Thank you for visiting our website. The protection and confidentiality of your data is of great importance to Stepstone.
In the following, we inform you about the processing of personal data in connection with the services that we offer on www.stepstone.de or other websites or apps (hereinafter collectively referred to as “platforms”) that incorporate this privacy policy.
1. What is personal data?
2. Responsible body for the processing of your personal data
3. Contact details of the person responsible for data protection
4. Recipients or categories of recipients of personal data
4.1. Transfer to group companies
4.2. Transmission to service providers
5. Transfers of data to countries outside the EU or the EEA
6. Rights of the data subject
7. Data processing
1. What is personal data?
According to Article 4 (1) of the General Data Protection Regulation (“GDPR”), personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier. You can also be identified by one or more special characteristics that are an expression of your physical, physiological, genetic, psychological, economic, cultural or social identity.
2. Responsible body for the processing of your personal data
The responsible body (hereinafter referred to as “Stepstone” or “we”) within the meaning of the General Data Protection Regulation is:
The Stepstone Group EMEA GmbH
Völklinger Straße 1
40219 Düsseldorf
Germany
Phone: +49 211 93493-0
E-mail: info@stepstone.de
3. Contact details of the person responsible for data protection
You can reach our person in charge of data protection using the following contact details:
The Stepstone Group EMEA GmbH
Völklinger Straße 1
40219 Düsseldorf
Phone: 0211 93493-0
E-Mail: datenschutz@stepstone.de
4. Recipients or categories of recipients of personal data
Taking into account the legal requirements, we may pass on personal data to third parties that have already been processed or will be processed after their transfer to third parties. In the following, we will give you the categories of recipients of your personal data.
4.1. Transfer to group companies
In order to enable our services, your data will be processed by companies of the Stepstone Group. This applies, for example, to ensuring security requirements in the context of the use of our platforms (including hosting, backups and web application firewall). This may also include customer service services, such as assistance for the customer account or support with information for users.
4.2. Transmission to service providers
We use third-party service providers to provide services related to the operation of our platforms, as well as to improve our platforms, services, products and features, to protect you and your data, and to tailor the products to your job search needs.
5. Transfers of data to countries outside the EU or the EEA
In certain cases, we may transfer personal data to a country outside the EU or the EEA (so-called third countries). This may be the case if you are applying for a job and the job provider is based in a third country, or if the recipient of the data (see section 4) is based outside the EU or EEA. In any case, we comply with the legal requirements and a transfer takes place in accordance with these requirements, e.g. if there is an adequacy decision by the European Commission or if we have concluded standard contractual clauses with the recipients.
6. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the rights under Articles 12 et seq. GDPR vis-à-vis the responsible body. These rights include, but are not limited to, the right of access, the right to rectification, the right to restriction of processing, the right to erasure, the right to data portability, the right to object, the right to revoke the declaration of consent under data protection law, the right to non-automated decision-making in individual cases, including profiling, and the right to lodge a complaint with a supervisory authority. You can find more information in the GDPR.
To enforce your rights as a data subject, you can contact our data protection officer at any time:
The Stepstone Group EMEA GmbH
Data Protection
Völklinger Str. 1
40219 Düsseldorf
E-Mail: datenschutz@stepstone.de
The competent supervisory authority for Stepstone is the North Rhine-Westphalia State Commissioner for Data Protection.
7. Data processing
We process your data, if you need support or more information on application programming interfaces (API) and wish to integrate them into your platform or services. To this end, you can reach us by e-mail or via the contact form on our platform.
| Purpose of the processing | Data Category | Legal basis | Retention Period |
|---|---|---|---|
| Customer support via the contact form | Business contact details, first name, last name, business phone number and email, name and email of contact person at stepstone, name and business contact details of contact person responsible for the software, name and business contact details of contact person recruiting, additional notes | Article 6 (1) (a) GDPR, (consent) | After discontinuation of purpose |
| General Customer Support via email | Business contact details, Name, Nachrichteninhalt | Article 6 (1) (a) GDPR, (consent) | After discontinuation of purpose |