Privacy Policy

Privacy Policy

At Breakthrough Recruiting & Consulting, we take the protection of your personal data very seriously. Below, we provide information on the collection, processing, and use of your data in accordance with the General Data Protection Regulation (GDPR).

The responsible entity for data protection purposes is:

Breakthrough Recruiting & Consulting UG (limited liability), Schmerlecker Dorf 34, 59597 Erwitte, Germany

Collection and Storage of Personal Data, Nature, Purpose, and Usage

a) When Visiting the Website

When you visit our website at www.breakthroughrecruiting.de, your browser automatically sends information to our website’s server, which is temporarily stored in log files. The following information is collected without any action from you and stored until automatically deleted:

  • IP address of the requesting device,

  • Date and time of access,

  • Name and URL of the retrieved file,

  • Website from which the access was made (referrer URL),

  • Browser used, possibly including your device’s operating system and the name of your internet service provider.

The data is processed for the following purposes:

  • Ensuring a smooth connection to the website,

  • Ensuring convenient use of our website,

  • Evaluating system security and stability, and

  • Other administrative purposes.

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes listed above. In no case do we use the collected data to identify you personally. We also use cookies and analysis tools on our website. Further details can be found in section 3 of this privacy policy.

b) When Using Our Contact Form

If you have any questions, you may contact us via a form on the website. You are required to provide your name, a valid email address, and your phone number so we can identify the sender and respond. Additional information may be provided voluntarily. Data processing for contacting us is based on your voluntarily given consent according to Article 6(1)(a) of the GDPR. The personal data collected via the contact form will be automatically deleted once your inquiry has been resolved.

c) When Using Our Application Form

If you submit an online application through our website, certain personal information (marked as required fields) must be provided. You may also upload additional documents. The submission of the form and uploaded data occurs only with your consent to process your personal data.

The data you provide is stored and used in our Salesforce.com system for processing and reviewing your application. The personal data is collected for the following purposes:

  • To identify you as a candidate,

  • To advise and assist you,

  • For correspondence with you.

Breakthrough Recruiting & Consulting will ensure the data is managed in a complete, up-to-date, and accurate manner within our Salesforce.com system. You have the right to view and update your personal data at any time. Your contact information will be used to send you job opportunities that match your profile via email or phone.

We will only share your personal data with potential employers or clients with your explicit consent. Upon completion of the application process, with your consent, we may retain your information for future job openings. If you consent, your data will be stored for two years, after which it will either be deleted or we will request renewed consent. If you do not provide consent, your data will typically be stored for six months following the conclusion of the application process, in accordance with § 61b(1) ArbGG in conjunction with § 15 AGG, for resolving queries related to your application. Afterward, the data will be deleted unless legal provisions prevent this or further retention is necessary for legal reasons.

Data Sharing

Your personal data will not be shared with third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

  • You have provided explicit consent in accordance with Article 6(1)(a) of the GDPR,

  • Disclosure is necessary for asserting, exercising, or defending legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data shared (Article 6(1)(f) GDPR),

  • A legal obligation exists for sharing under Article 6(1)(c) GDPR, or

  • It is legally permissible and necessary for the performance of a contract with you (Article 6(1)(b) GDPR).

Cookies

We use cookies on our website, which are small files automatically created by your browser and stored on your device (e.g., laptop, tablet, smartphone) when you visit our website. Cookies do not harm your device and do not contain viruses, trojans, or other malicious software. The information stored in cookies is related to the specific device being used, but this does not mean we can directly identify you.

We use cookies to enhance your experience. For instance, we use session cookies to recognize that you have already visited certain pages. These are deleted once you leave our website. Additionally, we use temporary cookies to improve user-friendliness, which are stored on your device for a specific time and automatically recognized when you revisit our site.

Furthermore, we use cookies to statistically track website usage and optimize our services (as outlined in Section 5). These cookies are deleted automatically after a set time. The legal basis for processing data through cookies is Article 6(1)(f) of the GDPR.

Data Protection Information for Online Meetings via "Google Meet"

Purpose of Processing
We use the "Google Meet" tool to conduct teleconferences, online meetings, video conferences, and/or webinars (collectively referred to as "online meetings"). "Google Meet" is a service provided by Google LLC, located in the United States.

(Note: If you visit the "Google Meet" website, the provider of "Google Meet" is responsible for data processing. Accessing the website is only necessary to download the software for using "Google Meet.")

Data Processing
When using "Google Meet," various types of data are processed. The extent of the data depends on the information you provide before or during participation in an "online meeting."

The following personal data is subject to processing:

  • User Information: First name, last name, phone number (optional), email address, password (if "Single Sign-On" is not used), profile picture (optional), department (optional).

  • Meeting Metadata: Topic, description (optional), participant IP addresses, device/hardware information.

  • In case of recordings (optional): MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

  • If joining via phone: Details on incoming and outgoing phone numbers, country name, start and end times, and potentially other connection data such as the device’s IP address.

  • Text, audio, and video data: During an "online meeting," you may have the option to use the chat, question, or poll functions. The text you provide is processed to display and potentially log it during the "online meeting."

To display video and play audio, the data from your device's microphone and, if applicable, video camera is processed for the duration of the meeting. You can disable the camera or mute the microphone at any time through the "Google Meet" application.

To participate in an "online meeting" or to enter the "meeting room," you must at least provide your name.

Scope of Processing
We use "Google Meet" to conduct "online meetings." If we want to record "online meetings," we will inform you transparently in advance and request your consent if necessary. The fact of recording will also be displayed within the "Google Meet" application.

If it is necessary for recording the outcomes of an "online meeting," we may log the content of the chats. However, this is typically not the case.

In the case of webinars, we may also process the questions asked by participants for purposes of recording and follow-up.

If you are registered as a user on "Google Meet," reports on "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, poll functionality in webinars) can be stored for up to 90 days by "Google Meet."

An automated decision-making process in the sense of Art. 22 GDPR is not used.

Legal Basis for Data Processing
To the extent that personal data of employees is processed, § 26 BDSG is the legal basis for data processing. If personal data related to the use of "Google Meet" is not necessary for the establishment, implementation, or termination of the employment relationship but is nonetheless an integral part of the use of "Google Meet," the legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. In these cases, our legitimate interest is the effective conduct of "online meetings."

For other participants (such as customers, partners, or other third parties), the legal basis for data processing during "online meetings" is Art. 6 para. 1 sentence 1 lit. b GDPR, insofar as the meetings are conducted within the framework of contractual relationships. If there is no contractual relationship, the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Here, too, our legitimate interest is the effective conduct of "online meetings."

Recipients / Transfer of Data

Personal data that is processed in connection with participation in "online meetings" is generally not passed on to third parties unless it is specifically intended for transfer. Please note that content from "online meetings", as well as from personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended for transfer.

Other recipients: The provider of "Google Meet" necessarily receives knowledge of the above-mentioned data, insofar as this is provided for in our order processing agreement with "Google Meet".

Data processing outside the European Union
"Google Meet" is a service of Google Corporation, Google HQ, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Personal data is therefore also processed in a third country. We have concluded an order processing agreement with the provider of "Google Meet" that meets the requirements of Art. 28 GDPR. An appropriate level of data protection is guaranteed by the conclusion of the so-called EU standard contractual clauses. Further information can be found at https://safety.google/security-privacy/.

Rights of Those Affected

You have the following rights:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;

  • to request the immediate rectification of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;

  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

  • pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another responsible party;

  • pursuant to Art. 7 Para. 3 GDPR, to revoke your consent to us at any time. This means that we may no longer continue the data processing based on this consent in the future and

  • pursuant to Art. 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or the headquarters of our company.

Right of Objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to exercise your right of withdrawal or objection, simply send an email to contact@breakthroughrecruiting.de

Data Security

We use SSL encryption (Secure Socket Layer) when visiting our website for security reasons and to protect the transmission of confidential (particularly personal) data. Depending on the browser you are using, you can usually tell whether your Internet browser supports this encryption and whether an individual page of our website is transmitted in encrypted form by the display of the key or lock symbol in the browser line and in the address line ("https://"). This encryption prevents the data you send to us via our website from being read by third parties.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Current Status and Changes to this Privacy Policy

This privacy policy is currently valid and is dated October 2021. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time on the website at https://breakthroughrecruiting.de/datenschutz/.

Contact Information

If you have any questions about data protection or would like to exercise your rights, please contact:

Breakthrough Recruiting & Consulting UG (limited liability)
Schmerlecker Dorf 34
59597 Erwitte
Germany
Email: contact@breakthroughhealthcloud.de