JobMESH

Privacy Policy

Thank you for your interest in our company. Data protection is very important to the management of Jobmesh GmbH. You can generally use our websites without giving us any personal data. If you want to use particular services on our website, we may need to process personal data. If we need to process personal data and there is no legal basis for it (no rule in the GDPR that allows it), we generally obtain your consent.

Personal data is information about you as a person, for example your name, address, email address or telephone number. We always process it in line with the General Data Protection Regulation (GDPR) and the national data protection laws that apply to Jobmesh GmbH. This privacy policy explains what personal data we collect, use and process, to what extent, and for which purposes. It also explains your rights.

Who is responsible for your data?

The controller is the company responsible for processing your personal data. Under the General Data Protection Regulation, the other data protection laws of the EU member states and other data protection provisions, the controller is:

Jobmesh GmbH, Mergenthalerallee 15-21, 65760 Eschborn, Germany

Email: [email protected], website: jobmesh.nl

Which cookies do we use?

Our websites use cookies. A cookie is a text file that your browser stores on your device.

Many websites and servers use cookies. Many cookies contain a cookie ID: a unique string of characters. With it, websites and servers can tell the browser that stores the cookie apart from other browsers, and recognise it again.

Cookies let us offer you services that are easier to use and would not be possible without them. With a cookie, we can improve the information and job offers on our website in your interest. Cookies let us recognise the users of our website, so that using it is easier.

You can block cookies at any time in your browser settings, have your browser tell you about them, or permanently object to cookies being stored. You can also delete cookies that are already stored, at any time, in your browser or with other software. All common browsers allow this. If you block cookies, you may not be able to use all functions of our website, or not fully.

We use these cookies:

  • __hint, from jobmesh.nl: it remembers that we showed you a hint, so that we show it only once. Duration: 30 days.
  • cf_clearance, from Cloudflare: security-relevant cookie. It shows that your browser passed Cloudflare’s bot check. Duration: as set in our Cloudflare settings.

What do we store when you visit the website?

Each time you or an automated system opens our website, we collect general data and store it in the log files of our server. This data can include:

  • the browser type and version
  • the operating system of the accessing device
  • the website you came from (the referrer)
  • the pages you open on our website
  • the date and time of the visit
  • the IP address
  • the internet service provider of the accessing device
  • other similar data that helps us avert danger if our IT systems are attacked

We do not use this data to draw conclusions about you. We need it to:

  • deliver the content of our website correctly
  • improve the content of our website
  • keep our IT systems and the technology of our website working at all times
  • give law enforcement the information it needs to prosecute a cyber attack

We delete the log files after 30 days.

Legal basis: our legitimate interest, Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as well as possible. We may also use the IP address as a basis for billing when you follow one of our links.

Contract processors, our server host and the service provider responsible for the security of our website receive and process this data for us under contract. A processor is a company that handles data on our behalf and on our instructions.

Your right to object

You have the right to object to this processing. You can send or tell us your objection at any time, for example by email to [email protected].

No law or contract requires you to give us this data, and it is not needed to conclude a contract. You do not have to give it to us. Without it, however, you may not be able to use our website, or not fully.

Google services

To provide our services, we use various products of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When these products are used, Google may collect and process information, including personal data. We cannot rule out that Google also sends this information to a server in a third country.

For transfers outside the EU, we have concluded the EU standard contractual clauses with Google, and Google is certified under the EU-US Data Privacy Framework.

We cannot influence which data Google actually collects and processes. Google states that it may process, among others, the following information, including personal data:

  • protocol data, in particular the IP address
  • location-related information
  • unique application numbers
  • cookies and similar technologies

You can read Google’s privacy policy here: https://www.google.com/policies/privacy/

What happens when you contact us?

The law requires our website to offer a quick way to contact us electronically and to communicate with us directly, including a general email address. If you contact us by email, we automatically store the personal data you send. We store the data you give us voluntarily in order to process your request or to contact you. We do not pass this data on to third parties.

Legal basis: Article 6(1)(b) GDPR.

The recipient of this data is our email provider, which acts as a processor for us.

Data of our business partners

This section concerns the personal data of our business partners, not of the people who use our website. We use various services to communicate, to organise our customer data and contract documents, to invoice, and to fulfil our legal duties, especially tax duties. These service providers either process the data for us under a contract, as our processors, or they are controllers themselves.

Legal basis: Article 6(1)(b) GDPR. The processing serves to fulfil the contracts we have concluded with our business partners, or to prepare such contracts.

How long do we keep your data?

We process and store your personal data only as long as we need it for the purpose we stored it for, or as long as a law or regulation that applies to us requires. After that, we routinely block or delete it as the law requires, unless we still need it to fulfil a contract or to prepare one. Blocking means we restrict its further use.

On which legal basis do we process your data?

We process personal data on these legal bases:

  • Consent, Article 6(1)a GDPR: when we obtain your consent for a specific purpose.
  • Contract, Article 6(1)b GDPR: when we need to process your data to fulfil a contract with you, for example to deliver goods or to provide another service or consideration. The same applies to steps before a contract, for example when you ask about our products or services.
  • Legal obligation, Article 6(1)c GDPR: when a law requires us to process personal data, for example tax law.
  • Vital interests, Article 6(1)d GDPR: in rare cases, when we need to process personal data to protect your vital interests or those of another person. For example, if a visitor to our company were injured and we had to give their name, age, health insurance details or other vital information to a doctor, hospital or other third party.
  • Legitimate interest, Article 6(1)f GDPR: when none of the legal bases above applies. The processing must be necessary for a legitimate interest of our company or of a third party. That interest must outweigh your interests, fundamental rights and freedoms. Such processing is allowed in particular because the European legislator mentioned it specifically. The legislator took the view that a legitimate interest can be assumed if you are a customer of ours (recital 47 sentence 2 GDPR).

When we base processing on Article 6(1)f, our legitimate interest is to carry out our business for the well-being of all our employees and our shareholders.

Do you have to give us your personal data?

Sometimes the law requires you to give us personal data, for example tax law. Sometimes a contract requires it, for example information about the contract partner. Sometimes a contract can only be concluded if you give us personal data, which we then have to process. For example, if our company concludes a contract with you, you must give us personal data. Without it, we could not conclude the contract with you.

What rights do you have?

The GDPR gives you the rights below. To use any of them, contact us at any time, for example by email to [email protected].

Right to confirmation

You have the right to receive confirmation from us whether we process personal data about you.

Right to access your data

You have the right to learn from us, at any time and free of charge, which personal data we store about you, and to receive a copy of it. You also have the right to know:

  • the purposes of the processing
  • the categories of personal data we process
  • the recipients or categories of recipients we have disclosed or will disclose the data to, in particular recipients in third countries or international organisations
  • if possible, how long we plan to store the data or, if we cannot say, how we decide that
  • that you have the right to have your data corrected or deleted, or to object to the processing
  • that you have the right to lodge a complaint with a supervisory authority
  • if we did not collect the data from you: all available information about where it comes from
  • whether automated decision-making, including profiling, under Article 22(1) and (4) GDPR takes place. If so, at least in those cases: meaningful information about the logic involved, and the scope and intended effects of such processing for you

You also have the right to know whether your personal data has been sent to a third country or an international organisation. If so, you have the right to know which appropriate safeguards protect the transfer.

Right to correction (rectification)

You have the right to have us correct inaccurate personal data about you without delay. You also have the right to have incomplete personal data completed, including by a supplementary statement, taking the purposes of the processing into account.

Right to deletion (erasure, “right to be forgotten”)

You have the right to have us delete your personal data immediately if one of these reasons applies and the processing is not necessary:

  • We no longer need the data for the purposes we collected or otherwise processed it for.
  • You withdraw the consent the processing was based on under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing under Article 21(1) GDPR and there are no overriding legitimate reasons for it, or you object to the processing under Article 21(2) GDPR.
  • The data was processed unlawfully.
  • The data must be deleted to meet a legal obligation under EU law or the law of a member state that applies to us.
  • The data was collected in connection with information society services offered under Article 8(1) GDPR.

If one of these reasons applies and you want us to delete your data, contact us at any time. We will make sure your request is carried out immediately.

Right to restrict processing

You have the right to ask us to restrict the processing of your personal data if one of these conditions is met:

  • You dispute the accuracy of the data. The restriction lasts while we check it.
  • The processing is unlawful, but you do not want the data deleted and ask us to restrict its use instead.
  • We no longer need the data for the processing, but you need it to exercise or defend legal claims.
  • You have objected to the processing under Article 21(1) GDPR, and it is not yet clear whether our legitimate reasons outweigh yours.

If one of these conditions is met and you want us to restrict processing, contact us at any time. We will then initiate the restriction.

Right to data portability

You have the right to receive the personal data about you that you gave us, in a structured, commonly used and machine-readable format. You also have the right to send this data to another controller without us hindering you. This right to send the data applies if the processing is based on your consent under Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract under Article 6(1)(b) GDPR, and is carried out by automated means. It does not apply if the processing is necessary to perform a task in the public interest or in the exercise of official authority given to us.

When you use this right under Article 20(1) GDPR, you also have the right to have the data sent directly from one controller to another. This applies where it is technically feasible and does not affect the rights and freedoms of other people.

Right to object

You have the right to object at any time, for reasons arising from your particular situation, to our processing of your personal data based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

If you object, we will no longer process your personal data. There are two exceptions:

  • We can show compelling reasons for the processing that deserve protection and outweigh your interests, rights and freedoms.
  • The processing serves to assert, exercise or defend legal claims.

If we process your personal data for direct marketing, you have the right to object at any time to processing for that purpose. This also applies to profiling connected to such direct marketing. If you object, we will no longer process your personal data for direct marketing.

You also have the right to object, for reasons arising from your particular situation, to processing for scientific or historical research or for statistics (Article 89(1) GDPR). This does not apply if the processing is necessary for a task in the public interest.

To object, contact us directly at any time. When you use online services (information society services), you are also free to object by automated means using technical specifications, regardless of Directive 2002/58/EC.

Automated decisions, including profiling

We do not make automated decisions within the meaning of Article 22 GDPR.

The GDPR still gives you the right not to be subject to a decision based solely on automated processing, including profiling. This applies if the decision has legal effects for you or affects you in a similarly significant way. The right does not apply if the decision:

  • is necessary to conclude or perform a contract between you and us, or
  • is authorised by EU or national law that applies to us, and that law provides adequate safeguards for your rights, freedoms and legitimate interests, or
  • is based on your explicit consent.

If the decision is necessary to conclude or perform a contract between you and us, or is based on your explicit consent, we will take reasonable steps to safeguard your rights, freedoms and legitimate interests. At a minimum, you have the right to have a person at Jobmesh GmbH intervene, to put your point of view, and to challenge the decision.

Right to withdraw your consent

You have the right to withdraw your consent to the processing of your personal data at any time. This does not affect the lawfulness of the processing before the withdrawal.

Right to complain to a supervisory authority

You have the right to complain to a data protection supervisory authority (Article 77 GDPR), in particular in the EU country where you live or work, or where the infringement took place.

How do we protect your data?

We have put many technical and organisational measures in place to protect the personal data processed through this website as completely as possible. They protect your data and the data of our systems, website, products and services against loss, destruction, and against unauthorised persons accessing, changing or distributing it. Still, data sent over the internet can have security gaps, and digital products are complex. So we cannot guarantee absolute protection against every danger. If you prefer, you can give us personal data another way, for example by post.