Privacy

Recruitment Privacy Policy
of Neumann Gruppe GmbH
 
Thank you for visiting our careers website. We at Neumann Gruppe GmbH appreciate your interest in our company. We take the protection of your personal data very seriously, and we want to make your visit to our website as enjoyable as possible. When handling your personal data, we always do so in compliance with the applicable data protection laws and regulations. We process the data collected when you visit our website in accordance with the General Data Protection Regulation (GDPR). If you have any questions regarding the processing of your personal data, you can contact dataprotection@nkg.coffee.
 
The purpose of this document is to inform you about how we process your personal data:

  1. Data controller 
  2. Data protection in the context of recruitment
  3. Use of the website
  4. Cookies
  5. Newsletters / job alerts
  6. Contact form and email address
  7. Disclosure of personal data/ recipients
  8. Matomo
  9. Information about the rights of data subjects
 
We reserve the right to make changes to this privacy policy from time to time to ensure that it complies with the current legal requirements or to ensure that any changes to our services are reflected in our privacy policy, e.g. when we introduce new services. The new privacy policy will then apply when you next visit our website.
 
1. Data controller 
The data controller for the collection, processing and use of your personal data is

Neumann Gruppe GmbH
Coffee Plaza, Am Sandtorpark 4,
20457 Hamburg, Germany

If you have any questions regarding the processing of your personal data, you can contact dataprotection@nkg.coffee.

2.  Data protection in the context of recruitment 
We process your personal data to process your application and to evaluate your potential suitability for work or employment. We process the data you provide us to make an informed personnel decision in accordance with Article 6 (1) (b) GDPR. We also store assessments based on objective, non-discriminatory criteria and, where permissible on a case-by-case basis, we may also store publicly available personal data concerning you.
The personal data you provide are needed for our recruitment process. Without this data, we will be unable to consider your application.
We reserve the right to check this data retrospectively if we become aware of any concrete indications of illegal use. The data will be erased as soon as it is no longer required for the purpose for which it was originally collected, but no later than after six months.
 
Service provider
The external service provider, rexx systems GmbH, Süderstraße 75- 79, D20097 Hamburg, Germany, is authorized to access your data and process it on behalf of and according to the instructions of Neumann Gruppe GmbH. In all cases, the external service provider acts in accordance with the instructions from Neumann Gruppe GmbH, which is ensured by relevant corresponding contracts.
 
Transfer to other companies in the Group
Where you have given your consent to us to do so, we will pass on your personal data to other companies within our group to provide you with further work or employment-related entry options in our group of companies.
 
Retention and erasure of data
We will only retain your data for as long as it is needed for the recruitment purpose specified above. If you object to the data processing during the recruitment process, we will erase the data provided this does not conflict with statutory retention requirements.
The data will be erased at the end of the recruitment process and/or after the expiry of the time limit for bringing legal proceedings, at the latest 6 months after the end of the recruitment process, unless you have given your consent for us to store your data to be considered for other job opportunities. Speculative applications will be kept on file until withdrawn or for up to six months and then erased.
 
3. Use of the website
a) Description and scope of data processing
You can visit the website without providing any personal data to us. However, to access some parts of our website and/or to retrieve a file stored on the website, we may need to collect and process your data. In principle, this is only done to the extent necessary to provide users with a functional website, content and services. Furthermore, we typically collect and use your personal data only  with your consent. This does not apply to cases where prior consent cannot be obtained for factual reasons and/or the processing of data is permitted by law.
Every time you visit our website, we collect the following data:
  • browser type/ version
  • operating system used
  • IP address
  • Date and time of the server request.
 
b) Legal basis for data processing
The legal basis for the storage of data/ log files is Article 6 (1) (f) GDPR.
c) Purpose of data processing
The purpose of storing log files is to ensure the proper functioning of the website. We also use this information to optimize our website and to ensure the security of our systems. We do not analyze this data for other purposes (e.g. marketing purposes).
d) Duration of storage
The data stored by Neumann Gruppe GmbH will be erased as soon as it is no longer required for the purpose for which it was originally collected, but no later than after 6 months. Data may be stored for other purposes. In this case, the IP addresses of the users are deleted or anonymized to prevent them from being traced to the calling client.
e) Right to object and right to removal
The collection of the aforementioned data is essential for the operation of the website. Users, therefore, do not have the right to object in this case.
 
f) Liability for content
The content of this website has been prepared with utmost care. We cannot, however, accept any liability or warrant that the content made available on this website is accurate, complete or up to date. The service provider is responsible for their own content on this website in accordance with general laws and regulations.
 
g) Liability for links (content of third-party providers)
A distinction should be made between our own content and links to content provided by other providers. We have no influence over the content of linked sites; the responsibility for content always rests with the respective provider or operator of the linked websites.

4. Cookies
a) Description and scope of data processing
This website uses so-called "cookies". The purpose of cookies is to make our website more user-friendly, effective and secure. Cookies are small text files which are stored on your computer. Please note that some of these cookies are transmitted from our server to your system. In most cases these cookies are what are known as "session cookies". Session cookies are automatically deleted from your hard drive at the end of the browser session.
Other cookies remain on your computer and allow us to recognize your computer on your next visit (called persistent cookies).
When users visit our website, they receive information about the use of cookies and we obtain the user's consent to the processing of personal data.
Cookies do not store any personal data. The information we receive based on cookies is anonymized. You can disable cookies through your browser, where your browser offers this option. Please note that if you configure your browser not to accept cookies (from our website) some functions and features of this website may not be available at all or only to a limited extent.
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Article 6 (1) (f) GDPR. The legal basis for the processing of personal data using cookies for analytical purposes with the prior user consent to the processing of data is Article 6 (1) (a) GDPR.
c) Purpose of data processing
Technically necessary cookies are used to make the websites easier and quicker to use. The user data collected through technically necessary cookies will not be used to create user profiles. We use analysis cookies to improve the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to continue improving the content of our website.
d) Duration of storage, right to object and other rights
Cookies are stored on the user's computer and transmitted from there. This gives users full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If you choose to disable cookies for our website, you may not be able to use all the functions and features of this website.

5. Newsletters / job alerts
a) Description and scope of data processing
You have the option to subscribe to our newsletter on our website. When users subscribe to our newsletter, the data entered into the form will be transmitted to Neumann Gruppe GmbH.
In addition, we collect the following information during registration:
 
  • IP address of the computer of the subscriber
  • Date and time of registration
  • Name of the website you used to subscribe to our newsletter

Within the scope of the subscription process, we obtain your consent using the so-called double opt-in procedure. You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link provided in every newsletter or by sending us a relevant message. After you unsubscribe, your email address will be erased immediately from our newsletter mailing list.
Your personal data is protected against theft and misuse using the most technologically advanced procedures. If this involves personal data, these will be transmitted in encrypted form (TLS). We will not, under any circumstances, disclose your data to third parties.
If you have purchased products from Neumann Gruppe GmbH before, and you have provided us with your email address at the time, this email can also be used to send you our newsletter. In this case, the newsletter will only be used for direct marketing of our own similar goods or services.
b) Legal basis for data processing
The legal basis for the processing of data following a subscription to the newsletter where the user has given consent to the processing is Article 6 (1) (a) GDPR.
The legal basis for sending the newsletter based on a sale of products is Article 7 (3) of the German Act against Unfair Competition (UWG).
c) Purpose of data processing
We collect the user's email address to deliver the newsletter.
The collection of other personal data during the subscription process serves to prevent misuse of the service or the email address used.
d) Duration of storage
The data will be erased as soon as it is no longer required for the purpose for which it was originally collected. Accordingly, the email address of the user will only be stored as long as the subscription to the newsletter is active.
e) Right to object and right to removal
Subscription to our newsletter may be terminated by the data subject/user at any time by clicking on the unsubscribe link provided in every newsletter.

6. Contact form and email address
a) Description and scope of data processing
We provide a contact form on our website, which can be used to contact us directly online. The data entered into the form will be transmitted to and stored by Neumann Gruppe GmbH. In addition, the IP address of the user and the date and time of the transmission will be stored at the time of transmission.
Alternatively, you can use the email address provided to contact us. In this case, the user's personal data transmitted by email will be stored.
We do not pass on personal data to third parties. The data will only be used to process your query.
b) Legal basis for data processing
The legal basis for the processing of data based on the user's consent to the processing is Article 6 (1) (a) GDPR.
The legal basis for the processing of data transmitted when sending an email is Article 6 (1) (f) GDPR. If the purpose of the email is to conclude a contract, then the additional basis for the processing of data will be Article 6 (1) (b) GDPR.
c) Purpose of data processing
We process the data entered into the contact form solely to process the communication. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
d) Duration of storage
The data will be erased as soon as it is no longer required for the purpose for which it was originally collected. For personal data from the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when the circumstances indicate that the matter in question has been definitely resolved.
e) Right to object and right to removal
Users are entitled to withdraw their consent to the processing of personal data at any time. For this purpose, the user can contact the data controller using the contact details provided on the website. Users who contact Neumann Gruppe GmbH by email can object to the storage of their personal data at any time. In this case, the parties will no longer be able to engage in further communications.

7. Disclosure of personal data/ recipients
Your data will only be passed on to affiliated undertakings and service partners if they work on our behalf and support Neumann Gruppe GmbH in the provision of its services. The processing of your personal data by contracted service providers takes place on the basis a data processing agreement in accordance with Article 28 GDPR.
The aforementioned service providers are only given access to such personal data to the extent necessary for the performance of their respective tasks. These service providers are prohibited from disclosing your personal data or using them for other purposes, in particular, for their own promotional purposes.
Where external service providers come into contact with your personal data, we have taken legal, technical and organizational measures and carried out regular checks to ensure that they comply with the applicable data protection laws and regulations.
Specifically, this relates to the following recipients:
We do not disclose your personal data to other companies for commercial purposes.

8. Matomo
a) Description and scope of data processing
This website uses the technologies of Matomo (www.matomo.org) to collect and store data for marketing purposes and to optimize users' experience. This data can be used to create user profiles under a pseudonym. To do this, Matomo uses cookies. Cookies are small text files stored locally in the cache of the browser used by the website's visitors. We use cookies to recognize your browser when you return to the website. The data collected using the Matomo technology (including your anonymized IP address) will be transmitted to our server and stored for usage analysis purposes, which will help us to optimize our website. The data generated by the cookie stored in the pseudonymized user profile will not be used to identify the visitor of this website or linked with any personal data about the bearer of the pseudonym. You can prevent cookies from being used and tracking by setting your browser not to accept cookies. Please note that if you if you do this, you may not be able to use all the functions and features of this website.
b) Legal basis
The legal basis for the processing of personal data of users is Article 6 (1) (f) GDPR.
c) Purpose of data processing
The processing of users' personal data enables us to analyze the browsing behavior of our users. The analysis of the data obtained helps us to put together information about the use of the individual components of our website, enabling us to continue improving the website and making it more user-friendly. For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Article 6 (f) GDPR. By anonymizing the IP address, due consideration is given to the individual user's interest in protection of their personal data.
d) Duration of storage
The data will be erased as soon as they are no longer required for the purpose for which they were originally stored.
e) Right to object and right to removal
Cookies are stored on the user's computer and transmitted to our website. This gives you as the user full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If you choose to disable cookies for our website, you may not be able to use all the functions and features of this website.
For more information on the privacy settings of the Matomo software, please click on the following link: https://matomo.org/docs/privacy/.

9. Information about the rights of data subjects
We would like to inform you that under Article 15 et seq. GDPR and the conditions defined therein, you have the right to information about your personal data and the right to obtain from us the rectification, erasure or restriction of processing as well as the right to object to processing and the right to data portability. Under Article 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority, if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation. Where processing is based on Article 6 (1) (a) or Article 9 (2) (a) GDPR, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The restrictions under Articles 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access and the right to erasure.
 
Right of access, Article 15 GDPR
You have the right to request information as to whether and to what extent personal data concerning you is being processed (in particular, the purpose of processing, recipients of the data, storage period, etc.).
 
Right to rectification, Article 16 GDPR
You have the right to obtain rectification of your stored data if it is inaccurate or incomplete. This includes the right to have incomplete personal data completed, including by means of providing a supplementary statement or notification.
 
Right to erasure (“right to be forgotten”), Article 17 GDPR
You have the right to obtain the erasure of personal data. This is possible, for example, if the data are no longer necessary in relation to the purposes for which they were collected or if the data must be erased to legal obligations. However, this right can be excluded in individual cases.
 
Right to restriction of processing, Article 18 GDPR
You have the right to obtain restriction of processing of your personal data. This is possible, for example, if your data is incorrectly recorded or if the data processing is unlawful. If the processing is restricted, the data can only be processed only in narrowly defined cases.
 
Right to data portability, Article 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us in a structured, commonly used and machine-readable format either directly or indirectly through a representative to be appointed by you.
 
Right to object, Article 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you with effect for the future, where the processing is necessary for the purposes of legitimate interests (see Article 6 (1) (e) (f) GDPR). If you object, we will check whether there are legal requirements for processing of your data and if this is not the case, we will no longer process your data.
 
Right to lodge a complaint with the data protection supervisory authority, Article 77 GDPR
You have the right to contact the competent regulatory authority of the European Union or the Member States at any time if you believe that the data protection laws and regulations have been infringed.
 
Contact details of the competent supervisory authority:
Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str 22, 7. th floor
20459 Hamburg, Germany
Email: mailbox@datenschutz.hamburg.de
 
a) Information about the obligation to provide personal data
Data subjects are under no obligation to provide us with personal data. The provision of your personal data is voluntary and, in particular, has no effect on your application.
 
c) Information about automated decision-making and profiling
We do not use automated decision-making or profiling in relation to your application or otherwise.
 

Version: January 2021, Neumann Gruppe GmbH