Transparency Notice
Applicant management
Collection of data from data subject (Article 13 GDPR)
Controller and representative | INSITE-Interventions GmbH Clemensstraße 10-12 60487 Frankfurt am Main
Phone: +49 69 90555 29 0 Email: office@insite.de
|
Data Protection Officer | Ms Deborah Schütt
|
Purposes and legal basis | Selecting applicants for advertised position and managing unsolicited applications, Sec. 26(1) BDSG (new)
|
Categories of data | We process data relating to your application. This may be general data concerning your person (such as your name, address and contact details), information concerning your professional qualifications and education, information concerning continued professional development, or other information which you provide to us in connection with your application. We may also process professional information which you have made publicly available, such as a profile on professional social media platforms.
|
Legitimate interests | Not applicable because processing is not performed on the basis of a legitimate interest.
|
Recipients or categories of recipients | External: IT service providers in the context of IT maintenance
|
Transfers to third countries | We do not undertake any transfers of personal data, nor do we plan to.
|
Storage periods | 6 months after negative outcome, otherwise added to HR files
|
Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20) | Data subjects can enforce the following rights against the controller: Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20)
|
Withdrawing consent | Not applicable since data processing is not based on consent.
|
Right to lodge a complaint | You may lodge complaints regarding data protection with the relevant supervisory authority. The relevant supervisory body is
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Phone: +49 611 1408 - 0 Fax: +49 611 1408 - 900 Email: poststelle@datenschutz.hessen.de https://datenschutz.hessen.de/
|
Obligation to provide data | You are under no legal or contractual obligation to provide personal data.
|
Automated decision-making | Not applicable because automated decision-making is not used.
|
Applicant management and cooperation with freelancers
Collection of data from data subject (Article 13 GDPR)
Controller and representative | INSITE-Interventions GmbH Clemensstraße 10-12 60487 Frankfurt am Main
Phone: +49 69 90555 29 0 Email: office@insite.de
|
Data Protection Officer | Ms Deborah Schütt
|
Purposes and legal basis | Selection of suitable freelancers for collaboration on the basis of a cooperation agreement, Sec. 26(1) BDSG (2018)
|
Categories of data | We process data related to your application to or cooperation with INSITE. This may be general data concerning your person (such as your name, address and contact details), information concerning your professional qualifications and education, information concerning continued professional development, or other information which you provide to us in connection with your application or cooperation. We may also process professional information which you have made publicly available, such as a profile on professional social media platforms or your personal website.
|
Legitimate interests | Not applicable because processing is not performed on the basis of a legitimate interest.
|
Recipients or categories of recipients | External: IT service providers in the context of IT maintenance
|
Transfers to third countries | We do not undertake any transfers of personal data, nor do we plan to.
|
Storage periods | 6 months after negative outcome, otherwise added to consultant files
|
Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20) | Data subjects can enforce the following rights against the controller: Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20) |
Withdrawing consent | Not applicable since data processing is not based on consent.
|
Right to lodge a complaint | You may lodge complaints regarding data protection with the relevant supervisory authority. The relevant supervisory body is
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Phone: +49 611 1408 - 0 Fax: +49 611 1408 - 900 Email: poststelle@datenschutz.hessen.de https://datenschutz.hessen.de/
|
Obligation to provide data | You are under no legal or contractual obligation to provide personal data.
|
Automated decision-making | Not applicable because automated decision-making is not used.
|
Newsletter
Collection of data from data subject (Article 13 GDPR)
Controller and representative | INSITE-Interventions GmbH Clemensstraße 10-12 60487 Frankfurt am Main
Phone: +49 69 90555 29 0 Email: office@insite.de
|
Data Protection Officer | Ms Deborah Schütt
|
Purposes and legal basis | Signing up for the newsletter of INSITE-Interventions GmbH; Article 6(1) point (a) GDPR
|
Categories of data | An e-mail address is required; title and surname are optional
|
Legitimate interests | Not applicable because processing is not performed on the basis of a legitimate interest.
|
Recipients or categories of recipients | External: IT service providers in the context of IT maintenance
|
Transfers to third countries | We do not undertake any transfers of personal data, nor do we plan to.
|
Storage periods | Data concerning prospective clients/applicants erased upon objection or upon the limited company being dissolved
|
Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20) | Data subjects can enforce the following rights against the controller: Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20)
|
Withdrawing consent | Consent may be withdrawn at any time for the future.
|
Right to lodge a complaint | You may lodge complaints regarding data protection with the relevant supervisory authority. The relevant supervisory body is
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Phone: +49 611 1408 - 0 Fax: +49 611 1408 - 900 Email: poststelle@datenschutz.hessen.de https://datenschutz.hessen.de/
|
Obligation to provide data | You are under no legal or contractual obligation to provide personal data.
|
Automated decision-making | Not applicable because automated decision-making is not used.
|
Client service/Documentation system/Care management
Collection of data from data subject (Article 13 GDPR)
Controller and representative | INSITE-Interventions GmbH Clemensstraße 10-12 60487 Frankfurt am Main
Phone: +49 69 90555 29 0 Email: office@insite.de
|
Data Protection Officer | Ms Deborah Schütt
|
Purposes and legal basis | Consulting with clients (online consultation) on individual personal matters; Arranging bookings of available appointments with suitable treatment providers for clients in need of treatment, within a care system Article 6(1), point (a), Article 9(2), point (a) GDPR
|
Categories of data | Name, surname, contact details, information on content of consultation (medical history, medical data, personal and family information as applicable)
|
Legitimate interests | Not applicable because processing is not performed on the basis of a legitimate interest.
|
Recipients or categories of recipients | External: freelance consultants, IT service providers in the context of IT maintenance
|
Transfers to third countries | We do not undertake any transfers of personal data, nor do we plan to.
|
Storage periods | 10 years according to labour law
|
Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20) | Data subjects can enforce the following rights against the controller: Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20)
|
Withdrawing consent | Consent may be withdrawn at any time for the future.
|
Right to lodge a complaint | You may lodge complaints regarding data protection with the relevant supervisory authority. The relevant supervisory body is
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Phone: +49 611 1408 - 0 Fax: +49 611 1408 - 900 Email: poststelle@datenschutz.hessen.de https://datenschutz.hessen.de/
|
Obligation to provide data | You are under no legal or contractual obligation to provide personal data.
|
Automated decision-making | Not applicable because automated decision-making is not used.
|
Whistleblowing
Collection of data from data subject (Article 13 GDPR)
Controller and representative | INSITE-Interventions GmbH Clemensstraße 10-12 60487 Frankfurt am Main
Phone: +49 69 90555 29 0 Email: office@insite.de
|
Data Protection Officer | Ms Deborah Schütt
|
Purposes and legal basis | Running a whistleblower system for the client Legal basis Sec. 1(1) et seqq. HinSchG (German Whistleblower Act), Sec. 11, Sec. 16, Sec. 17(1)(1)-(3), Sec. 17(2) HinSchG
|
Categories of data | Processing relates to whistleblowers (employees, clients, third parties etc.) and persons who have been reported (employees, clients, third parties etc.)
Personal data concerning the whistleblower and, where applicable, third parties are processed whenever the following is reported: Corruption or bribery Theft, embezzlement or fraud Money laundering or illegal payments Breach of competition or trust law Breach of environmental regulations Breach of accounting or book-keeping regulations Breach of labour and health & safety regulations Breach of data protection regulations or IT security regulations Other breach of criminal law or other unlawful activity that is subject to financial penalties
|
Legitimate interests | Not applicable because processing is not performed on the basis of a legitimate interest.
|
Recipients or categories of recipients | External: IT service providers in the context of IT maintenance
|
Transfers to third countries | We do not undertake any transfers of personal data, nor do we plan to.
|
Storage periods | 3 years (Sec. 11(5) HinSchG)
|
Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20) | Data subjects can enforce the following rights against the controller: Right of access (Article 15); Right to rectification (Article 16); Right to erasure (Article 17(1)); Right to restriction of processing (Article 18); Right to object (Article 21); Right to data portability (Art. 20)
|
Right to lodge a complaint | You may lodge complaints regarding data protection with the relevant supervisory authority. The relevant supervisory body is
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Phone: +49 611 1408 - 0 Fax: +49 611 1408 - 900 Email: poststelle@datenschutz.hessen.de https://datenschutz.hessen.de/
|
Obligation to provide data | You are under no legal or contractual obligation to provide personal data.
|
Automated decision-making | Not applicable because automated decision-making is not used.
|