Data Privacy

Information on Data Processing

in relation to the use of the website https://wollmilchsau.de

including the use of download offers

as well as in relation to recruitment processes

1. Controller

The controller for data processing on this website as well as in the context of application processes within the meaning of Art. 4 (7) GDPR is:

Wollmilchsau GmbH
Koppel 97
20099 Hamburg

Tel.: +49 (0)40 444 0 557 0
E-mail: info[at]wollmilchsau.de

Represented by:

Jan Kirchner
Alexander Fedossov

– hereinafter referred to as Wollmilchsau GmbH –

2. Subject of Data Protection

The subject of data protection is personal data. According to Art. 4 (1) GDPR, this includes all information relating to an identified or identifiable natural person. This includes, for example, information such as names, postal addresses, e-mail addresses or telephone numbers, usage data such as IP addresses, content data such as blog comments, or information you provide to us during application procedures.

3. Scope and Purpose of Data Collection and Storage

Below, we explain the scope, purpose and legal basis of the collection, storage and use (hereinafter “data processing” within the meaning of Art. 4 (2) GDPR) of personal data in connection with the website and in the context of recruitment processes at Wollmilchsau GmbH.

4. Processing of Personal Data in the Context of Website Use

The use of this website is generally possible without providing personal data. An exception is the IP address, which we require temporarily (see section 4.1).

4.1 IP Addresses

Without Internet Protocol addresses, or “IP addresses,” the internet would not function. An IP address serves as an address in computer networks that enables web servers and/or individual devices to be reached. Without an IP address, servers and devices cannot communicate, and thus no content can be displayed.
The web server on which this website is hosted is pinged with a data request by you as a user. To deliver the data, the web server must know your IP address. Consequently, the web server processes your IP address at the time of the request. The server also receives information such as which website or file was accessed, which browser and operating system were used.
Ordinarily, these data are stored in full in server log files. Wollmilchsau, however, does not store IP addresses beyond the necessary processing described above but anonymizes them by automatically replacing the IP address in the log files with the value 0.0.0.0.
The legal basis for this processing is regularly Art. 6 (1)(b) GDPR, since we require your IP address to transmit the website and its content to you.

4.2 Cookies

Cookies are small text files stored on your computer by websites in order to:

make the website functional at all (e.g., storing the contents of a shopping cart during a session, or setting that no cookies may be stored – “necessary cookies”),
save user preferences such as language settings or personalize content (“preference cookies”),
enable analysis of website usage (“statistical cookies”),
provide third-party providers with information about users (“marketing cookies”).

When you first visit our website, a cookie banner appears. There you can individually decide (consent) which categories of cookies may be set.

You may also prevent the installation of cookies altogether by adjusting your browser settings. However, in this case, not all website functions may be fully available. Previously stored cookies can be deleted in the browser settings.

The legal basis is your consent pursuant to Art. 6 (1)(a) GDPR. You may withdraw your consent at any time by clicking on “Change consent.”

Below, we provide further information on the use of Google Analytics (section 4.2.1) and social plug-ins (section 4.7).

4.2.1 Use of Google Analytics

Our website integrates Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us understand visitor behavior and improve website usability and content. Google sets cookies for this purpose, integrated via Google Tag Manager.

We process, through Google Analytics and cookies, data such as:

browser type,
operating system used,
time spent on our site,
time of server request,
approximate location (city/district level, based on IP).

You determine through the cookie banner whether we may set statistical cookies. If you decline, no cookies are set. The legal basis is your consent (Art. 6 (1)(a) GDPR in conjunction with Art. 7 GDPR).

Google is contractually bound by a data processing agreement. You may prevent the storage of Google Analytics cookies by configuring your browser settings. You may also install a browser plug-in available here:
http://tools.google.com/dlpage/gaoptout?hl=en.

When using a tablet or smartphone, you may also click on this link to set an opt-out cookie. If the cookie is deleted, the link must be clicked again.

4.2.2 Use of SalesViewer® Technology

We use SalesViewer® technology from SalesViewer® GmbH on this website on the basis of legitimate interests (Art. 6 (1)(f) GDPR) for marketing, market research and optimization purposes.

A JavaScript-based code collects company-related data, which is then encrypted via one-way hashing. The data are pseudonymized and not used to identify visitors personally.

Stored data are deleted once they are no longer necessary, unless legal retention obligations apply.

You can object to this data collection and storage at any time with effect for the future by clicking this link: https://www.salesviewer.com/opt-out. An opt-out cookie will then be placed in your browser.

4.3 Contact via E-Mail, Processing of Prospect Data

When you contact us by e-mail, we usually receive:

your e-mail address,
first and last name,
phone number,
your request.

The legal basis is Art. 6 (1)(b) GDPR, since we cannot respond to your request without such data. If your message expresses interest in our services, we process your data as prospect data in our CRM system, based on Art. 6 (1)(f) GDPR. We have a legitimate interest in maintaining contact with prospects.

4.4 Newsletter Registration

If you sign up for our newsletter, we require your e-mail address. For personalization, we also ask for your name (you may provide a nickname or pseudonym).

We also collect statistics on newsletter opens and link clicks to understand which content is of interest. The legal basis is your consent under Art. 6 (1)(a) GDPR.

Consent is obtained through a double opt-in procedure. Your registration and confirmation (including IP and timestamps) are logged to prove consent. This processing is based on Art. 6 (1)(f) GDPR (legitimate interest in evidence of consent).

4.5 Data Processing for Whitepapers, Studies, Events or Webinars (Download Material)

4.5.1 Contract for Download Services

We offer downloads such as:

whitepapers, checklists, and studies,
tickets for HR events, including consultations,
access to webinars on HR topics.

In return, you provide us with certain data (see 4.5.2) and permit us to contact you by phone for a Jobspreader demo and by e-mail with further content. The contract is concluded when you enter your data, check the opt-in box, and confirm via the e-mail link (double opt-in).

You may withdraw this consent at any time.

4.5.2 Information on Data Processing for Download Offers

Required data:

name,
first name,
company name,
phone number,
e-mail address.

We use these data to inform you about new content and contact you about demos. Legal basis: Art. 6 (1)(b) GDPR. Further interactions (downloads, webinars, calls, etc.) are recorded in our database, processed based on Art. 6 (1)(f) GDPR (legitimate interest).

4.6 Data Processing in Connection with Social Media Profiles

Wollmilchsau operates profiles on:

We have no influence on how these platforms process your data. Platform providers typically set cookies and may process data outside the EU.

Legal basis: your consent to the platform provider under Art. 6 (1)(a) GDPR.
According to the CJEU, we are joint controllers (Art. 26 GDPR) with the platform operator for insights data. Contracts on joint responsibility exist.

We process pseudonymous insights data under Art. 6 (1)(f) GDPR (legitimate interest in usage statistics).

Further details can be found in each platform’s privacy policy.

4.7 YouTube Videos

We embed YouTube videos (Google Ireland Ltd.) using the “extended data protection mode.” Only when you click a preview image are further YouTube contents loaded. If you are logged into Google, your activity is linked to your account.

Legal basis: your consent (Art. 6 (1)(a) GDPR). Please note that data may be transferred outside the EU, in particular to the USA.

5. Data Processing in the Context of Recruitment Processes

5.1 Candidate Data from Active Recruitment Processes

Wollmilchsau GmbH also conducts active sourcing, i.e., searching in networks, forums, and other publicly available online sources for potential employees. Processed data include:

names,
professional qualifications,
e-mail addresses,
social media accounts/links,
phone numbers.

Legal basis: Art. 6 (1)(f) GDPR. For special categories of data: Art. 9 (2)(e) GDPR. Only publicly available social data are processed.

If candidates are not contacted, their data are deleted after six months (section 7). Notification under Art. 14 (5)(b) GDPR is waived due to disproportionate effort.

5.2 Candidate Data from Applications

If you apply to us or consent to further processing after contact, we process:

contact details,
CV data,
certificates and references,
documentation from interviews and notes.

Legal basis: Art. 88 GDPR in conjunction with § 26 BDSG (German Federal Data Protection Act).

6. Purpose Limitation, Data Recipients, Disclosure

We process all data solely for the purposes described. Recipients may include IT development, hosting providers, CRM system providers, and office software providers, all bound by data processing agreements or EU Standard Contractual Clauses. Data are not disclosed beyond this without your explicit consent, except where legally required.

7. Duration of Processing, Deletion of Data

7.1 Website Use

IP addresses are anonymized immediately. Google Analytics data are deleted after 14 months.

7.2 E-Mail Contact

Data are deleted after handling your request unless they qualify as prospect data (7.3).

7.3 Prospect Data

Deleted two years after the last contact point, unless commercial law (§ 257 HGB) requires retention. In that case, data are restricted until expiry. In practice, data may be deleted after six years.

7.4 Newsletter

Data are stored while you are subscribed. Upon unsubscribing, your data are deleted except for proof of consent, which we retain for three years.

7.5 Recruitment

7.5.1 Active Sourcing

Candidate data deleted six months after sourcing unless consent for longer retention exists.

7.5.2 Applications

Applicant data are deleted eight months after the hired candidate’s start date (due to the six-month probationary period). Longer retention requires consent.

8. Data Subject Rights

You have the following rights at any time:

right of access (Art. 15 GDPR),
right to rectification, restriction, or erasure (Arts. 16–18 GDPR),
right to data portability (Art. 20 GDPR),
right to object to processing (Art. 21 GDPR),
right to withdraw consent (Art. 7 GDPR),
right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Please contact us at datenschutz@wollmilchsau.de or our Data Protection Officer.

9. Data Protection Officer

ANMATHO AG
Winterhuder Weg 82
22085 Hamburg

Phone: +49 (0)40 229 47 19-0
E-Mail: datenschutz@wollmilchsau.de