This privacy policy applies to the use of the website www.prehcm-services.de (the “website”).
We attach great importance to data protection. We collect and process your personal data in compliance with the applicable data protection law, in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). This policy explains which data we collect when you visit the website, for what purpose and on which legal basis we process it, to whom we disclose it, how long we store it and which rights you have.
The controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR is
PreHCM Services GmbH
Rüttelweg 7
63843 Niedernberg, Germany
E-mail: info@prehcmservices.de
Phone: +49 9371 9181 00
You can reach our data protection officer at
E-mail: datenschutz@prehcmservices.de
Phone: +49 9371 9181 007
Each time the website is accessed, the web server automatically records access data: the URL requested, date and time of the request, the amount of data transferred, the HTTP status code, browser type and version, operating system, the page visited before (referrer URL), the IP address and the requesting provider.
We use this data without linking it to you personally in order to deliver the website, ensure its secure and stable operation, find and fix errors and defend against attacks. It is not evaluated for marketing purposes. We reserve the right to review the log data retrospectively if there are concrete indications of unlawful use.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in operating and securing the website. Access data is deleted automatically after 30 days. Longer storage is only possible if the IP addresses are deleted or altered beforehand so that they can no longer be attributed to the requesting client.
The website is hosted by Mediatis AG, Münchener Str. 45, 60329 Frankfurt am Main, Germany, in a data centre in a data centre in Frankfurt am Main (Amazon Web Services, eu-central-1 region). The hosting provider processes the access data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
You can use the forms on the website to send us a message, request a product demo or arrange a meeting with us at an event (e.g. a trade fair). Your name and e-mail address are mandatory. Optionally you can provide your role at your company, the company, your address, your phone number, a message and the products you are interested in. We process these details in order to handle your enquiry and in case follow-up questions arise. The same applies if you contact us by e-mail.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at a contract, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your enquiry.
Form submissions are forwarded by e-mail to marketing@prehcmservices.de and deleted from the web server once forwarding has succeeded; the website does not store them beyond that. Further handling takes place in our e-mail system. We delete your enquiry as soon as it has been dealt with conclusively and no statutory retention obligations apply.
Information material. On some product pages you can download information material (“one-pagers”) after entering your e-mail address and agreeing to receive promotional information. We process your e-mail address in order to provide the download and to subsequently send you information about our products and services by e-mail. The legal basis for sending promotional information is your consent (Art. 6 (1) (a) GDPR, Section 7 (2) no. 2 of the German Act against Unfair Competition, UWG). You can withdraw it at any time with effect for the future, for instance informally by e-mail to marketing@prehcmservices.de; we store your e-mail address for this purpose until you withdraw.
Software. To download the HCM Pattern Optimizer you register with your name and e-mail address (optionally: role, company, address, phone number) and accept the end user licence agreement. We process these details in order to provide the download, to contact you about it and to be able to prove the conclusion of the licence agreement. The legal basis is Art. 6 (1) (b) GDPR. We store the details for the term of the licence agreement and beyond that to the extent required by statutory retention obligations.
These form submissions are also forwarded by e-mail to marketing@prehcmservices.de and deleted from the web server once forwarding has succeeded.
You can use the application form to apply for advertised positions, for an internship, an apprenticeship or a dual study programme, or on your own initiative. First and last name, address, country, e-mail address, phone number and your CV are mandatory. Optionally you can tell us the type of application and the position, your desired starting date, your salary expectation, your date of birth, information about your motivation, project experience and technologies, certificates, a photo and further documents, and how you heard about us. We process these details for the purpose of the application procedure.
The legal basis is Section 26 (1) BDSG in conjunction with Art. 6 (1) (b) GDPR (decision on the establishment of an employment relationship). Where your documents voluntarily contain special categories of personal data (such as information on health or severe disability, or a photo from which such information may be derived), we process them on the basis of Art. 9 (2) (b) GDPR in conjunction with Section 26 (3) BDSG.
Transmission is encrypted. Your application is forwarded by e-mail to karriere@prehcmservices.de and deleted from the web server, including all attachments, once forwarding has succeeded; the website does not store applications beyond that. Within the application procedure we retain your documents until the procedure is completed and thereafter generally for up to six months in order to be able to defend claims under the German General Equal Treatment Act (Art. 6 (1) (f) GDPR).
Talent pool. If you consent in the form to being included in our talent pool, we retain your application beyond the specific procedure for twelve months in order to contact you about suitable positions. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 26 (2) BDSG). You can withdraw it at any time with effect for the future, for instance by e-mail to karriere@prehcmservices.de; we then delete your documents as soon as no retention obligations remain.
We use the web analytics software Matomo to understand how our website is used and to improve it — only if you have consented to the measurement when accessing the website. Without your consent, neither the analytics script is loaded nor is any data transmitted to Matomo.
After your consent, Matomo records the pages visited, the page you came from (referrer), the date, time and duration of your visit, your IP address shortened by [[two — Matomo operator to confirm]] bytes, and your browser type, operating system, screen resolution and language setting. Matomo runs without cookies; no cookies are set and no persistent identifier is stored in your browser. The shortened IP address cannot be attributed to your connection. [[If enabled in Matomo: If your browser sends the “Do Not Track” setting, your visits are not recorded even after consent.]]
Matomo is operated for us by [[name and address of the operator — DPA]] on servers in [[server location, EU — DPA]]. The operator processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR and may not use it for its own purposes. No data is transferred to countries outside the EU.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future: via the “Privacy settings” link in the footer of every page, or via the “Reach measurement” section at the end of this page. After withdrawal the analytics script is no longer loaded. The lawfulness of processing carried out before withdrawal remains unaffected. Analytics data is stored for [[Matomo raw data retention period — Matomo operator]].
Further information on Matomo: https://matomo.org/privacy/
On some pages we embed videos from YouTube. These are not loaded initially; in their place you see a notice with a “Load video” button. Only when you press this button does your browser connect to YouTube. By clicking you consent to the transfer of your data to YouTube; we remember your decision in your browser (see 2.7) so that you do not have to repeat it for every video.
When a video is loaded, YouTube receives your IP address, the page visited and technical details about your browser; YouTube may set its own cookies and evaluate usage for its own purposes, even if you do not have a Google account. We use the privacy-enhanced mode (domain youtube-nocookie.com), in which, according to YouTube, no information about visitors is stored before the video is played.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023, Art. 45 GDPR); in addition, the European Commission's standard contractual clauses apply (Art. 46 (2) (c) GDPR).
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw the release at any time via the “External media” switch at the end of this page; videos are then loaded only after you click again. Information on data processing by Google: https://policies.google.com/privacy
We use as few cookies as possible. A cookie is only set once you make a decision in the reach-measurement dialog. The following entries may be present in your browser:
These entries are necessary to store and respect your decisions (Section 25 (2) no. 2 TDDDG). They contain no identifier by which you could be recognised and are not transmitted to third parties. Matomo does not set cookies. Cookies set by YouTube after a release are Google's responsibility (see 2.6).
You can delete cookies and browser storage at any time via your browser settings. The website will then ask you again on your next visit.
Unless stated otherwise above, we store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations.
You have the following rights vis-à-vis us with regard to your personal data:
To exercise your rights, contact our data protection officer (see section 1). Access is free of charge.
You have the right to withdraw consent you have given at any time with effect for the future (Art. 7 (3) GDPR). You withdraw consent to reach measurement via “Privacy settings” in the footer of every page or at the end of this page, and the release of external media via the “External media” switch at the end of this page. Consent to promotional information can be withdrawn informally by contacting marketing@prehcmservices.de, consent to the talent pool by contacting karriere@prehcmservices.de. Other consents can be withdrawn informally by contacting our data protection officer. The lawfulness of processing carried out before withdrawal remains unaffected.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of your personal data is unlawful (Art. 77 GDPR). The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
The website is delivered exclusively over an encrypted connection (HTTPS/TLS); form entries and uploaded documents are also transmitted in encrypted form. Please note that data transmission on the internet (e.g. when communicating by e-mail) may have security gaps; complete protection against access by third parties is not possible.
To protect your data we maintain technical and organisational measures that we continuously adapt to the state of the art. The servers we use are backed up regularly. We do not guarantee that the website is available at specific times; disruptions, interruptions or outages cannot be ruled out.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
As a rule, we process your personal data only within our company. The following service providers process data on our behalf under data processing agreements pursuant to Art. 28 GDPR and are bound by our instructions:
If and to the extent that we engage third parties in the performance of contracts, they receive personal data only to the extent that the transfer is necessary for the service concerned.
Data is transferred to countries outside the European Union only in the case described in section 2.6, when you release a YouTube video.
If you have any questions or concerns about data protection, please contact our data protection officer:
E-mail: datenschutz@prehcmservices.de
Phone: +49 9371 9181 007
Last updated: [[publication date]]