General information
- valid for all following descriptions of data processing
1. Name and contact details of the controller
Responsible for the processing of your personal data in the context of this contact is
Tach2yone GmbH
Sendlinger Str. 50
80331 Munich
Germany
Phone: +49 (0)89 87763979
E-mail: info@tach2yone.de
Website: www.tach2yone.com
2. Contact details of the data protection officer
You can reach our data protection officer as follows
DataCo GmbH
Nymphenburger Str. 86
80636 Munich, Germany
E-mail address: datenschutz@dataguard.de
Rights of data subjects
1. Right to information (Art. 15 GDPR)
If your personal data is processed, you have the right to obtain information from the controller about the personal data stored about you (Art. 15 GDPR).
2. Right to rectification (Art. 16 GDPR)
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed (Art. 16 GDPR)
3. Right to erasure (Art. 17 and 18 GDPR)
If the legal requirements are met, you can demand the immediate deletion of your personal data or restriction of processing (Art. 17 and 18 GDPR).
4. Right to information (Art. 19 GDPR)
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the controller (right to information, Art. 19 GDPR)
5. Right to data portability (Art. 20 GDPR)
If you have consented to the data processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR). In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
6. Right to object to the processing (Art. 21 para. 1 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims (Art. 21 (1) GDPR).
7. Right to object to direct marketing (Art. 21 para. 2 GDPR)
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing (Art. 21 para. 2 GDPR). If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
8. Right to withdraw consent (Art. 7 para. 3 GDPR)
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal (Art. 7 (3) GDPR).
9. Automated decisions in individual cases including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. In this case, if the legal requirements are met, you have the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision (Art. 22 GDPR).
10. Right to lodge a complaint (Art. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR). The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
for applicants
1. Processing of your personal data
Tach2yone collects the following personal data from you as part of the application process:
- First and last name
- e-mail address
- Telephone / mobile phone number
- availability
- Salary expectations
- All personal data contained in the application (CV, cover letter, references, etc.)
- Other: Voluntary information provided by the applicant
Tach2yone collects personal data from applicants in the following ways:
- Direct application by e-mail via the Tach2yone careers page
- Application by e-mail sent directly to a Tach2yone employee
- Postal application
- LinkedIn instant application
- Recruiters
- Candidates who are contacted by Tach2yone on LinkedIn
2. Purposes of processing and their legal basis
Your personal data will be processed for the following purposes:
- Carrying out the application process and deciding on the establishment of the employment relationship
- Communication (telephone, e-mail, video telephony)
- Implementation of pre-contractual measures (initiation of the employment relationship)
- Assertion, exercise or defense of legal claims arising from the application process
Processing of special categories of personal data that have been made public - Art. 9 para. 2 lit e GDPR
Insofar as special categories of personal data are processed that you have obviously made public, your data will be processed in accordance with Art. 9 para. 2 lit e GDPR.
Processing for the establishment, exercise or defense of legal claims or in the event of legal proceedings - Art. 6 para. 1 sentence 1 lit. f GDPR, Art. 9 para. 1 lit. f GDPR
If necessary, your data will be processed for the purpose of asserting, exercising or defending legal claims or in the event of actions by the courts pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, Art. 9 para. 1 lit. f GDPR.
Processing on the basis of consent - Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 7 GDPR, Art. 88 para. 1 GDPR in conjunction with. Art. 26 para. 2 BDSG
If you have given your consent to data processing, your data will be processed in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 7 GDPR, Art. 88 para. 1 GDPR in conjunction with Art. 88 para. 1 GDPR. Art. 7 DS-GVO, Art. 88 para. 1 DS-GVO in conjunction with. Art. 26 para. 2 BDSG processed.
Decision on the establishment of the employment relationship Art. 6 para. 1 sentence 1 lit. b DS-GVO, Art. 88 para. 1 DS-GVO i.V.m. § Section 26 para. 1 BDSG
We process your data in order to make a decision on the establishment of the employment relationship. If you are hired by our company, your data will be processed for the purpose of implementing and terminating the employment relationship. Separate information about the processing of your personal data will be provided for this purpose.
Processing on the basis of legitimate interest - Art. 6 para. 1 sentence 1 lit. f GDPR
Insofar as the processing is carried out to safeguard a legitimate interest of us or a third party and your interests or fundamental rights and freedoms do not outweigh the first-mentioned interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for data processing. Our legitimate interest arises in particular for the following reasons
- The proper execution and optimization of the application process
- Assertion, exercise or defense of legal claims
Processing of special categories of personal data - Art. 9 para. 2 lit. a GDPR
If you have given your consent to the processing of special categories of personal data, such as health data, religious affiliation or nationality, your data will be processed in accordance with Art. 9 para. 2 lit. a GDPR.
3. Recipients or categories of recipients of personal data and third country transfers
As part of the processing of your personal data, we may pass on your personal data to the following recipients:
- Internally, only authorized employees are granted access to an applicant's data via an authorization concept.
- Freelancers
- Processors
For communication with applicants, we use the Microsoft 365 service, including Microsoft Teams from the service provider Microsoft Operations Ltd. in Dublin, Ireland. Further information on data processing by Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement
4. Duration of the storage of personal data
We will delete your personal data as soon as the purposes for its storage mentioned under 2. no longer apply, or you object to the use of your personal data (in the case of processing on the basis of legitimate interests) or you revoke your previously given consent. However, your personal data may also be stored beyond this, in particular in the following cases:
- if contractual, legal (in particular from HGB, StGB and AO) or statutory retention periods prevent deletion
- for the assertion, exercise or defense of legal claims
- if this is required under European or national law to fulfil a legal obligation to which we are subject.
The following retention periods in particular result for us from statutory provisions
- After decision on non-appointment: 180-day retention period for application documents (Section 15 (4) of the General Equal Treatment Act (AGG), Section 224 of the Code of Civil Procedure (ZPO)).
If the applicant has consented, the application documents will be included in the applicant pool and stored there for a maximum of 1 year from the date of consent. They will be deleted when the purpose no longer applies or when the applicant withdraws their consent.
If you are employed by our company, your personal data will be deleted when the purpose no longer applies, at the latest after termination of the employment relationship, provided that there are no statutory retention periods to prevent deletion.
for customers and interested parties
1 Processing of your personal data
As part of the existing customer relationship and contract initiation, we process the following personal data about you
- First name
- Surname
- Salutation
- Title and academic degrees
- Company name
- Position in the company
- Business address
- Bank account details
- Tax ID
- Your e-mail address,
- Your mobile phone number
- Your landline number
- Your fax number
- All personal data provided to us in the course of customer communication
Tach2yone collects data from interested persons and customers in the following ways:
- Enquiries by message to Tach2yone or by employees, e.g. by email, LinkedIn Messages or other communication channels.
- Enquiries at trade fairs or other events where data is passed on to Tach2yone employees with the aim of establishing contact.
- Own research on potential interested parties in business directories, contact details on websites or professional networks.
- Independent booking of an appointment with an interested person.
- Requesting personal data from the person themselves after concluding a contract with Tach2yone or receiving personal data from an employee of the client company. This may also involve employees of the client company's service providers.
1.2 Purposes of data processing
Your personal data will be processed for the following purposes as part of the existing customer relationship and contract initiation:
- To process your enquiry as an interested party. For this purpose, we use your contact details to answer your enquiry.
- To prepare and implement pre-contractual measures
- To add your contact details to our customer and contact database.
- Making contact (email, telephone)
- Establishment, implementation and termination of the contractual relationship
- Customer administration and customer care
- To provide you as our customer with the best possible service. This includes, in particular, communicating with you by e-mail, mobile phone, landline number or fax.
- To ensure smooth billing of the services provided. For this purpose, your personal data is processed in order to be able to issue invoices. In addition, we forward your personal data to our external service provider GKK Partners, Ohmstraße 15, 80802 Munich, Germany, for the purpose of tax returns, among other things.
- In order to fulfil our legal obligations. This includes, for example, the transmission of your personal data to the tax office.
- For the purpose of carrying out marketing initiatives such as: Sending newsletters, invitations to events and webinars
- For the fulfilment of post-contractual measures.
- For the assertion, exercise or defense of legal claims.
1.3 Legal bases for data processing
Processing of your personal data on the basis of consent
Insofar as we obtain your consent for the processing of your personal data, your personal data will be processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 5, 7 GDPR. Art. 5, 7 GDPR.
Processing for the purpose of performing the contract with you
Insofar as we process your personal data for the purpose of contract fulfilment, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre- and post-contractual measures.
Processing for the fulfilment of a legal obligation
Insofar as the processing of your personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis. Our legal obligation to process data arises, for example, from retention obligations under tax and/or commercial law.
Processing on the basis of legitimate interest
The legal basis for the purpose of direct advertising may be Art. 6 para. 1 sentence 1 lit. f GDPR if our legitimate interests exist, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. The legitimate interests pursued by us in this regard - in addition to the purposes listed under 1.2 - include
- To be able to provide you with the best possible information about our services by means of direct marketing;
- To communicate with you, in particular to be able to answer your enquiries by email, telephone and/or fax
- To be able to conduct due diligence with our potential business partner
- To obtain customer feedback to improve the customer experience, improve our products and services
The legal basis for processing activities in connection with the assertion, exercise or defense of legal claims is also our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
2. Recipients or categories of recipients of the personal data
As part of the processing of your personal data, we may pass on your personal data to the following recipients. We only transfer your personal data to external recipients if you have given your consent or if this is permitted by law.
External recipients of your personal data are in particular
- Freelancers
- Processors
- Potential business partners as part of a (future) due diligence review
- Authorities, e.g. tax offices, courts, trade supervisory office, data protection supervisory authorities, Federal Office of Economics and Export Control (BAFA)
- Billing partners
- Debt collection agencies
- Credit institutions
- Parcel service providers
- Post office
- Lawyer, tax consultant
- Auditor
- Associated companies
Your personal data will be transmitted to the following service providers
- Salesforce.com Germany GmbH, Erika-Mann-Straße 31-37, 80636 Munich, Germany
- GKK Partners, Ohmstraße 15, 80802 Munich, Germany
Tach2yone uses the Office 365 service, including Microsoft Teams, for the purpose of business communication with customers and interested parties.
We also use functionalities of the Microsoft Bookings software from Microsoft. Microsoft Bookings allows us to make it easier for users to make appointments on our website by displaying and booking free appointments with the relevant employees.
The following personal data is processed by Microsoft:
- Surname
- First name
- e-mail address
- IP address
- Device and browser information
- A user ID assigned by Microsoft
- Refferer URL
Further information on data processing by Microsoft can be found at:
3. Duration of the storage of personal data
We do not store your personal data for longer than is necessary for the purpose for which it was collected. This means that data is destroyed or deleted from our systems as soon as it is no longer required. We take appropriate measures to ensure that your personal data is only processed under the following conditions:
- For the duration that the data is used to provide you with a service
- As required by applicable law, contract or with regard to our legal obligations
- Only for as long as necessary for the purpose for which the data was collected or longer if required by contract, applicable law, using appropriate safeguards.
A requirement may exist in particular if the data is still needed to fulfil contractual services, to check and grant or defend against warranty and guarantee claims. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - retention is still necessary, in particular to fulfil legal retention periods of up to ten years (e.g. from the German Commercial Code, the German Fiscal Code and the German Money Laundering Act). In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.
4. Obligation to provide the data
For a (planned) conclusion and execution of the contract with you, you must provide the personal data that is necessary for the establishment and execution of the contractual relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect (see in particular the standards listed under "III.3."). This obligation also arises from the law, e.g. § 14 UstG. Without this data, we will generally not be able to conclude and fulfil the contract with you.
for suppliers and service providers
1. Processing of your personal data
1.1 Your personal data that is processed by us
Tach2yone processes personal data of suppliers and service providers. This is necessary for business operations. The following data is processed:
- First name
- Surname
- Business address
- Company name
- Bank details
- Your e-mail address
- Your mobile phone number
- Your landline number
- Your fax number
- Title and academic degrees
- Position in the company
- All personal data provided to us in the course of communication
Tach2yone collects personal data in the following ways:
- Obtaining personal data directly from the data subject by contacting suppliers / service providers
- Receipt of personal data directly from the data subject through contact by Tach2yone
- Research in business directories or websites
1.2 Purposes of data processing
We process your data for the following purposes:
- Initiation, execution and termination of a contractual relationship
- Execution of orders
- Examination and optimization of procedures for needs analysis
- Consultation of and data exchange with credit agencies to determine creditworthiness and default risks
- Market and opinion research, provided you have not objected to the use of this data for these purposes
- Assertion, exercise or defense of legal claims
- Measures for business management and further development of our products
1.3 Legal basis for data processing
Processing of your personal data on the basis of consent Insofar as we obtain your consent for the processing of your personal data, the processing of your personal data is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 5, 7 GDPR. Art. 5, 7 GDPR.
Processing for the purpose of performing the contract with you
Insofar as we process your personal data for the purpose of contract fulfilment, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre- and post-contractual measures.
Processing for the fulfilment of a legal obligation
Insofar as the processing of your personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis. Our legal obligation to process data arises, for example, from retention obligations under tax and/or commercial law.
Processing on the basis of legitimate interest
The legal basis for direct marketing purposes may be Art. 6 para. 1 sentence 1 lit. f GDPR if our legitimate interests exist, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. The legitimate interests pursued by us in this regard - in addition to the purposes listed under b. - include
- To be able to optimally inform you about our products, offers and services by means of direct marketing;
- In communicating with you, in particular to be able to answer your enquiries by e-mail, telephone and/or fax;
- To be able to carry out due diligence with our potential business partner
The legal basis for processing activities in connection with the assertion, exercise or defense of legal claims is also our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
2. Recipients or categories of recipients of the personal data
As part of the processing of your personal data, we may pass on your personal data to the following recipients. We only transfer your personal data to external recipients if you have given your consent or if this is permitted by law.
External recipients of your personal data are in particular
- Freelancers
- Processors
- Potential business partners as part of a (future) due diligence review
- Authorities, e.g. tax offices, courts, trade supervisory office
- Billing partners
- Credit institutions
- Parcel service providers
- Post office
- Lawyer, tax consultant
- Auditor
- Associated companies
Your personal data will be transmitted to the following service providers:
- GKK Partners, Ohmstraße 15, 80802 Munich, Germany
We use the Microsoft 365 service, including Microsoft Teams from the service provider Microsoft Operations Ltd. in Dublin, Ireland, for the transmission of emails and storage of contacts from suppliers and service providers. Further information on data processing by Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement
3. Duration of the storage of personal data
We do not store your personal data for longer than is necessary for the purpose for which it was collected. This means that data is destroyed or deleted from our systems as soon as it is no longer required. We will take reasonable steps to ensure that your personal data is only processed under the following conditions:
- As required by applicable law, contract or in light of our legal obligations
- Only for as long as necessary for the purpose for which the data was collected or longer if required by contract, applicable law, using appropriate safeguards.
A requirement may exist in particular if the data is still needed to fulfil contractual services, to check and grant or defend against warranty and guarantee claims. If the data is no longer required for the fulfilment of contractual or legal obligations, it is regularly deleted, unless its - temporary - retention is still necessary, in particular to fulfil legal retention periods of up to ten years (e.g. from the German Commercial Code, the German Fiscal Code and the German Money Laundering Act). In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.
4. Obligation to provide the data
For a (planned) conclusion and execution of the contract with you, you must provide the personal data that is necessary for the establishment and execution of the contractual relationship and the fulfilment of the associated contractual obligations or that we are legally obliged to collect (see in particular the standards listed under "III.3."). Without this data, we will generally not be able to conclude and fulfil the contract with you.