Privacy Notice 2019-01-21T10:46:29+00:00

Data Protection Office

You want to claim your individual data protection rights? Please contact:

Dr. Anastasia Meletiadou
Datenschutzbeauftragte crvsh GmbH
Ferdinand-Braun-Platz 1
40549 Düsseldorf

The following information provides you with an overview on the data processing on our website, the legal basis thereof and your rights under the GDPR.
Please be aware that data transfer via the internet is subject to security risks and, therefore, complete protection against third-party access to transferred data cannot be ensured.

Data processing on our website

  • Server-log-data

    When accessing our website, our system automatically processes data and information from the accessing computer system. The following data are obtained:

    • User’s IP address;

    • Date and time of access;

    • Website from which you have accessed our site (referrer URL);

    • Subsites you visit on our website.

    These data are recorded in our system log files. They are not recorded together with any other of your personal data.

    The legal basis for the short-term recording of these data and the log files is Art. 6 (1) lit. f) GDPR. The short-term recording of these data is necessary for providing our website to your computer system. For this purpose your IP address has to be recorded for the duration of the session.
    Your data will be deleted once they are no longer required for pursuing the purpose, i.e. after the end of your website session.

  • Application data
    You may contact us via e-mail to send us your job application data (cover letter, CV, exams, certifications) or any related request. We will store and process your personal data therein for answering any request and any follow-up requests. Further, we will process your application data in order to decide on whether to enter a working relationship with you. Your application data are forwarded to:

    iGRC Holding GmbH
    Melchiorstraße 47
    10179 Berlin

    for assessment and giving advice on our decision making.

    The legal basis for processing your application data is Sec. 26 (1) German Data Protection Act (“BDSG”) as the processing of application data is necessary for deciding on whether to enter a working relationship with you.

    Your application data will be deleted once a decision has been made on whether we will enter a working relationship with you. In case of a negative decision we will record your application data for five additional months after such decision has been made in order to safeguard our legal interests against potential claims.

  • Google Maps
    This site uses Google Map services via an application programming interface (“API”). The services are provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

    For using these services, it is necessary to record your IP address. This information is generally transferred to Google servers in the US and recorded thereon. We have no influence on this data transfer.
    We use the Google Map service API in order to provide you with information on our location and to help you to plan your visit. Thus, the data processing is justified under Art. 6 (1) lit. f) GDPR.

    You can find further information on the data processing conducted by Google Inc. in the Google privacy policy:

  • User’s rights
    In case your personal data are processed by us, you have the following rights under the GDPR:

    • to withdraw your consent at any time. We may not continue any data processing solely based on such consent withdrawn. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

    • to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the us rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from you, any available information as to their source, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

    • to obtain without undue delay the rectification of inaccurate personal data and to to have incomplete personal data completed, including by means of providing a supplementary statement.

    • to obtain the erasure of personal data without undue delay, unless and to the extent the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation which requires processing by European Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us or for the establishment, exercise or defense of legal claims.

    • to obtain restriction of processing where one of the following applies: the accuracy of the personal data is contested by the data subject, for a period enabling us to verify the accuracy of the personal data, the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead, we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.

    • to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
      to lodge a complaint with a supervisory authority.