Privacy policy brainsworld UG

This privacy notice describes how BrainsWorld UG uses, processes, stores and discloses personal information that we collect about individuals, including when you register with us through our applicant registration process, through this website and through other sources, such as when you apply for a job through job portals. In this online privacy notice, we explain what kind of data we may collect, use, share and store about you, as well as your choices and rights.

Table of content

• Contact details
• Information about BrainsWorld UG
• Collection and use of personal data
• Real Cookie Banner
• Change of purpose/ business purpose
• Disclosure of your personal data to third parties
• Secure storage of your personal data
• Storage of your personal data
• Your legal rights
• The legal basis for processing your personal data
• Links to other websites
• 1&1 IONOS
• Security & Antispam
• Marketing
• Pipedrive CRM
• Google Fonts Local Hosting
• Google Analytics
• Google Site Kit
• Calendly
• Feedback and complaints
• Changes to this privacy policy

Contact details

If you have questions about how we use your personal information, contact us at:: sabrina.wrede@brains-work.de

Information about BrainsWorld UG

BrainsWorld helps employers in Germany to close the IT skills gap. Our support enables higher revenue opportunities through the redistribution of vacancies. Our digital platform simplifies the complex process from international IT recruitment to visa support, relocation and onboarding. In addition, we help IT specialists from abroad to settle and integrate in Germany and their new work environment.

Real Cookie Banner

Real Cookie Banner asks website visitors for consent to set cookies and process personal data. For this purpose, a UUID (pseudonymous identification of the user) is assigned to each website visitor, which is valid until the cookie expires to store the consent. Cookies are used to test whether cookies can be set, to store reference to documented consent, to store which services from which service groups the visitor has consented to, and, if consent is obtained under the Transparency & Consent Framework (TCF), to store consent in TCF partners, purposes, special purposes, features and special features. As part of the obligation to disclose according to GDPR, the collected consent is fully documented. This includes, in addition to the services and service groups to which the visitor has consented, and if consent is obtained according to the TCF standard, to which TCF partners, purposes and features the visitor has consented, all cookie banner settings at the time of consent as well as the technical circumstances (e.g. size of the displayed area at the time of consent) and the user interactions (e.g. clicking on buttons) that led to consent. Consent is collected once per language.

Collection and use of personal data

Categories of Individuals. Whose personal data we process, collect:

• Visitors: Natural persons who visit or use our websites or other BrainsWorld UG services so that we can provide them with the necessary BrainsWorld UG websites or services;

• Job Seekers: Natural persons who apply to BrainsWorld UG through our search, workforce management or talent consulting services for job openings to fill our internal positions or as part of our staffing services and international recruiting services or for BrainsWorld UG clients (in each case, whether such applications are made online or offline);

• Customers, suppliers, service providers and other vendors: Employees, representatives and/or agents of our customers, service providers, suppliers and other vendors or individuals with whom we have a business relationship and/or manage on behalf of our customers; and

•Experts and others who provide advice regarding the suitability of job seekers: If you submit Personal Information about other individuals to us or our service providers in connection with the BrainsWorld Services, you confirm that you have the authority to do so and also authorize us to use the information in accordance with this Notice.

The collection of information by us includes:

• Directly Submitted Data: BrainsWorld UG collects Personal Information that individuals provide to us through our Services (e.g., by filling out an online form or creating an account on our website(s)). When we ask for data, we will tell you before we collect it whether providing the personal information we request can be provided on a voluntary basis, as well as the consequences if the data is not provided.

• Data Automatically Collected by Us: BrainsWorld UG and our service providers may automatically collect certain technical information from visitors to our website(s) and users of our applications (e.g., through our use of cookies placed on your device).

• Data Automatically Collected by Us: Data obtained by us from other sources or third parties: We may receive or acquire information about our visitors, job seekers, customers, and service providers from third-party partners (such as background check providers and professional database providers) or a job seeker’s, customer’s, or provider’s reference from third parties. In addition, we collect information from our online social media forums, blogs and discussion boards if you choose to interact with that content. In addition, we collect personal information that you provide in your public profiles on social media and other public websites, such as Facebook, LinkedIn, Twitter, Instagram or other company websites and/or job boards.

We collect your personal data directly from you and through other publicly available sources, including when you apply for a job through a job board, directly through our website, on social media sites such as Xing, LinkedIn, Facebook and Twitter, or when you share your data with us during a job fair, promotional, networking or training event. During our applicant registration process, we collect your personal data directly about you, through your resume, work and/or education references, and online tests that you may take at our request. Our customers may request additional personal data about you in relation to their job vacancies and requirements.

The categories of personal information we may collect include:

Identifiers:

Your identity (your full name, previous names, proof of name change); gender, date of birth and marital status;

Proof of your work authorization, which may include a photograph, citizenship, place of birth, driver’s license, etc. (as required by law);

Contact information including your email address, home address and telephone number;

Bank account and social security information (so that we can make payments to you and your account);

Payroll information such as: Your national tax number, address, seniority, marital status, bank account number, family composition, date of birth, telephone number, email address.

Vocational, work-related and educational:

Your criteria, preferences and expectations for the job search;

Your qualifications, skills, work experience and education;

Current salary and other benefits;

educational history;

work history;

Employment and/or training references;

The name of an emergency contact person;

References;

Other information contained in your resume or that you wish to provide to us;

Inferential information:

Include personal and competency assessments

Internet or other electronic network activities and geolocation

Technical data such as IP (Internet Protocol) address, your login information, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices you use to access this website. We may also obtain technical information about you when you visit other websites that use our cookies. For more information, please see our Cookie Policy;

Profile Data, including your username and password, interests, preferences, feedback and responses to customer surveys;

Usage data, including information about how you use our website and services;

Marketing and communications data, including your marketing and communications preferences.

Information about your health and/or criminal record (including terrorist list checks) will only be processed if relevant to your application and as required by law.

In order to provide you with recruitment services (recruitment and/or the provision of consultants), our recruitment consultants will send you emails with job alerts that match your job search criteria and preferences. From time to time, you may also receive job notifications that our consultants deem to be of interest to you.

Our customers and suppliers

If you are already a customer or supplier/service provider or a potential customer or supplier/service provider, we collect and process data on persons in your company. We may store the name and business email address and other business contact details of the relevant persons in our database as contacts for the company. As a rule, we only process the name of the relevant persons as personal data on contacts in companies in order to be able to contact the company in connection with our services or as a customer of the supplier’s/service provider’s deliveries/services. Where a company contact is also registered with us as a candidate, we may process additional personal data to provide recruitment services and for other purposes as set out in this Privacy Policy. The source of a company contact’s name and contact information may be the individual himself or herself, or the relevant information may come from a member of the company’s human resources or purchasing department, another hiring manager, an existing business contact/contact, or a candidate we have placed with the company. We may also identify this information from websites, social media and other sources. We may send business-to-business correspondence to contacts in companies via email. A person who is a contact in a company for us may contact us at sabrina.wrede@brains-work.de at any time and request that we stop sending them business correspondence to their business email address.

Website visitors

We collect a limited amount of information about our website users, and we use this information to improve your experience with our website and to administer our services.

The following data is collected:

Technical Data such as IP (Internet Protocol) address, your login information, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technologies on the devices you use to access this Website. We may also obtain technical information about you when you visit other websites that use our cookies. For more information, please see our Cookie Policy;

Profile Data, including your username and password, interests, preferences, feedback and responses to customer surveys;

Usage data, including information about how you use our website and services;

Marketing and communications data, including your marketing and communications preferences.

How we use your personal data

We also use, process, store and disclose your personal data and other data we collect during our applicant registration process to provide you with staffing services (recruitment and/or The Provision of Consultants), including sending you job notifications through this website and by email, temporary assignments, project-based assignments, project-related work, and permanent and temporary contracts in finance, accounting, technology, administration, legal, marketing and other related functions, employment opportunities and career-related information.

We also process your personal information for other legitimate business purposes, such as to compile statistics, analyze the success of our marketing campaigns, determine the number of visitors to our website, and to comply with other contractual, legal and regulatory obligations and duties.

We do not currently use automated decision-making technologies to make final or conclusive decisions about you. A staff member is always involved in the decision-making process.

Legal basis for processing personal data

Our legal basis for processing personal information about individuals from the European Economic Area depends on the type of personal information and the purpose for which we collect it. However, we will normally only collect personal information from you in the following circumstances:

• We need the personal information to fulfill a contract with you;

• the processing is in our legitimate interest and is not overridden by your rights;

• we have your consent to do so; or

• we may be legally required to collect personal information from you.

If we ask you to provide personal information to fulfill a legal requirement or contract with you, we will express this at the appropriate time and tell you whether or not providing your personal information is mandatory. (We will also inform you of the possible consequences if you do not provide the data). When we collect and use your personal information in connection with our legitimate interests (or those of third parties), that interest is usually to operate our Platform and communicate with you as necessary to provide our services to you and our legitimate business interests, for example, when responding to your requests, improving our services or conducting marketing efforts, or for the purpose of detecting or preventing illegal activity. We may have other legitimate interests and will inform you of what these are at the appropriate time, if applicable. You may choose to provide BrainsWorld UG with your personal information for a specific job for which you are unsuccessful. Because you have indicated that you are seeking employment outside of your current position, BrainsWorld may retain your Personal Information in such a situation in order to make you other offers that may be available to you based on your qualifications. If you have concerns about BrainsWorld UG retaining this data for these purposes, please discuss them with your BrainsWorld UG contact.

Change of purpose

We will only use your personal information for the purposes for which we collected it or for related purposes (as described above).

If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis that authorizes us to do so.

We may process your personal data without your knowledge or consent if we comply with the above rules, as required or permitted by law.

Disclosure of your personal data to third parties

To the extent necessary or appropriate, and without notifying you, BrainsWorld may share your personal information with outside third parties in the following circumstances:

Prospective employers or potential clients: to our clients in the course of providing staffing services (recruitment and/or the provision of consultants).

Companies and individuals we employ to perform business functions and services for us. Examples of service providers include: providing payroll services; background check and verification services; data storage facilities, including in the cloud; hosting our web servers; posting ads and managing applications through our third-party vendor Broadbean; analyzing data and compiling statistics; and legal, accounting, auditing and other professional services.

Compliance with laws, regulations and law enforcement requirements:

To credit reporting agencies and third parties that perform sanctions and terrorism checks.

To government authorities, including: police and other law enforcement agencies; regulatory and supervisory authorities.

To comply with applicable law or legal process or if we reasonably believe that such action is necessary to: (a) comply with the law that requires such disclosure; (b) protect the rights or property of BrainsWorld UG; (c) prevent a crime, protect national security, or detect or prevent fraud; or (d) protect the personal safety of individuals who use our Site or to protect the safety of the public.

Business Transfers and Business Reorganization: to third parties to whom we wish to sell, transfer or merge portions of our business or assets. Alternatively, we may seek to acquire or merge with other businesses. If our business changes, we will notify you.

.

Vendors, consultants and other service providers: to IT consultants who perform testing and development work on our IT systems, service providers we may use as data processors, and other service providers who may be located outside the EEA.

Where applicable, we impose appropriate contractual, security, confidentiality and other obligations on third party service providers and processors we have engaged, depending on the nature of the services they provide to us. We permit them to process your personal information only if they comply with the law and our instructions in doing so. We do not permit them to use your personal data for their own purposes. When our relationship with these service providers ends, we will ensure that your personal data is returned securely or destroyed.

Some of these third parties are also data controllers who are responsible for processing your personal data for their purposes, for example, the local tax authority acts as a data controller for tax purposes. We may not be able to impose obligations or restrictions on this controller in connection with how they process your personal data.

Due to the global nature of our clients’ operations, your personal data may be in the worldwide access (although some recipients may be located in countries that do not have a level of data protection equivalent to the European level of data protection) of our clients’ employees, including their IT administrators and any service providers engaged to process it, who may reasonably require knowledge of such data for the purposes set forth in this Privacy Policy. You are therefore aware that your personal data may be transferred to recipients in third countries that do not have an adequate level of data protection and that such data may be collected, processed, stored and used by our customers and, if applicable, their service providers. To protect your personal data, our customers have assured us that they have taken appropriate security measures to protect this data.

Secure storage of your personal data

We have taken appropriate security measures to prevent the accidental loss, unauthorized use, access, alteration or disclosure of your personal information. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who need it for business reasons.

We have procedures in place to address suspected personal data breaches, and we will notify you and the appropriate supervisory authority of a breach if we are required to do so by law.

How long do we store your personal data?

We will retain your personal data for as long as is necessary to fulfill the purposes we collect it. This means that we will retain your personal data throughout the period of your relationship with us and while we are providing you with staffing services (recruitment and/or the provision of consultants).

Unless there is an ongoing business need to process your personal data, we will either delete or anonymize it or, where this is not possible (for example, because your personal data is stored in backup archives), we will store your personal data in a secure manner, protecting it from further processing until its deletion is possible.

We are required by law to retain basic information about our customers (including contracts, proof of identity, financial and transactional data) for legal, compliance and tax purposes for up to 10 years after our business relationship ends.

We may retain your data for a longer period if we are permitted to do so by law, for example, to defend ourselves against legal action.

Where no retention period is specified by law, we will determine the appropriate retention period for personal data, taking into account all relevant criteria.

In certain circumstances, we anonymize your personal data (so that it can no longer be linked to you and we cannot identify you). We do this for research or statistical purposes. In this case, we may use this anonymized data indefinitely without informing you.

Your legal rights

European data protection rights:

For individuals located in the European Economic Area (“EEA”), the United Kingdom or Switzerland, the following rights apply:

Access: to request data access to retrieve your personal data at any time. If you make such a request, we will provide you with a copy of the personal data we hold about you.

Correction: To request a correction of the personal data we hold about you. This is a way for you to have incomplete or inaccurate personal data we hold about you corrected.

Erasure: To request a deletion or removal of your personal data. So, you can ask us to delete or remove your personal data if we do not have a valid reason to continue processing it. You may also ask us to erase or remove your personal data if you have successfully exercised your right to object to the processing, if we may have processed your data unlawfully, or if we need to erase your personal data to comply with local law. Please note: we may not always be able to comply with your request for erasure for certain legal reasons. These reasons, if applicable, will be communicated to you in response to your request.

Object: To object to the processing of your personal data if we rely on a legitimate interest (or that of a third party) and there is a reason with regard to your particular situation that leads you to object to the processing on that ground because you consider that it affects your fundamental rights and freedoms.
In some cases, we may be able to demonstrate that we have legitimate grounds to process your data that override your rights and freedoms. In this case, we will retain your personal data for the relevant retention periods. Thereafter, we will delete your personal data in accordance with our policies.

To object to direct marketing. You have the right to object if we process your personal data for direct marketing purposes. In this case, we will no longer send you marketing communications.

Restriction: so you can ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to prove the accuracy of the data; (b) if our use of the data is unlawful but you do not want us to erase it; (c) if you want us to keep the data even if we no longer need it because you need it for the establishment, exercise or defense of legal claims; or (d) if you have objected to our use of your data but we need to verify that we have legitimate grounds for processing your data that override your objection.

Transfer of Data: We will assist you with this transfer to third parties by either transferring your personal data for you or providing you with a copy in a machine-readable format. Please note: this right only applies to automated data that you originally gave us consent to use or for which we used the personal data to enter into a contract with you.

Unless an exception applies, we will assist you by, where technically feasible, securely transferring your personal data directly to another controller or providing you with a copy in a structured, commonly used machine-readable format.

To withdraw your consent at any time in cases where we have your consent to process your personal data. However, this will not affect the lawfulness of any processing that was carried out before you withdrew your consent. If you withdraw your consent, we may no longer be able to provide you with certain services. We will inform you if this is the case at the time you withdraw your consent.

We want to ensure that your personal information is accurate and up to date. In addition to your legal rights, you may ask us to make changes or request a copy of your personal information informally by contacting your local BrainsWorld office.

The legal basis for the processing of your personal data

We use your personal information only when permitted by law. In most cases, we use your personal information in the following circumstances:

To perform a contract that we are about to enter into or that we have entered into with you;

Where it is in our legitimate interest to do so;

Where it is our legal or regulatory obligation;

If you consent.

Legitimate interest is where we have a business or commercial reason to use your information to run and manage our business. We consider the potential impact on you and your legal rights when we process your personal data for our legitimate interests. We will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required to comply with a legal or regulatory obligation or are permitted to do so by law).

.

Links to other websites

Our website may contain links to third-party websites, plug-ins, and applications. When you click on these links or enable these connections, third parties may collect or share information about you. We do not control these third-party websites and are not responsible for their privacy statements.

Data protection for minors

This Web Site is not intended for use by children who have not attained the age of 13. BrainsWorld UG does not knowingly collect personal information from children under the age of 13. If we learn that we have collected Personal Information from a child under the age of 13, we will delete that information from our systems.

Marketing

Your choices: Marketing Communications: To the extent not inconsistent with your marketing preferences and applicable privacy laws, we may from time to time send you email updates about promotions or services that we think may interest you, such as jobs in our database that match your eligibility criteria, newsletters, white papers, surveys and event information. You may opt-out of receiving marketing emails from us.

Real Cookie Banner

The website uses Real Cookie Banner. Real Cookie Banner asks website visitors to consent to the setting of cookies and the processing of personal data. For this purpose, each website visitor is assigned a UUID (pseudonymous identification of the user), which is valid until the cookie for storing the consent expires. Cookies are used to test whether cookies can be set, to store a reference to the documented consent, to store which services from which service groups the visitor has consented to and, if consent is obtained in accordance with the Transparency & Consent Framework (TCF), to store the consents in TCF partners, purposes, special purposes, functions and special functions. The consent obtained is fully documented as part of the duty of disclosure under the GDPR. In addition to the services and service groups to which the visitor has consented, and if consent is obtained according to the TCF standard, to which TCF partners, purposes and functions the visitor has consented, this includes all settings of the cookie banner at the time of consent as well as the technical circumstances (e.g. size of the viewing area at the time of consent) and the user interactions (e.g. clicks on buttons) that led to consent. Consent is collected once per language.

You can change or revoke your settings here:

.

Cookies

WordPress (essential)

WordPress is the content management system for this website and allows registered users to log in to the system. Cookies or cookie-like technologies can be stored and read. These can store a session hash, login status, user ID and user-related settings for the WordPress backend. This data can be used so that the browser can recognize you as a logged-in user.

This service is currently categorized as “Essential”. This group implies legitimate interest – with the only difference that this service cannot be revoked.

Polylang (essiential)

Polylang is a multi-language system for WordPress websites to display the website in several languages and thus make it accessible to a larger number of users. Cookies or cookie-like technologies can be stored and read. These can store the user’s selected language and redirect the user to the version of the website that matches the browser language. The legitimate interest in using this service is to store the user’s language in order to deliver the content in the correct language.

Calendly

Calendly enables the embedding of calendars for scheduling appointments with the user in order to improve the website. This requires the processing of the user’s IP address, name, e-mail address, date, scheduled time, metadata and other information provided by the user. Cookies or cookie-like technologies can be stored and read. These may contain personal data and technical data such as user IDs, status of a chat, user role, assignment to a group for user experiments, advertising ID, consents, security tokens, information for payments, whether a Calendly browser extension is used and the language. This data may be used to prevent or correct service errors, security or technical problems, to analyze and monitor usage, to prevent spam, fraud and abuse on the website, to compile detailed statistics on user behavior and to improve Calendly’s services. This data may be linked to the data of users registered on calendly.com. Calendly may share personal information with its affiliates, government agencies and authorized agents.

Calendly LLC, 115 E. Main Street, Suite A1B, Buford, GA 30518, USA,

+1800 9799850,

privacy@calendly.com, 

https://help.calendly.com/hc/de

https://calendly.com/de/privacy

Google Tag Manager

Google Tag Manager is a service for managing tags that are triggered by a specific event that inserts a third-party script or sends data to a third-party service. No cookies in the technical sense are set on the user’s client device, but technical and personal data such as the IP address are transmitted from the client to the service provider’s server to enable the use of the service.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland+1 650 253 0000

dpo-google@google.com

https://support.google.com/

https://policies.google.com/privacy

https://www.google.de/contact/impressum.html

We have concluded standard contractual clauses with the provider.

The provider is self-certified under the Trans-Atlantic Data Privacy Framework for secure data processing in the USA
The adequacy decision for secure data processing only applies if the provider is self-certified and listed in the “Data Privacy Framework List”. To find out which companies are certified.

Google Fonts

Google Fonts enables the integration of fonts into websites in order to improve the website without having to install the fonts on your device. This requires the processing of the user’s IP address and metadata. No cookies or cookie-like technologies are set on the user’s client. The data can be used to record the websites visited and can be used to improve Google’s services. It may also be used for profiling, e.g. to offer you personalized services, such as advertising based on your interests or recommendations. Google makes personal data available to its affiliated companies and other trusted companies or persons who process this data for them on the basis of Google’s instructions and in accordance with Google’s privacy policy.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland,

+1 650 253 0000

dpo-google@google.com

https://support.google.com/

https://policies.google.com/privacy

• The provider is self-certified under the Trans-Atlantic Data Privacy Framework for secure data processing in the USA
• The adequacy decision for secure data processing only applies if the provider is self-certified and listed in the “Data Privacy Framework List”. To find out which companies are certified.

Pipedrive CRM

Der Anbieter ist gemäß dem Trans-Atlantic Data Privacy Framework für die sichere Datenverarbeitung in den USA selbst zertifiziert.
Die Angemessenheitsentscheidung für die sichere Datenverarbeitung gilt nur, wenn der Anbieter selbst zertifiziert und in der “Data Privacy Framework List” aufgeführt ist. So finden Sie heraus, welche Unternehmen zertifiziert sind.

Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estland,

support@pipedrive.com

https://support.pipedrive.com/en/contact-us?ref=www

https://www.pipedrive.com/de/features/privacy-security

https://www.pipedrive.com/de/impressum

• Event names for Google Tag Manager: Opt-in: pipedrive brainsworld.io

  The cookie privacy policy was created with the help of Real Cookie Banner.