Skip to main content

Processing of (personal) data by the entity in charge of the online application process

Limitation of liability for internal content

The content of our website has been compiled with meticulous care and to the best of our knowledge. However, we cannot assume any liability for the up-to-dateness, completeness or accuracy of any of the pages.

Pursuant to section 7, para. 1 of the TMG (Telemediengesetz – Tele Media Act by German law), we as service providers are liable for our own content on these pages in accordance with general laws. However, pursuant to sections 8 to 10 of the TMG, we as service providers are not under obligation to monitor external information provided or stored on our website. Once we have become aware of a specific infringement of the law, we will immediately remove the content in question. Any liability concerning this matter can only be assumed from the point in time at which the infringement becomes known to us.

Limitation of liability for external links

Our website contains links to the websites of third parties (“external links”). As the content of these websites is not under our control, we cannot assume any liability for such external content. In all cases, the provider of information of the linked websites is liable for the content and accuracy of the information provided. At the point in time when the links were placed, no infringements of the law were recognisable to us. As soon as an infringement of the law becomes known to us, we will immediately remove the link in question.

Copyright

The content and works published on this website are governed by the copyright laws of Germany. Any duplication, processing, distribution or any form of utilisation beyond the scope of copyright law shall require the prior written consent of the author or authors in question.

Data protection

A visit to our website can result in the storage on our server of information about the access (date, time, page accessed). This does not represent any analysis of personal data (e.g., name, address or e-mail address). If personal data are collected, this only occurs – to the extent possible – with the prior consent of the user of the website. Any forwarding of the data to third parties without the express consent of the user shall not take place.

We would like to expressly point out that the transmission of data via the Internet (e.g., by e-mail) can offer security vulnerabilities. It is therefore impossible to safeguard the data completely against access

by third parties. We cannot assume any liability for damages arising as a result of such security vulnerabilities.

The use by third parties of all published contact details for the purpose of advertising is expressly excluded. We reserve the right to take legal steps in the case of the unsolicited sending of advertising information; e.g., by means of spam mail.



Data Protection Privacy Statement

Privacy Policy

Protecting your personal data during the collection, processing and use of personal data when you visit our website is important to us. Your data is protected in accordance with statutory provisions. In the following, we would like to inform you about the nature and scope of the processing of personal data through this website in accordance with Article 13 of the General Data Protection Regulation (GDPR).

I. Information on the responsible controller

DUBAG Investment Advisory  GmbH
Ottostr.  1
80333 Munich
Tel.: +49 (0) 89 – 45 209 45 -0
E-Mail: info@dubag.eu

II. Data processing through the website

Your visit to our website is recorded. We generally collect the following data that your browser sends to us:
IP address currently used by your computer or your router
Date and time
Browser type and version
Operating system of your computer
Webpages you visit
Name and size of requested file(s)
URL of referral website, if applicable
This data is only collected for the purposes of data security, improving our website offer and analysing errors on the basis of Art. 6 (1) f) GDPR. The IP address of your PC is only analysed in anonymised form (shortened by the last three digits). In all other respects, you are able to visit our website without providing information on your identity. We would like to point out that data transmission on the Internet (such as email communication) is subject to security vulnerabilities. It is not possible to completely protect data from access by third parties. Confidential data should therefore be sent to us by other means, such as by post.

Contact form

Personal data (such as your name, address data or contact details) which you voluntarily disclose to us, for example in connection with a request or otherwise, will be stored by us and only processed for correspondence with you and only for the purpose for which you have provided us with this data. This data is processed on the basis of Art. 6 (1) a) and Art. 6 (1) f) GDPR.

Newsletter

We offer you the option to subscribe to a newsletter. Your personal data is collected while registering for the subscription. The newsletter subscription is recorded for documentation purposes (IP address, date and time). You have the option at any time to unsubscribe from the newsletter by sending us a corresponding message. In particular, you may also use the link at the end of each newsletter in order to unsubscribe. The legal basis is provided by Art. 6 (1) a) GDPR.

To dispatch the newsletter, we use the newsletter service „GTC“. This service provider only processes the data on our behalf and at our instruction in accordance with Art. 28 GDPR.

III. Recipients of personal data

We may utilise service providers in connection with data processing in order to perform and execute processes.

Specifically, we have involved service providers for the purposes of sending the newsletter and hosting our website.

Contractual relationships are established with our service providers, which meet the requirements of Art. 28 GDPR; the contractual provisions contain the statutorily required points on data protection and data security.

IV. Data collection by Google Analytics

This website uses Google Analytics, a web analysis service by Google Inc. (‘Google’). Google Analytics uses ‘cookies’ – text files that are stored on your computer and enable analysis of your visit to the website. The information obtained by the cookie regarding your use of the website are generally transmitted to a Google server in the USA, where it is then stored. The basis for data processing is Art. 6 (1) f) GDPR.

In the event that IP anonymisation is activated on this website, your IP address will first be shortened by Google within the member states of the European Union or in other contractual states of the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. We would like to point out that Google Analytics has been expanded on this website with the code ‘anonymizeIp’, in order to ensure the anonymised collection of the IP address.

Google uses this information on behalf of the operator of this website in order to analyse your use of the website, to compile reports on website activity and to provide other services relating to website use and Internet use to the website operator. The IP address transmitted by your browser in connection with Google Analytics is not combined with other data held by Google.

You may prevent the storage of cookies by configuring your browser software settings accordingly; however, we would like to point out that, in this case, you may not be able to use the full functionality of this website. Moreover, you may prevent the collection of the data obtained by the cookie relating to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

The basis for data processing is Art. 6 (1) f) GDPR

V. Google Maps

This website uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the USA, where it is then stored. The provider of this website has no influence on this data transmission.

The use of Google Maps occurs in the interest of providing an attractive presentation of our website offers and allowing the user to find the locations indicated on our website more easily. This constitutes a legitimate interest in the meaning of Art. 6 (1) f) GDPR.

If you do not agree to this processing of your data, you have the option to deactivate the service of ‘Google Maps’ and to thereby prevent the transmission of data to Google. To this end, the JavaScript function in your browser must be deactivated. However, we would like to point out that, in this case, you will only be able to use ‘Google Maps’ to a limited extent if at all. More information on the handling of user data can be found in the Google privacy policy: https://www.google.de/intl/de/policies/privacy

VI. Use of cookies

Cookies are used in our website offer. Cookies are small text files that are saved by your browser and stored on your computer. The use of cookies allows the website offer to be designed in a more user-friendly manner. For instance, it is possible to recognise the user for the duration of the session, without the user being required to constantly re-enter their user name and password. Cookies do not cause any damage to your computer and are deleted after your session is ended. The basis for data processing is Art. 6 (1) f) GDPR.

Some of the cookies we use are deleted directly after you close your browser (‘session cookies’).

Other cookies remain on your terminal device and enable your browser to be recognised when you next visit the website (‘persistent cookies’).

Data processing in connection with cookies, which only serve to facilitate the functionality of our website offer, occurs on the basis of our legitimate interest pursuant to Art. 6 (1) f) GDPR.

If you do not wish to use cookies, you can configure your browser to prevent the storage of cookies. However, please note that, in this case, you may not be able to use the full functionality of our websites.

VII. Your rights

According to Articles 15–21 GDPR, you may exercise the following rights with respect to personal data we store provided the relevant requirements of the GDPR are met.

Right of access

You have the right to access information about your personal data that we process.

Right of rectification

You are able to request the correction of incomplete or incorrectly processed personal data.

Right of erasure

You have the right to the deletion of your personal data, in particular on the basis of one of the following reasons:

Your personal data is no longer required for the purposes for which it was collected or processed.
You withdraw your consent on which the processing of your data was based.
You have asserted a right of objection to processing.
Your data was unlawfully processed.
The right of erasure does not apply, however, if such deletion is opposed by the legitimate interest of the controller. For instance, this may include:

Personal data that is required for the assertion, exercising or defence of legal claims.
Deletion is not possible due to retention obligations.
Insofar as data cannot be deleted, you may exercise a right to the restriction of processing (as follows).

Right to the restriction of processing

You have the right to request us to restrict the processing of your personal data, if:

You dispute the correctness of the data and we must therefore review the correctness.
The processing is unlawful and you decline data erasure and instead request restriction of use.
We no longer require the data, but you still need the data in order to assert, exercise or defend legal claims.
You have submitted an objection to the processing of your data and it has not yet been determined whether our legitimate interests prevail over your interests.

Right of data portability

You have the right to receive your personal data, which you have provided to us, in a structured, commonly available and machine-readable format. Moreover, you have the right to have us transmit this data to another controller without hindrance by us, provided that the processing is based on a contract or consent, and our processing takes place with the aid of automated processes.

Right of withdrawal

The data subject has the right at any time to submit an objection to the processing of their personal data, which takes place on the basis of Art. 6 (1) e) or f), for reasons arising from their particular situation; this also apples to profiling based on one of these conditions. Insofar as the processing of your personal data is based on a consent, you have the right to withdraw this consent at any time.

VIII. Statutory deadlines for the erasure of data

Insofar as no statutory retention obligation applies, the data shall be deleted or destroyed once it is no longer required for fulfilling the purpose of data processing. Various deadlines apply to the retention of personal data. For instance, data of tax relevance is generally stored for ten years, while other data is typically retained for six years in accordance with provisions under the Commercial Code. Furthermore, the storage period may also be determined by statutory limitation periods, which may generally amount to three years in the case of Articles 195 et seqq. of the Civil Code, for example, or in certain cases up to even thirty years.

IX. Right to lodge a complaint with a supervisory authority

In accordance with Art. 77 GDPR, each data subject has the right to lodge a complaint with a supervisory authority, if they believe that the processing of their personal data is in violation of the GDPR. The competent supervisory authority in data protection matters is the state data protection officer of the federal state in which our company has its registered office.

X. Disclaimer

Liability for content

As service provider, we are responsible for our own content on these webpages in accordance with general laws (pursuant to Art. 7 (1) Telemedia Act, ‘TMG’). However, as service provider, we are not obliged to monitor transmitted or stored external information or to investigate circumstances that indicate unlawful activity (Articles 8–10 TMG). This shall be without prejudice to obligations to remove or block the use of information according to general laws. Liability in this connection is only possible from the time we receive knowledge of an actual violation of the law. We will immediately remove the relevant content as soon as we become aware of corresponding violations of the law.

Liability for links

Our offer contains links to the external websites of third parties, over whose content we have no influence. For this reason, we are unable to accept any liability for this external content. The respective provider or operator of the website is always responsible for the content of the linked webpages. The linked webpages will be reviewed for possible violations of the law at the time of linking. Unlawful content could not be found at the time of linking. However, it is not feasible to review the content of the linked webpages on an ongoing basis, without specific indications of a violation of the law. We will immediately remove corresponding links as soon as we become aware of violations of the law.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.