Data protection

Information about the collection of personal data on our homepage

Dear visitor to www.wintersummerjobs.com, we would like to inform you that personal data is collected when you visit our website. Personal data is data that can be related to you personally (e.g. name, Email, IP address, user behavior). Essentially, we process personal data in order to fulfill our contractual obligations to our users. The processing of the data is a prerequisite for us to be able to suggest suitable contacts, offers and information to you, for example. This is data that we receive directly from you via a digital contact form or Email and information that you publish on www.wintersummerjobs.com via an applicant profile upload or job offer upload. These are, for example: access data (e.g. password and user name), profile data (e.g. company name, job description, industry affiliation, school or university education, contact details, photos, company logos), payment data via service provider www.stripe.com, messages and contributions. Responsible for the collection and storage of data on this website is:

TOC Agentur für Kommunikation GmbH & Co. KG

Münchner Straße 150 83703 Gmund am Tegernsee

Telephone: +49-8022-915970
Email: support@wintersummerjobs.com


You can reach our data protection officer using the following contact details:

Datenschutzdoktor Rechtsanwaltsgesellschaft mbH
Arndtstraße 4 90419 Nuremberg

Telephone: +49-911-13349912
info@datenschutzdoktor.de

When you visit our website, we display a "cookie banner" to inform you that we use cookies and other tracking technology to improve the user experience on our website and for the purposes of web analysis and interest-based advertising. The associated data processing is described below. As indicated in the cookie banner, you consent to this use when you click on "Allow all cookies" or "Allow selected cookies". You can revoke this consent in whole or in part at any time with effect for the future. The options available for this are described in detail below.

When you visit our homepage, only the data transmitted by your browser to our server is collected. This data is necessary so that you can view our homepage, find out about our offers and navigate safely on our homepage - including its subpages, if applicable.

Unless otherwise described below, the legal basis for the collection of data is Art. 6 (1) f) of the EU General Data Protection Regulation (GDPR).

In detail, the following data is collected when you visit our website:

Upload of applicant profile by job seekers or job upload of offered positions by companies: Type and scope of processing Personal data is collected when contact is made via a digital contact form or via Email. The relevant information for your application or job offer is collected via the contact form. You can also voluntarily provide us with additional information that you consider necessary for the transmission of your application or job offer.


Storage duration

If contact is made on the basis of your consent, we store the data collected for all applications and job offers for 36 months, starting with your entry via the contact form or until you withdraw your consent.


WinterSummerJobs Business to Business & Business to Consumer Newsletter

At www.wintersummerjobs.com you have the voluntary option to receive the WinterSummerJobs newsletter as a free subscription. We use the service provider www.brevo.com (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin) to send the Business to Business & Business to Consumer newsletter. With your consent to receive the newsletter, the data you enter will be stored on Sendinblue's servers in Germany. We will inform our business-to-business and business-to-consumer contacts about news and our offers via newsletter. It is only possible to receive the WinterSummerJob newsletter if you have registered with us via a double opt-in procedure. When you register for the newsletter, your IP address and the date and time of your registration will be saved. We use the e-mail address you provide exclusively for sending the WinterSummerJob newsletter. You can unsubscribe from the newsletter at any time without giving reasons.


This data will be deleted as soon as it is no longer required.

We expressly point out that you have the right to lodge a complaint with the responsible state commissioner for data protection and information security of the respective federal state. A list of data protection officers and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany, is responsible for us.

If you have any questions or complaints about data protection in relation to our company or our website, we recommend that you first contact our data protection officer.


You have the following rights towards us:

Whether and to what extent these rights exist / can be enforced in individual cases and which conditions specifically apply is determined by the law, i.e. the GDPR General Data Protection Regulation (https://dsgvo-gesetz.de/) and the BDSG Federal Data Protection Act.

You can obtain information about the personal data we have stored about you as well as the origin, recipient and purpose of data collection and data processing at any time. The information is generally free of charge. If several requests are made per calendar year, we would like to point out that the costs incurred for repeated requests may have to be compensated.

1. Cookies

In addition to this data, we use cookies on our website.

Cookies are small text files that are stored on your computer (in your browser) after you visit our website. If you visit our website again afterwards, the browser you use sends the information stored in the cookie to our website and can thus make it easier for you to navigate again, for example, because default settings are adopted. Cookies are not viruses and cannot install malware or spyware on your computer. We reserve the right to use the following types of cookies on our website:

There are different types of cookies. On the one hand, there are cookies that are only stored on your computer during your visit to our website ("transient cookies") and, on the other hand, cookies that are stored for longer periods ("persistent cookies").

Most browsers are set to accept cookies automatically. You can deactivate the storage of cookies in your browser and have the option of deleting them from your hard disk at any time. We would like to point out that the use of our offers on the website is only possible to a limited extent without cookies.

However, you can also use your browser to prevent the setting of certain cookies (e.g. third-party cookies), for example if you want to prevent web tracking. You can find more information on this in the help function of your browser. Further information on third-party cookies that are set or processed when you visit our website can be found in the data protection declarations of the provider in question.

Transient cookies

These cookies are only stored for the duration of your browser use. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to the website. As soon as you close the browser, these cookies are automatically deleted.

Persistent cookies

These cookies differ from transient cookies only in that they are not automatically deleted when the browser is closed, but only after a preset time. However, you can delete these cookies at any time via the security settings of your browser.

You can also use our website without the use of cookies. However, in this case, some of the displays and functions of our website may only be used to a limited extent. If you wish to deactivate cookies, you can do so via special settings in your browser. The best way to do this is to use the help function of your browser to make the appropriate changes.

Flash cookies and HTML5 storage objects

The Flash cookies that may be used are not recorded by your browser, but by your Flash plug-in. We may also use HTML5 storage objects that are stored on your end device. These objects store the required data independently of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, for example "Better Privacy" for Mozilla Firefox or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually.

2. Collection of access data / server log files

For technical reasons, the delivery and presentation of the content of our website requires the collection of certain data. When you access our homepage, these so-called server log files are recorded by us or the provider of the web space.

The corresponding information consists of the name of the homepage, the file, the current date, the amount of data, the web browser and its version, the operating system used, the domain name of your Internet provider and the referrer URL (Uniform Resource Locator) as the page from which you switched to our site, as well as the respective IP address. We use this data to display and deliver our content and for statistical purposes.

As a rule, these log files do not allow any conclusions to be drawn about you and your person. Should your personal data nevertheless be processed, the legal basis for the processing is our legitimate interest pursuant to Article 6 (1) GDPR to be able to constantly improve our offer with the help of the data.

We reserve the right to check the aforementioned data retrospectively if there is any suspicion of unlawful use of our website.

3. SSL encryption

For your security, our website uses SSL encryption (Secure Socket Layer) when transmitting confidential or personal content.

This encryption is activated, for example, for inquiries that you send to us via our website. Please ensure that SSL encryption is activated for corresponding activities on your part. The use of encryption is easy to recognize: The display in your browser line changes from "http://" to "https://".

As far as is currently known, data encrypted via SSL cannot be decrypted by third parties. Only send your confidential information if SSL encryption is activated. Absolute security cannot be guaranteed, so if in doubt it is better to contact us by telephone or post.

4. Objection to advertising emails

We must publish our contact details as part of the legal obligation to provide a legal notice.

These are sometimes used by third parties to send unsolicited advertising and information. We hereby object to any transmission of advertising material of any kind not expressly authorized by us.

We also expressly reserve the right to take legal action against the unwanted and unsolicited sending of advertising material. This applies in particular to so-called spam emails and spam letters. We would like to point out that the unauthorized transmission of advertising material can affect competition law, civil law and criminal law. In this respect, it can lead to high claims for damages or fines if you disrupt our operations by overfilling Email inboxes.

5. Objection or revocation against the processing of your data

If you have given your consent, Art. 6 para. 1 a) GDPR is the legal basis for the processing of your data. You can withdraw your consent at any time. Such a withdrawal affects the permissibility of the processing of your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balancing of interests, Art. 6 para. 1 f) GDPR is the legal basis for the processing. In this case, you can object to the processing. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Your objection or revocation can be made to the controller named above.

6. Content and services from third-party providers

The offer on our homepage may also include content, services and performances from other providers that supplement our offer (so-called third-party providers).

On the one hand, this is done with so-called "plug-ins". These are software extensions or additional modules that extend the functions of our website. Examples of such offers are maps from Google Maps, YouTube videos or third-party graphics. Accessing these third-party services regularly requires the transmission of your IP address. As a result, these providers receive your user IP address and may also store it.

We endeavor to include only those third-party providers who use IP addresses solely for the delivery of content. However, we have no influence on which third-party provider actually stores the IP address. This storage may be used for statistical purposes, for example. If we become aware of storage processes by third-party providers, we will inform our users of this fact in this privacy policy. In this context, please note the following data protection declarations for individual third-party providers and service providers whose services we use on our website.

We accept no liability for the content or success of the following services. The respective owners are responsible for the content of the linked pages.

a) Integration of Google Analytics

This website uses the "Google Analytics" service offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyze website usage by users. The service uses "cookies" - text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

IP anonymization is used on this website. The IP address of users within the member states of the European Union and the European Economic Area is shortened. This shortening eliminates the personal reference of your IP address. As part of the contract data agreement that the website operators have concluded with Google Inc., Google Inc. uses the information collected to analyze website usage and website activity and provides services related to Internet usage. You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies. The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely. Furthermore, you can use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout
Here you will find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://policies.google.com/privacy

Google also processes your personal data in the USA. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection by EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse.

The legal basis for the processing of your data is our legitimate interest in accordance with Article 6 (1) f) GDPR to present our online offers in an appealing way and to ensure that the places we indicate on the website are easier to find.

b) Google Tag Manager

We use the Google Tag Manager from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for our website. This Tag Manager is one of many helpful marketing products from Google. Through Google Tag Manager, we can centrally integrate and manage code sections from various tracking tools that we use on our website. In this privacy policy, we want to explain to you in more detail what Google Tag Manager does, why we use it and in what form data is processed.

The Tag Manager itself is a domain that does not set any cookies or store any data. It acts as a mere "administrator" of the implemented tags. The data is recorded by the individual tags of the various web analysis tools. The data is passed through the Google Tag Manager to the individual tracking tools and is not saved. The situation is completely different with the integrated tags of the various web analysis tools, such as Google Analytics. Depending on the analysis tool, various data about your web behavior is usually collected, stored and processed with the help of cookies. Please read our data protection texts for the individual analysis and tracking tools that we use on our website. In the account settings of the Tag Manager, we have allowed Google to receive anonymized data from us. However, this only concerns the use and utilization of our Tag Manager and not your data that is stored via the code sections. We allow Google and others to receive selected data in anonymized form. We therefore consent to the anonymous sharing of our website data. Despite extensive research, we were unable to find out exactly which summarized and anonymous data is forwarded. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking involves comparing our own results with those of our competitors. Processes can be optimized on the basis of the information collected.

When Google stores data, this data is stored on Google's own servers. The servers are located all over the world. Most of them are located in America. Under https://www.google.com/about/datacenters/inside/locations/ you can find out exactly where the Google servers are located. You can find out how long the individual tracking tools store your data in our individual data protection texts for the individual tools.

7. Dealing with comments and contributions

If you leave a post or comment on this website, your IP address will be saved. This is done on the basis of our legitimate interests within the meaning of Art. 6 para. 1 f) GDPR and serves the security of us as the website operator. If your comment violates applicable law, we may be prosecuted and held liable, which is why we have an interest in the identity of the comment or post author. Your address will be deleted in accordance with the general principles of this data protection declaration if the purpose of the storage is no longer given and insofar as there are no statutory retention obligations to the contrary.

8. Transmission to third parties

Your personal data may be transferred to third parties in the cases mentioned in the previous section. In addition to the legal obligation to comply with all data protection regulations, our service providers are bound by further contractual data protection requirements. This also includes an obligation as a processor in accordance with Article 28 (3) GDPR. In addition, we only transfer personal data to third parties if we have legal permission to do so or if you have given your prior consent. You can revoke any consent you have given at any time with effect for the future. We will only pass on your data to government bodies within the scope of legal obligations or on the basis of an official order or court decision and only insofar as this is permitted under data protection law.

9. Transmission to countries outside the EU

For the purposes stated for the use of our homepage, a transfer to countries outside the European Union and the European Economic Area (third countries) is generally not necessary and therefore does not take place. Otherwise, we only transfer data to third countries if it is ensured that the recipient of the data guarantees an adequate level of data protection within the meaning of Chapter V of the GDPR and no other interests worthy of protection speak against the transfer of data. In particular, we use the EU Commission's model contracts for the transfer of personal data to third countries to ensure an adequate level of protection for the recipient of the data.

10. Data security

Those responsible for this website have taken the necessary technical and organizational measures to protect the personal data provided by you against loss, destruction, manipulation and unauthorized access.

11. Deletion

In principle, we delete your personal data as soon as it is no longer required for the purposes for which it was collected and processed and insofar as there are no statutory retention obligations to the contrary. Statutory retention periods arise in particular under German tax, commercial and pharmaceutical law. If pseudonymous user profiles are stored, these are deleted 24 months after the last new entry.

12. Changes to the privacy policy

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. You will always find the latest version on our website.