Skip to content

Privacy Policy of Zum goldenen Hirschen Holding GmbH

The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we would like to inform you,

  • When and for which actions we process data
  • Which data we process and why
  • Who receives data
  • What rights you have in relation to our data processing

This privacy policy governs the use of personal data on our website www.hirschen.com, including the subpages and the social media offerings listed below. When you leave our website via a link, you also leave the scope of this privacy policy.

You can access, print or download this policy permanently and at any time at https://hirschen.com/privacy.

1. Contact information

The controller responsible for data processing on this website  within the meaning of the General Data Protection Regulation (GDPR) is:

Zum goldenen Hirschen Holding GmbH
Schlesische Str. 26
10997 Berlin
Telefon: +49 (0)30 61002 0
Fax: +49 (0)30 61002 555
E-Mail: berlin@hirschen.de

We have also appointed a data protection officer. You can reach him at:

Data Protection Officer of Zum goldenen Hirschen GmbH
c/o Hirschen Group Hub GmbH
Ludwigstr. 4
20357 Hamburg
datenschutz@hirschen-group.com

2. General information on data processing

2.1 Scope of the processing of personal data

The provision of the website requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data. You are not obliged to provide us with personal data. However, if the provision of this data is technically mandatory when you visit our website, you will not be able to access and use our website if you refuse to do so.

As a visitor to our website, you are not subject to automated decision-making within the meaning of Art. 22 GDPR.

2.2 Legal basis for the processing or personal data

The legal bases for the processing or personal data are set out below.

Reason of processing

Legal basis in the GDPR

Explanation

Contract fulfillment or implementation of pre-contractual measures

Art. 6 sec. 1 b)

Processing only takes place to the extent necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, we only process data to this extent.

Legitimate interest

Art. 6 sec. 1 f)

Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this privacy policy as part of the processing description.

Consent

Art. 6 sec. 1 a)

Processing takes place if you have expressly consented to the type and scope of data processing. You can withdraw your consent at any time with effect for the future. However, this will not affect the processing that has taken place up to this point in time.

Legal obligation

Art. 6 sec. 1 c)

Processing takes place insofar as this is necessary to fulfill German or European legal obligations.

2.3 Data erasure and storage duration

We delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases may also exist in parallel or a new legal basis may apply when a legal basis ceases to exist, such as the obligation to store certain data to fulfill a statutory retention obligation. With regard to the storage and deletion of data by the social media providers, we only have the information that is mentioned in the respective privacy policy.

3. Data processing for the provision of the website

In order for us to display the website to you, it is necessary to process certain information. This already takes place when you access our website. In addition, we offer various functions on our website that require further data processing.

3.1 Log Files

When you visit our website, your browser sends various pieces of information, so-called server log files, to our server. We need these to establish and maintain the connection. The data also includes your IP address, which we treat as personal data. The following data is also collected:

  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source / reference from which you reached the page
  • Browser used / version
  • Information on whether the retrieval was successful or unsuccessful

These data are not merged with other data about you. The processing of log files including your IP address serves the legitimate interest of providing our website, diagnosing errors and preventing their misuse. Stored log files and IP addresses are deleted from the web servers after 7 days at the latest and from the backup after up to 14 days, unless longer storage is necessary, for example to prevent or clarify an attack on our website.

3.2 Cookies

We use cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. Cookies may be required to establish a connection or to improve the use of the website.

When you visit our website for the first time, you will be shown a banner that allows you to consent to the use of cookies. You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

Technically necessary cookies are absolutely essential, as the website cannot function without them and are used on the basis of our legitimate interest in a functioning website.

The cookies used and their storage period can be found in the following overview.

Cookie

Duration

Purpose

CookieConsent

1 year

Saves the user’s consent status for cookies.

mtm_consent_removed

Session

Saves the user’s consent status for cookies.

wp-wpml_current_language

Session

Designates the country code that is calculated based on the user’s IP address. Used to determine which language should be used for users.

files_count_files

Persistent

Records the number of files uploaded as part of the application process.

_pk_id#

1 year

Records statistics about the user’s visits to the website, such as the number of visits, average time spent on the website and which pages were read.

_pk_ses#

1 day

Is used by Matomo to track the visitor’s page views during the session.

last_result_entry_key

Session

Used to track user interaction with embedded content.

Logsdatabasev2:v#IIlogsrequestsstore

Persistent

Saves the user settings when accessing a YouTube video integrated on other websites

Remote_sid

Session

Necessary for the implementation and functionality of YouTube video content on the website.

TESTCOOKIESENABLED

 1 day

Used to track user interaction with embedded content.

VISITOR_INFO1_LIVE

180 days

YouTube sets the cookie to calculate the user’s bandwidth.

VISITOR_PRIVACY_METADATA

180 days

Saves the user’s consent status for cookies on the current domain.

YSC

Session

Saves the user settings when accessing a YouTube video integrated on other websites

YtIdbMeta#databases

Persistent

Used to track user interaction with embedded content.

yt-remote-cast-installed

Session

Saves the user settings when accessing a YouTube video integrated on other websites

yt-remote-connected-devices

Persistent

Saves the user settings when accessing a YouTube video integrated on other websites

yt-remote-device-id

Persistent

Saves the user settings when accessing a YouTube video integrated on other websites

yt-remote-fast-check-period

Session

Saves the user settings when accessing a YouTube video integrated on other websites

yt-remote-session-app

Session

Saves the user settings when accessing a YouTube video integrated on other websites

yt-remote-session-name

Session

Saves the user settings when accessing a YouTube video integrated on other websites

3.3 Usage analysis and tracking

We would like to further improve the usability of this website and the attractiveness of our services and learn more about how website visitors interact with our website. For this reason, we also collect data about usage behavior when you visit our website, which we evaluate for this purpose. For this purpose, we use the Matomo program, which we operate in its on-premise version.

3.4 WordPress-Plugins

We currently use the following Word Press plugins to create, adapt and further develop the website.

WordPress-Plugin

Purpose

Advance Custom Fields Pro

Creation and management of user-defined fields in the back end of the website.

Contact Form 7

Creation and management of contact forms on the website.

4. Links / sharing contributions

On our website you will find links to the following networks and the option to share posts on these networks. If you have an account there and wish to prevent your account from being linked to your visit to this website, you should log out of your account before visiting our site or refrain from sharing posts.

Facebook / Instagram

Our website contains a link to the social media networks Facebook and Instagram. Facebook and Instagram are services of Meta Platforms Inc, One Hacker Way, Menlo Park, CA 94025, USA. The controller in Europe is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The corresponding buttons are recognizable by the Facebook and Instagram logo.

You can find Meta’s privacy policy here: http://www.facebook.com/policy.php and https://help.instagram.com/519522125107875.

LinkedIn

Our website contains a link to LinkedIn, a service of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Responsible in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland. The corresponding button is recognizable by the LinkedIn logo.

You can find LinkedIn’s privacy policy here: https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy.

5. Contact via contact form, electronic mail or social media.

You can send us an inquiry at any time using the email addresses provided on this website or on our social media channels. If you send us electronic mail via these channels, the data contained in your message will be processed depending on the purpose of the message.

We use this data exclusively for the purpose of responding to your inquiry and the associated communication. The legal basis for this processing of your data depends on the content of your request. In principle, our legitimate interest in providing the contact functionality and responding to your request transmitted via it applies here. If your request is aimed at the conclusion of a contract with us, the processing takes place within the framework of this contractual obligation.

Your data will be deleted as soon as your request has been finally processed. If a contract is concluded, we may process the data further to fulfill the contract.

6. Social Media appearances

We operate our own presences on various social media networks in order to draw attention to us and our offers and to offer you another means of communication, which also represents our legitimate interests. In general, the use of social media services is always associated with the processing of personal data, as the social media networks themselves collect and process such data about their users. We, as the site operator, receive aggregated data (“insight data”) from the networks with which we can analyze the reach of our company’s presence. For example, we can see which regions or age ranges (e.g. 20-40 years) our visitors come from. We have no influence on what data the networks collect and how they process it. We only have the information on data that is also listed in the aforementioned data protection guidelines.

The processing of this reach data is partly carried out as part of a joint responsibility. We have compiled some information below to provide you with further details on data processing by the respective networks.

We and our affiliated companies (Zum goldenen Hirschen Berlin GmbH, Zum goldenen Hirschen Hamburg GmbH, Zum goldenen Hirschen Köln GmbH, Zum goldenen Hirschen München GmbH, Zum goldenen Hirschen Stuttgart GmbH, Zum goldenen Hirschen Valley GmbH and Zum goldenen Hirschen Wien GmbH) are responsible for the management and use of the social media accounts.

Please bear in mind that when using social media services, data may also be processed outside the European Union or the European Economic Area and that the level of data protection there is not always the same as in the EU. In addition, social media providers generally also process the data of their users / members for market research and advertising purposes and combine this with data from other sources in order to create a user profile. Whether and to what extent a transfer takes place is beyond our knowledge. Our level of knowledge is similar to the information published in the providers’ privacy policies. The networks themselves can assign your visit to our offers to your user profile if you are logged in at the time of your visit. If you wish to avoid this, please log out beforehand.

Details of our current social media presence can be found below.

Facebook / Instagram

Facebook and Instagram are services of Meta Platforms Inc, One Hacker Way, Menlo Park, CA 94025, USA. The controller in Europe is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. There is joint responsibility between Meta and us with regard to the collection of personal data, the essential content of which Meta informs you about in the „Page-Controller-Addendum.

Data processing is generally carried out on the basis of our legitimate interests or consent, e.g. when participating in a competition or survey conducted by us.

Information Facebook / Instagram

Privacy Policy Facebook

Privacy Policy Instagram

Information related to Page Insights Facebook

Information related to Page Insights Instagram

Page-Controller-Addendum

Form „Manage your data“

Contakt Data Protection Officer Facebook

LinkedIn

LinkedIn is a service of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. The controller in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland. LinkedIn and we are jointly responsible for the collection of personal data, the main content of which LinkedIn informs you about in the “Pages Joint Controller Addendum”.

Data processing is generally carried out on the basis of our legitimate interests or consent, e.g. when participating in a competition or survey.

Informationen LinkedIn

Privacy Policy LinkedIn

Pages-Joint-Controller-Addendum

Contact Form „LinkedIn data subject requests“

Contact data protection requests LinkedIn

7. Online-Application

You can apply to Hirschen Group GmbH, to us and to other subsidiaries at any time via the career portal.

An overview of the companies with addresses and contact details can be found here.

The career portal is operated by Hirschen Group GmbH and is also made available to us and the other Hirschen companies for applicant management purposes. In this respect, there is joint responsibility in accordance with Art. 26 EU GDPR.

You can assert your data subject rights listed in section IX. against us using the contact details provided in section I. You are also entitled to assert your rights against Hirschen Group GmbH and the above mentioned subsidiaries.     

For the purpose of applicant management, we require your contact details (surname, first name, address, telephone number, mobile phone number, e-mail), your education data and details of your professional background. Additional personnel master data, such as nationality, marital status/children, your bank details, if applicable, as well as information on skills and, if applicable, further education and training are voluntary information.

We process this data insofar as this is necessary in accordance with Art. 26 of the Federal Data Protection Act (BDSG) to carry out the application process or you have given us your consent in accordance with Art. 6 para. 1 lit. a) EU GDPR. In addition, we may be obliged to process the data on the basis of legal provisions, Art. 6 para. 1 lit. c) EU GDPR.

The data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The database is operated by our service provider Personio GmbH, Rundfunkplatz 4, 80335 Munich. We have concluded an order processing contract with Personio GmbH in accordance with Art. 28 EU GDPR. Further information about Personio GmbH can be found here.

Your data will always be processed by the company to which you apply. In addition, we offer you the opportunity to add your profile to our talent pool in order to identify interesting positions for you in the future. With your consent, the data for filling positions within the Hirschen Group will be processed and stored in our talent pool.

Your data will generally be stored for 6 months. The data in our talent pool is stored for 2 years.

Only authorized persons have access to the stored data to the extent required to carry out applicant management or to comply with legal obligations.

Revocation of your consent

You have the option at any time to withdraw your consent to the processing of your data in writing or in text form without giving reasons to the controller to whom you have applied. You can find the relevant contact details here.

8. Possibility of objection and removal

If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. You can contact datenschutz@hirschen-group.com  at any time to exercise your right of objection or revocation. If you object to processing based on our legitimate interest, we may nevertheless continue the processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

You can find information on how to object from the social media providers in the respective privacy policies and from the providers’ data protection officers. If you still need help, you can contact us.

9. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of Art. 4 (1) GDPR. As a data subject, you have the following rights in relation to your personal data. To exercise these rights, you can contact us using the contact details provided above.

9.1 Right to information in accordance with Art. 15

You have a right to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.

9.2 Right to rectification in accordance with Art. 16 GDPR

You have the right to obtain without undue delay the rectification of inaccurate personal data and the completion of incomplete personal data.

9.3 Right to erasure in accordance with Art. 17 GDPR

You have the right to request the erasure of your personal data if one of the grounds specified in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.

9.4 Right to restriction of processing in accordance with Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data if one of the reasons stated in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.

9.5 Right to data portability pursuant to Art. 20 GDPR

You have the right to receive all personal data we have stored about you in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from the controller to which the personal data has been provided.

9.6 Right to lodge a complaint with the competent supervisory authority, Art. 77 GDPR

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority responsible for you.

10. Recipients of data

The processing of your personal data within the framework of the website is also carried out in part by processors and affiliated companies. Unless otherwise stated in this privacy policy, they are involved exclusively on the basis of an agreement on order processing in accordance with Art. 28 para. 3 GDPR.

11. Data transfer to third countries

The personal data that we collect from you on the website will not be transferred to third countries outside the European Economic Area. For information regarding the transfer of personal data that we collect from you in the context of social media presences, please refer to section “VI. Social media presences”.

As of May 2024