Privacy Policy

We aim to provide you with services, for which you can be sure that the personal data you provide will be processed in strict confidence and for the intended purpose, and that it is always you who decides on disclosure and transfer to third parties. You entrust us with your personal data, and we reliably protect it in compliance with legal requirements.
Here, we will provide you with detailed information about what data we collect and store on which occasion, why we do it, and how this data is used. In Jobnet.APP, your private information and personal data are collected and stored with the utmost care and integrity and used only for the intended purpose.
Storage of access data: Each time a file is requested from this application, access data is stored. Each data set consists of the following:
-the name of the file
-the date and time of the request
-the amount of data transferred
-the access status (file transferred, file not found, etc.)
The stored data is analyzed exclusively for statistical purposes. The transfer to third parties, even in the form of extracts, does not take place.

1. Data controller
Jobnet.AG
Kolonnenstrasse 8
Berlin 10827
www.jobnet.ag

Responsible:
Dr. Christoph Wesselmann, Board member
email: cw@jobnet.ag

phone: +49 30 5 77 00 12 - 10
support and hotline: +49 30 5 77 00 12 - 55

2. Data processor / technical realization and copyright
Jobcenter Consulting GmbH
Head Office Leipzig
Harkortstr. 5
04107 Leipzig
phone +49 (341) 600 146 101
fax +49 (341) 600 146 109
email info@jobcenter-consulting.de
website: www.jobcenter-consulting.de

3. Processing purposes
The purposes of processing are the performance of the following tasks by the controller: technical realization and support of the application Jobnet.APP to enable the activities within the framework of job placement and coaching, which corresponds for job centers and vocational promotion institutions to the purposes of their statutory responsibilities pursuant to the German Social Code (SGB).

4. Legal basis for data processing
The lawfulness of the data processing is given in particular by Art. 6 para. 1 p. c GDPR in conjunction with §§ 67 ff SGB X, SGB III, SGB II as well as special legal regulations. In addition, Art. 6 para. 1 p. a GDPR also permits data processing if the data subject has given his or her consent. The legal basis for data processing, if the user registers voluntarily on his or her own initiative, is given by Art. 6 para. 1 p. a GDPR – Consent of the data subject to the processing of personal data concerning him or her for one or more specific purposes. Only data necessary for the use of the services offered in a personal applicant account is collected here. The indication of first and last name (personal address), an email address (identifying feature, enabling support, e.g. in case of forgotten password, email notification of incoming job offers), and a password (logging in to the applicant account) is necessary. This information will not be disclosed or transferred to third parties under any circumstances. By registering, you declare your agreement that all information will be included in our database free of charge.

5. Types of personal data
Master data incl. contact data (e.g. client number, BG (benefit community) number, last name, first name, date of birth, address, telephone number, email address, username, and password), data on career counseling as well as placement/integration in work (CV, proof of degrees, etc., information on knowledge and skills, driver's license, qualification, general conditions such as mobility, data based on the commissioning of third parties such as measure providers, documentation of client contacts, data on job offers, job applications and feedback from employers, if applicable), if applicable, XSozial data, public employer data, service data of employment agents or case managers/coaches.

6. Categories of data subjects
Group of persons affected by the data processing: Applicants/measure or coaching participants, employment agents or case managers/coaches, employers.

7. Adding a CV
By registering for a user account and adding a CV, you allow interested companies to contact you (you are still anonymous). A personal message box available in your user account allows companies to leave you a message, possibly via an intermediary. Since you can determine at any time on your own, which and how detailed anonymous data (i.e. without the name, address, telephone number, fax number, or email) you provide in your CV, you can also decide, for example, whether the names of employers should be included. It is up to you whether you want to reveal your identity to an interested company upon a message.

8. Optional visibility of applicant profile in the entire Jobnetzwerk
The CV assistant for creating/editing the applicant profile contains a checkbox that allows the applicant profile to be made visible without displaying your contact details, in addition to this application, in other partner portals of Jobnetzwerk (www.jobnetzwerk.de) when it is activated, in other languages as well. Advantages: increased range of employer requests from the entire Jobnetzwerk with full protection of personal data. Deactivation in this application automatically means that the applicant profile is also deactivated in all other partner portals of Jobnetzwerk and can then no longer be accessed there. Data is expressly not transferred to third parties as a result of this visibility within the entire Jobnetzwerk. This means that you always have full control over your own profile data.

9. Applying for a job advertisement via an application form
If you apply online in response to an ad, there are several options: often, you will be forwarded directly to the company's website, where there is an option to apply online. However, in some cases, you will receive one of the application forms. Here, personal data will be entered according to your CV and sent to the company by email via a corresponding button or stored in a database and made available to the company in this way. Regardless of which form you find in response to an ad, by filling it out you only apply for the job posted, and your data is made available only to the potential employer posting the job ad there.

10. Cookies
Cookies are partially used in this app to enable the user to navigate within the restricted areas and gain experience about general user behavior (visits and page impressions). Cookies are small text files that this app stores on your terminal. Therefore, cookies are not programs. Using cookies does not give anyone else access to your personal data. You always have the option to fully disable cookies or display a warning before accepting a cookie and thus decide whether you want to accept it or not. If you do not accept cookies, this will partially affect the use of the services of this app.

11. Basic information
Furthermore, basic information is collected. When you use the app, our servers possibly save what terminal you are using, the name of your Internet service provider, and the date, time, and duration of the app use. There is no possibility to identify a certain person with this data. This information can never be directly associated with you.

12. Use of the collected data
We need you to give us your personal data in the cases mentioned above so that we can provide you with certain services. We always collect only the data that is absolutely necessary for the fulfillment of the purpose. You can be sure that the data is only used for the purpose for which it is meant to be used.

13. Data security
We use technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. We have no liability for the actual process of data transmission over the Internet. No claims can be made against us for the loss of data for whatever reason as well.

14. Your rights
a) Right of confirmation
Each data subject shall have the right granted by the European Directive and Regulatory Authority to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself or herself of this right of confirmation, he or she may, at any time, contact our data protection officer or another employee of the controller.

b) Right of access
Each data subject shall have the right granted by the European Directive and Regulatory Authority to obtain information free of charge at any time from the controller about the personal data concerning him or her stored and receive a copy of this information. Furthermore, the European Directive and Regulatory Authority grants the data subject access to the following information:
-the purposes of the processing
-the categories of personal data that are processed
-the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
-if possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine this duration
-the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing
-the existence of the right to lodge a complaint with a supervisory authority
-if the personal data are not collected from the data subject: any available information as to their source
-the existence of automated decision-making, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or an international organization. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject wishes to avail himself or herself of this right of access, he or she may, at any time, contact our data protection officer or another employee of the controller.

c) Right to rectification
Each data subject shall have the right granted by the European Directive and Regulatory Authority to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact our data protection officer or another employee of the controller.

d) Right to erasure (Right to be forgotten)
Each data subject shall have the right granted by the European Directive and Regulatory Authority to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies, as long as the processing is not necessary:
-The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
-The data subject withdraws consent based on which the processing was carried out pursuant to Art. 6 para. 1 p. a GDPR or Art. 9 para. 2 p. a GDPR, and where there is no other legal ground for the processing.
-The data subject objects to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 para. 2 GDPR.
-The personal data have been unlawfully processed.
-The personal data must be erased for compliance with a legal obligation pursuant to Union or Member State law to which the controller is subject.
-The personal data have been collected in relation to the offer of information society services pursuant to Art. 8 para. 1 GDPR.

If one of the aforementioned reasons applies, and a data subject wishes to have personal data stored by us deleted, he or she may, at any time, contact our data protection officer or another employee of the controller. The data protection officer or another employee will ensure that the erasure request is complied with immediately.

If we have made the personal data public and our company as a controller is obliged to erase the personal data pursuant to Art. 17 para. 1 GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers processing the disclosed personal data that the data subject has requested the erasure of all links to or copies or replications of such personal data by those other data controllers unless the processing is necessary. The data protection officer or another employee will arrange the necessary measures in individual cases.

e) Right of restriction of processing
Each data subject shall have the right granted by the European Directive and Regulatory Authority to obtain from the controller restriction of processing where one of the following conditions applies: -The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
-The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
-The controller no longer needs the personal data for the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.
-The data subject has objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification of whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by us, he or she may, at any time, contact our data protection officer or another employee of the controller. The data protection officer or another employee will arrange the restriction of the processing.

f) Right to data portability
Each data subject shall have the right granted by the European Directive and Regulatory Authority to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used, and machine-readable format. The data subject shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to Art. 6 para. 1 p. a GDPR or Art. 9 para. 2 p. a GDPR, or on a contract pursuant to Art. 6 para. 1 p. b GDPR and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising his or her right to data portability pursuant to Art. 20 para. 1 GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible, and when doing so does not affect the rights and freedoms of others.

To assert the right to data portability, the data subject may contact the data protection officer appointed by us or another employee at any time.

g) Right to object
Each data subject shall have the right granted by the European Directive and Regulatory Authority to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is based on Art. 6 para. 1 p. e or f GDPR, including profiling based on those provisions.

We shall no longer process the personal data in the event of the objection unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her by us for scientific or historical research purposes, or statistical purposes pursuant to Art. 89 para. 1 GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, the data subject may contact the data protection officer appointed by us or another employee directly. Furthermore, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling
Each data subject shall have the right granted by the European Directive and Regulatory Authority not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) it is based on the data subject's explicit consent, we implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact our data protection officer or another employee of the controller.

i) Right to revoke consent under the data protection law
Each data subject shall have the right granted by the European Directive and Regulatory Authority to withdraw his or her consent to the processing of his or her personal data at any time.

If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact our data protection officer or another employee of the controller.

15. Duration of the personal data storage
The personal data will be stored in a form that enables the identification of data subjects only for the period necessary for the mentioned purposes.

16. Existence of automated decision-making
We do not use automated decision-making or profiling in the sense of making decisions that have legal effects on the data subject or significantly affect the data subject (e.g., as in the case of insurers or credit intermediaries).