DATA PROTECTION

Preamble

The protection of your personal data is important to us. We therefore collect, process, store and delete your data in accordance with legal regulations. These are in particular the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other legal bases such as. B. the Telecommunications Telemedia Data Protection Act (TTDSG) in the area of electronic communication.

With the following information we would like to give you an overview of how we process your personal data and your rights under data protection law.

This information complements the data protection declaration on our homepage, where you can find further information, in particular about the terms used.

1. Person responsible for data processing

The person responsible in accordance with Art. 4 Number 7 GDPR is:

KEYPLAYER Interim Management GmbH & Co. KG
Friedrichstraße 1 a
80801 München
Phone: +49 89 3246 2821
Mail: info@keyplayer.de

2. Shared responsibility for data processing

If necessary, we will process your personal data together with other responsible parties in accordance with Art. 26 GDPR. These are our advisory boards and advisors. You can find a current list of those jointly responsible on our homepage under Team.

3. Data protection officer

Our external data protection officer in accordance with Art. 37 GDPR is:

Dipl.-Kfm. Guido Babinsky
c/o basucon GmbH
Detmolder Straße 204
33100 Paderborn
Mail: datenschutz@keyplayer.de

If you have any questions or suggestions about data protection, you can contact our external data protection officer at any time using the email address mentioned above.

4. Purpose of data processing

We process your personal data exclusively for the purpose of personnel placement. No further processing, particularly for advertising purposes, takes place.

5. Legal basis for data processing

The processing of your personal data is generally carried out on the legal basis of Art. 6 Paragraph 1 lit. b, c and f GDPR, i.e. specifically for the initiation and implementation of a contract for personnel placement, for the fulfillment of our legal obligations or for the assertion, exercise and defense of legal claims.

6. Type of data processed

In principle, we only process your personal data, which is either publicly accessible, which you have made available on your social media profiles or which you have voluntarily transmitted and made available to us or the jointly responsible advisory boards and advisors.

This is usually the personal data directly related to your work with our clients or your own data if you are the client yourself. In addition, we of course process data about the advertised position, such as requirement profiles, contact details, names, job descriptions, appointment dates and contract data.

7. Recipient of the processed data

From a technical point of view, your personal data is processed on our behalf by so-called processors.

With these we have corresponding order processing contracts in accordance with. Art. 28 GDPR concluded to ensure the security of processing in accordance with. Art. 32 GDPR.

When initiating an employment relationship, no personal data will initially be transmitted from you to potential applicants, only

an anonymized job profile.

Your actual personal data will only be forwarded or transmitted to the candidates in question after consultation with you and your express and voluntary consent.

8. Transfer to third countries and international organizations

Your personal data will not be transferred to a third country and/or international organizations without your express and voluntary consent.

9. Duration of data processing

At the time of this information, we cannot of course specifically tell you the exact processing time for your data, but we will of course only process your personal data for as long as we have a legal basis for doing so.

In order to ensure that your data is not processed beyond this, we have a deletion concept that takes into account the very different legal and contractual deadlines for storing/retaining your personal data as well as appropriate periods for final deletion.

Statutory and contractual retention/retention periods arise, for example, from the rules of commercial, commercial or tax law as well as from the general and special limitation periods.

10. General rights of those affected

Based on Art. 12 ff. GDPR, you have the right to information regarding your personal data (Art. 15 GDPR), to correction (Art. 16 GDPR), to deletion (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), to objection (Art. 21 GDPR), to lodge a complaint with a supervisory authority (Art. 77 GDPR) as well as effective judicial remedies (Articles 78 and 79 GDPR).

11. Special rights related to joint processing

You can exercise all of the aforementioned rights with each of those jointly responsible in accordance with. Claim paragraph 2 of this information.

12. Information about your rights

You have the right to complain to a supervisory authority at any time. The list of regulators can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

If you do not have access to this list on the Internet, please contact us. We will then provide you with the contact details of the supervisory authority responsible for us.

We expressly point out that an objection in accordance with Art. 21 GDPR may mean that we can no longer or no longer fully fulfill our obligations to you for which we need this data.

13. Information on joint processing by other controllers

The jointly responsible parties have concluded an agreement stipulating that all jointly responsible parties:

• take appropriate technical and organizational measures to protect your data and protect your rights

• maintain a deletion concept,

• Fulfill your documentation obligations,

• Fully inform you before processing your personal data with data protection information or declarations in accordance with Articles 13 and 14 GDPR,

• are obliged to enable you to exercise your rights.

14. Obligation to provide personal data

The provision of the data by you is necessary to carry out the purposes mentioned above, but of course not mandatory or voluntary.

However, the consequences of non-provision are that the recruitment process can no longer be carried out or can no longer be carried out completely and may have to be canceled or terminated by us.

15. Source of your personal data

We generally collect your personal data from you, but if necessary also from:

• Cooperating recruitment companies

• Social media platforms such as Facebook, LinkedIn, XING

• Our advisors

• Our advisory boards

16. Automated decision making or profiling

We do not carry out automated decision-making or profiling.

[1] For reasons of simplification, throughout the document the masculine form is also used for all other genders.