DATA PRIVACY
Privacy Policy of 365 Sherpas GmbH
The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we would like to inform you,
- When or during which actions we process data
- What data we process and for what reasons
- Who receives data
- What rights you have because of data processing by us.
This privacy policy only governs the use of personal data on our website www.365sherpas.com/de including its subpages. If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this privacy policy.
The transmission of information to or from this website is secured with TLS encryption.
You can access, print or download this data protection declaration permanently and at any time at the address http://www.365sherpas.com/datenschutz.
I. Contact information
The person responsible for data processing within the framework of this website within the meaning of the General Data Protection Regulation (GDPR) is:
365 Sherpas GmbH
Schlesische Strasse 26
10997 Berlin
Telefon: +49(0)30 5770209-10
Email address: info@365sherpas.com
We have also appointed a data protection officer. You can reach him under:
Data Protection Officer of 365 Sherpas GmbH
Hirschen Group Hub GmbH An der Alster 85
20099 Hamburg
Phone: +49(0)40 28455-0
Email address: datenschutz@hirschen-group.com
II. General information on data processing
- Scope of the processing of personal data
The provision of the website requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of the website, for example when you communicate with us via the contact form or consent to the processing of data.
You are not obliged to provide us with personal data. However, insofar as the provision of this data is technically mandatory for accessing our site, a refusal will result in you not being able to enter and use our website.
As a visitor to our websites, you are not subject to automated decision- making within the meaning of Art. 22 GDPR.
2. Legal basis for the processing of personal data
The legal bases for the processing of personal data are presented below.
| Processing reason | Legal basis in the GDPR | Explanation |
| Fulfilment of contract or implementation of pre-contractual mea- sures | Art. 6 sec. 1 b) | Processing is only carried out to the extent that is necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us will only take place to this extent. |
| Legitimate interest | Art. 6 sec. 1 f) | Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this data protection declaration as part of the processing description. |
| Consent | Art. 6 sec. 1 a) | Processing takes place if you have expressly consented to the type and scope of data processing. You can revoke your consent at any time with effect for the future. How- ever, the processing that has taken place up to this point will not be affected by this. |
| Art. 6 sec. 1 c) | Processing takes place insofar as this is necessary for the fulfillment of German or European legal obligations. | |
3. Data deletion and storage period
We delete your personal data as soon as the legal basis for its processing ceases to apply. In some cases, however, legal bases may also exist in pa- rallel or a new legal basis may take effect when a legal basis ceases to exist, such as the obligation to store certain data in order to comply with a statutory retention obligation.
III. Data processing for provision of the website
In order for us to be able to show you the website, it is necessary to process certain information. This already takes place when you access our website. This includes:
- IP address
- Date and time at the time of access
- Amount of data sent
- Source/reference from which you reached the page
- Browser used / version
- Information whether the retrieval was successful or unsuccessful
In addition, we offer various functionalities on our website that make further data processing necessary. The storage of this data, including your IP address, serves our legitimate interest in providing our website. The data is deleted as soon as you leave our site.
1. Contact by e-mail
If you contact us via e-mail addresses found on this website, we process the information contained therein in order to process your enquiry or request. This also represents our legitimate interest in the processing.
2. Social media plugin
When you click the button of a social media network, your browser establishes a direct connection to the servers of the respective operators. When the connection is established, various information including your IP address is sent to the operators and stored by them. Since the operators are usually based in the USA, this information is also stored there. The operators thus learn that your browser has called up the relevant sub-page of our website. This also applies if you do not have a user account with the social media network or are not logged in there at the time of visiting our website.
If you are logged in to your social media account at the same time, the operator directly assigns your visit to our website as well as any further interaction with the plugin (activation of the respective consent buttons, comments) to your account and stores this information. These actions may also be visible to other users of the network. You can prevent this data processing by not pressing the buttons. You can also log out of your social media network before visiting our site. In addition, you can also prevent the execution of social media plugins in general via add-ons such as the script blocker “NoScript” (http://noscript.net/) for your browser.
The legal basis of the data processing is our legitimate interest in providing you with an easy way to share information from our website on social media networks and thus increase our visibility.
For further information on data processing, in particular its scope and legal basis as well as related rights, please refer to the data protection notices and terms of use of the respective networks.
Our website uses the following social media plugins:
Facebook
Our website contains a social plugin of the social media network Facebook from Meta Platforms Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). In Europe, it is represented by Meta Platforms Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The corresponding button is recognisable by the F Logo and the word “Recommend”.
You can find Facebook’s privacy policy here: https://www.facebook.com/policy.php
Twitter
Our website contains a social plugin of the microblogging service Twitter of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA
(“Twitter”). The corresponding button is recognisable by the Twitter bird and the word “Twitter”.
You can find Twitter’s privacy policy here: https://twitter.com/privacy
LinkedIn
Our website contains a social plugin of the social media network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, (“LinkedIn”) represented in Europe by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. The corresponding button is recognisable by the “in” logo and the word “share”.
You can find LinkedIn’s privacy policy here: https://www.linkedin.com/legal/privacy-policy
IV. Cookies
1. Cookies used
The following cookies are used on this website:
| Cookie (provider) | Purpose | Duration |
| Necessary | ||
| Consent (google.com) | Used to determine whether the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the website’s compliance with the GDPR. | 2 years |
| Consent (youtube.com) | Used to determine whether the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the web- site’s compliance with the GDPR. | 2 years |
| CookieConsent
(365 Sherpas) |
Saves the user’s consent status for cookies on the current domain. | 1 year |
| locale (Personio) | Determines the preferred language and country setting of the visitor | Session |
| ppwp_wp_session
(365 Sherpas) |
Retains the user’s states for all page requests. | 1 day |
| Statistics | ||
| pll_language
(365 Sherpas) |
This cookie is used to determine the visitor’s preferred language and to set the language accordingly on the website, if possible. | 1 year |
| Marketing | ||
| i/jot (Twitter.com) | Sets a unique ID for the visitor that allows third-party advertisers to target the visitor with relevant advertising. This pairing service is provided by third-party advertising hubs that enable real-time bids for advertisers. | Session |
| VISITOR_INFO1_LIVE
(Youtube) |
Attempts to estimate user bandwidth on pages with integrated YouTube videos. | 179 days |
| YSC (Youtube) | Registers a unique ID to keep statistics of the videos from YouTube that the user has watched. | Session |
| ytidb::LAST_RESULT_EN TRY_KEY
(Youtube) |
Saves the user settings when retrieving a Youtube video integrated on other websites
Saves the user settings when retrieving a Youtube video integrated on other websites |
Persistent |
| yt-remote-cast-installed
(Youtube) |
Session | |
| yt-remote-connected- devices (Youtube) | Persistent | |
| yt-remote-device-id (Youtube) | Persistent | |
| yt-remote-fast-check- period (Youtube) | Session | |
| yt-remote-session-app
(Youtube) |
Session | |
| yt-remote-session-name
(Youtube) |
Session | |
V. Possibility of objection and removal
Insofar as the data processing is based on your consent or our legitimate interest, you have the right to object to the processing at any time or to revoke the consent you have given. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. To exercise your right of objection or revocation, you can contact info@365sherpas.com at any time. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms.
VI. Data subjects’ rights
If personal data relating to you is processed, you are a data subject within the meaning of Art. 4 (1) GDPR. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.
Right to information according to Art. 15 GDPR
You have a right of access to your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.
Right to rectification according to Art. 16 GDPR
You have the right to obtain the immediate rectification of inaccurate personal data and the completion of inaccurate personal data.
Right to deletion according to Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the reasons listed in Art. 17 GDPR applies, in particular if there is no longer a le- gal basis for the processing.
Right to restriction of processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.
Right to data portability according to Art. 20 GDPR
You have the right to request all personal data stored by us about you in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.
Right to complain to the competent supervisory authority, Art. 77 DSGVO
You have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 GDPR.
VII. Recipients of data
The processing of your personal data within the framework of the website is also partly carried out by order processors, in particular the hosting of the website. These are involved exclusively on the basis of a commissioning agreement in accordance with Art. 28 (3) GDPR.
VIII. Data transfer to third countries
The personal data we collect from you through the website will not be transferred to third countries outside the European Economic Area.
When using Youtube or the share functions of social networks, personal data may be transmitted in the cases described above.
When activating and using the social media plugins, your IP address and other data such as the information that you have visited our site is sent to the operators.
The operators Facebook, LinkedIn and Twitter are each located in the USA and thus in a so-called “third country” according to Art. 44 GDPR. All of the aforementioned companies have concluded the EU standard contractual clauses, which means that compliance with a European level of data protection is deemed to be guaranteed.
IX. Online application
You can apply at any time via the career portal at 365 Sherpas GmbH, at our company and at other subsidiaries of Hirschen Group GmbH. You can find an overview of the companies with address and contact details here. The career portal is operated by Hirschen Group GmbH and is also made available to both us and the other Hirschen Group companies for applicant management. In this respect, there is joint responsibility in accordance with Art. 26 EU-GDPR.
You can assert your data subject rights listed under section VI. against us using the contact details provided in section I. You are also entitled to assert your rights against Hirschen Group GmbH and the above-mentioned subsidiaries.
For the purpose of applicant management, we require your contact details (surname, first name, address, telephone number, mobile phone number, e-mail), your training data and information on your professional career. Additional personnel master data, such as nationality, marital status/children, your bank details if applicable, as well as skills and training data if applicable, are voluntary.
We process this data insofar as this is necessary to carry out the application process in accordance with Art. 26 of the Federal Data Protection Act (BDSG) or you have given us your consent in accordance with Art. 6 Para. 1 lit. a) EU-GDPR. In addition, we may be obliged to process the data on the basis of statutory provisions, Art. 6 para. 1 lit. c) EU-GDPR.
The data transmitted as part of your application will be transferred via TLS encryption and stored in a database. The database is operated by our service provider Personio GmbH, Rundfunkplatz 4, 80335 Munich. We have concluded an order processing agreement with Personio GmbH in accordance with Art. 28 EU-GDPR. You can find more information about Personio GmbH here.
Your data will generally be processed by the company to which you apply. In addition, we offer you the option of including your profile in our talent pool in order to identify interesting positions for you in the future. With your consent, the data will be processed within the Hirschen Group for the purpose of filling vacancies and stored in our talent pool.
The duration of the storage of your data is generally 6 months. Data held in our talent pool is retained for 2 years.
Only authorised persons have access to the stored data to the extent that it is required for the implementation of the applicant management or for the fulfilment of legal obligations.
X. Magazine HALTUNG
We offer you the possibility to order our magazine “Haltung” as a print or digital version. In return for the free provision of our magazine, we ask for your consent to the promotional use of your data by 365 Sherpas GmbH and its subsidiaries 365 Sherpas Brussels SRL (Belgium) and 365 Sherpas Consulting GmbH (Vienna). By promotional use we mean informing you in the context of the magazine “HALTUNG” or sending you information tailored to you about the services we offer.
You can revoke this consent at any time with effect for the future by contacting us via the at haltung@365sherpas.com.
In order to order a copy of the posture, you must complete an order form, during which we collect various data. This includes the following data: Email address, first name, last name, organisation, position and their postal address. Mandatory data is marked separately within the form.
Status: June 2022