26 29
E-Mail:

The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Cookies

No cookies are set or stored in your device when you visit our website.

Order processing

The data you submit when ordering goods and/or services from us will have to be processed in order to fulfill your order. Please note that orders cannot be processed without providing this data.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.

After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law.

In order to process your order, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment.

The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.

Contact

If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Online job applications / publication of job advertisements

We offer you the opportunity to apply for a job via our website. In doing so, we differentiate between internal applicants (for an open position at i-potentials) and candidates (for placement with other companies). Please take a look at the respective data protection information:

i-potentials applicants

see Tab for candidates

Social media links via graphics

We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.

Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States.

Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.

The following social networks are integrated into our site by linked graphics:

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.

Instagram

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.

XING

New Work SE, Am Strandkai 1, 20457 Hamburg

Model Data Protection Statement for Anwaltskanzlei Weiß & Partner

modified by LOROP GmbH

Data protection information for candidates

We are pleased that you are interested in our executive search consulting services and are therefore happy to include you in our talent database so that we can place you with employers who are potentially attractive to you.

Who is responsible for data processing?

The controller in terms of data protection law is

i-potentials GmbH

Zimmerstrasse 79/80

10117 Berlin

You can find further information about our company, details of the persons authorized to represent us and also further contact options in our imprint on our website: https://i-potentials.de/en/impressum/

Which of your data do we process? And for what purposes?

We process the data that you have provided to us in connection with the creation of your personal candidate profile (https://ipotentials.avature.net/talentpoolE) in order to check your suitability for potential employers and, if necessary, to place you with them.

If applicable, this also involves “profiling” in the sense of data protection law, so that we obtain your consent for this (Art. 22 (2) lit. c DSGVO).

On what legal basis is this based?

The primary legal basis for the processing of your personal data in this candidate procedure is Section 26 BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.

In addition, Art. 6 (1) lit. a DSGVO is the legal basis, as we obtain your consent for this, which you can revoke at any time with effect for the future.

Should the data be required for legal prosecution after the candidate process has been completed, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f DSGVO. Our interest then consists in the assertion or defense of claims.

How long is the data stored?

At the end of a calendar year, we check whether further processing of your data is necessary. In principle, data from candidates is deleted three years after the candidate profile has been created.

To which recipients is the data passed on?

We use a specialized software provider for the candidate process. This provider acts as a service provider for us and may also become aware of your personal data in connection with the maintenance and servicing of the systems.

The provider is: Avature GmbH, Reichenbachstraβe 26, 80469 Munich, Germany.

Avature uses sub-processors from third countries, so that a third-country transfer of your personal data is not excluded. Therefore, we have concluded so-called standard contractual clauses with the provider. In addition, the group of companies behind it is also listed on the official website of the Data Privacy Framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TOQNAA4&status=Active.

After your candidate profile has been created, the data will be passed on to potential employers so that they can check your suitability for a position and contact you.

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.

Finally, you have a right to object to processing within the scope of the law.

A right to data portability also exists within the framework of the data protection legal requirements.

Our data protection officer

We have designated a data protection officer.

You can reach him as follows: LOROP GmbH, Dennis Schulz, Landgrafenstraße 16, 10787 Berlin, E-Mail:

Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.

Data protection information for applicants

We are pleased that you are interested in us and are applying or have applied for a position in our company. We would like to provide you below with information on the processing of your personal data in connection with your application.

Who is responsible for data processing?

The controller in terms of data protection law is

i-potentials GmbH

Zimmerstrasse 79/80

10117 Berlin

Which of your data do we process? And for what purposes?

We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.

What is the legal basis for this?

The primary legal basis for processing your personal data in this application procedure is Section 26 of the BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.

Should the data be required for legal prosecution after the conclusion of the application procedure, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. Our interest then consists in the assertion or defense of claims.

How long is the data stored?

Data of applicants will be deleted after 6 months in case of rejection.

In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years.

If you are awarded a position during the application process, your data will be transferred from the applicant data system to our HR information system.

To which recipients is the data passed on?

We use a specialized software provider for the application process. This provider acts as a service provider for us and may also become aware of your personal data in connection with the maintenance and servicing of the systems.

The provider is: Avature GmbH, Reichenbachstraβe 26, 80469 Munich, Germany.

Your applicant data will be sifted by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers for the respective open position. The further procedure is then coordinated. In principle, only those persons in the company have access to your data who require this for the proper conduct of our application process.

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.

Finally, you have a right to object to processing within the scope of the law.

A right to data portability also exists within the framework of the data protection legal requirements.

Our data protection officer

We have designated a data protection officer.

You can reach him as follows: LOROP GmbH, Dennis Schulz, Landgrafenstraße 16, 10787 Berlin, E-Mail:

Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.

Data protection information for online meetings, telephone conferences and webinars via “Microsoft Teams” of i-potentials GmbH

We would like to inform you below about the processing of personal data in connection with the use of “Microsoft Teams”.

Purpose of processing

We use the tool “Microsoft Teams” to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: “online meetings”). “Microsoft Teams” is a service provided by Microsoft Corporation.

Controller

The controller for data processing directly related to the conduct of “Online Meetings” is i-potentials GmbH, Zimmerstraße 79/80, 10117 Berlin.

Note: Insofar as you call up the “Microsoft Teams” Internet site, the “Microsoft Teams” provider is responsible for data processing. However, calling up the Internet page is only necessary to use “Microsoft Teams” in order to download the software for using “Microsoft Teams”.

If you do not want to or cannot use the “Microsoft Teams” app, you can also use “Microsoft Teams” via your browser. The service will then also be provided via the “Microsoft Teams” website to that extent.

What data is processed?

When using “Microsoft Teams”, various types of data are processed. The scope of the data also depends on the data you provide before or during participation in an “online meeting”.

The following personal data are subject to processing:

User details: e.g. display name (“Display name”), e-mail address if applicable, profile picture (optional), preferred language
Meeting metadata: e.g. date, time, meeting ID, phone numbers, location
Text, audio and video data: you may have the option of using the chat function in an “online meeting”. To this extent, the text entries you make are processed in order to display them in the “online meeting”. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed accordingly for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the “Microsoft Teams” applications.

Scope of processing

We use “Microsoft Teams” to conduct “online meetings.” If we want to record “online meetings”, we will transparently inform you in advance and – if necessary – ask for consent.

If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will usually not be the case.

Automated decision-making within the meaning of Art. 22 DSGVO is not used.

Legal basis of data processing

Insofar as personal data of employees of i-potentials GmbH is processed, § 26 BDSG is the legal basis for data processing. If, in connection with the use of “Microsoft Teams”, personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component in the use of “Microsoft Teams”, Art. 6 (1) lit. f) DSGVO is the legal basis for data processing. In these cases, our interest is in the effective implementation of “online meetings”.

For the rest, the legal basis for data processing when conducting “online meetings” is Art. 6 (1) lit. b) DSGVO, insofar as the meetings are conducted in the context of contractual relationships.

Recipients / passing on of data

Personal data processed in connection with participation in “Online Meetings” will not be disclosed to third parties as a matter of principle, unless it is specifically intended for disclosure. Please note that the content of “online meetings”, as well as personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Other recipients: the provider of “Microsoft Teams” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in the context of our order processing agreement with “Microsoft Teams”.

Data processing outside the European Union

Data processing outside the European Union (EU) does not take place as a matter of principle, as we have restricted our storage location to data centers in the European Union. However, we cannot exclude the routing of data via Internet servers that are located outside the EU. This may be the case in particular if participants in “Online Meeting” are located in a third country.

However, the data is encrypted during transport over the Internet and thus protected against unauthorized access by third parties.

Data protection officer

We have designated a data protection officer.

You can reach him as follows: LOROP GmbH, Dennis Schulz, Landgrafenstraße 16, 10787 Berlin, E-Mail:

Your rights as a data subject

You have the right to obtain information about the personal data concerning you. You can contact us for information at any time.

In the case of a request for information that is not made in writing, we ask for your understanding that we may require proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification or deletion or to restriction of processing, insofar as you are entitled to this by law.

Finally, you have a right to object to processing within the scope of the law.

A right to data portability also exists within the framework of the data protection legal requirements.

Deletion of data

We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.

Right of complaint to a supervisory authority

You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.