Privacy Policy

With the following statements, we would like to inform you about how recuto processes personal data of talents and other website visitors, on what legal basis this processing is carried out, and to which recipients this data may be forwarded. The data processing is carried out in compliance with all relevant legal provisions, particularly those of the GDPR. The data is processed exclusively for the purposes mentioned below, and the processing is carried out in a manner that ensures the highest possible security of this data. All communication between end devices and recuto's servers is encrypted based on SSL/TLS.

Controller for Processing According to Art. 4 No. 7 GDPR

recuto GmbH
Große Neugasse 16/2
1040 Vienna
hello@recuto.com

Categories of Data Subjects, Purpose, and Legal Basis

The processing of personal data of website visitors is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in and for the purpose of improving the stability and functionality of our website.

The processing of data from talents is based on the legal basis of consent in accordance with Art. 6 para. 1 lit. a in conjunction with Art. 9 para. 2 lit. a GDPR.

The data submitted during an application process is processed by recuto solely for the purpose of selecting suitable talents for an employment relationship and forwarded to clients for the purpose of personnel placement.

Categories of Recipients

Data is generally not disclosed to third parties unless required by law. Also excluded is the transfer to processors who act solely on recuto's instructions, do not use the data for their own purposes, and are bound by their own agreements to the data protection obligations of the General Data Protection Regulation.

In rare cases, data may also be transferred to countries outside the European Union. To ensure the rights and freedoms of the affected individuals, agreements have been concluded in accordance with the standard contractual clauses approved by the European Commission (Art. 46 GDPR), and additional contractual commitments have been secured from the contracting partner to ensure a level of data protection comparable to that of the EU.

With your consent, your talent data will be forwarded to selected recuto clients for the purpose of personnel placement. The recuto clients then process this data under their own responsibility.

Categories of Personal Data (Talent Data)

Only with your consent will the following categories of personal data be processed: Identification data, personal status data, address and registration data, social security data, data on previous employment relationships, educational data including certificates, if applicable, health data, data on other facts and circumstances relevant to the fulfillment of the contractual relationship.

Server Log Files (Website Visitor Data)

The provider of the website automatically collects and stores information in server log files that your browser transmits to us. These are:

Pages visited on our domains
The page from which the file was requested
Date and time of the server request
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
IP address

These data are not merged with other data sources, and recuto does not perform any profiling. To ensure and enhance the security of our web servers, these data are stored only temporarily (90 days). It is not possible for us to draw any conclusions about individual persons based on these data. In anonymized form, the data are also processed for statistical purposes; there is no comparison with other data sets or disclosure to third parties, even in excerpts.

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our website content more user-friendly, effective, and secure.

Some cookies are "session cookies." Such cookies are automatically deleted at the end of your browser session. However, other cookies remain on your device until you delete them yourself. These cookies help us recognize you when you return to our website (e.g., if you reject our cookies on the website, we will still store a single cookie in your browser to apply the same rejection setting on your next visit).

With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured to delete cookies automatically when the program is closed. Disabling cookies may result in limited functionality of our website.

As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. The setting of other cookies (e.g., for marketing and analysis functions) only takes place with your consent, and these are treated separately in this privacy policy.

You can withdraw any given consent for the use of marketing and analysis cookies at any time.

Google Analytics

With your consent, our website uses features of the web analytics service Google Analytics. The provider of this web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." The information generated by the cookie about your use of our website is transmitted to a Google server and stored there. The server is usually located in the USA.

IP Anonymization

We use Google Analytics with the IP anonymization feature. This ensures that Google truncates your IP address within member states of the European Union or other contracting states of the Agreement on the European Economic Area before transmitting it to the USA. In exceptional cases, Google may transmit the full IP address to a server in the USA and truncate it there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

To fully comply with legal data protection requirements, we have entered into a data processing agreement with Google.

Demographic Features in Google Analytics

Our website uses the “demographic features” function of Google Analytics. This allows reports to be generated containing information on the age, gender, and interests of website visitors. These data are derived from interest-based advertising by Google and from visitor data provided by third parties. The data cannot be attributed to a specific person. You can disable this feature at any time through the ad settings in your Google account, or you can generally prohibit Google Analytics from collecting your data as described in the “Objection to Data Collection” section.

HubSpot

We use HubSpot, a software of HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, to create our website. As part of the use of this software, so-called inbound marketing is conducted. The software helps us optimize our marketing strategy through statistical analysis and evaluation of logged user behavior. For this purpose, HubSpot uses cookies.

Some cookies are necessary for the operation of the website, while others, such as cookies for analysis and marketing purposes, are voluntary and are only used with your consent. Details about the use of HubSpot cookies can be found here: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser.

General Inquiries

The data of your inquiry (name, contact details, content of the inquiry, history of previous contacts with us) that you send us via the contact form or by email will be processed by us for customer support (pre-contractual measures) and for marketing purposes (legitimate interest in sending direct mail by post). Your data will be deleted three years after your last inquiry, provided there are no legal obligations to retain the data.

Chat

Our company uses the chatbot of gleap.io (Gleap GmbH, Dr. Walter Zumtobel Straße 2, 6850 Dornbirn, Austria) to improve interaction with our users and efficiently handle support inquiries. The chatbot captures and stores data you enter during use, including your name, email address, and the content of your messages. This data is used exclusively to process your inquiries and improve our services. For more details, please refer to the privacy policy of gleap.io at https://www.gleap.io/privacy-policy.

Newsletter Registration

The newsletter is sent only with your explicit consent, by entering your data and email address and clicking the "Register" button, or by selecting the appropriate checkbox in a contact form and then clicking the confirmation link in the confirmation email automatically sent afterward (double opt-in).

You can revoke your consent to receive the newsletter at any time by clicking the unsubscribe link contained in every newsletter. The legal basis that applied up until the revocation is not affected by the revocation.

In addition to your email address, we also process information about your usage behavior when reading the newsletter, such as which articles are read particularly often. We use this information to make our content more interesting and relevant to you. Your data will be stored until revocation or unsubscription from the newsletter.

Beta User Registration

If you register as a beta user, we will notify you when the first beta version is released via email or phone. By registering, you give your consent that we may process the data you provided for this purpose and contact you via email, phone, SMS, WhatsApp, etc. You can revoke this consent at any time with a short message to the provided contact options.

Retention Period and Deletion Personal data is deleted as soon as the purpose for which it was originally collected ceases to exist, and no statutory retention period precludes deletion. If there are legitimate interests in retaining this data beyond the actual deletion time, it will be kept until the legitimate interest is legally clarified.

Rights of Data Subjects

Access, Rectification, Restriction:

Data subjects have the right to request access and can ask for confirmation whether and to what extent and for what purpose we process their data. Furthermore, they have the right to immediate correction of inaccurate personal data concerning them. If the accuracy of the data is disputed, the processing is unlawful, the data is no longer needed for processing, or the data subjects have objected to the processing, there is a right to restrict the processing of the data.

Objection:

Data subjects have the right to object at any time to the processing of their personal data if the processing of these data is based on legitimate interests.

Withdrawal:

Data subjects have the right to withdraw any given consent at any time with future effect. A short message to the provided contact details is sufficient for this.

Data Portability:

Data subjects have the right to receive the personal data concerning them that recuto has been provided in a structured, commonly used, and machine-readable format. They also have the right to request the transfer of this data to another controller if technically feasible.

This portability only applies to personal data that is processed by automated means.

Deletion – Right to Be Forgotten:

Data subjects have the right to demand the immediate deletion of personal data concerning them if the legal basis for processing the data is missing or ceases to exist, if they object to the data processing, if the data processing is unlawful, and if there are no legal retention obligations to comply with.

Right to Complain:

If data subjects believe that their rights have been violated during the collection, processing, or use of their personal data, we request that you contact us to clarify any questions. Of course, there is also the right to file a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

To protect the rights and privacy of data subjects, the assertion of the above-mentioned data subject rights is only possible after the data subject has been unmistakably identified by presenting an official photo ID.

Fan Pages on Social Networks (Facebook, Instagram, LinkedIn, TikTok, YouTube)

recuto operates fan pages on various social networks to interact with customers and prospects, share information, and provide insights into our activities. When visiting our fan pages, personal data of visitors is processed by recuto and the respective platform operator.

recuto and the operators of the respective social networks (Facebook, Instagram, LinkedIn, TikTok, YouTube) are considered joint controllers for the processing of personal data within the operation of the fan pages according to Art. 26 of the General Data Protection Regulation (GDPR). This privacy policy informs you about the nature, scope, and purpose of the data processing as well as your rights.

Joint Responsibility:

According to Art. 26 GDPR, recuto and the operators of social networks have entered into an agreement that defines the respective responsibilities regarding the processing of personal data. The platform operators provide the technical infrastructure and process the data of their users based on their own privacy policies and guidelines.

The following division of responsibilities is established:

Platform operators (Facebook, Instagram, LinkedIn, TikTok, YouTube) are primarily responsible for:
Operating the platform and associated data processing, such as tracking and analysis procedures (e.g., via cookies).
Providing statistics and analysis data made available to recuto as the page administrator (e.g., "Facebook Insights").
Technical implementation of tools that collect, process, and store data.
recuto is responsible for:
The content and management of the respective fan page.
Communication with visitors and responding to inquiries via the platforms.
Processing data that is directly provided to us through interactions on our fan page (e.g., through messages, comments, or likes).
Processing of Personal Data:

When visiting our fan pages, personal data of visitors is processed by the platform operators. This includes, in particular:

IP address
Information about the end device (e.g., browser type, operating system)
Visitor behavior (e.g., visited pages, interactions such as likes and comments)
Other information collected by the platform operators, which is described in their privacy policies.

The platforms use this data in particular to create statistics, display personalized advertising, and provide insights into user behavior on the respective fan page.

The provision of this data by the platform operators is carried out in an aggregated and anonymized form to recuto (e.g., via Facebook Insights), so recuto cannot draw any conclusions about individual users.

Legal Bases for Data Processing:

The processing of personal data is based on the following legal bases:

Art. 6 para. 1 lit. f GDPR: Legitimate interests of recuto and the platform operators, particularly regarding effective communication and marketing activities.
Consent according to Art. 6 para. 1 lit. a GDPR: As far as users have voluntarily given their consent to the platform operators for the processing of personal data (e.g., by participating in tracking or cookie mechanisms).
Rights of Data Subjects:

You can exercise your rights by contacting both recuto and the respective platform operator. However, please note that your rights regarding data processing by the platform operators can only be asserted directly against them, as they are primarily responsible for the technical data processing.

Further Information:

For more information on data processing on the platforms, please refer to the respective privacy policies of the operators:

Version: September 27, 2024

Data Protection Information under Articles 13 and 14 of the GDPR ("Privacy Policy")