PRIVACY STATEMENT

The protection of your personal data is very important to us, and we treat this topic very carefully.

Your personal data are transmitted in encrypted form over the Internet. We secure our website and other systems using technical and organisational measures to protect against loss, destruction, access, modification or dissemination of your data by unauthorised persons.

GENERAL INFORMATION ON DATA PROCESSING

This Privacy Policy describes the processing of personal data when using the websites of ALFRED TALKE GmbH & Co. KG (hereinafter referred to as “TALKE”). It also explains the choices you have regarding your personal data (“Your Rights”) and how you can contact us.

As a result of the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter “GDPR”), we have been assigned additional obligations to ensure the protection of personal data of individuals affected by processing (hereinafter also referred to as “Customer,” “User,” “You,” or “Data Subject”).

Where we determine, either alone or jointly with others, the purposes and means of processing, this includes, in particular, the obligation to inform you transparently about the nature, scope, purpose, duration, and legal basis of such processing (cf. Articles 13 and 14 GDPR). With this declaration (hereinafter “Privacy Notice”), we inform you about how your personal data is processed by us.

Our Privacy Notice is structured modularly. It consists of a general section applicable to all processing of personal data and situations that occur whenever a website is accessed (Part A – General) and specific sections, each applicable only to the particular processing situation identified by title—especially the use of our websites (Part B – Use of the Website; Part C – Cookie Policy; Part D – Privacy Notice for Business Partners and Interested Parties; Part E – Information for Applicants).

To help you locate the sections relevant to you, please refer to the following overview of the structure of this Privacy Notice:

  • Part A: General Information: Always relevant to you.
  • Part B: Use of the Website: Relevant if you use our German-language website, including our social media presence.
  • Part C: Cookie Policy: Always relevant to you.
  • Part D: Business Partners and Interested Parties: Relevant if you are, or intend to become, a customer, service provider, supplier, or similar business partner, are currently in an ongoing business relationship with us, or have been in one previously.
  • Part E: Applicants: Relevant if you apply for employment or vocational training with us.

PART A: GENERAL INFORMATION

I. Controller and Contact Details of the Data Protection Officer

The controller within the meaning of the GDPR is:

ALFRED TALKE GmbH & Co. KG
Max-Planck-Straße 20
50354 Hürth
Germany
Tel.: +49 (0)2233 599-0
Email: info@talke.com

For any questions regarding the processing of your personal data by us or data protection in general, please contact our Data Protection Officer, who can be reached as follows:

Data Protection Officer of ALFRED TALKE GmbH & Co. KG
Max-Planck-Straße 20
50354 Hürth
Germany
Tel.: +49 (0)2233 599-0
Email: datenschutz@talke.com

II. Duration of Storage of Personal Data

Your data will be stored only for as long as necessary to fulfill the respective purpose, taking into account statutory retention periods.

III. Your Rights as a Data Subject

Where we process personal data concerning you, you have the following rights as a data subject under the GDPR:

  • Right of Access (Art. 15 GDPR): You have the right to obtain information about the personal data we hold concerning you.
  • Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data.
  • Right to Erasure and Restriction of Processing (Art. 17, 18 GDPR): You have the right to request the deletion or restriction of processing of your personal data where the statutory requirements are met.
  • Right to Data Portability (Art. 20 GDPR): If processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent (Art. 7 (3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time with future effect. The withdrawal does not affect the lawfulness of processing carried out based on consent before its withdrawal.
  • Right to Object (Art. 21 (1) GDPR): You have the right to object, on grounds relating to your particular situation, to the processing of your personal data where the processing is based on Article 6 (1) (e) or (f) GDPR.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may revoke consent that you have already provided at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected.

Direct Marketing (Art. 21 GDPR)

Where personal data is processed pursuant to Article 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on those provisions. If you object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or the processing serves the establishment, exercise, or defense of legal claims (Art. 21 (1) GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling insofar as it is related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (Art. 21 (2) GDPR).

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with the competent supervisory authority at any time.

PART B: WEBSITE USAGE

I. Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the computer system of the requesting device.
The following data are collected:

  • Information about the browser type and version used
  • The user’s operating system
  • The user’s IP address
  • Date and time of access

These data are also stored in the log files of our system.
Such data are not stored together with other personal data of the user.

Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article 6 (1)(f) GDPR.

Purpose of Data Processing
The temporary storage of the IP address is necessary to enable delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files ensures the functionality of the website. In addition, the data serve to optimize the website and to ensure the security of our information technology systems. The data are not evaluated for marketing purposes in this context.
These purposes constitute our legitimate interest in data processing pursuant to Article 6 (1)(f) GDPR.

Duration of Storage
The data are deleted once they are no longer necessary to achieve the purpose for which they were collected.
In the case of data collected to provide the website, this occurs when the respective session ends.
For data stored in error log files, anonymization by irreversible modification of IP addresses takes place no later than after seven days. Such anonymized log files are automatically deleted after 60 days.

Right to Object and Erasure
The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently, users have no right to object to such processing.

We also use carefully selected and monitored service providers outside the EU. To ensure an adequate level of data protection, we have concluded the EU Standard Contractual Clauses with these providers, unless the European Commission has determined that the recipient country provides an adequate level of protection or one of the exceptions in Article 49 GDPR applies.

II. Processing of Data in Connection with Website Use – Your Inquiries

If you contact us by email, contact form, or direct message via messenger services (e.g., Telegram, Signal, WhatsApp), we collect the data you provide for the purpose of processing and responding to your inquiry.
We retain your inquiry for verification purposes for up to two years. Depending on the nature of your inquiry, longer retention periods may apply; we will inform you accordingly where applicable.
The legal basis for processing is Article 6 (1)(f) GDPR.

Note on Contact via Messenger Services such as WhatsApp & Co.
If you choose to contact us via messenger services, please note that the respective provider (e.g., WhatsApp Inc.) receives personal data (in particular communication metadata), which may also be processed on servers in non-EU countries (e.g., the USA).

Further information can be found in the providers’ privacy policies:

We have no influence over data processing by these messenger services.
We use the telephone numbers and information transmitted to us via these services solely for initial communication.
If, subsequently, a recruitment process or other ongoing correspondence arises, we will store the number for further communication. Unnecessary contact data are deleted immediately.

Legal Basis for Data Processing
The legal basis for processing data transmitted in the course of communication is Article 6 (1)(f) GDPR.
If contact is made with the intention of concluding a contract, Article 6 (1)(b) GDPR also applies.

Purpose of Data Processing
The processing of personal data serves solely to process the inquiry and the related matter. This constitutes the legitimate interest in processing.

Duration of Storage
The data are deleted once they are no longer necessary to achieve the purpose for which they were collected.
This is the case when the respective conversation with the user has ended. A conversation is deemed ended when the circumstances indicate that the matter in question has been conclusively resolved.

Right to Object and Erasure
The user may withdraw consent to the processing of personal data at any time.
If the user contacts us by email, they may object to the storage of their personal data at any time.
In such a case, the conversation cannot be continued.
All personal data stored in connection with the contact will be deleted in this event.

III. Social Media

Embedding of YouTube Videos on Our Website

Our website contains embedded YouTube videos. We use YouTube’s extended data protection mode for this purpose.
According to YouTube, when our website is accessed, initially no information about visitors is stored.
However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. YouTube may establish a connection to the Google DoubleClick network, regardless of whether you view a video.

When you start a YouTube video on our website, a connection to YouTube’s servers is established. YouTube is informed which of our pages you visited.
If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Once a video is played, YouTube may also store various cookies on your device or use comparable tracking technologies (e.g., device fingerprinting).
This enables YouTube to collect information about visitors to our website, which is used, among other things, to compile video statistics, improve user experience, and prevent fraud.

More information about YouTube’s use of cookies can be found at: https://policies.google.com/privacy?hl=de&gl=de

Examples of cookies used:

  • 1P_JAR: Google cookie for user tracking and advertising (storage duration: 1 week)
  • CONSENT: Tests whether cookies can be set (permanent)
  • _ga: Used to distinguish users (storage duration: 2 years)

The use of YouTube is in the interest of an appealing presentation of our online services and constitutes a legitimate interest under Article 6 (1)(f) GDPR.
Where consent is requested, processing occurs solely on the basis of Article 6 (1)(a) GDPR and Section 25 (1) TDDDG (German Telecommunications and Telemedia Data Protection Act), insofar as consent includes the storage of cookies or access to information on the user’s device. Consent can be withdrawn at any time.

Further information about data protection at YouTube is available at:
https://policies.google.com/privacy?hl=de

TALKE Profiles on Social Networks

TALKE also maintains several presences on social media platforms, currently including:

Social networks such as Facebook or X (formerly Twitter) can generally analyze your user behavior comprehensively when you visit their websites or pages containing integrated social media content (e.g., “Like” buttons or advertising banners).
Visiting our social media presences triggers various data processing activities.

In detail:
If you are logged into your social media account and visit our profile, the operator of the social media platform may associate your visit with your account.
Even if you are not logged in or have no account, personal data may still be collected—for example, via cookies stored on your device or by capturing your IP address.

The data collected may allow operators to create user profiles reflecting your preferences and interests.
Interest-based advertising may then be displayed to you both within and outside the platform.
If you have an account with the respective network, such advertising can appear across all devices on which you are or were logged in.

Please note that we cannot track all processing operations conducted by social media platforms.
The operators may carry out further processing activities beyond our control.
For details, please refer to the terms of use and privacy policies of the respective platforms.

Legal Basis
Our social media presence serves to ensure the broadest possible representation of TALKE on the Internet.
This constitutes a legitimate interest pursuant to Article 6 (1)(f) GDPR.
The analysis processes initiated by the social networks may be based on other legal grounds (e.g., consent under Article 6 (1)(a) GDPR) specified by the platform operators.

Joint Controllership and Exercise of Rights
When you visit one of our social media profiles (e.g., Facebook), we are jointly responsible with the operator for the data processing triggered by your visit.
You may exercise your rights (access, rectification, erasure, restriction of processing, data portability, and complaint) against either us or the platform operator.
Please note that, despite joint responsibility, we do not have full control over the data processing of social media platforms; our influence depends primarily on each provider’s corporate policies.

Duration of Storage
Data collected directly by us via our social media pages are deleted once the purpose of storage ceases, you request erasure, withdraw your consent, or the purpose for retention lapses.
Cookies remain stored on your device until you delete them.
Statutory retention requirements remain unaffected.
We have no control over the storage period of data held by the platform operators.
Please consult the respective privacy policies for details.

Specific Networks

Part C: Cookie Policy

I. General Information on the Use of Cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your device by your browser. They serve to make our services more user-friendly, efficient, and secure.

We use both temporary cookies (which are automatically deleted when you close your browser – “session cookies”) and persistent cookies (which remain stored for a defined period).

You can choose whether to allow the use of cookies. You may change your cookie preferences in your browser settings. Generally, you can decide whether to accept all cookies, be notified when a cookie is set, or reject all cookies. Please note that if you choose the latter option, you may not be able to use all features of our website in full.

When using cookies, we distinguish between strictly necessary cookies and cookies used for additional purposes (such as visitor analytics or marketing).

II. Strictly Necessary Cookies

When accessing this website, we store technical cookies (small files) on your device that are valid for the duration of your visit — so-called session cookies.
We use these exclusively during your visit to our website and only store the current browser session ID.

This cookie is deleted when the browser session ends.
We do not store IP addresses in this context.

III. Use of Cookies with Your Consent via Consent Management

This website uses a Consent Management Platform (CMP) to obtain and document your consent to the storage of certain cookies or the use of specific technologies in compliance with data-protection requirements.

When you enter our website, the following personal data are transmitted to our consent-management provider:

  • Your consent(s) or withdrawal(s) of consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • Date and time of your visit

The provider also stores a cookie in your browser in order to assign the consents granted or withdrawn. The collected data are retained until you request deletion, delete the cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.

The use of the consent-management tool serves to obtain legally required consent for the deployment of certain technologies.
The legal basis is Article 6 (1)(c) GDPR and Section 25 (2) No. 2 TDDDG (German Telecommunications and Telemedia Data Protection Act).

IV. Analysis of User Behavior via Google Analytics

If you have given your consent, this website uses Google Analytics 4, a web-analytics service of Google LLC.
For users within the EU/EEA and Switzerland, the controller is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Nature and Purpose of Processing

Google Analytics uses cookies that enable an analysis of how you use our website.
The information generated by the cookies is generally transmitted to a Google server in the United States and stored there.

We also use Google Tag Manager, which allows us to integrate tracking or analytics tools and other technologies into our website. The Tag Manager itself does not create user profiles, store cookies, or conduct analyses. It merely manages and deploys the integrated tools. The Tag Manager does, however, record your IP address, which may be transmitted to Google LLC in the USA.

In Google Analytics 4, IP anonymization is enabled by default. As a result, your IP address is shortened by Google within member states of the European Union or other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
According to Google, the IP address transmitted by your browser is not merged with other Google data.

During your website visit, your user interactions are recorded as “events,” such as:

  • Page views
  • First visit to the website
  • Session start
  • Visited pages
  • Your “click path” or interactions with the website
  • Scrolling activity (e.g., reaching 90 % of a page)
  • Clicks on external links
  • Internal search queries
  • Video interactions
  • File downloads
  • Viewed or clicked advertisements
  • Language settings

In addition, the following are collected:

  • Your approximate location (region)
  • Date and time of visit
  • Your (shortened) IP address
  • Technical information about your browser and device (e.g., language settings, screen resolution)
  • Your Internet Service Provider
  • The referrer URL (the website or advertisement through which you reached our site)

Purpose of Processing

Google uses this information on behalf of the website operator to evaluate pseudonymous use of the website and to compile reports on website activities.
These reports help us analyze and improve the performance of our website.

Recipients

Recipients of the data include:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (data processor under Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Third-Country Transfer

On 10 July 2023, the European Commission adopted its Adequacy Decision for the United States. Google LLC is certified under the EU–US Data Privacy Framework.
Since Google’s servers are globally distributed and transfers to other third countries (e.g., Singapore) cannot be entirely excluded, we have also concluded the EU Standard Contractual Clauses with Google.
A copy of these clauses can be obtained from us upon request.

Storage Period

Data transmitted by us and linked to cookies are automatically deleted after 14 months at the latest.
The maximum lifetime of Google Analytics cookies is two years.
Deletion of data whose retention period has expired occurs automatically once per month.

Legal Basis

The legal basis for this data processing is your consent pursuant to Article 6 (1)(a) GDPR and Section 25 (1) TDDDG.

Withdrawal of Consent

You can withdraw your consent at any time with future effect by reopening the cookie settings (via the fingerprint icon in the lower-left corner of the website) and adjusting your choices.
The lawfulness of processing carried out before withdrawal remains unaffected.

You can also prevent the storage of cookies altogether by configuring your browser accordingly.
Please note that rejecting all cookies may restrict functionality on this and other websites.

Additionally, you can prevent Google from collecting and processing data generated by cookies (including your IP address) by:

a) not consenting to cookie placement, or
b) installing the browser add-on to deactivate Google Analytics, available at:
https://tools.google.com/dlpage/gaoptout?hl=en

Further information on Google Analytics terms of use and data protection can be found at:
https://marketingplatform.google.com/about/analytics/terms/en/ and
https://policies.google.com/?hl=en

Part D: Business Partners and Interested Parties

The following section explains which personal data we process when you contact us, when we contact you, or when we are in a business relationship with you or your company (e.g., as a customer or supplier).

These privacy notices apply to all companies within the TALKE Group.
The controller under Article 4(7) GDPR is generally: ALFRED TALKE GmbH & Co. KG, represented by ALFRED TALKE Verwaltungsgesellschaft mbH.

In the context of intra-group cooperation, joint controllership between ALFRED TALKE GmbH & Co. KG and one or more affiliated group companies may arise (see list of companies linked in Part E).

For questions regarding which group companies are relevant in your case, or regarding the processing of your personal data in general, please always contact the Data Protection Officer of ALFRED TALKE GmbH & Co. KG at the above-mentioned postal address (with the addition “– Data Protection Officer –”) or preferably via email at datenschutz@talke.com.

I. Personal Data Processed Concerning You

We process personal data that we receive from you in the course of your inquiries or from existing contractual relationships. This includes, in particular, your professional contact details as well as all information exchanged, such as emails, orders, visit reports, requests regarding our services, and payment details. If a business relationship exists, you must provide the personal data necessary for preparing or executing the contract or which we are legally obliged to process. Otherwise, we may not be able to conclude or perform the contract.

II. Scope and Purposes of Data Processing

Contract Performance

We process the data provided during contract initiation or execution for the fulfillment or preparation of the contract concluded with you. For this purpose, we may use specialized, carefully selected, and monitored service providers (e.g., subcontractors, financial institutions, data hosting or maintenance service providers).

Processing for contract performance includes using data to deliver the contractual services, handle payments via our banks or payment service providers, provide after-sales or maintenance services, or handle warranty claims. This applies equally whether you are our customer or supplier.

Further details on processing purposes can be found in the respective contractual documents.
Processing for these purposes is based on Article 6(1)(b) GDPR.

Data arising from the use of our services may also be shared with external auditors or tax consultants for auditing and advisory purposes.

We retain data collected for contract fulfillment as long as warranty claims exist or other purposes outlined in this Privacy Policy apply.

Afterwards, data subject to statutory retention requirements under Sections 146 et seq. of the German Fiscal Code (Abgabenordnung) or Section 257 of the German Commercial Code (Handelsgesetzbuch) are archived and deleted upon expiry of those retention periods.
All other data are deleted immediately unless other purposes described herein justify further processing.

Data processing for warranty or legal compliance purposes is based on Article 6(1)(b) and (c) GDPR.

Address and Creditworthiness Checks

To verify addresses and creditworthiness, we may obtain company address and credit data from credit agencies and credit insurers, including data derived from statistical methods (scoring).
This occurs when we face an economic risk by entering into a contract and need to assess it accordingly.

Different credit agencies and credit insurers provide us with such data.
Upon request, we will inform you which specific agencies or insurers we use for your company.
Please contact us at the addresses above for this information.

Information provided by credit agencies and insurers, as well as internal payment data, are evaluated to create an internal rating that determines credit limits.

Credit data are deleted after the applicable statutory retention periods have expired following the last transaction and settlement of our services.
Such credit information may also be forwarded to relevant group companies during contract initiation.

Promotional Use of Data by the TALKE Group

Service providers commissioned by us—carefully selected and monitored (e.g., print shops, mailing houses)—use your name and address as the contact person in ongoing business relationships or as a prospective client, as well as related business data (contact details, utilized services, ordered products, etc.) for marketing and promotional purposes.

We use these data to provide you with information about products and services from the TALKE Group and to perform marketing analyses (so-called marketing scoring). Additionally, we may use data obtained with your consent for advertising analysis.

Through such promotional communication, we aim to keep you informed about developments in our services, ensure that we can provide the most relevant offerings, and maintain long-term business relationships. We may also contact you on special occasions, such as sending holiday greetings.

We may use your telephone number for marketing purposes where consent exists or where the conditions for implied consent apply (e.g., within an existing business relationship or prior contact). Furthermore, we may use the email address provided by contact persons during contract conclusion to advertise similar services.

You of course have the right to object to this promotional use at any time (see below). We will explicitly inform you of this right of objection in each communication.

Data are processed for these promotional purposes throughout the duration of our business relationship and while you remain an active customer. Exceptions apply where you have granted consent for extended use or where data are subject to statutory retention obligations.
In the latter case, deletion occurs upon expiry of the retention period. Exercising your right to object may shorten the processing period.

The legal basis for promotional use is Article 6(1)(f) GDPR, or Article 6(1)(a) GDPR where consent has been provided. For your rights regarding promotional use, particularly the right to object, see below.

Data Processing in the Context of Press and Media Relations

If you work as a journalist and contact us (e.g., by phone or in writing), we store your data to manage communications and maintain documentation of the correspondence.

If you are part of our media distribution list, we may send you emails or postal mailings containing information about our company and services. We may also share such data with selected and monitored PR or communications agencies that support us in this context.

You can object to receiving press information at any time — simply inform us via the contact details provided above or those included in our emails.

The described data processing for press and media purposes is based on your consent under Article 6(1)(a) GDPR or, in the case of postal communications, on our legitimate interest under Article 6(1)(f) GDPR.

Processing of Personal Data Based on Legal Obligations

Like all companies in Europe, we are subject to various statutory obligations to verify the data of our customers and business partners. We process your personal data only to the extent required for compliance with such legal obligations.

Fulfilling these obligations may involve partially automated data processing for the purpose of evaluating personal aspects (profiling). Automated individual decision-making does not take place unless you are expressly informed otherwise.

The legal basis is Article 6(1)(c) GDPR in conjunction with the relevant statutory provisions.

These legal obligations include, in particular:

  • Fraud and anti-money-laundering prevention
  • Tax compliance and reporting duties
  • Corporate risk assessment and management
  • Sanctions list screenings
  • Export control and customs regulations
  • Auditing obligations (especially by auditors, tax advisors, or legal counsel)

III. Intra-Group Data Sharing with Distributors

We may share your master data (company name, contact person, address, and contact details such as telephone number and email address) with other companies within the TALKE Group and update them if necessary, to ensure consistent and accurate records across all entities involved in our business relationship.

This facilitates internal processes and may relieve you from re-submitting your details when dealing with another group entity. This data processing is based on Article 6(1)(b) or (f) GDPR. Your rights are safeguarded by internal agreements ensuring a high level of data protection.

In addition to master data, information relating to a specific service or request may be shared with other TALKE entities where necessary for service delivery. As different group companies provide different services, this data sharing simplifies order fulfillment and service provision. The legal basis is Article 6(1)(b) GDPR.

Data you provide may also be shared during contract initiation where requested services are offered not by our company but by another group company or external partner (e.g., subcontractor). In such cases, your inquiry may be forwarded directly to the responsible company so that it can contact you and assist appropriately.

It is possible that some of these companies are located outside the EU. Data transfers to such entities are carried out in accordance with Chapter V GDPR, ensuring an adequate level of protection. Further information can be obtained directly from the companies involved or from us at the contact details listed above. The legal basis for this is Article 6(1)(b) or, where forwarding is not part of your specific request, Article 6(1)(f) GDPR.

These processing activities may result in your master data being processed by group companies or partners outside the European Union (EU) or the European Economic Area (EEA). Where no adequacy decision has been issued by the European Commission, we have implemented contractual safeguards—typically the EU Standard Contractual Clauses—and conducted an assessment of the protection level in the destination country.

Part E: Applicants

I. Personal Data Processed Concerning You

Personal data are all information relating to an identified or identifiable natural person. This includes, for example, your name, (business and private) contact details, address, hobbies, or information about health conditions and tax status (including religious affiliation). For the purposes of recruitment, all information you submit to us as part of your application is considered applicant data. This may include your résumé, photograph, information about your health status, or other private information. We process the personal data you provide in connection with your application. This includes both the data contained in your application documents and information you personally disclose during the recruitment process – for example, in telephone interviews, candidate questionnaires, personal interviews, or during visits at job fairs.

II. Scope and Purposes of Data Processing

Our website includes job postings and an online application option. You may apply for advertised positions or submit a speculative (unsolicited) application. In both cases, we provide a digital application form. We process the personal data provided in your application for the purpose of assessing your application and your suitability for the advertised position. To review your application, we may engage specialized service providers. Where such service providers are located outside the European Economic Area (EEA), we ensure the existence of adequate safeguards in accordance with Chapter V GDPR.

Application data may be shared within the TALKE Group, insofar as this is necessary for the recruitment process (e.g., for international positions or speculative applications). A list of the group companies can be found at:  https://www.talke.com/company/locations/overview

Please note that some of these companies are located outside the European Union or outside countries deemed to provide an adequate level of data protection by the European Commission. Where this is the case, we ensure compliance with data-protection requirements through appropriate safeguards, including the EU Standard Contractual Clauses, available here: https://commission.europa.eu/publications/publications-standard-contractual-clauses-sccs_de

Access to your applicant data is restricted to HR staff of the respective TALKE Group company handling your application, as well as the responsible supervisors and their designated colleagues within the relevant departments. Personal data are used exclusively within the TALKE Group and are not disclosed or sold to third parties. We use a specialized service provider to receive, process, and manage applications electronically. This provider has been carefully selected and is contractually bound as a data processor to strict data-protection obligations in accordance with Article 28 GDPR.

III. Legal Basis

Data processing for recruitment purposes is based on Article 6(1)(b) GDPR.

Your application data will only be stored in our applicant pool if you provide explicit consent. If you consent, we may consider your application for other suitable positions within our organization. This processing is based on Article 6(1)(a) GDPR.

If you are under 18 years of age, we require the consent of your legal guardians before entering into a contract with you. Longer storage of your data (for example, to consider you for a later internship or traineeship) will also only occur with your consent – and, where applicable, the consent of your legal guardians.

A longer retention period may also apply if you have given consent under Article 6(1)(a) GDPR, or if statutory retention obligations prevent deletion.

IV. Duration of Storage

Your data are deleted once they are no longer required for the purpose for which they were collected. For data submitted via the online application form, this is typically when the recruitment process has been definitively completed. We delete application data either 180 days after a rejection or 12 months after receipt of the application, whichever occurs first.

Our external service provider also generates temporary log files for operational and disaster-recovery purposes relating to system access by applicants. These log files are deleted after no more than 90 days.

Further information on the service provider’s data processing can be found at: https://www.dvinci.de

Contact

ANY QUESTIONS? CONTACT US!

Do you have specific questions or would you like to find out more? Simply fill out the contact form and we will get back to you as soon as possible.

© ALFRED TALKE GmbH & Co.