Professional Documents
Culture Documents
StepStone-Datenschutzerklärung DE
StepStone-Datenschutzerklärung DE
Below we will inform you about the processing of personal data in connection with the services we
offer on www.stepstone.de or other websites or apps (hereinafter collectively referred to as
“platforms”) that incorporate this data protection declaration.
Page 1 of 16
Machine Translated by Google
A. General part
In this section we will explain to you what personal data is and who is responsible for processing
it.
Page 2 of 16
Machine Translated by Google
4.4.Transmission to partners
Partners promote our platforms on their websites and generate so-called traffic for us. This
means that they make you aware of our platforms and direct you to them. Please also refer to
their privacy policy to find out how your personal data is processed by our partners.
There is an adequacy decision from the European Commission or we have concluded standard
contractual clauses with the recipients.
Page 3 of 16
Machine Translated by Google
To enforce your rights as a data subject, you can contact us at any time
Contact the person responsible for data protection:
Völklinger Str. 1
40219 Düsseldorf
datenschutz@stepstone.de
The responsible supervisory authority for Stepstone is the State Commissioner for Data Protection
of North Rhine-Westphalia.
7. Competitions
If Stepstone organizes competitions, the data protection declaration enclosed with the
respective competition applies.
As a rule, personal data is processed as follows:
Purpose of
Data categorically Legal basis Retention period
processing
14 days or as in the respective
Participation in and Article 6(1) b)
Contact details and
Implementation of the GDPR,
Name Data protection
competition (fulfillment of contract)
specified
Article 6(1) b)
14 days or as in the respective
GDPR,
Contact details,
Transfer of prizes (Fulfillment of the contract
Address details Data protection declaration
for the
stated
invoicing)
8. Surveys
From time to time, Stepstone conducts market research surveys. To do this, we will contact you,
either because you have registered to take part in such surveys or because they are directly related
to our service. In the surveys, your opinion on a specific topic is asked and documented without
any further personal data being collected.
Page 4 of 16
Machine Translated by Google
In particular, free text fields should not be filled with personal data, as this will never be necessary
for surveys and is not intended by Stepstone.
If personal data is processed by Stepstone during a survey, such as images and sound
recordings, your consent will always be obtained at the beginning of the survey. We analyze the
survey results anonymously.
Purpose of
Data categorically Legal basis Retention period
processing
As long as the
Contact for Article 6(1) a)
Email-Address, contract exists or that
Market research and GDPR, (consent),
telephone number, Consent is revoked.
customer satisfaction Article 6(1) b)
Name
Survey GDPR, (contract)
Image and
Image and
sound recordings, Article 6(1) a) No later than 12 months
Sound recordings in
Contents of the GDPR, (consent) after admission
Survey framework
Opinion poll
You can create a user account and a profile so that you can apply for job advertisements,
provided that the Stepstone customer has intended to apply via the platform for the respective
job advertisement and so that you can use other of our services. You can create a user account
by providing us with your email address and creating a password for your account. Or you can
log in to us with your account from a social login provider, such as Facebook, Google or Apple
and create a customer account. The social login provider Stepstone authenticates you without
your login data being transmitted to us.
If you upload attachments or create a resume using our resume generator to complete your
profile, we analyze their content and structure in an automated process and use this analysis to
improve the services we offer you. If you enter information into an application form or attach new
attachments that are not already included in your user profile during an application process, we
will enrich your user profile with this information if fields are provided for this purpose.
Page 5 of 16
Machine Translated by Google
You can choose between two profile settings: Your profile can be visible or not visible (applicant profile). By default, your
applicant profile will be for customers
being visible. You can change this feature at any time in your settings. If your profile is set to “visible”, parts of your profile
will be visible to Stepstone customers. Stepstone can also suggest your applicant profile to its customers if your profile
matches their advertised job description. Customers can contact you via email or via the platform if they find your
candidate profile appealing.
If you apply for a job advertisement using your profile, we will either, depending on the Stepstone customer's choice, i)
save your application in the respective customer's customer center on the Stepstone platform so that the customer can
access it there, or ii) Submit your application directly to the Stepstone customer's applicant management system. If we
save the application in the customer center (i)), the Stepstone customer to whom you applied can view your applicant
profile. If you pause your application, we will save your progress to your profile so you can continue working on it later.
We will remind you of your interrupted application by email and delete it if you do not finalize it promptly. We store
submitted applications in an application history
You can also apply for code ads on our platform. A code advertisement is a job advertisement in which a customer is not
named.
If you respond to a job advertisement with a code, we will forward your application including the cover letter and all the
data it contains to the customer
this cipher continues. If the customer finds your application appealing, they will contact you via us or their own
communication channels.
Stepstone will inform you about the status of your submitted application, provided that Stepstone status information is
available. Status information is information about the status of your application to the Stepstone customer and includes
the receipt, processing of your application to the Stepstone customer or a rejection.
We can only show you status information if the Stepstone customer contacts us
provides this information or the customer uses the Stepstone customer center. If your application is rejected by a customer
or if the customer marks you as “hired”, we will inform you of this with a time delay (up to 4 weeks) in order to give the
customer the opportunity to personally reject or accept your application and, if necessary, to do so to comply with legal
requirements for cancellation.
Page 6 of 16
Machine Translated by Google
We use data you provide to recommend job recommendations tailored to your needs on our
platforms or to send you notifications based on your profile data. We also store all data that we
have collected about you during your stay on the platform, such as analytical data about you
and your user behavior. These will also be linked to your profile in order to be able to offer you
our service in accordance with the terms of use. We may also use your profile data to create
forms for
to automatically fill in other services that we offer you on our platforms and that can be linked to
the user profile when you use them. We also use the information stored in your profile to improve
your search experience and make your application process more efficient. We also store
analytical data about you and your user behavior, together with a pseudonymous user ID, in an
analytical database, whereby you are not identifiable. We anonymize and pseudonymize the
data contained in your profile and the data we collect about your usage behavior in order to
create statistical models and improve our services.
Purpose of
Data categorically Legal basis Retention period
processing
Email-Address,
Name, (desired
)Location,
Article 6(1) b)
Creation and Mobile number,
GDPR, yours As long as your
Management of the CV data,
User agreement with account exists
user account (desired) salary,
us
(desired) title,
Attachments to
CV
creation of a Article 6(1) b)
Email-Address,
User account via GDPR, yours As long as your
Name (if
a social login User agreement with account exists
available)
Provider us
Language settings for the Article 6(1) b)
German or GDPR, yours As long as your
communication and English language User agreement with account exists
Mode of presentation us
Enable you to
appear Contact details, Article 6(1) b)
professional and present CV data, GDPR, yours As long as your
yourself to potential people Attachments User agreement with account exists
present to with related data us
employers
Article 6(1) b)
Matching with
GDPR, yours As long as your account
suitable jobs and
contact details User contract with us, exists or the
connecting them with
Place of residence Article 6 paragraph 1 a) Consent is
potential ones
GDPR, revoked.
employers
consent
Page 7 of 16
Machine Translated by Google
Article 6(1) b)
contact
by recruiters or contact details
GDPR, yours As long as your
User agreement with account exists
Stepstone
us
Profile added.
Canceled applications Article 6(1) b)
Data that you have
will be in your profile GDPR, your Until you get yours
in your at this time
usage contract with us, Application completed
saved and send you a Article 6 Paragraph 1 c) 2 days after
Application document
reminder in conjunction with Art. 5 Reminder email
en specified
GDPR, data minimization
E-mail,
Application form will be Article 6(1) b)
First and Last Name, As long as your account
submitted within GDPR, yours
telephone number, exists, but no later than after
Your profile is saved in an User agreement with
Application document 2 years
application history. us
in,
General Information:
Name, E-Mail,
telephone number,
Address,
creation of a Article 6(1) b)
Birth date,
CV with the GDPR, yours As long as your
Place of birth,
CV- User agreement with account exists
desired
Generator us
job title, photo;
Work experience:
job title,
company name,
Page 8 of 16
Machine Translated by Google
Location,
Job Description,
start and end date;
Education:
Diploma,
educational institution,
location, area of expertise,
senior year;
Skills:
Languages
Optional information:
Driving licence,
Hobbies
Snapshots in C3PO,
Snapshots are used to
understand how Article 6(1) b)
Contents of the profile in
your GDPR, yours
specific time when a
User agreement with max. 2 years
snapshot was created.
Profile has changed us
and compare your information
for analytical purposes
You have the option to register for notifications to keep you informed about the products and
services on our platforms. You can unsubscribe from receiving these communications at any
time. If you no longer wish to receive our email communications, please click on the
“unsubscribe” link located in
Page 9 of 16
Machine Translated by Google
Any of these types of notifications can be found, or you can contact us at info@stepstone.de. You
can also view changed settings in your user account if you have registered for a user account.
We may also send you notifications about related goods and services if you register for our
Services. On this possibility
We will inform you when we collect your contact details. You can opt out of receiving these
notifications at any time. We'll let you know about yours
Right to object when we collect your email address and also in the relevant notifications. If you no
longer wish to receive our email communications, please click on the “unsubscribe” link found in
each of these types of communications or you can contact us at info@stepstone.de. You can also
view changed settings in your user account if you have registered for a user account.
If you do not have a user account with a user profile with us, we will create a technical account at
the email address you provided to manage your notification settings. No profile will be created for
you.
When you receive an email from us, your email provider will ask you the first time whether you
want to download the images included in the email. Whenever images are downloaded, a
corresponding request is made to our server and we know who made this request and at what time.
Purpose of
Data categorically Legal basis Retention period
processing
Sending suitable As long as your account
ones Email-Address,
Article 6(1) a) exists or until you
Job offers for which you User_ID
GDPR, (consent) revoke your consent
have registered User behavior
Evaluation of
User behavior for Article 6(1f)
E-Mail-Adresse, User
the relevance of the e- GDPR, our As long as your
ID, time of
Mail content and legitimate account exists
Downloads
Segmentation of Interest
users
Page 10 of 16
Machine Translated by Google
Purpose of
Data categorically Legal basis Retention period
processing
Generating one Contents of yours Article 6(1) a) Until the document is
Cover letter for
CV GDPR, consent generated
your purposes
4. Salary planner
Stepstone offers a salary planner with which you can find out within which salary range your
salary is compared to other employees with similar parameters. To create your salary planner,
Stepstone compares the information you enter about your current professional situation with data
from other users. The creation of the salary planner is anonymous and we record your information
in a statistical database. If you log in to your user account after completing the salary planner,
register or are logged in during the filling process, we will link your salary planner to your account
and only then will a personal reference be established. You can view your salary planner at any
time in your account. If you want to change data on your salary planner, you have to fill out the
form again and only the new salary planner will be linked to your account.
Purpose of
Data categorically Legal basis Retention period
processing
Employment status
, weekly working hours,
Gross income
(including
bonuses), salary satisfaction
(optional), title,
Workplace, Article 6(1) b)
Linking the
Experience, GDPR, yours As long as your
Salary reports with your
Leadership responsibility User agreement with account exists.
user account
of, Industry, us
size,
Length of service
t, year of birth
(optional),
Gender (optional)
Page 11 of 16
Machine Translated by Google
• Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland),
https://policies.google.com/privacy?hl=de&gl=de
• YouTube Video (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland),
https://www.youtube.com/howyoutubeworks/user-settings/privacy/
• Meta Videos (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Irland), https://de-
de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
Purpose of
Data categorically Legal basis Retention period
processing
4 years after
Support about that contact details, name, Article 6(1) a)
emergence of
contact form Message content GDPR, (consent)
Ticks
1. Lead generation
We may learn from our customers, third parties, or publications of any kind that a customer may
have a need for our products and services (“lead”). We will store business contact information
(e.g. business email address or fax number), which may be personal, as well as company
information
stored in our customer management system (“CRM system”) and contact customers to determine
their needs.
Page 12 of 16
Machine Translated by Google
Purpose of
Data categorically Legal basis Retention period
processing
Article 6(1) a)
GDPR, If the purpose
Business contact data (Consent), Article disappears or one
Customer acquisition
in 6 paragraph 1 f) GDPR, consent given is revoked.
(legitimate
Interest)
2. Conclusion of a contract
When a company enters into a contract with us, we create a customer account in our CRM system for that company and
become the business contact details
stored in the customer account by the customer's contact person. If a customer account already exists, the business
contact details of the contact person may be used.
updated.
Purpose of
Data categorically Legal basis Retention period
processing
Business contact data If the purpose
Implementation of the in
Article 6(1) b)
disappears or one
service and GDPR,
Deletion is requested.
Customer management (fulfillment of contract)
Recruiters must first register in the customer center with their business email address in order to create job advertisements
and manage applications. To secure access to the customer center, authentication via our authorization platform is
necessary. For this purpose, further business contact details, such as the telephone number, are processed.
The user behavior of the recruiters within the customer center, such as creating job advertisements and processing
applications, is processed in order to be able to provide the service.
If recruiters want to organize job interviews with candidates, they can use the appointment planner in the customer center.
The recruiters can link one or more of their calendars to the appointment planner.
Stepstone can display the titles of appointments from the recruiters' linked calendars. These titles may also contain
personal data, but will not be further processed by Stepstone. Stepstone will only process the appointments that recruiters
store in the customer center’s appointment planner.
Page 13 of 16
Machine Translated by Google
Recruiters can send applications to third parties for their own purposes, so that Stepstone also
processes the recipients' personal data in this context.
Purpose of
Data categorically Legal basis Retention period
processing
If the purpose
Business contact data Article 6(1) b)
Registration on the disappears or one
and, Industry, GDPR,
Customer platform Deletion is requested
Company size (fulfillment of contract)
If the purpose
Implementation of the Article 6(1) b)
Business contact data disappears or one
service and GDPR,
in Deletion is requested
Customer management (fulfillment of contract)
Article 6(1) b)
GDPR,
If the purpose
(fulfillment of contract),
Business contact data disappears or one
Authentication Article 6(1f)
in Deletion is requested
GDPR,
(authorized
Interest)
If the purpose
Scheduling in Appointment title Article 6(1) a) disappears or one
Customer Center The calendar GDPR, (consent) Deletion is requested
If our customers also publish company portraits on our platform, we process personal data of the
customer's employees if customers provide business contact details or photos of their employees
in the company portrait.
Purpose of
Data categorically Legal basis Retention period
processing
Deposit of the Article 6(1) b)
Duration of
Contact details in one Business contact data GDPR,
Publication of the
Job advertisement or en and photograph (fulfillment of contract)
job ad
company portrait
5. Video interviews
The Video Interview Service enables customers to a) create customized pre-written interviews
and/or b) conduct live interviews (“Video Interview”). As part of the video recording, the recruiters'
personal data is also processed, in particular images. And audio recordings, as well as information
that recruiters reveal about themselves. Stepstone does not evaluate the content of the interviews.
Page 14 of 16
Machine Translated by Google
Purpose of
Data categorically Legal basis Retention period
processing
Article 6(1) b)
Implementation of Image and
GDPR, 180 Roofs
Video interviews Sound recordings
(fulfillment of contract)
6 Notifications
Recruiters can subscribe to notifications about suitable candidates.
Customers can register for notifications to find out about the products and services on our
platforms. Customers can unsubscribe from receiving these notifications at any time. If customers
no longer wish to receive our email communications, they can click on the “unsubscribe” link
found in each of these types of notifications or contact us at info@stepstone.de.
We may also provide customers with notifications about similar goods and services when
customers register for our services.
Customers will be informed of this possibility when their contact details are collected.
You can object to receiving these Stepstone notifications at any time.
We inform customers about their right to object when we collect the customer's contact details and
also in the relevant notifications. If customers no longer wish to receive our email communications,
they can click on the “unsubscribe” link found in each of these types of notifications or contact us
at info@stepstone.de.
When customers receive emails from us, the email provider will ask the first time whether they
want to download the images included in the email. Whenever images are downloaded, a
corresponding request is made to our server and we know who made this request and at what
time. The same applies if a link in the email is clicked.
Purpose of
Data categorically Legal basis Retention period
processing
Sending from Business email As long as an
Notifications you opt-in Address, Article 6(1) a) account exists or you
for Business GDPR, (consent) revoke your consent
registered mobile number
Article 6(1f)
Business email As long as an
Similar Merchandise GDPR,
Address, account exists or that
Notifications (legitimate interest)
Business receipt is objected to
and services in conjunction with
mobile number
Section 7 Paragraph 3 UWG
Evaluation of Article 6(1f)
E-Mail-Adresse, User As long as a contract
User behavior for GDPR, our
ID, time of exists or after
the relevance of the e- legitimate
Downloads Loss of purpose
Mail content and interest
Page 15 of 16
Machine Translated by Google
Segmentation of
users
7. Webinars
We offer live webinars via our platform, i.e. online seminars on the services and products we
offer as well as various key topics from the labor market. In order to take part in a webinar, you
must register in advance.
Purpose of
Data categorically Legal basis Retention period
processing
Article 6(1) b)
Implementation of the Business contact data
GDPR, After loss of purpose
Webinars and, Name
(fulfillment of contract)
Post-communication
Satisfaction analysis
e of the webinar on Business contact data Article 6(1) a) After loss of purpose
Customers have the option of reaching us by email, chat, telephone, fax or using the contact
form on our platform.
Purpose of
Data categorically Legal basis Retention period
processing
Business contact data
Customer support via Article 6(1) a)
and, Name, After loss of purpose
the contact form GDPR, (consent)
Message content
Business contact data
More general and, Name, Article 6(1) a)
After loss of purpose
Customer Support Message content GDPR, (consent)
Stand: 24.08.2023
Page 16 of 16