Skip to main content

Processing of (personal) data by the entity in charge of the online application process

Thank you for visiting our website. 

Compliance with data protection regulations is of particular importance to us. The aim of this privacy policy is to inform you as a user of the website about the type, scope and purpose of the processing of personal data and your existing rights, insofar as you are a data subject within the meaning of Art. 4 No. 1 of the General Data Protection Regulation. The following data protection declaration already takes into account the changes in accordance with the General Data Protection Regulation (GDPR), which has been in force since May 25, 2018. At the same time, this declaration also fulfills the requirements of the Telecommunications Telemedia Data Protection Act applicable until then.

Responsible body

MRK Media AG
Herzog-Rudolf-Straße 1
80539 Munich
Munich, Germany

Phone: +49 89 21 66 67-0
E-mail: info@mrk-media.de
Website: www.mrk-media.de

Chairwoman of the Management Board: Dr. Imke Germann

We have appointed a data protection officer.

www.mein-datenschutzbeauftragter.de
Mr. Philipp Herold
Hafenstraße 1a
23568 Lübeck
E-mail: datenschutz@mrk-media.de

1. GENERAL
We have designed the website to collect as little data as possible from you. In principle, it is possible to visit our website without providing any personal data. Only if you decide to make use of certain services (e.g. use of a contact form) will it be necessary to process personal data. We always ensure that your personal data is only processed in accordance with a legal basis or with your consent. We comply with the provisions of the General Data Protection Regulation (GDPR) in force since 25.5.2018 and the applicable national regulations, such as the Federal Data Protection Act, the Telecommunications Telemedia Data Protection Act or other more specific laws on data protection.

MRK Media AG will oblige its employees and cooperation partners to comply with data protection regulations accordingly.

The following declaration gives you an overview of how MRK Media AG guarantees this protection and what type of data is collected for what purpose.

For all data protection-related questions and notifications, please contact MRK Media AG's data protection officer at the e-mail address datenschutz@mrk-media.de or by post at the MRK Media AG address given above.

2 DEFINITION
The terms used in this Privacy Policy have the following meaning in accordance with the GDPR

a) personal data

Any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Processing

Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

c) Restriction of processing
The marking of stored personal data with the aim of restricting its future processing.

d) Pseudonymization

The processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

e) Controller

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

f) Processor
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

g) Recipient

A natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

h) Third party

A natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

i) Consent

Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.


3. CONSENT
In some cases, we collect certain personal data from you when you visit our website, for which we require your consent. This takes place, for example, when you send us a message via one of our contact forms.

a) Declaration of consent

By using our available forms, you consent to us collecting the personal data you provide and processing it as described in this privacy policy. You can revoke this consent at any time with effect for the future by sending us a corresponding declaration. However, we would like to point out that it is no longer possible to use our service without your consent. To withdraw your consent, please use the contact details provided above (in this case, please provide us with your name, e-mail and postal address).

4. PURPOSE OF USE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
We process personal data that is required for the establishment, implementation or processing of our range of services on the legal basis of Art. 6 para. 1 lit. b GDPR. If you have given us your consent to process personal data for specific purposes, we process it on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Insofar as we use external service providers as part of commissioned data processing, the processing is carried out on the legal basis of Art. 28 GDPR.

The personal data is collected, processed and used by us exclusively for the following purposes:

1) Purpose of the data processing

2) Basis for data processing ("Why is data processing necessary")

3) Job applications

4) Selection decisions

5. making contact

Purpose of data processing

Legal basis for data processing ("Why is data processing necessary")

To contact you and related correspondence

on the basis of your consent

to process your request and to provide you with any further advice you may wish for

on the basis of your consent

To contact you to verify your data

on the basis of your consent

To draw up a cooperation agreement on the basis of pre-contractual

measures based on your request

to ensure that our website is presented to you in the most effective and interesting way possible (e.g. through anonymized evaluation)

on the basis of legitimate interests

for the technical realization of our offers

on the basis of legitimate interests




6. PERSONAL DATA COLLECTED AND PROCESSED
We only collect and process your personal data if you voluntarily provide it with your knowledge, e.g. by filling out our forms or sending e-mails.

In the context of the available forms or messages, this is initially the following data:

Through the use of cookies, MRK Media AG can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

Data of interested parties for services:

Salutation*
Full name*
Full address*
Company name*
E-mail address*
Industry
Number of employees*
Number of branches*
Website*
Complete telephone number*
Consent to the privacy policy*
Message*
Contact origin
the consent*
Data of interested parties for cooperations:

Salutation*
Full name*
company*
E-mail address*
Complete telephone number*
Website
Certificates already acquired*
Consent*
Please mark mandatory fields with *.

The personal data provided by you and its contents remain exclusively with us and our affiliated companies. We will only store and process your data for the purposes stated in Section 5. Any use beyond the stated purpose requires your express consent.

For data processing by our cooperation partners, their data protection provisions apply.

The personal data will be deleted immediately if you withdraw your consent or if the purpose for which the data was used no longer applies.

MRK Media AG will immediately inform its cooperation partners of any revocation of consent declared to MRK Media AG. MRK Media AG has obliged its cooperation partners to delete the personal data immediately after becoming aware of the revocation.

MRK Media AG has also obligated its cooperation partners to inform MRK Media AG immediately of any revocation of consent declared to the cooperation partner. MRK Media AG will arrange for the deletion of the data from itself and any other cooperation partners immediately after becoming aware of the declaration of revocation.


7. APPLICATION PROCEDURE
We publish job vacancies on our website for which you can apply by e-mail. If you decide to apply for an open position, we will process the personal data you provide there and transmit to us exclusively for the purpose of carrying out the application process.

In the event of a rejection, we will delete your data as soon as a retention period of 6 months required by labor law has expired. This period begins when the rejection is sent. If you have expressly consented to the further use of your data for subsequent contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent. We will not pass on your personal data to third parties outside the specific application process without your express consent or without a legal basis.

Please note that applications that you send to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons may intercept and use this data.

The legal basis for the processing of your personal data as part of the application process is Section 26 (1) in conjunction with (2) BDSG.

8. GENERAL LOG FILES
The web server temporarily records the connection data of the requesting computer (IP address), the pages you visit on our website, the date and duration of the visit, the identification data of the browser and operating system type used, the website from which you visit us and the successful retrieval in log files. The technical administration of the websites and anonymous statistical surveys enable an evaluation of access to the MRK Media AG website and an evaluation with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us.

The data of the server log files are stored separately from all personal data provided by you.

Subject to any statutory retention obligations, we delete or anonymize your IP address after you leave our website.

9 COOKIES
Use of cookies
Information is collected and stored on our website through the use of so-called browser cookies.

a) What are cookies?

Any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Why do we use cookies?

Cookies enable our systems to recognize the user's device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user's computer. Cookies help us to improve our website and offer you a better and more personalized service. They enable us to recognize your computer or (mobile) device when you return to our website and thereby:
To store information about your preferred activities on the website and thus tailor our website to your individual interests.
To speed up the processing of your requests.


We work together with third-party services that help us to make the Internet offer and the website more interesting for you. Cookies from these partner companies (third-party providers) are therefore also stored on your hard disk when you visit the website. These are cookies that are automatically deleted after the specified time.

 

Cookie name

First-party cookies or third-party cookies?

For third-party cookies: Who is the originator?

Purpose

Description / Function


             Default expiration time

PHPSESSID

First-party

function

Saves the session

None

Cookieconsent_status

First-party

function

Describes the cookie consent status.

approx. 1 year

cookieconsent_status_detail

First-party

function

Describes the cookie consent status in detail.

approx. 3 years

_ga

First-party

analytics

Contains a randomly generated user ID. Google Analytics can use this ID to recognize returning users on this website and merge data from previous visits.

2 years

_gat

First-party

analytics

Google Analytics function: This cookie enables us to analyze your use of the website using Google Analytics. Used to distinguish individual visitors.

24 hours

_gid

First-party

analytics

Google Analytics function: This cookie enables us to analyze your use of the website using Google Analytics. Used to distinguish individual visitors.

24 hours

_gcl_au

First-party

analytics / marketing

This cookie enables the actions of users who visit the website after viewing or clicking on an ad to be displayed.          3 months


nach dem Anzeigen oder Anklicken einer Anzeige besuchen.

3 months


c) Can I decide on the use of cookies


If you do not wish to use browser cookies, you can set your browser so that the storage of cookies is not accepted. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the "Block third-party cookies" setting in your browser. We accept no responsibility for the use of third-party cookies.

10. DISCLOSURE OF YOUR PERSONAL DATA
Your personal data is passed on as described below. The website is hosted by an external service provider in Germany. In doing so, we ensure that data processing only takes place in Germany and the EU. This is necessary for the operation of the website, as well as for the establishment, implementation and processing of the existing user contract and is also possible without your consent.

Data will also be passed on if we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

If your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR.

Beyond the aforementioned circumstances, we do not transfer your data to third parties without your consent. In particular, we do not pass on any personal data to a body in a third country or an international organization.

Purpose of data transfer Legal basis for data processing
("Why is data processing necessary") Company name, address and country
Job applications Selection decisions MRK Media AG, Herzog-Rudolf-Str. 1, 80539 Munich, Germany

11. INTEGRATION OF THIRD-PARTY SERVICES AND CONTENT
Our website uses content and services from other providers. These are, for example, maps from Google Maps. In order for this data to be called up and displayed in the user's browser, the transmission of the IP address is mandatory. The providers (hereinafter referred to as "third-party providers") therefore perceive the IP address of the respective user.

Even if we endeavor to only use third-party providers who only need the IP address to be able to deliver content, we have no influence on whether the IP address may be stored. In this case, this process is used for statistical purposes, among other things. If we become aware that the IP address is being stored, we will inform you of this.

Google reCaptcha

Type and scope of processing

We have integrated Google reCAPTCHA components on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request comes from a natural person or is automated by means of a program. When you access this content, you establish a connection to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. In addition, Google reCAPTCHA records the time spent on the website and the user's mouse movements in order to distinguish between automated and human requests. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis
The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

Google CDN

Type and scope of processing

We use Google CDN to properly provide the content of our website. Google CDN is a service of Google Ireland Limited, which acts as a content delivery network (CDN) on our website.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google CDN.


Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google CDN: https://policies.google.com/privacy.

12. DATA SECURITY
Unfortunately, the transmission of information via the Internet is never 100% secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet.

However, we take technical and organizational measures to protect our website against loss, destruction, access, modification or dissemination of your data by unauthorized persons.
In particular, your personal data is transmitted to us in encrypted form. We use the SSL / TLS (Secure Sockets Layer / Transport Layer Security) coding system. Our security measures are continuously improved in line with technological developments.

13. RIGHTS OF THE DATA SUBJECT
If you are a data subject within the meaning of Art. 4 No. 1 GDPR, you have the following rights with regard to the processing of your personal data under the GDPR. You can find the legal text of the rights listed below at

"https://www.bfdi.bund.de/SharedDocs/Publikationen/Faltblaetter/Datenschutz_MeineRechte.html?nn=5217272"

a) Right to confirmation and information

Under the conditions of Art. 15 GDPR, you have the right to request confirmation as to whether personal data concerning you is being processed and to receive information free of charge at any time from the controller about the personal data stored about you and a copy of this information.

b) Right to rectification

Under the conditions of Art. 16 GDPR, you have the right to demand the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration
c) Right to erasure

Under the conditions of Art. 17 GDPR, you have the right to demand that the personal data concerning you be deleted immediately, provided that one of the reasons stated in Art. 17 GDPR applies and insofar as the processing is not necessary.

d) Right to restriction of processing

Under the conditions of Art. 18 GDPR, you have the right to request the restriction of processing if one of the conditions specified in Art. 18 GDPR applies.

e) Right to data portability

Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, provided that the other conditions of Art. 20 GDPR are met.

f) Right to withdraw consent
You have the right to withdraw your consent to the processing of personal data given to us at any time with effect for the future. Please send your revocation to the contact details given above.
g) Right to object

Under the conditions of Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you. If the conditions for an effective objection are met, we may no longer process the data.

h) Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.

14. DISCLOSURE OF YOUR PERSONAL DATA
Your personal data will be passed on as described below.

The website is hosted by an external service provider in Germany. In doing so, we ensure that data processing only takes place in Germany and the EU. This is necessary for the operation of the website, as well as for the establishment, implementation and processing of the existing user contract and is also possible without your consent.

Data will also be passed on if we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.

If your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the GDPR.

Beyond the aforementioned circumstances, we do not transfer your data to third parties without your consent. In particular, we do not pass on any personal data to a body in a third country or an international organization.
 

15. STORAGE PERIOD FOR PERSONAL DATA
With regard to the storage period, we delete personal data as soon as its storage is no longer necessary for the fulfillment of the original purpose and there are no longer any legal retention periods. The statutory retention periods ultimately form the criterion for the final duration of the storage of personal data. Once the period has expired, the corresponding data is routinely deleted. If retention periods exist, processing is restricted by blocking the data.

16. REFERENCES AND LINKS
When calling up Internet pages to which reference is made on our website, you may be asked again for information such as name, address, e-mail address, browser properties, etc. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third-party service providers may have different and separate provisions regarding the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their practices regarding the handling of personal data before entering personal data.

17. CHANGES TO THE PRIVACY POLICY
We are constantly developing our website in order to provide you with an ever-improving service. We will always keep this data protection declaration up to date and adapt it accordingly if and insofar as this should become necessary.

 

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.