Data Protection Statement

Table of contents

Data Protection Declaration

Any data collected, used, stored, erased or used for any other purpose (hereinafter referred to as processing is exclusively used to provide our services. 4Scotty's services have been designed with the aim of using as little personal data as possible. In this context, personal data constitutes all individual information on the personal or material circumstances of any specific or identifiable natural person (so-called data subject).

The following information on data protection describes which types of data are collected when you access our website, what happens to these data and how you can object to the use of these data if necessary.

1. General Information on this Website’s Data Processing

1.1. Controller

Within the meaning of the EU General Data Protection Regulation (GDPR), the controller is:

4scotty GmbH
Torstrasse 131
10119 Berlin
Germany

Tel: +49 (0)30 / 99 40 45 810
E-Mail: support@4scotty.com

1.2. Data Protection Officer

The Data Protection Officer is:

Mr. Kemal Webersohn at WS Datenschutz GmbH.

If you have any questions on data protection, you can contact WS Datenschutz GmbH at the following e-mail address: privacy@4scotty.com

or via a postal service:

WS Datenschutz GmbH
- Datenschutz -
Meinekestraße 13
D-10719 Berlin
Germany
www.ws-datenschutz.de

1.3. Protection of your data

We have taken technical and organisational measures to ensure that the provisions of the GDPR are observed both by us and by external service providers working for us.

If we cooperate with other companies, such as with e-mail and server providers, to provide our services, this only occurs after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in connection with its ability to provide technical and organisational data protection. This selection process is documented in writing; if the requirements according to Art. 28 GDPR are met, a contract according to Art. 28 Para. 3 GDPR is only concluded for the processing of data by a processor (data processing contract).

Your details are stored on specially protected servers. Only a few specially authorised persons may access these servers.

Our website is SSL/TLS encrypted, which you can recognise by the “https://” at the beginning of the URL.

1.4. Erasure of personal data

4Scotty GmbH processes the personal data only as long as it is necessary. As soon as the purpose of the data processing has been fulfilled, the data will be blocked and erased in accordance with the standards of the company´s erasure concept, unless this is contrary to statutory provisions.

When you visit our website, our web servers temporarily store each access in a log file. The following data is recorded and stored until it is automatically erased:

2. Use of Data on this Website and Creation of Log Files

2.1. Description and scope of data processing

When you visit our website, our web servers temporarily store each access in a log file. The following data is recorded and stored until it is automatically erased:

  • IP address of the requesting computer
  • IP address of the requesting computer
  • date and time of access
  • name and URL of the retrieved file
  • transferred amount of data
  • message as to whether the request was successful
  • identification data of the browser and operating system used
  • website from which the access is made.
  • In addition to this data, further data may be collected from us and our partners. More information can be found below.

2.2. Legal basis for data processing

This data is processed on the basis of Art. 6 Para. 1 S.1 lit. f) GDPR. Our legitimate interest is based on making our website accessible to you.

2.3. Purpose of data processing

The data processing is carried out for the purpose of enabling the use of the website (connection set-up). It serves the system’s security, the network infrastructure’s technical administration, as well as the website’s optimisation. The IP address is only evaluated in the event of attacks on our network infrastructure or the network infrastructure of our Internet provider.

2.4. Period of data storage

The data will be erased as soon as it is no longer required for the above-mentioned purposes. This is the case when you close the website. Our hosting provider may use the data for statistical purposes. The data, however, is anonymised for this purpose. The data is erased by our hosting provider after 14 days.

2.5. Possibility of elimination by the data subject

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, on their part, there is no possibility for the user to object.

3. Use of cookies

3.1. Description and scope of data processing

Our website uses cookies. These are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk in a mapped manner by the browser you use and through which 4Scotty or the site that sets the cookie can obtain certain information. Cookies cannot run programs or transmit viruses to your computer. They are used by us to enable you to log in to 4scotty.com and participate in our bonus programme as well as to analyse the use of 4scotty.com in anonymous or pseudonymous form and to present you with interesting offers on this website.

Various data can be transferred in this way, specifically:

  • frequency of website visits,
  • which website functions you use,
  • your login for access control,
  • your referrer ID for the bonus programme,

When you access the website, a cookie banner informs you about the use of cookies and refers you to the data protection declaration.

3.2. Legal basis for data processing

Art. 6 Para. 1 Sentence 1 lit. f) GDPR constitutes the legal basis for the processing.

3.3. Purpose of data processing

Our justified interest results from guaranteeing the establishment of a trouble-free connection and the convenient use of our website as well as for reasons evaluating the system’s security and stability.

Data processing is also carried out to enable the website’s use to be statistically evaluated.

3.4. Period of data storage

Only persistent cookies are used on this website. Persistent cookies are automatically erased after a specified period, which may vary depending on the cookie.

3.5. Possibility of elimination by the data subject

In the security settings of your browser, you can erase the cookies at any time. In doing so, we would like to point out that you may not be able to use all the functions of this website. You can also prevent cookies from being set at any time by making the appropriate settings in your Internet browser.

4. Registration on the website

4.1. Description and scope of data processing

You can register on our website as a Talent or Employer. To do this, the data subject needs to enter personal data in the registration mask. For this purpose, the following minimum data is collected:

As Talent:

  • first name, surname,
  • e-mail address,
  • telephone number,
  • address,
  • languages spoken,
  • curriculum vitae,
  • education/certificates,
  • current profession,
  • date of birth,
  • salary expectation.

You can specify the following data optionally:

  • profile picture
  • desired occupation
  • certificates

As an Employer:

  • Personal details: first name, surname, phone number, e-mail address, job title
  • Company details: name, description of company headquarters, website URL, tech team size (= number of employees)

You can specify the following details optionally:

  • Tech Stack Skills (e.g. "PHP"), Benefits (e.g. "free fruit", "flexitime")

The data provided by the data subject in the registration form will be used exclusively for processing purposes and will not be passed on to third parties.

4.2. Legal basis for data processing

If you provide personal data that is part of the mandatory field entry masks, data processing is based on Art. 6 Para. 1 S.1 lit b) GDPR. If you also enter personal data in the other (optional) input field masks, data processing is based on Art. 6 Para. 1 S.1 lit. a) GDPR.

4.3. Purpose of data processing

We process your data solely for the purpose of completing your registration and maintaining your website account with us.

4.4. Period of data storage

The data will be erased as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case if you close your account with us and there are no legal or official retention periods which prevent erasure.

4.5. Possibility of elimination by the data subject

The data subject is free to modify, correct or erase the personal data provided, both during and after the registration.

5. Processing in the Context of Applications

5.1. Description and scope of data processing

Applications can be made via our website on the platform itself. For this purpose, personal data is processed and stored for further processing in the respective application procedure.

5.2. Legal basis for data processing

Art. 88 GDPR and Section 26 Bundesdatenschutzgesetz (BDSG, Federal Data Protection Act) (2018) constitute the legal basis for data processing.

5.3. Purpose of data processing

We process your data exclusively for the purpose of carrying out the application procedure.

5.4. Period of data storage

If the application should lead to the acceptance of an employment relationship, the personal data will be stored in compliance with the statutory provisions. If the applicant’s application is not considered in the selection of a potential candidate, it will be erased in accordance with the regulations of the local erasure concept, taking into account the provisions of the German Allgemeines Gleichbehandlungsgesetz (AGG, General Law on Equal Treatment), in particular the existing burden of proof pursuant to Section 22 AGG.

This does not apply if the erasure is prevented by statutory provisions or if you have given your consent to a longer storage period.

5.5. Possibility of elimination by the data subject

You can contact us at any time and object to further processing of your data. In this case, all personal data processed by us in the course of the application process will be erased, unless otherwise required by law.

6. Social Media on our Website

6.1. YouTube

6.1.1. YouTube Video
6.1.1.1. Description and scope of data processing

For the integration of videos on our website, we use the provider YouTube.

The Controller for the European Economic Area and Switzerland is:

YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Normally, when you visit any pages of the 4scotty.com website with embedded videos, your IP address is sent to YouTube and cookies are installed on your computer.

However, 4Scotty GmbH has integrated its YouTube videos with the extended data protection mode (in this case, YouTube still contacts the Google Ad Manager - formerly Double Click -service, but according to Google's data protection declaration, no personal data is evaluated). This means that YouTube no longer stores information about visitors unless they watch the video.

If you click on the video, your IP address will be transferred to YouTube and YouTube will know that you have watched the video. If you are logged in to YouTube, this information will also be assigned to your account. 4Scotty GmbH has no knowledge and no influence on the collection and use of your data by YouTube.

For more information on data protection, please refer to the YouTube or Google data protection policy below: https://policies.google.com/?hl=en

6.1.1.2. Legal basis for data processing

Art. 6 Para. 1 Sentence 1 lit. f) GDPR constitutes the legal basis. Our justified interest results from the advertising function used on social media. We use this to increase the level of awareness for our company.

6.1.1.3. Purpose of data processing

We use social media to make our company better known. We would also like to offer you the opportunity to interact with the social media via our website.

6.1.1.4. Period of data storage

Data collected by YouTube (Google) via plug-ins and advertising will be erased by the processor after a fixed storage period. According to Google, this period expires after 9 or 18 months.

6.1.1.5. Possibility of elimination by the data subject

To prevent YouTube from processing your data processing, you have the option of logging out of YouTube before accessing the 4scotty.com website. To do this, you must log out of YouTube's website and erase all cookies from your browser history.

WWithin the YouTube profile settings, you can set additional options and objections to the use of your data for advertising purposes. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

7. Tracker and Analysis Tools

To constantly improve our range of products and services on 4scotty.com, we use the following analysis tools. Below, you will learn which data is processed in each case and how you can contact the respective service providers:

7.1. Facebook Custom Audience / Facebook-Pixel

7.1.1. Description and scope of data processing

Our website uses Facebook's visitor action pixel to measure conversion.

The Controller is:

Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

The Facebook pixel can be used to track the behaviour of page visitors after visiting our website. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and the optimisation of future advertising measures. Facebook receives the following categories of data: the referral URL, browser information, and the person’s Facebook User ID if s/he has a Facebook account and is logged on to Facebook.

Facebook stores and processes the data which can be linked to the respective user profile; Facebook can then use the data for its own advertising purposes in accordance with the Facebook Data Policy. This allows Facebook to place advertisements on Facebook pages and externally of Facebook. As a website operator, we cannot influence this use of the data.

At https://www.facebook.com/about/privacy/ you will find Facebook's data protection policy.

7.1.2. Legal basis for data processing

Art. 6 Para. 1 Sentence 1 lit. f) GDPR constitutes the legal basis for the use of the application. Our legitimate interest lies in the optimisation of our advertising presence and monitoring of the use of our website.

7.1.3. Purpose of data processing

We process your data for the purpose of our website’s needs-based and continuous optimisation. This also results from our legitimate interest in data processing.

7.1.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

7.1.5. Possibility of elimination by the data subject

You can also deactivate the Custom Audience remarketing function in the settings for displaying advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can disable Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

Alternatively, you can prevent Facebook Pixel from collecting your information on our site by clicking on the following link. An opt-out cookie will be set in your browser to prevent your information from being collected on future visits to this website with your current browser: Facebook Pixel disabled: Facebook Pixel please disableis disabled.

7.2. Google Analytics

7.2.1. Description and scope of data processing

Our website 4scotty.com uses Google Analytics. This is a service for the analysis of accesses to websites of Google Ireland Limited (Google) and enables us to improve our website.

The Controller for the European Economic Area and Switzerland is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Cookies enable us to analyse your use of our website. The information collected by means of a cookie is:

  • IP address,
  • time of access,
  • access duration

and is transferred to a Google server in the USA and stored there. The evaluation of your activities on our website will be transmitted to us in the form of reports. Google may disclose the information collected to third parties where required to do so by law or where such third parties process the information on Google's behalf. Our website’s Google tracking codes use the _anonymizeIp() function, meaning that IP addresses are only processed in shortened form in order to exclude a possible direct personal relationship with you.

Please visit https://policies.google.com/?hl=en and https://policies.google.com/terms?hl=en for more information on Google Analytics' Terms of Use and Privacy Policy.

7.2.2. Legal basis for data processing

Art. 6 Para. 1 S.1 lit. f GDPR constitutes the legal basis for the processing of personal data. Our justified interest results from the possibility of the continuous optimisation of our website in line with requirements.

7.2.3. Purpose of data processing

Processing your personal data enables us to analyse your surfing behaviour. By evaluating the collected data, we are able to compile information on the use of our website’s individual components. This helps us to constantly improve our website and its usability. By anonymising the IP address, we sufficiently take into account our users’ interest in protecting their personal data.

7.2.4. Period of data storage

The data will be erased 26 months after your last visit to our website.

7.2.5. Possibility of elimination by the data subject

By selecting the appropriate settings on your browser, you may also reject the installation of Google Analytics cookies. In this case, however, you may not be able to use all the functions of our website to their full extent. Google Analytics can also be deactivated and controlled by browser extensions, e.g. http://tools.google.com/dlpage/gaoptout?hl=de. Click on this link to prevent tracking: Google Analytics please disable nownow disabled.

7.3. Google Tag Manager

7.3.1. Description and scope of data processing

Google Tag Manager is a solution that allows us to manage so-called website tags via a single interface (and thus integrate Google Analytics and other Google marketing services into our range of online services). The Tag Manager itself (which implements the tags) does not process any personal data. With regard to the processing of personal data, reference is made to the information on Google services. You can view the Google Tag Manager usage guidelines here: https://www.google.de/analytics/tag-manager/use-policy/

8. Advertising and Marketing Tools

Our website also includes tools that ensure that, in an Internet search, our website is displayed to you as a relevant search result or marked as advertising. In the following, the programs used in connection with our website have been broken down for you:

8.1. Google Ad Manager (formerly Double Click)

8.1.1. Description and scope of data processing

Our website uses Google Ad Manager.

The Controller for the European Economic Area and Switzerland is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Google Ad Manager is used to display ads when you visit our website. Google Ad Manager uses information about your visits to this and other websites to display ads for products and services of interest to you. If you would like to learn more about these methods or know which options are available to you so that Google Ad Manager does not use this information, click here: https://policies.google.com/technologies/ads?hl=en.

8.1.2. Legal basis for data processing

Data processing is based on Art. 6 Para. 1 S.1 lit. f) GDPR.

8.1.3. Purpose of data processing

The legitimate interest is based on entering into collaborations with other companies in order to participate economically in doing so.

8.1.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

8.1.5. Possibility of elimination by the data subject

The setting of cookies can be prevented at any time by making appropriate settings in your Internet browser. The cookies already set can also be erased in the settings of the Internet browser. We would like to point out that preventing the setting of cookies may result in not all functions being fully available.

8.2. Google Remarketing

8.2.1. Description and scope of data processing

4Scotty GmbH uses Google Remarketing. With the use of Google Remarketing, 4Scotty GmbH is able to display advertisements (including visits to other websites) that have previously been registered on the 4Scotty GmbH website. Google Remarketing thus ultimately enables user-related advertising.

The Controller for the European Economic Area and Switzerland is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Google Remarketing sets a cookie. This use of cookies enables Google to recognise you when you visit a website that also uses Google Remarketing.

As a result, Google can track your IP address and surfing behaviour.

For more information on Google's current data protection policy, please visit: https://policies.google.com/?hl=en

8.2.2. Legal basis for data processing

Data processing is based on Art. 6 Para. 1 S.1 lit. f) GDPR.

8.2.3. Purpose of data processing

Our legitimate interest is to become better known through advertising. The purpose of the processing is to enable user-specific advertisements. Advertisements will allow us to be noticed by larger groups of users and prospective customers. It will also help us to become better known.

8.2.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

8.2.5. Possibility of elimination by the data subject

The setting of cookies can be prevented at any time by making appropriate settings in your Internet browser. The cookies already set can also be erased in the settings of the Internet browser. We would like to point out that preventing the setting of cookies may result in not all functions being fully available.

You can object to the user-related advertising by Google at any time. For this we refer to: https://www.google.com/settings/ads

8.3. Google Ads (und Google Conversion Tracking)

8.3.1. Description and scope of data processing

4Scotty GmbH has integrated the services of Google Ads (formerly Google AdWords) into this website. Google Ads is a service for Internet advertising.

The Controller for the European Economic Area and Switzerland is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

If you have reached our website through a Google advertisement, Google will set a so-called conversion cookie on your system. With regard to the explanations on cookies, reference is made to the passage on cookies. The conversion cookie is used to create and analyse visit statistics.

The conversion cookie stores the IP address when you visit the website. This data is stored in the US. It is possible that Google may also disclose this data to third parties.

With regard to further data protection information from Google, reference is made to: https://policies.google.com/?hl=en

8.3.2. Legal basis for data processing

Art. 6 Para. 1 Sentence 1 lit. f) GDPR constitutes the legal basis.

8.3.3. Purpose of data processing

Our justified interest lies in increasing the level of awareness for our company.

We use Google Ads in order to be able to place targeted advertising for our company in Google’s search engine results.

8.3.4. Period of data storage

The cookie loses its validity 30 days after setting the conversion cookie. This means that you can no longer be identified. Based on the conversion cookie, both 4Scotty GmbH and Google can track which subpages have been accessed within these 30 days.

8.3.5. Possibility of elimination by the data subject

You can prevent cookies being set at any time by making appropriate settings in your Internet browser. The cookies already set can also be erased in the settings of the Internet browser. We would like to point out that preventing the setting of cookies may result in not all functions being fully available.

You can object to the user-related advertising by Google at any time. For this we refer to: https://www.google.de/settings/ads

8.4. Intercom

8.4.1. Description and scope of data processing

We use the chat and mailing functions of Intercom to get in direct contact with our registered users.

The Controller is:

Intercom Inc., 55 2nd Street, 4th Floor, San Francisco, CA 94105.

During a chat connection, the location, IP address, browser and website visited is displayed to us and stored. Your e-mail address and your name will be forwarded to Intercom within the scope of a mailing. Further information on data protection at Intercom can be found at http://docs.intercom.io/privacy.

8.4.2. Legal basis for data processing

Data processing is based on Art. 6 Para. 1 S.1 lit. f) GDPR.

8.4.3. Purpose of data processing

It is in our legitimate interest to get in touch with you and to offer you a convenient way to get in touch with us.

8.4.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

8.4.5. Possibility of elimination by the data subject

You can object to the storage and use of your personal data by contacting team@intercom.com or compliance@intercom.com.

8.5. LinkedIn und LinkedIn Conversion Tracking

8.5.1. Description and scope of data processing

We place advertisements on LinkedIn. We also use the analysis and conversion tracking technology of the LinkedIn platform to check the effectiveness of this advertising.

The Controller is:

LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

LinkedIn places a cookie on your computer that is used to collect information about how advertisements are presented. To be able to give specific product recommendations on subsequent visits to our website or the websites of third parties, the cookie text files contain information about your visits to our website, in particular the pages you have visited. The cookie contains an alias assigned by a random generator. If you revisit our or LinkedIn's website within a certain period of time, LinkedIn will recognise you by this alias. However, this information cannot be linked to your person. Neither we nor LinkedIn combine this information with your personal data and do not disclose any personal data to third parties.

8.5.2. Legal basis for data processing

Data processing is based on Art. 6 Para. 1 S.1 lit. f) GDPR.

8.5.3. Purpose of data processing

It is in our legitimate interest to inform you about our range of products and services and to make it attractive and user-friendly for you.

8.5.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

8.5.5. Possibility of elimination by the data subject

You may opt out of the storage and use of data in a LinkedIn cookie by clicking on the link https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out and choosing Opt Out.

If you choose this option, a new cookie (opt-out cookie) will be set in your browser, informing LinkedIn that no information about your browser behaviour may be stored. Please note that the setting must be made for all browsers you use. If all your cookies are erased in a browser, the LinkedIn opt-out cookie will also be affected.

8.6. Reddit Ads und Reddit Conversion Tracking

8.6.1. Description and scope of data processing

We place advertisements on Reddit (Reddit Ads). We also use the analysis and conversion tracking technology of the Reddit platform to check the effectiveness of this advertising.

The Controller is:

Reddit, Inc., 548 Market St. #16093, San Francisco, California 94104.

If you have reached our website via a Reddit advertisement, Reddit sets a cookie on your computer. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of a Reddit Ad customer’s website and the cookie has not expired, Reddit and the customer will be able to recognise that you clicked on the ad and were directed to that page. Each Reddit Ads customer receives a different cookie. Cookies cannot be tracked through Reddit Ads customer websites. The information collected using the conversion cookie is used to generate conversion statistics for Reddit Ads customers who have opted for conversion tracking. Reddit Ads customers will know the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, we do not receive information that personally identifies users.

8.6.2. Legal basis for data processing

Data processing is based on Art. 6 Para. 1 S.1 lit. f) GDPR.

8.6.3. Purpose of data processing

It is in our legitimate interest to inform you about our range of products and services and to make it attractive and user-friendly for you.

8.6.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

8.6.5. Possibility of elimination by the data subject

As a logged-in user of Reddit, you can object to the storage and use of data in a LinkedIn cookie by calling up the link https://www.reddit.com/personalization and selecting your preferred settings.

If you choose this option, a new cookie (opt-out cookie) will be set in your browser, informing LinkedIn that no information about your browser behaviour may be stored. Please note that the setting must be made for all browsers you use. If all your cookies are erased in a browser, the LinkedIn opt-out cookie will also be affected.

9. Other Third-party Tools

In addition, we use third-party providers to help us display the pages and the website’s functionality. These are listed below:

9.1. Google Web Fonts

9.1.1. Description and scope of data processing

On the website, 4Scotty GmbH uses so-called web fonts to uniformly display fonts.

The Controller for the European Economic Area and Switzerland is:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google’s servers. Google thus becomes aware that our website has been accessed via your IP address.

If your browser does not support web fonts, a standard font will be used by your computer.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's data protection policy: https://www.google.com/policies/privacy/

9.1.2. Legal basis for data processing

Die Rechtsgrundlage beruht auf Art. 6 Abs. 1 lit. f) DS-GVO.

9.1.3. Purpose of data processing

Purpose of data processing ist die einheitliche Darstellung von Schriftarten auf dieser Webseite. Hierauf beruht auch unser berechtigtes Interesse an der Datenverarbeitung. Wir könnten Ihnen unser online Angebot sonst nicht effektiv darstellen.

9.1.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

9.1.5. Possibility of elimination by the data subject

You can set your browser so that the fonts are not loaded by the Google servers. If your browser does not support Google Fonts or if you block access to the Google servers, the text will be displayed in the system’s default font.

9.2. Recommendations (tell-a-friend)

9.2.1. Description and scope of data processing

We offer registered Talents the opportunity to invite their contacts to 4scotty.com quickly and easily. The purpose of this service is to make it easier to recommend our platform and to attract new Talent. The recommending Talent can be rewarded for new registrations in the form of an Amazon voucher.

If a user decides s/he would like to do this, a link is created by us which contains an encrypted referrer to the registered Talent who wants to invite a contact. In a second step, this link is then shortened via Bit.ly and can then be copied by the user to the clipboard and sent by the user via various self-selected services. There is no reference made to the user, not even his/her IP address is transferred. If a contact uses such an invitation link for registration, the information will be validated and decrypted by 4scotty. Only the fact that someone has registered via this link, but not who, is made accessible to the invited user’s account.

To generate the Amazon voucher, the email address of the invited user is forwarded to Amazon EU S.à r.l. (Amazon).

9.2.2. Legal basis for data processing

Data processing is based on Art. 6 Para. 1 S.1 lit. f) GDPR.

9.2.3. Purpose of data processing

It is in our legitimate interest that you can easily inform your contacts about our range of products and services.

9.2.4. Period of data storage

The data is erased as soon as it is no longer needed for our recording purposes.

9.2.5. Possibility of elimination by the data subject

You can contact us at any time and object to further processing of your data. In this case, we cannot continue to communicate with you. All personal data processed by us in the course of contacting you will in such cases be erased.

10. Data Transfer to a Third Country

To be able to provide our services, we use the support of service providers from within the European Union as well as from third countries. To also safeguard the protection of your personal data when transferring data to a third country, we conclude special data processing contracts with each of the carefully selected service providers. All of the service providers we use provide sufficient evidence that they have taken appropriate technical and organisational measures to safeguard data security. Our service providers from third countries are either located in countries which have an adequate level of data protection recognised by the EU Commission (Art. 45 GDPR) or have provided suitable safeguards (Art. 46 GDPR). The categories of service providers, the countries in which they are headquartered and the corresponding safeguards are listed below:

  • Hosting, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4

  • Hosting, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000TOLrAAO&status=Active

  • Tracking und Analysetoolanbieter, Videoportalanbieter, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

  • Informations- und Kommunikationsdienstleister, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000TNQvAAO&status=Active

  • Informations- und Kommunikationsdienstleister, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

  • Informations- und Kommunikationsdienstleister, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000TNjOAAW

  • Maildienstleister, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000KzTTAA0&status=Active

  • Informations- und Kommunikationsdienstleister, USA, Mitglied im EU-US Privacy Shield:

    EU-US Privacy Shield: Der Privacy-Shield ist ein Abkommen zwischen den Vereinigten Staaten von Amerika und der Europäischen Union, das die Einhaltung europäischer Datenschutzstandards gewährleisten soll. Nähere Informationen finden Sie unter: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

11. Your Rights

With regard to your personal data, you have the following rights:

11.1. Right to revoke consent (cf. Art. 7 GDPR)

If you have given your consent to the processing of your data, you can revoke it at any time. After you have expressed it to us, such a revocation influences the permissibility of the processing of your personal data for the future. It can be made verbally (by telephone) or in writing by a postal service or via e-mail to us.

11.2. Right of access (cf. Art. 15 GDPR)

In the event you request access to information, you must provide sufficient information about your identity and proof that it is your information. The access concerns the following information:

  • the purposes for which the personal data are processed;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom the personal information on you has been or will be disclosed;
  • the planned period of storage of the personal data concerning you or, if it is not possible to provide specific information in this regard, criteria for determining the period of storage;
  • the existence of a right to rectify or erase personal data concerning you, a right to restrict the processing by the controller or a right to object to such processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information on the origin of the data, if the personal data are not collected from the data subject;
  • the existence of automated decision-making, including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - conclusive information on the logic involved as well as the scope and intended effects on the data subject of such processing.

11.3. Right to rectification or erasure (cf. Art. 16, 17 GDPR)

If the processed personal data concerning you is inaccurate or incomplete, you have the right to have your personal data rectified and/or completed by us as the controller. The controller must carry out the rectification immediately.

Furthermore, you may request the erasure of your personal data if one of the following reasons applies to you:

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  • Pursuant to Art. 6 Para. 1 Sentence 1 lit. a) or Art. 9 Para. 2 lit. a) GDPR, you revoke your consent on which the processing was based and there is no other legal basis for the processing.
  • Pursuant to Art. 21 (1) GDPR, you object to the processing and no overriding legitimate reasons exist for the processing or you object to the processing pursuant to Art. 21 Para. 2 GDPR.
  • The personal data concerning you have been processed unlawfully.
  • The erasure of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • Pursuant to Art. 8 Para. 1 GDPR, the personal data relating to you have been collected in relation to information society services on offer.

If we have made public the personal data concerning you and if we are obliged to erase it in accordance with Art. 17 Para. 1 GDPR, we will take all reasonable measures to inform other controllers that you have requested the erasure of all links to this personal data or copies or replications of this personal data.

The right to erasure does not exist if the processing is necessary due to

  • the exercise of freedom of expression and information;
  • to fulfil a legal obligation which the processing requires under the law of the Union or of the Member States to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • reasons of public interest in the field of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
  • archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the law referred to under section a) presumably makes it impossible or seriously impairs the attainment of the objectives of such processing, or to assert, exercise or defend legal claims.

11.4. Right to restrict processing (cf. Art. 18 GDPR)

You may request that we restrict the processing of your personal data according to the following conditions:

  • if you dispute the accuracy of the personal data on you for a period of time that allows us to verify the accuracy of your personally identifiable information;
  • the processing is unlawful and you refuse to erase the personal data and instead request the restriction of the personal data’s use;
  • we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
  • if pursuant to Art. 21 Para. 1 GDPR, you have lodged a complaint against the processing and it has not yet been determined whether our justified reasons outweigh your reasons.

Where the processing of personal data concerning you has been restricted, such data may not be processed; with the exception of their storage, without your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.

If the restriction on processing has been made in accordance with the above conditions, you will be informed by us before the restriction is lifted.

11.5. Right to provide information (cf. Art. 19 GDPR)

If you have asserted to us your right to rectification, erasure or restriction of data processing, we are obliged to inform all recipients of your personal data of the rectification, erasure or restriction of data processing. This shall only apply to the extent that this notification does not prove impossible or would involve disproportionate expense.

You have the right to know which recipients have received your data.

11.6. Right to data portability (cf. Art. 20 GDPR)

You have the right to receive your personal data from us in a common, machine-readable format in order to have it forwarded to another controller if necessary, provided that

  • dthe processing is based on consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a) GDPR or Art. 9 Para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 Para. 1 Sentence 1 lit. b) GDPR
  • and processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to request that the personal data be transferred directly by us to another controller, insofar as this is technically feasible.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority entrusted to us.

11.7. Right to object to the processing (cf. Art. 21 GDPR)

If we base the processing of your personal data on a legitimate interest (pursuant to Art. 6 Para. 1 Sentence 1 lit. f) GDPR) or on our part, you may object to the processing. The same applies if we base data processing on Art. 6 Para. 1 Sentence 1 lit. e) GDPR.

In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.

11.8. Right of lodge a complaint with the competent supervisory authority (cf. Art. 77 GDPR)

If you believe that the processing of your personal data is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of suspected infringement, without prejudice to any other administrative or judicial remedy.

The supervisory authority to which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.

12. How to exercise these rights

To exercise these rights, please contact our Data Protection Officer:

Mr. Kemal Webersohn at WS Datenschutz GmbH

privacy@4scotty.com

oder per Post:

WS Datenschutz GmbH
- Datenschutz -
Meinekestraße 13
D-10719 Berlin
Germany
https://www.ws-datenschutz.de/

13. Subject to Alterations

We reserve the right to modify this data protection statement in compliance with statutory provisions.

Stand March 2019

Data Protection Declaration for Contacting us Via WhatsApp

1.1 WhatsApp

1.1.1 Description of Data Processing

We offer you the opportunity to contact us using your mobile phone via WhatsApp. This is only possible if you have WhatsApp installed on your mobile phone. The benefit to you is that you can contact us via WhatsApp.

Along with us, the joint controller responsible for data processing is:

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland

When you contact us through WhatsApp, we automatically receive the following information from WhatsApp:

  • Your phone number
  • Your WhatsApp username
  • Your profile picture
  • Your profile information
  • Your status, if applicable
  • When you were last online on WhatsApp, if applicable
  • Your message
  • Whether you have received and/or read our messages, if applicable

For more information about how WhatsApp Web works and the privacy settings of your social media account, please refer to the WhatsApp Legal Info and Terms of Service at: https://www.whatsapp.com/legal/?lang=en#terms-of-service sowie https://www.whatsapp.com/legal/?lang=en

1.1.2 Legal Basis for Data Processing

Contact via WhatsApp and the associated disclosure of your data is voluntary. The processing is therefore carried out on the basis of Art. 6 (1) Sentence 1 lit. a) GDPR.

1.1.3 Purpose of Data Processing

The purpose of data processing is to enable a simple and everyday communication channel for many people. This makes it easier for you and us to quickly exchange general service notes and tips in the event of issues with the use of our website.

1.1.4 Duration of Data Processing

We will delete your data immediately after answering your service request. In rare cases, however, we may retain your data for a longer period of time. This may be the result of legal or contractual obligations.

1.1.5 Possibility of Elimination by the Data Subject

Contact via WhatsApp is voluntary and can be terminated at any time. You have the possibility to withdraw your consent to data processing, cf. Art. 7 GDPR. A withdrawal takes effect from the time at which it is expressed. It has a future effect. You can withdraw your consent at any time. This can be done by telephone, post, e-mail or any other means.

The extent of disclosure of your data depends on your individual privacy settings in WhatsApp Messenger. More information can be found here: https://www.whatsapp.com/legal/?lang=en#privacy-policy-managing-and-deleting-your-information https://www.whatsapp.com/legal/?lang=de#privacy-policy-managing-and-deleting-your-information

Data Protection Declaration for our Social Media Accounts

1. Controllers

4Scotty GmbH (Torstrasse 131, D-10119 Berlin, Germany, represented by Matthias Schleuthner) operates the following social media accounts on its own behalf.

To do this, we use services provided by

  • Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA beziehungsweise Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (Facebook)
  • Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. (Instagram)
    Datenverantwortlich: Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland
  • LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland beziehungsweise LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, California 94085, USA (LinkedIn)
  • Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (Twitter)
  • XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland (XING)
  • YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (YouTube) represented by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. (Google)

Pursuant to the judgment of the European Court of Justice dated 5 June 2018 (available at http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=298398) operators of social media accounts and the operators of the social media platforms shall be themselves deemed joint controllers.

When using our social media accounts and their functions, we would like to point out that this occurs on your own responsibility. In particular, this applies to the use of interactive functions (e.g. commenting, sharing, evaluating). Alternatively, you can access the information that we make available in the social media accounts also on our website https://4scotty.com.

2. Data Protection Officer

Data Protection Officer of 4scotty GmbH is:

Mr. Kemal Webersohn at WS Datenschutz GmbH
If you have any queries on data protection, you can contact him at the following e-mail address:

privacy@4scotty.com

oder per Post:

WS Datenschutz GmbH
- Datenschutz -
Meinekestraße 13
D-10719 Berlin
https://www.ws-datenschutz.de/

The Data Protection Officers of the respective social media platforms can be contacted via each respective social media.

The Data Protection Officer of Facebook and Instagram can be reached via the following linked contact form: https://www.facebook.com/help/contact/540977946302970

The Data Protection Officer of LinkedIn can be reached via the following linked contact form: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

The Data Protection Officer of Twitter can be reached via the following linked contact form: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

The Data Protection Officer of XING can be reached at the following e-mail address: Datenschutzbeauftragter@xing.com

The Data Protection Officer of Google, who is also responsible for YouTube, can be reached via the following linked contact form: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

3. Data Processed by Social Media

When you visit our social media accounts, the operators of these social media platforms collect, inter alia, your IP address and other information available on your PC in the form of cookies. This information is used to provide us, as the operators of the platforms, with statistical information on the account’s use. The data collected on you in this context is processed by the operators of the social media platforms and may be transferred to countries outside the European Union. The data protection declarations of the social networks provide detailed information on what the respective social networks’ operators collect and how it is used. You will also find there information on contact options.

Further information can be found at the following links:

As the operators of these social media platforms do not conclusively and clearly state how they use the data from your visits to our social media accounts for their own purposes, we do not know to what extent activities on the social media accounts are assigned to individual users, how long they store this data and whether data from your visits to our social media accounts is passed on to third parties.

When accessing our social media accounts, the IP address assigned to your device will be transferred to the operator of the respective social network. The social networks also store information on the users’ devices (e.g. via registration notification); social media operators may thus be able to assign IP addresses to individual users.

If you are currently registered as a user with the respective social network, your device contains a cookie with your individual identifier on this social network. By this, it is possible to trace that you have visited a particular account and how you have used it. This data can be used to tailor content or advertising to your needs.

If you wish to avoid this, you should log out of the respective social network or deactivate the Stay logged in function, erase the cookies from your device, and close and restart your browser. In doing so, log-in information that immediately identifies you is erased. This enables you to use our social media accounts without revealing your user ID. If you access the account’s interactive functions (like, comment, share, news etc.), a log-in screen will appear. After possibly registering, the social network used can recognise you again as a certain user..

Please refer to the above support pages of the relevant social network for information on how to manage or erase any existing information.

4. Data Processed by 4Scotty GmbH

Type and scope of data processing

The data you enter on social networks, in particular your user name and the content that you publish using your account, is processed by us to the extent that we may reply to your messages. In addition, your published posts, reviews and comments refer to your account on the respective social network. If you mention us via an @ or # or similar, this mention may be published on our account under your user name. Where required, the data published and disseminated by you free of copyright on the respective social network will be included in our account and made accessible to other users of the respective social network. If you mark our social media account with like or follow or any similar interaction, this will be communicated to us with your user name and a link to your account by the respective social network.

As the provider of the information service, we do not collect and process any data from your use of our social media accounts.

Legal basis for processing

On our part, the processing is based on Art. 6 Para. 1 lit. f) GDPR.

Purpose of processing

The data provided by you in this context and, where appropriate, being accessible to us (e.g. user name, images, interests, contact data) will be processed by us exclusively for the purpose of communicating with customers and prospective customers.

It is our legitimate interest to offer you a platform to provide up-to-date information, to help you to address your query to us, and enabling us to respond to your query as quickly as possible.

Storage period

As far as it is possible for us, your data will be erased when our social media account is discontinued.

5. Your Rights

According to the General Data Protection Regulation, you have the following rights:

  • Right to access

    If your personal data is processed, you have the right to access information on the data stored about you. (Art. 15 GDPR).

    If you wish to access information, you must provide sufficient details on your identity and proof that it is your information. The access concerns data stored on you, the data’s origin, the recipient or the categories of recipients to whom the data has been transferred and the purpose of storage. To exercise these rights, please contact us directly.

  • Right to rectification

    Should any incorrect personal data be processed, you have the right to rectification (Art. 16 GDPR).

  • Right to erasure or restriction of processing, right to objection

    If the legal requirements are met, you can request the erasure of your personal data or the restriction of the processing and the objection to the processing (Arts. 17, 18, 21 GDPR).

  • Right to data portability

    If you have consented to data processing or a processing contract has been concluded and data processing is carried out using automated procedures, you have the right to data portability. (Art. 20 GDPR).

  • Right to provide information

    If you have exercised your right to have your data erased or rectified, or your right to restrict processing, you also have the right to be provided with information on the execution of these actions by the controller. (Art. 19 GDPR).

  • Right to lodge a complaint with the competent supervisory authority

    If you believe that the processing of your personal data is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you reside or work, or in the place where the alleged infringement took place, without prejudice to any other administrative or judicial remedy.

    The supervisory authority with which the complaint is lodged shall inform the complainant of the complaint’s status and outcome, including the possibility of a judicial remedy according to Art. 78 GDPR.

    If you make use of these rights, the controller will check whether the legal requirements have been met.

    You can assert your rights with the Data Protection Officer of the respective social network.

    For the data processed by us, you can assert it via our Data Protection Officer; the contact details are provided under Section 2. If you have any questions about our range of information services, please contact us directly using the contact details stated in Section 1.

    For more information about social networks and how you can protect your privacy, please visit https://youngdata.de.

6. Subject to Alterations

We reserve the right to modify this Data Protection Declaration in compliance with statutory provisions.

As of March 2019