Data protection information

for applicants and talent management

at Zühlke Engineering AG

 

 

Zühlke operates a web-based platform for applicant and talent management. The platform enables people who are interested in Zühlke as an employer to create an applicant profile for the purpose of applying for vacancies at Zühlke. The system also makes it possible to create a talent profile. Based on the information entered in the talent profile, Zühlke can assess the suitability of applicants for vacancies at Zühlke and send applicants information about vacancies at Zühlke and/or general information about Zühlke as an employer.

Personal data shall be processed in connection with the applicant and talent management.

Below you find information on the controller, the representative and the data protection officer of the controller (Section A) as well as on your rights regarding the processing of your personal data (Section B).

Below you also find information on the processing of your personal data (Section C) in context with your employment relationship as well as information on the use of cookies (Section D) in context with the use of the web-based platform for applicant and talent management.

TABLE OF CONTENTS

A...... Information on the controller 3

I.          Identity and contact details of the controller. 3

II.         Contact details of the controller’s data protection officer 3

B....... Information on the rights of data subjects. 4

I.          Right of access. 4

II.         Right to rectification. 5

III.       Right to erasure (“right to be forgotten”) 5

IV.       Right to restriction of processing. 6

V.        Right to data portability. 6

VI.       Right to object. 7

VII.     Right to withdraw consent 8

VIII.    Right to lodge a complaint with a supervisory authority. 8

C....... Information on the processing of personal data. 9

I.          Applicants and talent management. 10

II.         Use of web analysis and web tracking technologies on the website. 20

D...... Cookies used on this website. 26

E....... Effective date of and changes to this Data Protection Information. 28

 

A.  Information on the controller

I.  Identity and contact details of the controller

Zühlke Engineering AG, Wiesenstrasse 10a, 8952 Schlieren, Schweiz (ZCH)

Zühlke Engineering GmbH, Düsseldorfer Str. 38, 65760 Eschborn, Deutschland (ZDE)

Zühlke Engineering (Austria) GmbH, Rivergate, Handelskai 92, 1200 Wien, Österreich (ZAT)

Zuhlke Engineering Ltd, 80 Great Eastern Street, London EC2A 3JL, United Kingdom (ZUK)

Zuhlke Engineering d.o.o., Bulevar Milutina Milankovića 1ž, 11070 New Belgrade, Serbia (ZRS)

Zuhlke Engineering Pte Ltd, 140 Robinson Road #04-01, Singapure 068907

 

II. Contact details of the controller’s data protection officer

Zühlke Engineering GmbH, Data Protection Office, Düsseldorfer Str. 38, 65760 Eschborn, Germany; E-Mail: dataprotection@zuehlke.com

 

 

B.  Information on the rights of data subjects

As a data subject, you have the following rights with regard to the processing of your personal data:

  • Right of access (Article 15 of the General Data Protection Regulation)
  • Right to rectification (Article 16 of the General Data Protection Regulation)
  • Right to erasure (“right to be forgotten”) (Article 17 of the General Data Protection Regulation)
  • Right to restriction of processing (Article 18 of the General Data Protection Regulation)
  • Right to data portability (Article 20 of the General Data Protection Regulation)
  • Right to object (Article 21 of the General Data Protection Regulation)
  • Right to withdraw consent (Article 7 paragraph 3 of the General Data Protection Regulation)
  • Right to lodge a complaint with a supervisory authority (Article 57 paragraph 1 point f of the General Data Protection Regulation)

You may contact our data protection officer (Section A.III.) for the purpose of exercising your rights.

Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section C of this Data Protection Information.

Below you find more detailed information on your rights with regard to the processing of your personal data:

I.  Right of access

As a data subject, you have a right to obtain access and information under the conditions provided in Article 15 of the General Data Protection Regulation.

This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Article 15 paragraph 1 of the General Data Protection Regulation. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15 paragraph 1 of the General Data Protection Regulation).

You can find the full extent of your right to access and information in Article 15 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

II.  Right to rectification

As a data subject, you have the right to rectification under the conditions provided in Article 16 of the General Data Protection Regulation.

This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.

You can find the full extent of your right to rectification in Article 16 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

III.  Right to erasure (“right to be forgotten”)

As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions provided in Article 17 of the General Data Protection Regulation.

This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Article 17 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17 paragraph 1 of the General Data Protection Regulation).

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Article 17 paragraph 2 of the General Data Protection Regulation).   

The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Article 17 paragraph 3 of the General Data Protection Regulation. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (a) and (4) of Article 17 paragraph 3 of the General Data Protection Regulation).

You can find the full extent of your right to erasure (“right to be forgotten”) in Article 17 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

​​​​​​​​​​​​​​IV.  Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions provided in Article 18 of the General Data Protection Regulation.

This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Article 18 paragraph 1 of the General Data Protection Regulation applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (point (a) of Article 18 paragraph 1 of the General Data Protection Regulation).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Article 4 paragraph 3 of the General Data Protection Regulation).

You can find the full extent of your right to restriction of processing in Article 18 of the GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

​​​​​​​​​​​​​​V.  Right to data portability

As a data subject, you have a right to data portability under the conditions provided in Article 20 of the General Data Protection Regulation.

This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation and the processing is carried out by automated means (Article 20 paragraph 1 of the General Data Protection Regulation).

You can find information as to whether an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).

You can find the full extent of your right to data portability in Article 20 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

​​​​​​​​​​​​​​VI.  Right to object

As a data subject, you have a right to object under the conditions provided in Article 21 of the General Data Protection Regulation.

At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.  

More detailed information on this is given below:

​​​​​​​1. Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6 paragraph 1, including profiling based on those provisions.

You can find information as to whether an instance of processing is based on point (e) or (f) of Article 6 paragraph 1 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

​​​​​​​2. Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section C of this Data Protection Information.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

You can find the full extent of your right to objection in Article 21 of the General Data Protection Regulation, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

​​​​​​​​​​​​​​VII.  Right to withdraw consent

Where an instance of processing is based on consent pursuant to point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation, as a data subject, you have the right, pursuant to Article 7 paragraph 3 of the General Data Protection Regulation, to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal. We inform you of this before you grant your consent.

You can find information as to whether an instance of processing is based on point (a) of Article 6 paragraph 1 or point (a) of Article 9 paragraph 2 of the General Data Protection Regulation in the information regarding the legal basis of processing in Section C of this Data Protection Information.

​​​​​​​VIII.  Right to lodge a complaint with a supervisory authority

As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in point (f) of Article 57 paragraph 1 of the General Data Protection Regulation.

 

 

C.  Information on the processing of personal data inn context with application and talent management different personal data are processed for different purposes.

Insofar as we, as controller, alone or jointly with others, determine the purposes and means of the processing of personal data, you will find information below in particular on

  • the personal data or categories of personal data concerned,
  • the purposes for which the personal data are intended to be processed,
  • the legal basis for the processing and, where the processing is based on point (f) of Article 6 paragraph 1 of the General Data Protection Regulation, the legitimate interests pursued by us or by a third party,
  • the recipients or categories of recipients of the personal data, if any,
  • where applicable, the fact that we intend to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the EU Commission, or in the case of transfers referred to in Article 46 or 47 of the General Data Protection Regulation, or the second subparagraph of Article 49 paragraph 1 of the General Data Protection Regulation, reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available,
  • the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period,

Where we obtain your personal data from you as the data subject, you also find below information on whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failure to provide such data.

Where we do not obtain personal data from you as the data subject, you will also find below information on from which source the personal data originate, and if applicable, whether it came from publicly accessible sources.

 

 

​​​​​​​​​​​​​​I.  Applicants and talent management

In the course of applicant and talent management, we process personal data for the technical operation of our web-based applicants and talent management platform, as well as to ensure the security of the IT infrastructure used to deliver the platform. We also process personal data for the purpose of conducting the application process and, if applicable, the subsequent employment process as well as for conducting talent management. In this context, we also process personal data for the purpose of cooperating with recruitment agencies or talent representatives used by applicants or talents.

Below you will find more detailed information on this:

​​​​​​​1. Details on the personal data processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation to provide the data

Storage period

Protocol data that are accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons ("HTTP data") when the platform is called up.

IP address, type and version of your internet browser, operating system used, the page called up, the site previously visited, (referrer URL), date and time of the visit.

User of the platform as the data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, use of the platform is not possible.

Data are stored in server log files in a form that enables identification of the data subject for a maximum of 30 days, unless a security-related incident occurs (e.g. a DDoS attack).

In the event of a security-related incident occurring, server log files are saved until the security-related incident has been eliminated and fully resolved.

Protocol data that are collected when changes are made to data objects ("security log data")

IP address, date and time, user ID, ID of the processed data object, action performed

User of the platform as the data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, use of the platform is not possible.

The data are stored for a period of 30 days.

Registration details that you need to access our portal ("Login data")

Email address, password, first name, last name

 

User of the platform as the data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, use of the platform is not possible.

Talent:

ZCH, ZDE, ZAT:

Data are stored for 24 months from the date of the last login on the platform. In the event that the user deletes his/her profile before this point in time, the data will be deleted immediately.

ZUK, ZSG: Data are stored for 36 months from the date of the last login on the platform. In the event that the user deletes his/her profile before this point in time, the data will be deleted immediately.

ZRS:

Data are stored for 12 months from the date of the last login on the platform. In the event that the user deletes his/her profile before this point in time, the data will be deleted immediately.

 

Applicants:

ZCH, ZDE, ZUK, ZAT, ZSG:

Data are stored for 12 months from the date of the last application. In the event that the applicant deletes his/her profile before this point in time, the data will be deleted immediately.

ZRS:

In the case of an unsuccessful application, the data will be deleted 15 days after completion of the application process. In the case of a successful application, the data will be deleted 12 months after completion of the application process.

Data that the applicant themselves or a recruitment consultant used by the applicant provides about the applicant in an applicant profile ("Applicant profile data")

Mandatory details: telephone number, date of birth, previous employer, university/college, language and Login data

Optional details: profile picture, CV, references

Applicant as data subject or recruitment consultant used by the applicant.

Provision of the data is generally voluntary.

However, in the case of non-provision of the mandatory details, it is not possible to carry out an application process and, if applicable, subsequent employment.

ZCH, ZDE, ZUK, ZAT, ZSG:

If an application is successful, we transfer the data to the personnel file and save it for a further 12 months.

If an applicant withdraws his/her application, the application is unsuccessful or the applicant deletes his/her application profile, we save the data for a further 12 months.

If an applicant that already has an applicant profile creates another talent profile, we add the data stored in the applicant profile to the talent profile.

ZRS:

If an application is successful, we transfer the data to the personnel file and save it for a further 12 months.

If an applicant withdraws his/her application, the application is unsuccessful or the applicant deletes his/her application profile, we save the data for a further 15 days.

 

Data that the talent or a recruitment consultant used by the talent provides about them in a talent profile ("Talent profile data")

Mandatory details: date of birth, university/college, language and Login data

Optional details: profile picture, CV, references

Talent as the data subject or recruitment consultant used by the applicant.

Provision of the data is generally voluntary.

However, in the case of non-provision of the mandatory details, it is not possible to carry out a talent selection and/or application process and, if applicable, subsequent employment.

ZCH, ZDE, ZAT:

Data are stored for 24 months from the date of the last login on the platform. In the event that the applicant deletes his/her profile before this point in time, the data will be deleted immediately.

ZUK, ZSG:

Data are stored for 36 months from the date of the last login on the platform. In the event that the talent profile is deleted before this point in time, the data will be deleted immediately.

ZRS:

Data are stored for 12 months from the date of the last login on the platform. In the event that the talent profile is deleted before this point in time, the data will be deleted immediately.

Supplementary internal comments made by Zühlke in an applicant profile ("Applicant comment data").

These internal comments are not visible to applicants on the platform.

Notes from job interviews

Independently generated.

-

ZCH, ZDE, ZUK, ZAT:

If an application is successful, we transfer the data to the personnel file and save it for 12 months.

If an applicant withdraws his/her application, the application is unsuccessful or the applicant deletes his/her application profile, we save the data for a further 12 months.

If a user that already has an applicant profile creates another talent profile, we will add the data to his/her talent profile if he/she consents to this.

ZRS:

If an application is successful, we transfer the data to the personnel file and save it for 12 months.

If an applicant withdraws his/her application, the application is unsuccessful or the applicant deletes his/her application profile, we save the data for 15 days.

 

Supplementary internal comments made by Zühlke in a talent profile ("Talent comment data").

These internal comments are not visible to Talents on the platform.

Observations from discussions, email communications, etc.

Independently generated.

-

ZCH, ZDE, ZAT:

Data are stored for 24 months from the date of the last login on the platform. In the event that the talent deletes his/her profile before this point in time, the data will be deleted immediately.

ZUK, ZRS:

Data are stored for 36 months from the date of the last login on the platform. In the event that the talent deletes his/her profile before this point in time, the data will be deleted immediately.

 

​​​​​​​​​​​​​​2. Details on the processing of the personal data

Purposes of the processing of the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipients

For the provision of the platform content called up by the user, HTTP data is temporarily processed on our web server.

HTTP data, login data.

No automated decision-making takes place.

Balancing of interests (article 6 (1) point f of the General Data Protection Regulation). Our legitimate interest is the provision of the platform content called up by the user.

Wintrgarden

To ensure the security of the IT infrastructure used to provide the platform, in particular for the identification, elimination and evidential documentation of disruptions (such as DDoS attacks), HTTP data is temporarily processed in web server log files.

HTTP data, login data.

No automated decision-making takes place.

Balancing of interests (article 6 (1) point f of the General Data Protection Regulation). Our legitimate interest is ensuring the security of the IT infrastructure used to provide the platform, in particular for the identification, elimination and evidential documentation of disruptions (such as DDoS attacks).

Wintrgarden.

In order to be able to track any changes made to the data stored on the platform, we keep a security log. The data from the security log are processed for documentation purposes, particularly in the event of malfunctions or security-related incidents.

Security log data

No automated decision-making takes place.

Balancing of interests (article 6 (1) point f of the General Data Protection Regulation). Our legitimate interest is ensuring that changes to the data stored in the system can be tracked.

Wintrgarden.

Conducting of the application process, in particular checking applications, contacting the applicants and conducting interviews to assess and select suitable applicants.

Internally, we use our web-based talent and job application management platform to manage job applications.

Applicant profile data, applicant comment data

No automated decision-making takes place.

Carrying out of pre-contractual measures (Article 6 (1) point b of the General Data Protection Regulation)

Personnel department (HR), the manager responsible for possible employment of the applicant concerned, (other) employees involved in the interview as co-interviewers, Wintrgarden.

Conducting of the employment process following successful application, in particular conclusion of a contract of employment

Applicant profile data, applicant comment data

No automated decision-making takes place.

Carrying out of pre-contractual measures (Article 6 (1) point b of the General Data Protection Regulation)

Personnel department (HR), manager of the applicant

Conducting talent management. For this, we process the data stored in your talent profile, in order to assess your suitability for vacancies at Zühlke and provide you with information about vacancies at Zühlke and/or general information about Zühlke as an employer via email or telephone.

If a talent who already has an applicant profile creates a talent profile, we add the data stored in the applicant profile to the talent profile.

Talent profile data, talent comment data.

No automated decision-making takes place.

Explicit consent (Article 6 (1) point a and Article 9 (2) point a of the General Data Protection Regulation)

Personnel department (HR), the manager responsible for possible employment of the applicant concerned, Wintrgarden.

Managing partnerships with recruitment consultants used by applicants or their representatives.

Applicant profile data, talent profile data

No automated decision-making takes place.

Carrying out pre-contractual measures (Article 6 (1) point b of the General Data Protection Regulation) and balancing of interests (Article 6 (1) point f of the General Data Protection Regulation). Our legitimate interest is the management of partnerships with recruiters used by applicants.

Recruiters

 

​​​​​​​3.  Details on the recipients of the personal data and details on the transfer of personal data to a third country and/or international organisation

Recipient

Recipient’s role

Recipient’s location

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Personnel department (HR)

Division of the data controller

Zühlke Engineering AG (ZCH): Switzerland

Zühlke Engineering GmbH (ZDE): Germany

Zühlke Engineering GmbH (ZAT): Austria

Zuhlke Engineering ltd. (ZUK): United Kingdom

Zuhlke Engineering d.o.o. (ZRS): Serbia

Zuhlke Engineering Pte Ltd (ZSG): Singapore

Adequacy decision:

http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32010D0087

ZRS, ZSG:

Zühlke ensures an adequate level of protection through contractual guarantees.

Manager

Division of the data controller

Zühle Engineering AG (ZCH): Switzerland

Zühlke Engineering GmbH (ZDE): Germany

Zühlke Engineering GmbH (ZAT): Austria

Zuhlke Engineering ltd. (ZUK): United Kingdom

Zuhlke Engineering d.o.o. (ZRS): Serbia

Zuhlke Engineering Pte Ltd (ZSG): Singapore

Adequacy decision:

http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32010D0087

ZRS, ZSG:

Zühlke ensures an adequate level of protection through contractual guarantees.

(Other) employees

Division of the data controller

Zühle Engineering AG (ZCH): Switzerland

Zühlke Engineering GmbH (ZDE): Germany

Zühlke Engineering GmbH (ZAT): Austria

Zuhlke Engineering ltd. (ZUK): United Kingdom

Zuhlke Engineering d.o.o. (ZRS): Serbia

Zuhlke Engineering Pte Ltd (ZSG): Singapore

Adequacy decision:

http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32010D0087

ZRS, ZSG:

Zühlke ensures an adequate level of protection through contractual guarantees.

Recruiters

Controller

Zühle Engineering AG (ZCH): Switzerland

Zühlke Engineering GmbH (ZDE): Germany

Zühlke Engineering GmbH (ZAT): Austria

Zuhlke Engineering ltd. (ZUK): United Kingdom

Zuhlke Engineering d.o.o. (ZRS): Serbia

Zuhlke Engineering Pte Ltd (ZSG): Singapore

Adequacy decision: http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

ZRS, ZSG:

Zühlke ensures an adequate level of protection through contractual guarantees.

Universum Group AB

Jakobsbergsgatan 22

111 44 Stockholm, Sweden ("Wintrgarden")

Technical operator of the platform as data processor

Sweden, EU

-

 

​​​​​​​II.  Use of web analysis and web tracking technologies on the website 

We use web analysis technologies on the website (à section D of this data protection information) and cookies to record and analyse user behaviour on our website in order to improve the website and better achieve the goals of the website (e. g. frequency of visits, increase in page views).

In addition, we use web tracking technology and cookies (à section D of this data protection information) to optimise and measure the success of job advertisements posted online.

More detailed information about this is available below:

​​​​​​​​​​​​​​1.  Details about the personal data processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation to provide the data

Storage period

Google Analytics

Protocol data that are accrued via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when using the web analysis tool Google Analytics on this website ("Google Analytics HTTP data").

 

IP address, type and version of your internet browser, operating system used, the page called up, the site previously visited, (referrer URL), date and time of the visit.

 

User of the website as a data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, we cannot perform a web analysis.

On this website, so-called IP anonymisation is activated for the use of the web analysis tool Google Analytics. This means that the IP address transmitted by the browser for technical reasons is anonymised prior to storage by truncating the IP address (by deleting the last octet of the IP address).

Data that are stored in cookies (à section D) for the web analysis tool Google Analytics on the user's end device ("Google Analytics cookie data").

 

Unique visitor ID for recognising repeat visitors, number of visitor visits, time of first visit, previous visits, and current visit, start and expected end of current visit, visitor category to which a user belongs, source or campaign that explains how a user came to the website.

User of the website as the data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to provide the data.

In the case of non-provision of the data, we cannot perform a web analysis.

We do not save these data on our systems.

See section D regarding the period of validity of the cookies

 

Data collected by the Google Analytics web analysis tool and stored in pseudonymous usage profiles ("Google Analytics Profile Data").

Data about the use of the website, in particular page views, call frequency and length of stay on the accessed pages.

Independently generated.

-

We do not save these data on our systems.

Quantcast

Data that are stored in cookies (à section D) for the web tracking tool "Quantcast" on the user's end device ("Quantcast cookie data").

 

Unique ID.

 

User of the website as the data subject.

It is not legally or contractually stipulated that data must be made available and this is not required for the conclusion of a contract. There is no obligation to make data available.

In the case of non-provision of the data, we cannot perform web tracking.

We do not save these data on our systems.

See section D regarding the period of validity of the cookies

 

Data collected by the "Quantcast" web tracking tool and stored in pseudonymous usage profiles ("Quantcast Data").

 

There is no association of the data collected with personal data.

More information about Quantcast:

https://help.quantcast.com/hc/en-us/articles/115014006148-About-Our-Data

Generated by Quantcast.

-

We do not save these data on our systems.

 

​​​​​​​2.  Details about the processing of personal data

Purposes of the processing of the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipients

To improve the website and better achieve the website goals (e. g. frequency of visits, increase in the number of page views), the behaviour of users on our website is recorded and analysed in a pseudonymised form. Users of the website are marked in a pseudonymous form, so that they can be recognised by the website when visiting again. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the person behind the pseudonym. The aim of the procedure is to investigate where the users come from, which areas on the website are visited and how often and for how long which pages and categories are viewed.

For this purpose, cookies (à section D) for the "Google Analytics" web analysis tool are used.

Google Analytics HTTP data, Google Analytics cookie data, Google Analytics profile data.

 

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation)

HR departments, Google

 

For assessing visitor actions (conversion tracking), the behaviour of users on our website is recorded and analysed in a pseudonymised form. Users of the website are marked in a pseudonymous form, so that they can be recognised by the website when visiting again. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the person behind the pseudonym. The aim of the procedure is to measure the effectiveness with which an addressed group of people is induced to carry out desired actions.

For this purpose, cookies (à section D) for the "Google Adwords" web tracking tool are used.

Google Adwords HTTP data, Google Adwords cookie data, Google Adwords profile data.

 

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation)

HR departments, Google

 

For the targeted addressing of website users ((re-)targeting), the behaviour of users on our website is recorded and analysed in a pseudonymised form. Users of the website are marked in a pseudonymous form, so that they can be recognised by the website or another website. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the person behind the pseudonym. The aim of the process is to attract the attention of a user who has already shown an interest in a website or product and remind them about this website or product in order to increase the advertising relevance and thus the click and conversion rate (e.g. order rate).

For this purpose, cookies (à section D) for the "Google Adwords" web tracking tool are used.

Google Adwords HTTP data, Google Adwords cookie data, Google Adwords profile data

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation)

HR departments, Google

 

 

We use the Quantcast service to optimise job advertisements posted online and to measure the success of these job advertisements.

Quantcast cookie data
Quantcast data

No automated decision-making takes place.

 

Consent (article 6 (1) point a of the General Data Protection Regulation)

HR departments, Google

 

3. Details of the recipients of personal data and the transfer of personal data to third countries and/or to international organisations

Recipient

Recipient’s role

Recipient’s location

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

HR departments

Division of the data controller

Zühlke Engineering AG (ZCH): Switzerland

Zühlke Engineering GmbH (ZDE): Germany

Zühlke Engineering GmbH (ZAT): Austria

Zuhlke Engineering Ltd. (ZUK): Great Britain

Zuhlke Engineering d.o.o. (ZRS): Serbia

Zuhlke Engineering Pte Ltd (ZSG): Singapore

Adequacy decision:

http://eur-lex.europa.eu/legal-content/DE/ALL/?uri=CELEX%3A32000D0518

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=celex%3A32010D0087

ZRS, ZSG:

Zühlke ensures an adequate level of protection through contractual guarantees.

Google LLC

1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google")

Data processor

USA

Adequacy decision:https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=uriserv%3AOJ.L_.2016.207.01.0001.01.DEU

Quantcast

Maximilianstraße 35a,
Munich 80539
Germany

Data processor

Germany

-

D.  Cookies used on this website

The following cookies may be used on this website:

Identifier

First Party / Third Party

Purpose and content

Period of validity

Consent Required

 

Opt-in cookies

 

cookie_policy

First Party

Strictly required cookie for saving your consent and, where applicable, your individual selection for the use of cookies on your device, to determine whether you have already given consent when you visit the website again.

Persistent:
1 year.

No.

 

Google Analytics cookies

 

__ga

First Party

Use of the Google Analytics web analysis tool for collecting and analysing the usage behaviour on our website in order to improve the website (à section C of this data protection information).

This cookie is used to differentiate visitors

Persistent:
2 years.

 

Yes.

 

__gid

First Party

Use of the Google Analytics web analysis tool for collecting and analysing the usage behaviour on our website in order to improve the website (à section C of this data protection information).

This cookie is used to differentiate visitors

Persistent:

24 hours

Yes.

 

__gat

First Party

Use of the Google Analytics web analysis tool for collecting and analysing the usage behaviour on our website in order to improve the website (à section C of this data protection information).

This cookie is used to reduce the number of requests

Transient:

1 minute

Yes.

 

Quantcast Cookie

 

_qca

Third Party

Use of the Quantcast tracking tool in order to be able to track the success of job advertisements on various job portals.

Persistent:

up to 18 months

Yes

 

Other cookies

 

JSESSIONID

First Party

Session cookie: Identifies current user. Used for session tracking and request authentication.

Transient:

Up to end of session

No

locale_v*

First Party

Locale cookie: Stores the selected locale to use for rendering the content.

Transient:

Up to end of session

No

locale_campaign_v*_*

First Party

Campaign specific locale cookie: Stores the selected locale for the "Self-registration process" pages.

Transient:

Up to end of session

No

requestedStateData_v*

First Party

Stores requested url path to restricted area before login to be able to redirect to it after login.

Transient:

Up to end of session

No

page_info_v*_email.*

First Party

Stores the latest paging information for each mail box section in email section.

Transient:

Up to end of session

No

WGTRM-XSRF-TOKEN

First Party

Keeps the anti CSRF token used for protection against request forgery attacks.

Transient:

Up to end of session

No

                 

 

E. Effective date of and changes to this Data Protection Information

The effective date of this Data Protection Information is 02.08.2018

It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.

An up-to-date version of this Data Protection Information can be retrieved at any time here.