PRIVACY NOTICE

How we handle your data

This notice explains how personal data is processed when you visit this website, write to us or sign in to the workspace as a member of our staff or of a partner agency. Candidates who are invited to apply receive a separate notice about their application data before any of it is collected.

Controller

URSCHILD UG (haftungsbeschränkt), Nordstrandweg 2, c/o Sadat, 22047 Hamburg, Germany. Email: support@workineu.de. Further details are in our legal notice.

Visiting the website

When you open a page, the server necessarily processes your IP address, the date and time, the page requested and technical information sent by your browser, in order to deliver the page and to protect the service against misuse. The legal basis is our legitimate interest in a secure and working website (Art. 6 (1) (f) GDPR). We do not use this information to identify visitors.

Cookies

We use only cookies that are strictly necessary: a session cookie and a short lived sign in cookie, set only when you sign in. We do not use analytics, advertising or tracking cookies, and we do not embed third party tracking. Strictly necessary cookies do not require consent (section 25 (2) TDDDG).

Signing in

Staff and partner agencies sign in through our identity service with multi factor authentication. We process your name, email address, sign in events and the permissions granted to you, to provide the workspace and keep it secure (Art. 6 (1) (b) and (f) GDPR).

Contacting us

If you write to us, we process your message and contact details to answer your request and, for employers and partner agencies, to prepare and carry out an agreement (Art. 6 (1) (b) and (f) GDPR). We keep this correspondence as long as needed for the request and as required by commercial and tax retention rules.

Service providers

We use the following processors under data processing agreements according to Art. 28 GDPR:

• SCALEWAY SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France: hosting of the website, the application and its database in data centres in Amsterdam, the Netherlands, and sending of service emails.
• CAOS AG, Switzerland: sign in, account security and multi factor authentication (ZITADEL Cloud, operated in its EU region).
• Microsoft Ireland Operations Limited, Dublin, Ireland: our email mailboxes, including messages you send to us.

CAOS AG is based in Switzerland, which the European Commission recognises as providing an adequate level of data protection.

Automated decisions

We do not make decisions about people based solely on automated processing.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. You may also lodge a complaint with a supervisory authority, in particular the authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.

Changes

We update this notice when our services change. The current version is always available on this page.