Data Privacy Information

The protection of your personal data is our top priority. Your personal data will always be treated confidentially and processed in accordance with the applicable provisions of the General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act (BDSG). With the following information, we would like to create more transparency and inform you about how we handle your personal data in detail:

1. Name and contact details of the responsible

The following entity is responsible for the processing of your personal data within the meaning of the DS-GVO and the BDSG:

Alfa IT-Outsourcing GmbH
Austr. 1a
D – 65439 Flörsheim am Main

2. Processing of your personal data in the context of the placement of IT specialists

a. Personal data that we process

We only process your personal data insofar as you have expressed interest in our placement activities and insofar as they are relevant in the respective placement phase.

Within the framework of the placement procedure, your personal data will be processed for the following purposes:

  • to determine your interest in the placement of IT professionals
  • when you express your interest in receiving further information by e-mail
  • for proposals for the submission of suitable IT specialists for the position to be filled
  • if necessary, to enter your data in our internal negative list; this happens if you object to further contacts from us; in this case, we will compare your personal data with our internal negative list before contacting you in the future, so that we will no longer contact the persons listed there
  • to communicate with you by e-mail or telephone – in particular to answer your inquiries

b. Legal basis for the processing of your personal data

Processing of your personal data on the basis of consent:

  • Insofar as we obtain your consent for the processing of your personal data, the processing of your personal data is based on Art. 6 (1) p. 1 lit. a DS-GVO in conjunction with Art. 7 DS-GVO. Art. 7 DS-GVO.

Processing on the basis of legitimate interest:

    • The legal basis for direct marketing purposes may be Art. 6 (1) sentence 1 lit. f DS-GVO if we have legitimate interests, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. The legitimate interests pursued by us in this context – in addition to the purposes listed under a. – include:
      • optimal information about our services by means of direct marketing
      • communication with you, in particular to answer your requests by e-mail, telephone and/or fax
      • the legal basis for processing activities in connection with the assertion, exercise or defense of legal claims is also our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DS-GVO

Processing on the basis of the general terms and conditions / user agreements agreed between you and the professionally oriented networks:

    • Insofar as we use your personal data, which we have obtained via career-oriented networks, for the purpose of establishing contact, Art. 6 (1) p. 1 lit. b DS-GVO serves us as the legal basis for the processing, insofar as the provision of the career-oriented networks serves the purpose of establishing contact and communication between the users and the user has published this data for this purpose.

3. Recipients or categories of recipients of your personal data

We transmit your personal data online in encrypted form and only to external recipients if you have consented or if this is permitted by law. External recipients of your personal data are in particular:

    • our contractors
    • our accounting partners
    • our order processors
    • authorities (tax offices, courts, trade supervisory office, etc.)
    • credit institutions
    • postal service
    • tax advisors

In addition, your personal data may be transferred to the following service providers located in a country outside the EU/EEA:

    • Microsoft Corporation – Redmond, WA (USA)

In the case of processors and service providers outside the EU/EEA, your personal data will only be processed to the extent that this is the subject of our order processing agreement pursuant to Art. 28 DS-GVO with these recipients.

4. Transfer of your personal data to a third country or to an international organization

In principle, the personal data collected and generated during the provision of relevant products and services is stored on our servers in the EU/EEA. Since the providers of our software solutions, among others, offer their products and/or services on a global basis based on available resources and servers, your personal data may be transferred to or accessed from other jurisdictions outside the EU/EEA. In particular, personal data will be transferred to the third country USA within the meaning of Art. 15 (2) DS-GVO.

In order to ensure the continuation of the necessary level of protection when transferring data to a third country, contractual measures are agreed for this purpose. The software provider has its registered office in the United States of America, which has not been recognized as providing an adequate level of data protection. To ensure appropriate guarantees for the protection of the transfer and processing of personal data outside the EU/EEA, the transfer of data to and processing of data by our service providers is carried out on the basis of appropriate guarantees pursuant to Art. 46 ff DS-GVO, in particular by concluding so-called standard data protection clauses pursuant to Art. 46 (2) lit. c DS-GVO.

5. Duration of the storage of your personal data

Your personal data will be deleted as soon as the purposes for its storage mentioned under ,,Purposes of data processing” cease to apply. This is usually the case if we or our clients decide not to use our services or the cooperation has been terminated. In this case, we reserve the right to retain your personal data in our customer database for up to six months after receipt of the notice of refusal or termination of the cooperation. The legal basis for this is Art. 6 para. 1 p. 1 lit. c DS-GVO in conjunction with. § 15 para. 4 AGG, § 224 para. 2 ZPO. Otherwise, your personal data will be deleted upon termination of the cooperation, unless you have given your consent to be included in our customer database or the deletion is not opposed by any statutory or contractual retention periods.

Your personal data will be deleted irrespective of the placement stage if you revoke your previously given consent. You can find more information on this in section 8 of this information.

Your personal data may also be stored beyond this, in particular in the following cases:

  • if a deletion is opposed by contractual, legal up to 10 years according to § 257 HGB, § 147 AO or statutory retention period
  • for the assertion, exercise or defense of legal claims
  • if this is required by European or national law for the fulfillment of a legal obligation to which we are subject

6. Your rights as a data subject

According to the DS-GVO, you are entitled to the following rights, which you can assert against us:

  • You have the right to obtain information from the responsible person about the data stored about you (Art. 15 DS-GVO).
  • You have the right to rectification if inaccurate personal data is processed (Art. 16 DS-GVO).
  • You may request the deletion or restriction of processing, provided that the legal requirements are met (Art. 17 and 18 DS-GVO).
  • If you claim the right to rectification, erasure or restriction of processing of your personal data, we will notify all recipients of your data of this rectification, erasure or restriction (Art. 19 DS-GVO).
  • If you have consented to the data processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 DS-GVO).
  • If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.  If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes (Art. 21 DSGVO).
  • Furthermore, there is a right of appeal to a supervisory authority (Art. 77 DS-GVO).

The competent supervisory authority for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
D – 65189 Wiesbaden
Postfach 3163
D – 65021 Wiesbaden
Tel.: +49-611-1408-0
Fax: +49-611-1408-900

7. Right to revoke consent

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) DS-GVO, unless Art. 9(2)(a) or (b) DS-GVO applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in a. and b. above, the responsible person shall take reasonable measures to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible person, to express his or her point of view and to contest the decision.