Privacy Policy / Datenschutzerklärung

1. General

This Privacy Policy informs you about the nature, scope, and purpose of the processing of your personal data by the controller responsible under data protection law, in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR).

The definitions of the GDPR, in particular pursuant to Art. 4, apply.

a. Controller

The controller responsible under data protection law is:

Integral Services GmbH (“Integral Services”)
Schönhauser Allee 148
10435 Berlin, Germany
Website: www.group.integral.de
Email: info@group.integral.de

b. Data Protection Officer

You can reach the appointed Data Protection Officer (DPO) as follows:

Intelliant GmbH
Reinhardtstr. 25
10117 Berlin, Germany
Email: privacy@group.integral.de

2. Details of the Data Processing Activities

a. Website Operation and Website Functions

When you visit our website, we process your personal data as a website visitor as follows.

In doing so, we use services from third parties. These services also include the use of cookies (Necessary, Preferences, Statistics, Marketing). You can find specific information on the individual cookies and individual setting options under “Change consents” in our consent management.

In the consent management, you can consent to processing activities and object to processing activities based on legitimate interest. You can also adjust your preferences at a later point in time or revoke your consent with effect for the future. These adjustments are possible at any time via the widget or the link in the website footer in your browser window. Please note that without your consent, individual functions of the website may only work to a limited extent.

Provision of Website Content

Purpose

• Establishing the technical connection between the visitor’s device and our website (carrying out the session)
• Maintaining and improving the functionality of the website
• Maintaining and improving information security / data security (confidentiality, availability, and integrity) of the website (data storage in log files)

Categories of processed data

• IP address of the accessing system
• Browser type and version of the device used
• Internet service provider of the accessing system
• Date, time, and success of the access
• Third-party websites from which the user’s system reaches our website
• Third-party websites that are accessed by the user’s system via our website

Categories of recipients

• Web hosting — Webflow, Inc.
• Various cookie providers (see consent management)
• Note: Google Tag Manager (Google Inc.) — no processing of personal data

Third-country data transfer

• US (web hosting) on the basis of appropriate safeguards pursuant to Art. 46 GDPR
• US (cookies) with corresponding consent

Storage period / criteria

• Session: data deletion upon termination of the respective session
• Log files: data deletion after 7 days or anonymization
• Cookies: see consent management

Legal bases

• Art. 6 (1) (f) GDPR (legitimate interests)
• Art. 6 (1) (a) GDPR (consent)

Website Optimization, Reach Analysis, and Social Media Integration

We process personal data of website visitors for the purposes of website optimization and reach analysis, as well as for the integration of marketing and social media functionalities. Detailed information on these processing activities can be found in the consent management under “Change consents”. The legal basis for processing for these purposes is Art. 6 (1) (a) GDPR (consent). Consent to this processing can be revoked at any time during this browser session in which these settings are used.

Contact

Purpose

• Contact between Integral Services and interested parties
• Handling and answering (contact) inquiries submitted
• Arranging and conducting introductory meetings

Categories of processed data

• Personal master data (name)
• Contact data (email address, phone number)
• Message content (optional)
• IP address, log data, and tracking

Categories of recipients

• Customer Relationship Management — HubSpot Germany GmbH

Third-country data transfer: —

Storage period / criteria: 3 months after the introductory meeting has taken place

Legal bases: Art. 6 (1) (a) GDPR (consent)

b. Integral Platform and Services

We process your personal data as a (potential) customer and user of our platform app.integral.de in order to be able to provide you with our products & services.

Among other things, data is processed as part of operating the platform, as well as for providing the functions, for security, and for improving the features offered. The individual processing activities are detailed within this document.

You can find the corresponding privacy policy at app.integral.de/datenschutz.

c. Community Management

To communicate feedback, or to clarify questions and potential bugs, we offer our users various communication channels.

If you contact us via external platforms such as Facebook or LinkedIn, your inquiry will also be processed by the respective platform provider. Since, in this case, you have already concluded a usage agreement with the platform as a registered user, you have already been informed about the processing by the provider. We are not responsible for the processing of your data by, among others, Meta Platforms, Inc. or LinkedIn Ltd. — Further information on the processing of your data can be found in the respective privacy policies.

Purpose

• Contact with Integral Services
• Handling (customer) inquiries and follow-up communication
• Communicating feedback, questions, answers, bugs

Categories of processed data

• Depending on the respective medium chosen
• Where applicable, personal master data (name, email address)
• Where applicable, phone number
• Where applicable, content data of the respective message

Categories of recipients: External platforms or messengers — see above

Third-country data transfer: US on the basis of appropriate safeguards pursuant to Art. 46 GDPR

Storage period / criteria: —

Legal bases: Art. 6 (1) (f) GDPR (legitimate interest)

d. Application Process

Via our careers website (integral.jobs.personio.de), open job vacancies at Integral Services can be viewed and the application process can be initiated by providing personal data and application documents. This is made possible by the provider Personio. Responsible for your application is the respective Integral company to which you are applying. If this is a different company from the Integral network, Integral Services provides support as a processor pursuant to Art. 28 GDPR.

Purpose

• Provision of a secure application portal
• Finding and hiring future employees
• Filling open positions at the customer
• Conducting the application process
• Communication as part of the application process

Categories of processed data

• Personal master data (name, email address)
• Contact data (address, phone number)
• CV data (incl. education data, career data)
• Visa information
• Cover letter (optional)
• LinkedIn profile details (optional)
• Salary expectation (optional)

Categories of recipients

• Application management — Personio SE & Co. KG
• Communication — Google LLC. (Google Workspace)

Third-country data transfer: US (communication) on the basis of appropriate safeguards pursuant to Art. 46 GDPR

Storage period / criteria

• Up to 6 months after completion of the application process (rejection), if no other legal requirements for storage exist (e.g., AGG claim)
• Extension of storage with consent (talent pool for 6 months)
• Upon conclusion of a contract, the data is stored and further managed in personnel data management

Legal bases

• Art. 6 (1) (a) GDPR (consent)
• Art. 6 (1) (b) GDPR (initiation or performance of a contract)

We ask for your understanding that, for data protection reasons, we cannot process applications received outside of Personio.

Under European data protection law, we are obliged to inform you that withholding personal data in your application may disadvantage you compared to other applicants applying for the same position.

3. Rights of the Data Subject

If personal data relating to you is processed, you are a data subject within the meaning of the GDPR. You therefore have the following rights vis-à-vis the controller:

In this case, you have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR) of your data, the right to restriction of processing (Art. 18 GDPR), a right to object to processing (Art. 21 GDPR), and the right to data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. The competent data protection supervisory authority for Integral Services is the Berlin Commissioner for Data Protection and Freedom of Information.

No automated decision-making, including profiling, pursuant to Art. 22 GDPR takes place.

For further information or to exercise your data subject rights, please contact the Data Protection Officer (see 1. b.).

4. Currency and Changes to this Privacy Policy

This Privacy Policy in its currently valid version applies. The current Privacy Policy can be accessed and printed at any time at the following web address: www.integral.group.de/privacy-policy