Studio Setup24 Co-working Space Office

Privacy Policies

Your data is important to us.

Privacy Policy

Privacy information

Tostmann The Executive Finder GmbH provides its website at www.theexecutivefinder.eu, where it informs about its services.

Below you will find information about the controller responsible for processing your personal data (section Information about the controller) and about your rights regarding the processing of your personal data (section Information about the rights of data subjects).

Furthermore, you will find below information about the processing of your personal data and information about the use of cookies (section Information on the processing of personal data) in connection with our website.

A. Table of Contents

B. Information about the person responsible
C. Information on the rights of data subjects
I. Right to Information
II. Right to rectification
III. Right to erasure („right to be forgotten“)
IV. Right to restriction of processing
V. Right to data portability
VI. Right to object
VII. Right to withdraw consent
VIII. Right to lodge a complaint with the supervisory authority
D. Information on the processing of personal data
I. Details of the personal data that are processed
II. Details on the processing of personal data
E. Status and changes to this privacy policy

 

B. Information about the person responsible

Tostmann The Executive Finder GmbH
Theodor-Heuss-Allee 112
60486 Frankfurt am Main, Germany
office@theexecutivefinder.eu
Telephone: +49 (0)69 6677 41-380
Fax: +49 (0)69 6677 41-383

C. Information on the rights of data subjects

As a data subject, you have the following rights regarding the processing of your personal data:

  • Right of access (Article 15 of the General Data Protection Regulation)
  • Right to rectification (Article 16 of the General Data Protection Regulation)
  • Right to erasure („right to be forgotten“) (Article 17 of the General Data Protection Regulation)
  • Right to restriction of processing (Article 18 of the General Data Protection Regulation)
  • Right to data portability (Article 20 of the General Data Protection Regulation)
  • Right to object (Article 21 of the General Data Protection Regulation)
  • Right to withdraw consent (Article 7 paragraph 3 of the General Data Protection Regulation)
  • Right to lodge a complaint with the supervisory authority (Article 57 paragraph 1 letter f of the General Data Protection Regulation)

To exercise your rights, you can contact us (see section Information about the data controller).

Information on any special modalities and mechanisms that may facilitate the exercise of your rights, in particular your rights to data portability and objection, can be found, where applicable, in the information on the processing of personal data in the section "Information on the processing of personal data" of this privacy notice.

Below you will find more detailed information about your rights regarding the processing of your personal data:

III.I. Right to Information

As a data subject, you have a right to information under the conditions of Article 15 of the General Data Protection Regulation.

This means, in particular, that you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you also have the right to access this personal data and the information listed in Article 15(1) of the General Data Protection Regulation (GDPR). This includes, for example, information about the purposes of the processing, the categories of personal data being processed, and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Article 15(1), letters a, b, and c of the GDPR).

You can find the full scope of your right to information in Article 15 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

III.II. Right to rectification

As a data subject, you have a right to rectification under the conditions of Article 16 of the General Data Protection Regulation.

This means, in particular, that you have the right to request from us the immediate correction of inaccurate personal data concerning you and the completion of incomplete personal data.

You can find the full scope of your right to rectification in Article 16 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

III.III. Right to erasure („right to be forgotten“)

As a data subject, you have a right to erasure („right to be forgotten“) under the conditions of Article 17 of the General Data Protection Regulation.

This means that you generally have the right to request that we delete your personal data without undue delay, and we are obligated to delete personal data without undue delay if one of the grounds listed in Article 17(1) of the General Data Protection Regulation (GDPR) applies. This may be the case, for example, if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed (Article 17(1)(a) of the GDPR).

Insofar as we have made the personal data public and are obliged to erase it, we are also obliged, taking into account available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform other controllers who are processing the personal data that a data subject has requested the erasure of all links to, or copies or replications of, that personal data (Article 17(2) of the General Data Protection Regulation).

The right to erasure („right to be forgotten“) does not apply in exceptional cases where processing is necessary for the reasons listed in Article 17(3) of the General Data Protection Regulation (GDPR). This may be the case, for example, where processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (Article 17(3)(a) and (e) of the GDPR).

You can find the full scope of your right to erasure in Article 17 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

III.IV. Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions of Article 18 of the General Data Protection Regulation.

This means that you have the right to request that we restrict the processing of your personal data if one of the conditions listed in Article 18(1) of the General Data Protection Regulation (GDPR) applies. This could be the case, for example, if you contest the accuracy of the personal data. In this case, the processing will be restricted for a period that allows us to verify the accuracy of the personal data (Article 18(1)(a) of the GDPR).

Restriction means marking stored personal data with the aim of limiting its future processing (Article 4, point 3 of the General Data Protection Regulation).

You can find the full scope of your right to restrict processing in Article 18 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

III.V. Right to data portability

As a data subject, you have a right to data portability under the conditions of Article 20 of the General Data Protection Regulation.

This means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation or on a contract pursuant to Article 6(1)(b) of the General Data Protection Regulation and the processing is carried out by automated means (Article 20(1) of the General Data Protection Regulation).

Information on whether processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation or on a contract pursuant to Article 6(1)(b) of the General Data Protection Regulation can be found in the information on the legal bases for processing in the section "Information on the processing of personal data" of this privacy notice.

When exercising your right to data portability, you also have the right, in principle, to have your personal data transmitted directly from us to another controller, insofar as this is technically feasible (Article 20 paragraph 2 of the General Data Protection Regulation).

You can find the full scope of your right to restrict processing in Article 20 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

III.VI. Right to object

As a data subject, you have the right to object under the conditions of Article 21 of the General Data Protection Regulation.

We will explicitly inform you, as the data subject, of your right to object at the latest at the time of our first communication with you.

Below you will find more detailed information on this topic:

3.6.1. Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the General Data Protection Regulation (GDPR), including profiling based on those provisions (Article 4(4) of the GDPR).

Information on whether processing is based on Article 6 paragraph 1 letter e or f of the General Data Protection Regulation can be found in the information on the legal bases for processing in the section "Information on the processing of personal data" of this privacy notice.

In the event of an objection on grounds relating to your particular situation, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

You can find the full scope of your right to object in Article 21 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

3.6.2. Right to object to direct marketing

If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling (Article 4 No. 4 of the General Data Protection Regulation) insofar as it is related to such direct marketing.

Information on whether and to what extent personal data is processed for direct marketing purposes can be found in the information on the purposes of processing in the section "Information on the processing of personal data" of this privacy policy.

In the event of an objection to processing for direct marketing purposes, we will no longer process the personal data concerned for these purposes.

You can find the full scope of your right to object in Article 21 of the General Data Protection Regulation, which you can access via the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

III.VII. Right to withdraw consent

If the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation (GDPR), you, as the data subject, have the right to withdraw your consent at any time pursuant to Article 7(3) of the GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We will inform you of this before you give your consent.

Information on whether processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation can be found in the information on the legal bases for processing in the section "Information on the processing of personal data" of this privacy notice.

III.VIII. Right to lodge a complaint with the supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority under the conditions of Article 57 paragraph 1 letter f of the General Data Protection Regulation.

The supervisory authority responsible for us is:

The Hessian Data Protection Commissioner
PO Box 3163
65021 Wiesbaden
Poststelle@datenschutz.hessen.de
Telephone: +49 611 1408 – 0
Fax: +49 611 1408 – 900

D. Information on the processing of personal data

Our website is for informational purposes only. When you use the website for purely informational purposes, your browser automatically sends certain information to our website's server, such as your IP address. We process this information to provide you with the website content you have requested. To ensure the security of the IT infrastructure used to provide the website, this information is also temporarily stored in a web server log file.

To enable you to use the website for informational purposes, we use cookies on the website, which process personal data.

Below you will find more detailed information on this topic:

IV.I. Details of the personal data processed: Log data that is technically generated when accessing the website via the Hypertext Transfer Protocol (Secure) (HTTP(S)) („HTTP data“).

Personal data contained in the categories

  • Domain name of the internet service provider, IP address, type and version of your internet browser, operating system used, the page accessed, the previously visited page (referrer URL), date and time of access.

Obligation to provide data

  • Providing the data is neither legally nor contractually required, nor is it necessary for entering into a contract. There is no obligation to provide the data.

If the data is not provided, we will be unable to provide the requested website content.

Storage duration

  • Data is stored in server log files in a form that allows for the identification of the data subjects for a maximum period of 7 days, unless a security-related event occurs (e.g., a DDoS attack). In the event of a security-related event, server log files are stored until the security-related event has been resolved and fully investigated.

Data that is stored in strictly necessary cookies for the uniform display of the layout of our website on the user's device ("cookie data")

Cookies are small text files containing information that can be placed on a user's device via their browser when visiting a website. When the website is visited again using the same device, the cookie and the information stored within it can be retrieved.
Personal data contained in the categories

Screen width, yes/no indication of whether this is your first visit to our website within the current browser session.
Obligation to provide data

Providing the data is neither legally nor contractually required, nor is it necessary for entering into a contract. There is no obligation to provide the data.
If the data is not provided, we will be unable to provide the requested website content.

Storage duration

  • We do not store this data on our systems.
    The cookie „ag_screenwidth“ has a validity period of one day.
    The cookie „firstvisit“ is automatically deleted when you close your browser.

IV.II. Details on the processing of personal data

Generally, no automated decision-making takes place.

To provide the content of the website requested by the user, HTTP data is temporarily processed on our web server.

Categories of personal data that are processed

  • HTTP data

Legal basis and, where applicable, legitimate interests

  • Balancing of interests (Article 6 paragraph 1 letter f of the General Data Protection Regulation). Our legitimate interest is the provision of the website content accessed by the user.

Recipient

  • Hosting provider (data processor with headquarters and data processing exclusively in the EU).

To ensure the security of the IT infrastructure used to provide the website, in particular to detect, eliminate and document disruptions in a legally sound manner (e.g. DDoS attacks), HTTP data is temporarily processed in web server log files.

Categories of personal data that are processed

  • HTTP data

Legal basis and, where applicable, legitimate interests

  • Balancing of interests (Article 6 paragraph 1 letter f of the General Data Protection Regulation). Our legitimate interest is to ensure the security of the IT infrastructure used to provide the website, in particular for the detection, elimination and legally sound documentation of disruptions (e.g. DDoS attacks).

Recipient

  • Hosting provider (data processor with headquarters and data processing exclusively in the EU).

To ensure a consistent layout of our website, data from strictly necessary cookies is temporarily processed on our web server.

Categories of personal data that are processed

  • Cookie data

Legal basis and, where applicable, legitimate interests

  • Balancing of interests (Article 6 paragraph 1 letter f of the General Data Protection Regulation). Our legitimate interest is the provision of the informational function of the website accessed by the user.

Recipient

  • Hosting provider (data processor with headquarters and data processing exclusively in the EU).

E. Status and changes to this privacy policy

This privacy policy is dated May 17, 2018.

Due to technological advancements and/or changes in legal and/or regulatory requirements, it may become necessary to adapt this privacy policy.

The current data protection information can be accessed at any time at www.theexecutivefinder.eu.

Contact us