Data privacy

We at „Tech Punk GmbH“, responsible party in accordance with the following paragraph § 1, thank you for your visit to our website and interest in our company. We understand the importance of handling your personal information carefully and take measures to ensure the protection of your data. In the following Privacy Policy we want to inform you in particular about the processing of your personal data through use of our website and about your rights.

„Responsible Party“ in accordance with Art. 4 No. 7 GDPR is

Tech Punk GmbH
Represented by managing director Leonard Eisenberg

Chausseestraße 103
10115 Berlin
Telephone: +49 (0)30 23 59 308 - 0
E-Mail: info@techpunk.com

(hereinafter "we" or „Tech Punk”).

Our data protection officer can be contacted as follows:

PROLIANCE GmbH
Leopoldstr. 21
80802 München

www.datenschutzexperte.de
datenschutzbeauftragter@datenschutzexperte.de

Please provide the name of the company to which your inquiry relates when contacting the data protection officer! Please refrain from providing sensitive information e.g. a copy of your identification document./em>

Personal data is only gathered and processed by us to the extent permissible by applicable laws pertaining to the protection of personal data, or if you have provided us with permission to do so. Personal data is processed by us only to the extent permissible by applicable data protection laws or if you have given us permission to process your data.

„Personal data“ is all information relating to an identified or identifiable natural person. This especially includes name, address, email address, date of birth and telephone number.

Further information on the use of cookies and the associated processing of personal data can be found in § 4 of this privacy policy.

Visiting our website is possible without registration or logging in. We do, however, collect data by default from every visitor to the website which is transferred from your browser to our server to ensure that it is technically possible to access our website. For security and stability reasons, our web server automatically logs each access to our website.

The following data is collected:

• Browser type and browser version
• Operating system in use
• Referrer URL
• IP address and host name of the queried computer
• Time of server query

This information is saved independently of any data you have provided to us, particularly that provided through our website during registration. No linkage of this data with any other data occurs. Your information is evaluated for statistical purposes and saved on our servers for a period of 7 days. The legal basis for processing your IP address is Article 6, Paragraph 1 Sentence 1 lit. f) GDPR. Its collection is necessary to guarantee the security and stability of our website.

The provision of further (additional) personal data is voluntary. You shall not be subjected to any adverse consequences if you do not provide us with additional personal data.

However, we do require certain personal information for specific services which we provide through our website. For example, in order to make your registration possible. In these instances, we are unable to provide you with the service you require without the necessary personal data.

1. Contact form
   We have integrated contact forms into our website. You can use a contact form to get in touch with us by electronic means and to send us an inquiry. If you complete such a form and send us your data via the respective interface, the data provided by you in the applicable contact form will be transmitted to us. We collect and process your personal data exclusively for the purpose of answering your (contact) inquiry and typically save them on our web server for 30 days, but for no longer than necessary than the time taken to process your inquiry.

   The legal basis for processing your personal data transmitted to us when sending your contact inquiry is Article  6 Paragraph. 1 Sentence 1 lit. f) GDPR. In the event that your inquiry aims to bring about and/or form the basis of a contract with us, the legal basis for processing your personal data for the purpose of answering your inquiry is Article 6, Paragraph 1 Sentence 1 lit. b) GDPR.

2. Registration via our website
   You have the option to register via our website and thereafter make use of our job placement and career consultation service based on the contractual arrangement which has been created. For this purpose, you must complete one of the registration forms on our website. It is necessary for you to provide the personal data required for creating, implementing and concluding the agreement during the registration process. On the one hand, this includes your name, your telephone number and email address. Furthermore, you must also provide us with your application documents / your CV. We also process your IP address and the time and date of your registration. We process your personal data if and to the extent necessary for forming the basis of, implementing and concluding the agreement, whose object is (voluntary) career consultation and placement services provided by Tech Punk GmbH. The legal basis for the processing of your personal data for the aforementioned purpose is Art. 6 Paragraph 1 Sentence 1 lit. b) GDPR.

   We save our personal data for as long as required for the implementation and conclusion of the contractual relationship concluded with you during the registration process. Furthermore, we also refer to the legal obligations to preserve records, described in further detail in § 4.

   Provided that both you and the company are interested in pursuing an employment application process, we shall forward your CV to the applicable company. The legal basis for forwarding your CV is Article 6, Paragraph 1 Sentence 1 lit. b) GDPR.

3. Arrange a career consultation via our website
   You have the option on our website of arranging a consultation appointment with selected employees or contact persons at Tech Punk. Once you have decided on the preferred contact person and time zone, you can select a date and time for a conversation with a specific employee. You can then provide your name, your email address and telephone number or Skype name via the "enter information” window and transmit this information to us by clicking on the “Finish” button.

   The legal basis for processing your personal data is Article 6, Paragraph 1 Sentence 1 lit. f) GDPR because we have a legitimate interest in processing your personal data for the purpose of arranging and implementing the consultation appointment which you have requested.

   The recipient of the personal data which you have provided for the purpose of arranging a consultation appointment is the service provider we use for coordinating appointments and managing electronic calendars.

4. Registering a vacancy from a company
   Companies have the option to register open vacancies with us. It is necessary that you complete the form on our website for successful registration of your vacancy, in particular by providing your name and contact details, and by uploading the position description. We process the personal data provided by you during registration in order to contact you and conclude a recruitment contract. After successful completion of the contract, we then process your personal data for the purpose of creating and publishing the position you have registered. The legal basis for processing your personal data is Article 6, Paragraph 1 Sentence 1 lit. f) GDPR because we have a legitimate interest in the personal data you provide in the registration form.

5. Processing of personal data when contacting us by email or telephone
   If you contact one of the contact persons listed on our website via the email address or telephone number provided in their "business card", we will process your personal data that you provide to us to contact them or as part of an enquiry (e.g. your first and last name, your telephone number, address data, email address, other information relevant to the recruitment process, application documents) for the purpose of enabling us to contact you and discuss your request. The legal basis for the processing of your personal data for the aforementioned purposes is Art. 6 para. 1 sentence 1 lit. f) GDPR.

Your personal data is essentially stored only for as long as required in order to fulfil the purpose stipulated in § 3. Additional information regarding how long your data is retained can also be found in individual bullet points in the foregoing § 3.

Furthermore, requirements to store data may arise from legal provisions, especially those pertaining to archiving obligations. We are therefore obliged, through various commercial and tax provisions, to retain or store certain data from you for a period of up to ten years. However, we will in these cases block your data from access so that it can only be used for archival purposes. The legal basis for processing your personal data in this case is Article 6, Paragraph 1 Sentence 1 lit. c) GDPR. 

4. RECIPIENTS OF PERSONAL DATA OR CATEGORIES OF RECIPIENTS
We do not pass on your personal data listed under the above sections 1 and 2 of this § 3 to third parties unless we are legally authorised to do so, you have given us your consent to do so or we are obliged to pass on your data to state institutions and/or authorities due to mandatory legal regulations or official or court orders. You can find more detailed information on the recipients or categories of recipients of personal data in the respective bullet points 1 and 2 of this Section 3.

In addition, we use service providers to send emails and host our website. The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online offering. In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR.

Another recipient of personal data is a (sister) company that provides commercial, administrative and technical services for Tech Punk on our behalf.

Below is a schedule of our cookie consent tool:

This website uses the open source web analytics service Matomo, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("Matomo").

With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. For this purpose, we can find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g. IP address, referrer, browsers used and operating systems.

We host Matomo ourselves on our servers and do not set cookies on your terminal device. he use of this analysis tool is based on Article 6 para. 1 lit. f DSGVO the website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. You can object to the processing at any time.

In addition to using Matomo itself, we also use the "heat maps" feature. Heatmaps allow us to take a closer look at and measure which actions are performed by our website visitors (e.g. clicks, purchases, filling out forms, etc.) and how often they are performed.

We use the heatmap function solely on the basis of your consent in accordance with Article 6 Abs. 1 lit. a) DSGVO.

In order to provide you with information about our company and the opportunity to contact us, we maintain profiles of our company in the following social networks:

• Facebook
  (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland (sofern Sie in der EU ansässig sind) bzw. der Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (sofern sie außerhalb der EU ansässig sind)) at
  https://www.facebook.com/techpunk.io
• Instagram
  (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland) at
  https://www.instagram.com/techpunk.io/
• XING
  (New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland) at
  https://www.xing.com/pages/techpunkgmbh
• LinkedIn
  (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2 Ireland, if you are located within the European Union, the European Economic Area or Switzerland; in other cases LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA) at
  https://www.linkedin.com/company/techpunkgmbh/

If you visit our company profile on one of the aforementioned social media sites, personal data is regularly processed.

The respective operator of the corresponding platform is solely responsible for the processing of personal data on the social network. Further information on the processing of your personal data by the operator of the social network can be found in the data protection statements of the respective operator. These are available at:

• Facebook at https://www.facebook.com/policy
• Instagram at https://help.instagram.com/155833707900388
• XING at https://privacy.xing.com/de/datenschutzerklaerung
• LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Through our social media presences, we also have the opportunity to contact and interact with users and inform them about our offers and news. Likewise, you also have the opportunity to contact us via our social media presence. In these cases, your personal data will also be processed by us (see below under point 1). In addition, we also receive user statistics from the operators of the social networks as part of the "Insights" function (see below under point 2)).

When you visit one of our social media profiles, you regularly have the opportunity to contact and interact with us on a voluntary basis (e.g. by sending a message/inquiry or creating your own comment/tweet). In the event of such contact/communication, we, as the operator of the respective social media profile and the responsible party, process the data and content transmitted by you as well as, if applicable, your publicly viewable profile data (e.g. your (user) name) within the meaning of the data protection provisions. We process this data in order to interact with you, to respond to your inquiry or comment and, if necessary, to provide you with further information about our company and our services.

If you have given us consent to process your personal data, the legal basis for data processing for the aforementioned purposes is Article 6 (1) sentence a) GPDR. If this is not the case, the legal basis for processing your personal data is Article 6 (1) sentence 1 lit. f) GPDR, as we have a legitimate interest in contacting or responding to your inquiry or feedback on your contribution. If the purpose of the contact/communication is to initiate and/or establish a contract with us, the legal basis for the processing of your personal data is Article 6 (1) sentence 1 lit. b) GPRDR.

We share the personal data processed through our social media channels in the context of contacting us with the following recipient: sister company of Tech Punk.

We also receive anonymous usage statistics ("insights data") from the social media platforms in relation to our presences maintained there (e.g., about the number of visitors/followers and certain interactions and actions taken via our social media site).

By evaluating the transmitted statistics, we can assess the effectiveness of individual measures via our social media presence, improve our offering, and make our posts even more interest- and target-oriented.

With Facebook and LinkedIn, we have concluded a corresponding data protection agreement within the meaning of Article 26 (1) sentence 2 of the GDPR with regard to such data processing within the scope of Page Insights, which is carried out under joint responsibility. The agreements regulate, among other things, which of the joint controllers fulfills which obligation pursuant to the GDPR, in particular with regard to the exercise of the rights of the data subject and who fulfills which information obligations pursuant to Article 13 et seq. GDPR. You can access the (essential) content of the joint responsibility agreement under the following links.

• Facebook:
  https://de-de.facebook.com/legal/terms/page_controller_addendum
• LinkedIn:
  https://legal.linkedin.com/pages-joint-controller-addendum

Please note that joint responsibility exists exclusively with regard to the data processing carried out via the Insights service and specified in the agreement. The legal basis for the data processing that we carry out in joint responsibility with the aforementioned social media providers is Article 6 (1) sentence 1 lit. f) GPDR, as we have a legitimate interest in evaluating the use of our social media presences for the aforementioned purposes.

Further information on the processing of personal data by the operator of the respective social media platform in the context of the creation and use of usage statistics can be found in the following links:

• Facebook:
  https://de-de.facebook.com/legal/terms/information_about_page_insights_data
• LinkedIn:
  https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

All of our systems in which personal data is stored are password protected and accessible only to a limited number of persons. The processing and use of data takes place solely in the Federal Republic of Germany, in a member state of the European Union or in another signatory state of the European Economic Area Agreement.

We do not forward your personal data to any third parties unless we are legally authorized to do so, you have provided us with the appropriate permission or if we are legally required to forward data to state institutions and/or authorities due to mandatory legal requirements or orders from courts or other government authorities. Further information regarding the recipients or categories of recipients of personal data can be found in the applicable bullet point in § 3.

• Hosting and Sending of Emails
  Furthermore, we engage service providers for the sending of email and hosting of our website. The hosting services we engage serve to ensure fulfillment of the following services: Infrastructure and platform services, computing capacity, memory space and database services, email sending, security services as well as technical maintenance services which we use for the purpose of operating our online offering. Here we or our hosting service provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, persons interested in our services and visitors to our online presence based on our legitimate interest in an efficient and safe availability of our online offering (Article 6, Paragraph 1 Sentence 1 lit. f) GDPR in connection with  Article  28 GDPR).
• Cooperation with Google
  To operate our website we make use of various services from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“) or Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
  
  The purpose and scope of data collection and further processing and usage of data by Google, as well as your related rights and settings options for protecting your privacy sphere, can be found in Google’s applicable data protection provisions (https://policies.google.com/privacy?hl=de). Due to the fact that Google is headquartered in the USA, it is possible that data transmission to the USA can occur. Google has subjected itself to the EU-US Privacy Shield to ensure European data protection standards. Further information regarding this can be found at https://www.privacyshield.gov/EU-US-Framework. Additional information regarding data usage by Google, settings and objection options can be found in Google’s privacy policy (https://policies.google.com/technologies/ads) as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).
  
  
  • We have integrated Google Maps into our website via an API so that we can display specific addresses and routes from origin to destination for you. This comprises an interactive map service which calculates and displays locations and journey routes from origin to destination. For this purpose, the IP address and location of your computer is transmitted. We do not have any influence on the data transfer and further processing undertaken by Google. The possibility of being informed about the situation of particular job providers is an important service which is in the interests of our customers (legitimate interest in the sense of Article 6, Paragraph 1 Sentence 1 lit. f) GDPR).
  • We use Google Analytics based on our legitimate interest in the analysis, optimization and commercial operation of our online offering as stipulated in the Article 6, Paragraph 1 Sentence 1 lit. f) GDPR. Google uses cookies. The information generated by the cookie through usage of our online offering by an individual is typically transmitted to a server in the USA owned by Google and is stored there. Google shall use this information as we have contracted them to do so in order to better evaluate the usage of our online offering, create reports about the activities within the online offering and to provide us with further services connected to the usage of our online offering and internet usage. In these cases, user profiles based on pseudonyms can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means the users’ IP addresses are truncated by Google within the member states of the European Union or in other countries which are signatories to the European Economic Area Agreement. Only in exceptional cases will the complete IP addresses be transferred to a server in the USA and truncated there. Google will not merge the IP user’s address transmitted from the browser with other data. Users can prevent the saving of cookies in the corresponding settings of their browser software. Users can also prevent the collection of data generated by the cookie and data relating to usage of our online offering from being transmitted to Google and the processing of this data by Google by downloading and installing the available browser plug-in in the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Personal data is either deleted or anonymized after 14 months.

You have the following rights from us in relation to the personal data affecting you:

• Right to Information (Article 15 GDPR),
• Right to Rectification or Deletion (Article 16 and 17 GDPR),
• Right to Restriction of Processing (Article 18 GDPR),
• Right to Data Portability (Article 20 GDPR).

If you are of the opinion that we have not processed your personal data in accordance with the provisions specified herein and/or with applicable data protection laws, you can at any time make a complaint about how we have processed your personal data to the competent data protection authority (Article 77 GDPR).

In accordance with Article 21, Paragraph 1 GDPR you have the right, for reasons resulting from your own specific situation, to object to the processing of data affecting you which result from Article 6, Paragraph 1 Sentence 1 lit. e) or lit. f). You can address your objection to the responsible party (see § 1) or to our data protection officer (see § 2). In case of an objection we will no longer use your personal data for the designated purpose and will delete it from our system unless we can prove legitimate reasons for processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.

As of: 29.1.2024