DATA PROTECTION

Privacy policy

Foreword

Thank you for your interest in our online presence. We, Isaria Recruitment GmbH, (hereinafter "the company") take the protection of your personal data seriously and would like to inform you at this point about data protection in our company.

Within the scope of our responsibility under data protection law, additional obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR") in order to ensure the protection of personal data of the person affected by a processing operation (we also address you as data subject hereinafter with "customer", "user", "you", "you" or "data subject").

Insofar as we decide either alone or jointly with others on the purposes and means of data processing, this includes above all the obligation to inform you transparently about the nature, scope, purpose, duration and legal basis of the processing (cf. Articles 13 and 14 DS-GVO). With this statement (hereinafter: "Privacy Notice"), we inform you about the manner in which your personal data is processed by us.

Our data protection notices have a modular structure. It consists of a general part for any processing of personal data and processing situations that come into play each time a website is called up (A. General) and a special part, the content of which relates in each case only to the processing situation specified there with the designation of the respective offer or product, in particular the visit to websites as detailed here (B. Visit to websites).

A. General

(1) Definitions

Following the example of Art. 4 of the GDPR, this privacy notice is based on the following definitions:

"Personal data" (Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person ("data subject"). A person is identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data or by means of information relating to his or her physical, physiological, genetic, mental, economic, cultural or social identity characteristics. The identifiability can also be given by means of a linkage of such information or other additional knowledge. The origin, form or embodiment of the information is irrelevant (photographs, video or audio recordings may also contain personal data).

"Processing" (Art. 4 No. 2 GDPR) means any operation which involves the handling of personal data, whether or not by automated (i.e. technology-based) means. This includes, in particular, the collection (i.e., acquisition), recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction of personal data, as well as the change of a purpose or intended use on which a data processing was originally based.

"Responsible party" (Art. 4 No. 7 DS-GVO) means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal

"Third party" (Art. 4 No. 10 GDPR) means any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or processor; this also includes other group-affiliated legal entities.

"Processor" (Art. 4 No. 8 DS-GVO) is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller, in particular in accordance with the controller's instructions (e.g. IT service provider). In particular, a processor is not a third party in the sense of data protection law.

"Consent" (Art. 4 No. 11 GDPR) of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

(2) Name and address of the responsible party for the processing

We are the controller for the processing of your personal data within the meaning of Art. 4 No. 7 GDPR:

Isaria Recruitment GmbH

Schlosslände 26

85049 Ingolstadt

represented by the managing director Fabian Mäntele

Phone.: +49-89-000-000

E-Mail: info@isaria-recruitment.de

For further information on our company, please refer to the imprint details https://www.isaria-recruitment.de/en/impressum on our website.

(3) Contact details of the data protection officer

Our company data protection officer is available at all times to answer any questions you may have and to act as your contact person on the subject of data protection at our company. The contact details are:

Isaria Recruitment GmbH

Data Protection Officer

Schlosslände 26

85049 Ingolstadt

E-Mail: datenschutz@isaria-recruitment.de

(4) Legal bases of data processing

By law, in principle, any processing of personal data is prohibited and only permitted if the data processing falls under one of the following justifications:

Art. 6 (1) p. 1 lit. a GDPR ("consent"): Where the data subject has voluntarily, in an informed manner and unambiguously indicated by a statement or other unambiguous affirmative act that he or she consents to the processing of personal data relating to him or her for one or more specific purposes;
Art. 6 para. 1 p. 1 lit. b GDPR: If the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject;
Art. 6 para. 1 p. 1 lit. c GDPR: If the processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. a legal obligation to keep records);
Art. 6 para. 1 p. 1 lit. d GDPR: If the processing is necessary to protect the vital interests of the data subject or another natural person;
Art. 6 (1) p. 1 lit. e GDPR: Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or
Art. 6 (1) p. 1 lit. f DS-GVO ("Legitimate Interests"): When processing is necessary to protect the legitimate (in particular legal or economic) interests of the controller or a third party, unless the conflicting interests or rights of the data subject override (in particular if the data subject is a minor).

For the processing operations carried out by us, we indicate below the applicable legal basis in each case. A processing operation may also be based on several legal bases.

(5) Data deletion and storage period

For the processing operations carried out by us, we indicate below in each case how long the data will be stored by us and when it will be deleted or blocked. Unless an explicit storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for the storage no longer applies. In principle, your data will only be stored on our servers, subject to any transfer that may take place in accordance with the regulations in A. (7) and A. (8).

However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings, or if storage is required by legal regulations to which we are subject as the responsible party (e.g. § 257 HGB, § 147 AO). If the storage period prescribed by the legal regulations expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

(6) External hosting

In order to provide our online offer securely and efficiently, we use the services of web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.

The data processed as part of the provision of the hosting offer may include all information relating to the users of our online offer, which is generated as part of the use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online offers to browsers, and all entries made within our online offer or from websites.

The web hosting services we use also include the sending, receiving and storing of e-mails. For these purposes, the addresses of the recipients and senders as well as further information regarding the e-mail dispatch (e.g. the providers involved) and the contents of the respective e-mails are processed. The aforementioned data may also be processed for SPAM detection purposes. Please note that e-mails are generally not sent encrypted on the Internet. As a rule, e-mails are encrypted in transit, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore not assume any responsibility for the transmission path of the e-mails between the sender and the reception on our server.

We ourselves (or our web hosting provider) collect data on each access to the server (so-called server log files). The server log files may include the address and name of the web pages and files accessed, the date and time of access, data volumes transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files are used on the one hand for security purposes, e.g., to prevent server overload (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand, to ensure the utilization of the servers and their stability.

(7) Data security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties (e.g. TSL encryption for our website), taking into account the state of the art, implementation costs and the nature, scope, context and purpose of the processing, as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

We will be happy to provide you with more detailed information on request. Please contact our data protection officer (see under A. (3)).

(8) Cooperation with processors

As with any larger company, we also use external domestic and foreign service providers (e.g. for IT, logistics, telecommunications, sales and marketing) to handle our business transactions. They only act on our instructions and have been contractually obligated to comply with data protection regulations in accordance with Art. 28 GDPR.

(9) Requirements for the transfer of personal data to third countries

In the course of our business relationships, your personal data may be transferred or disclosed to third party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing takes place exclusively for the fulfillment of contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer below at the relevant points.

Some third countries are certified by the European Commission as having a level of data protection comparable to the EEA standard through so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be obtained here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html). However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible via binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates, recognized codes of conduct or self-certification via the EU-US Privacy Shield (information on this can be found here: https://www.privacyshield.gov/welcome). Please contact our data protection officer (see under A. (3)) if you would like more information on this.

(10) No automated decision making (including profiling)

We do not intend to use any personal data collected from you for any automated decision making process (including profiling).

(11) No obligation to provide personal data

We do not make the conclusion of contracts with us dependent on you providing us with personal data in advance. For you as a customer / project partner, there is also no legal or contractual obligation to provide us with your personal data; however, it may be that we can only provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the products we offer presented below, you will be informed of this separately.

(12) Legal obligation to transmit certain data

We may be subject to a specific legal or statutory obligation to provide the lawfully processed personal data to third parties, in particular public bodies (Art. 6 para. 1 sentence 1 lit. c GDPR).

(13) Your rights

You can assert your rights as a data subject regarding your processed personal data at any time by contacting us using the contact details provided at the beginning of A. (2). You have the right as a data subject:

in accordance with Art. 15 GDPR to request information about your data processed by us. In particular, you can request information about the processing purposes, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
in accordance with Art. 16 GDPR to demand the correction of incorrect data or the completion of your data stored by us without delay;
pursuant to Art. 17 GDPR to request the deletion of your data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
to request the restriction of the processing of your data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you or the processing is unlawful;
pursuant to Art. 20 GDPR to receive your data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller ("data portability");
object to the processing pursuant to Art. 21 GDPR, provided that the processing is based on Art. 6 (1) p. 1 lit. e or lit. f GDPR. This is particularly the case if the processing is not necessary for the performance of a contract with you. Unless it is an objection to direct marketing, when exercising such an objection, we ask you to explain the reasons why we should not process your data as we have done. In the event of your justified objection, we will review the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing;
in accordance with Art. 7 (3) GDPR, to revoke your consent once given - i.e. your voluntary will, made understandable in an informed manner and unambiguously by means of a declaration or other unambiguous confirming action, that you agree to the processing of the personal data in question for one or more specific purposes - at any time vis-à-vis us, if you have given such consent. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future and
complain to a data protection supervisory authority about the processing of your personal data in our company pursuant to Art. 77 GDPR, such as the data protection supervisory authority responsible for us:

The Bavarian State Commissioner for Data Protection, Prof. Dr. Thomas Petri

Wagmüllerstraße 18

80538 Munich

Postal address: P.O. Box 22 12 19, 80502 Munich

Phone number: +49 89 212672-0

E-Mail: poststelle@datenschutz-bayern.de

(14) Changes to the privacy notice

In the context of the further development of data protection law and technological or organizational changes, our data protection information is regularly reviewed to determine whether it needs to be adapted or supplemented. You will be informed of any changes in particular on our website at www.isaria-recruitment.de. This data protection notice is current as of June 2023.

B. Website visit

(1) Explanation of the function

You can obtain information about our company and the services we offer in particular at www.isaria-recruitment.de together with the associated sub-pages (hereinafter collectively referred to as "websites"). When you visit our websites, your personal data may be processed.

(2) Personal data processed

During the informative use of the websites, the following categories of personal data are collected, stored and processed by us:

"Log data": When you visit our websites, a so-called log data record (so-called server log files) is stored temporarily and anonymously on our web server. This consists of:

the page from which the page was requested (so-called referrer URL)
the name and URL of the requested page
the date and time of the call
the description of the type, language and version of the web browser used
the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established
the amount of data transferred
the operating system
the message whether the call was successful (access status/http status code)
the GMT time zone difference

"Contact Form Data": A contact form is available on our websites, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask (e.g. gender, surname and first name, address, company, e-mail address and the time of transmission) are transmitted to us and stored. These data are:

E-mail address of the user
any additional personal data voluntarily provided in the message

The following data is also stored at the time the message is sent:

the IP address of the user
Date and time of dispatch

For the processing of data, your consent is obtained during the submission process and reference is made to this privacy policy. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

"Newsletter Data": In addition to the purely informational use of our website, we offer the subscription to our newsletter, with which we inform you about (subject matter). If you subscribe to our newsletter, the following "newsletter data" will be collected, stored and processed by us:

the page from which the page was requested (so-called referrer URL)
the date and time of the call
the description of the type of the web browser used
the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established
the e-mail address
the date and time of registration and confirmation

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the aforementioned data and the web beacons with your e-mail address and an individual ID. Links contained in the newsletter also contain this ID. The data is collected exclusively pseudonymously, i.e. the IDs are not linked with your other personal data, a direct personal reference is excluded.

(3) Purpose and legal basis of data processing

We process the personal data described in more detail above in accordance with the provisions of the GDPR, the other relevant data protection regulations and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6 (1) p. 1 lit. f GDPR, the aforementioned purposes also represent our legitimate interests.

The processing of the log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR).

Contact form data is processed for the purpose of handling customer inquiries (legal basis is Art. 6 para. 1 p. 1 lit. b or lit. f DS-GVO).

The newsletter data is processed for the purpose of sending the newsletter. When registering for our newsletter, you consent to the processing of your personal data (legal basis is Art. 6 para. 1 lit. a DS-GVO). For the registration to our newsletter, we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to [info@isaria-recruitment.de] or by sending a message to the contact details given in the imprint.

(4) Duration of data processing

Your data will only be processed for as long as is necessary to achieve the above-mentioned processing purposes; the legal bases specified in the context of the processing purposes apply accordingly. With regard to the use and storage duration of cookies, please refer to point A. (5) and the Cookie Policy.

Third parties used by us will store your data on their system for as long as is necessary in connection with the provision of services for us in accordance with the respective order.

For more details on the storage period, please refer to A. (5) and the Cookie Policy.

(5) Transfer of personal data to third parties; basis for justification

The following categories of recipients, which are usually processors (see A. (7)), may receive access to your personal data:

Service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6 para. 1 p. 1 lit. b or lit. f GDPR, insofar as it does not involve order processors;
Government agencies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the disclosure is then Art. 6 para. 1 p. 1 lit. c GDPR;
Persons employed to carry out our business operations (e.g. auditors, banks, insurance companies, legal advisors, supervisory authorities, parties involved in company acquisitions or the establishment of joint ventures). The legal basis for the disclosure is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR.

For the guarantees of an adequate level of data protection in the event of a transfer of data to third countries, see A. (8).

In addition, we will only share your personal data with third parties if you have given your express consent to do so in accordance with Art. 6 (1) p. 1 lit. a GDPR.

(6) Use of cookies, plugins and other services on our website

We use cookies on our websites. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive by means of a characteristic character string and through which certain information flows to the body that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offer as a whole more user-friendly and effective, i.e. more pleasant for you.

Cookies can contain data that make it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that cannot be related to a specific person. However, cookies cannot directly identify a user.

A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. With regard to their function, a distinction is made between cookies:

Technical cookies: these are mandatory to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which web pages you have visited;
Performance cookies: these collect information about how you use our website, which pages you visit and, for example, whether errors occur during website use; they do not collect information that could identify you - all information collected is anonymous and is only used to improve our website and find out what interests our users;
Advertising cookies, targeting cookies: These are used to offer the website user tailored advertising on the website or third-party offers and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months;
Sharing cookies: These are used to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your explicit and active consent pursuant to Art. 6 (1) p. 1 lit. a GDPR. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we will only share your personal data processed through cookies with third parties if you have given your express consent to do so pursuant to Art. 6 (1) p. 1 lit. a GDPR.

Cookie Policy

When you visit our website(s) for the first time, you will be asked to select the type of cookies you wish to receive. We therefore ask for your prior consent for some cookies, while we set the necessary cookies as part of our legitimate interest. You can also use the privacy settings of your browser to do this. However, refusing all cookies through your browser's privacy settings means that you may not be able to take full advantage of all the features of our website. Every browser is different. Therefore, check your browser's help menu to see how you can change your cookie settings.

If you choose to delete all cookies through your browser's privacy settings, this will also delete any opt-out cookies placed on your computer and you may need to actively opt-out again.

For more general information about cookies, including how to disable them, visit aboutcookies.org. Here you can also learn how to delete cookies from your computer.

Before we process or have data processed in the context of the use of cookies, we ask users for consent that can be revoked at any time. Before the consent has not been given, cookies are only used if they are absolutely necessary for the operation of our website. Their use is based on our and your interest in the expected functionality of our online offer.

You can revoke your consent at any time by changing the cookie settings.

Social Media Plugins

We do not use social media plugins on our websites. If our websites contain icons from social media providers (e.g. Xing, Linkedin, WhatsApp with icons on the company's website), we only use these to passively link to the pages of the respective providers.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google inc (https://www.google.de/intldeabout/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). Google Analytics uses so-called "cookies" and pseudonymized usage profiles are created in this context. Cookies" are text files that are stored on your computer and enable an analysis of your use of the website. Collected are for example:

Operating system information
to the browser
Your IP address (host name of the accessing computer)
the website you previously visited (referrer URL)
Date and time of the server request

The information generated by this text file about the use of our website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage for the purposes of market research and demand-oriented website design. If required by law or if third parties process this data on Google's behalf, Google will also pass this information on to these third parties. This use is anonymized or pseudonymized (IP masking). You can prevent the installation of cookies by selecting the appropriate settings on your Internet browser. However, we would like to point out that this may mean that not all functions can be used. To do this, you must disable the storage of cookies in your Internet browser. For more information, please refer to the usage instructions of your Internet browser. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 (1) p. 1 lit. f GDPR. You can find further data protection information from Google at: http://www.google.de/intl/de/policies/privacy/

Google Maps

We have integrated components of Google Maps on our website. The operating company of Google Maps is the mapping service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). When you call up a single page of our website that contains a Google Maps component, the component causes your Internet browser to download a corresponding representation of the component. Thus, Google Maps knows which specific sub-pages you have visited (including your IP address). If you do not want information to be transmitted to Google Maps, deactivate JavaScript in your browser settings. Map use is no longer possible after JavaScript has been deactivated. For more information about Google's privacy policy, please visit: http://www.google.de/intl/de/policies/privacy/. The terms of use of Google Maps can be found at: http://www.google.com/intl/de_de/help/terms_maps.html

Google Ads

Google Ads is another integrated component on our website. To enable companies to measure the success of their Ads campaign, Google places a cookie on our website. The operating company of Google Ads is the mapping service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). If you call up a single page of our website on which a Google Ads component is located, your internet browser will be prompted by the component to download a corresponding representation of the component. Thus, Google Ads knows which specific sub-pages you have visited (including your IP address). This reads and stores the IP address as well as the interactions of the users who came to the page of the companies via an ad. If you do not want information to be transmitted to Google Ads, disable JavaScript in your browser settings. For more information on Google's privacy policy, please visit: http://www.google.de/intl/de/policies/privacy/. This reads and stores the IP address and the interactions of users who have come to the page of the companies via an ad.

Visitor Analytics

Visitor Analytics is a simple website analytics service that collects traffic to our website and general information from website visitors. We collect statistics to improve the experience of our website visitors. We never use cookies for this purpose. As a website operator that uses Visitor Analytics to measure reach, depending on the privacy level we have enabled, we may process information about the device you use and its characteristics, information about technical characteristics of the website visit, the number of page visits and statistically relevant behaviors of our visitors on the website. The Platform does not use the collected data to identify individual users or to match the data with additional information about an individual user. Depending on the location from which you access our website, Visitor Analytics may not collect any information about the device you are using due to our technical settings.

LinkedIn Insight Tag

We have integrated components of the LinkedIn service on our website. The operating company of LinkedIn is LinkedIn AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. If you call up an individual page of our website on which a so-called LinkedIn plug-in (component) is located, your internet browser is prompted by the component to download a corresponding representation of the component. Thus, LinkedIn knows which specific sub-pages you have visited. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking. If the users are members of the LinkedIn platform, LinkedIn can assign the call of the above-mentioned content and functions to the profiles of the users there. LinkedIn is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Opt-out: https:// www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Further data protection information from LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

Xing

We have integrated components of the Xing service on our website. You can recognize the Xing plugins (Xing button) by the Xing logo on our page. The operating company of Xing is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. If you call up an individual page of our website on which there is a so-called Xing plug-in (component), your Internet browser is prompted by the component to download a corresponding representation of the component. Thus, Xing knows which specific sub-pages you have visited. If you are logged in to Xing at the same time, Xing can track which of our sub-pages you have visited, as this information is collected by the component and assigned to your account. If you click on an integrated Xing button (e.g. content such as images, videos or texts and buttons belong to users can express your like), this information is assigned to your user account and their personal data is stored. If you do not want information to be transmitted to Xing, log out of Xing before accessing our website. Find more privacy information from Xing at: https://www.xing.com/app/share?op=data_protection

WordPress

We have integrated components of the service WordPress on our website. The operator of WordPress www.wix.com. If you call up a single page of our website on which a so-called WordPress plug-in (component) is located, your internet browser is prompted by the component to download a corresponding representation of the component. Thus, WordPress knows which specific sub-pages you have visited. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking. If the users are members of the WordPress platform, WordPress can assign the call of the above content and functions to the profiles of the users there. Further data protection information from WordPress can be found at: https://automattic.com/de/privacy/

Site Booster by AppSharp

We have integrated components of the service WIX_Site Booster by App Sharp on our website. The operating company of WIX www.wix.com. If you call up a single page of our website on which a so-called WIX_Site Booster by App Sharp plug-in (component) is located, your internet browser will be prompted by the component to download a corresponding representation of the component. Thus, WordPress knows which specific subpages you have visited. This may include, for example, content such as images, videos or texts and buttons with which users can express their liking. If the users are members of the WordPress platform, WordPress can assign the call of the above-mentioned content and functions to the profiles of the users there. Further data protection information from WIX_Site Booster by App Sharp can be found at: https://de.wix.com/manage/privacy-security-hub.

C. Nutzungsbedingungen des Isaria Accounts und des Projekt-Stellenmarkts

On our website, we offer users the opportunity to register in our Isaria Account by providing personal data. By storing your personal data and profile data, including your qualifications, in the Isaria Account, we also help users to apply for vacant projects.

If you use our services for business purposes, e.g. to acquire new projects, the provision of personal data is mandatory. Without providing this data, it is unfortunately not possible to match the requirements profile of our customers and thus to introduce ourselves to the customer.

(1) Scope

These Terms of Use govern the legal relationship between Isaria Recruitment GmbH as operator and the Isaria Account as user. To use the Isaria Account, you can register and gain access to the data you have stored at any time. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is collected during the registration process:

At the time of registration, the following data is also stored:

First and last name of the user
E-mail address of the user
Address of the user (optional)

In the further course the following data are deposited accordingly:

The IP address of the user
The date and time of registration

As part of the registration process, the user's consent to the processing of this data is obtained.

In addition, you can of course search our job market without registering. In this case, not all functions will be available to you. However, you can apply for projects without having to register. The Isaria Account is for commercial use only. Use by consumers in the sense of § 13 BGB (German Civil Code) is excluded. Deviating terms and conditions or contractual terms do not apply to portal use.

(2) Scope of use

With the Isaria Account, Isaria Recruitment GmbH offers an information and communication platform that gives you the opportunity to acquire projects and present yourself. The deposit of your personal data in the Isaria Account is voluntary and free of charge. You also decide which data you store in your account. You can edit your personal data at any time after successful login. Furthermore, you can delete your profile and your user account at any time. Please note that deletion of the user account including your profile does not automatically lead to deletion of your profile in our database. You can revoke your consent to data storage at any time. In the event of revocation, your data will be deleted, provided that this does not conflict with any statutory retention periods. In this case, your data will be blocked.

Isaria Recruitment GmbH does not guarantee the constant and comprehensive availability of the Isaria Account and Job Market, which may be impaired, for example, by disruptions to the server, public communication networks, power supply or other circumstances beyond the control of Isaria Recruitment GmbH. Furthermore, Isaria Recruitment GmbH reserves the right to temporarily restrict the services due to maintenance work and further developments, insofar as these are necessary for proper or improved operation.

Isaria Recruitment GmbH does not guarantee that the information and content provided on the Isaria Account and Job Market is complete, correct and in any case up-to-date. However, we make every effort to keep the information (such as job advertisements) up to date and error-free and check this at regular intervals.

(3) Registration Isaria Account

In order for you to be able to make full use of your personal data and profile data, including your qualifications and the job market, it is possible for you to create an Isaria Account. However, registration and use of an account can only take place and is only permissible after the user has read these Terms of Use and declared his or her agreement. The user accepts the terms of use by checking the electronic box provided for this purpose when registering on the job market. Only in this case can the user register in the job market and create an Isaria account.

Isaria Recruitment GmbH is entitled to refuse registration requests without giving reasons or to block user accounts.

You are only permitted to register and log in if you are of legal age and have full legal capacity. Persons who have not yet reached the age of 18 require the consent of their legal representative. In the case of a legal entity, registration and login must be carried out by a natural person of unlimited legal capacity and authorized to represent the entity.

After submitting the registration form, you will automatically receive a confirmation e-mail with a personalized activation link. After successful registration, you can create a user profile, which you can access with the help of your e-mail address and a password created individually by you. The created password must contain at least 6 related characters, including at least one letter and one number. In addition, the use of upper and lower case letters and special characters is recommended.

For your own protection against unauthorized use of your own user account, you should choose a password that is difficult to guess, keep the chosen password secret from other people, and do not use the access data (user name and password) on other portals.

If you learn or suspect that the password you have chosen has become known to third parties, you are obligated to immediately change the password and notify Isaria Recruitment GmbH (e-mail is sufficient).

(4) Duties of the user

You, as the user, are obligated:

to provide only true and non-misleading information in the Isaria Account and in communications and not to use pseudonyms;
to provide in data fields only information for which the respective data field is intended according to its description, and not to provide information, in particular on contact data, in places other than those intended;
to keep your access data (e-mail address and password) secret and not to pass them on to unauthorized third parties;
to treat all information and data received from Isaria Recruitment GmbH as confidential and not to disclose or make it available to third parties. This obligation applies beyond the termination of the contract;
to use your account exclusively for yourself;
refrain from any action that could damage or impair the functionality of the technical infrastructure of Isaria Recruitment GmbH and the secure operation of the Isaria Account, as well as impair the availability of the data stored in the Isaria Account or harass other users.
In the event that you fear that unauthorized third parties have gained or will gain knowledge of your access data, you are obliged to inform Isaria Recruitment GmbH immediately. You are liable for any use and/or other activity carried out using your access data according to the legal regulations
You affirm that you are the owner of all necessary rights with regard to the content you provide and that you will refrain from posting content that violates copyright, trademark and competition laws.
It is not permitted to commercially process any data and information obtained via the project portal and to trade with this data. The right to assert any claims for damages is expressly reserved.
User accounts are not transferable. In the event of infringements, individual or all user accounts may be blocked or deleted by Isaria Recruitment GmbH.

(5) Blocking and liability of the user

Should you violate the obligations arising from these Terms of Use, Isaria Recruitment GmbH is entitled to temporarily block the user account or to terminate the user contract extraordinarily for good cause. As far as you have been excluded from the use or the existing contract with you has been terminated, you are prohibited from using the Isaria Account with other user accounts created for third parties or from registering again on the Isaria Account. In case of temporary or indefinite suspension, Isaria Recruitment GmbH will notify you by e-mail. In case of temporary blocking, Isaria Recruitment GmbH will reactivate the access authorization after the blocking period has expired and will notify the user about this by e-mail.

(6) Liability

If you breach any of the obligations set out in § 4, you shall be obliged to reimburse Isaria Recruitment GmbH for any expenses incurred and to indemnify and hold Isaria Recruitment GmbH harmless from any claims for damages and reimbursement of expenses of third parties caused by the breach. This also applies if the damage is caused by others, as far as this is attributable to you. The damage to be compensated includes in particular the reasonable costs of legal defense incurred by Isaria Recruitment GmbH, if any. All further rights and claims for damages of Isaria Recruitment GmbH remain unaffected.

(7) Data privacy

Isaria Recruitment GmbH collects, processes and uses your data in accordance with the applicable data protection laws. The privacy policy (see under section A and B) of Isaria Recruitment GmbH applies in full to the use of the Isaria Account.

(8) Termination of use

Deletion of the Isaria Account terminates the User's right to use it.