Privacy policy & terms of use

This website is provided by the company peopleForecast GmbH, a business with headquarters in Germany. We provide you with this data privacy policy to inform you of how we handle your personal data collected on this website.

The controller under data protection law is:
peopleForecast GmbH
Agnes-Pockels-Bogen 1
80804 München
Phone: +49 89 2153 84810
Commercial register entry number: HRB 212285
Registration Court: Amtsgericht München (Munich Local Court)
Data Protection Officer contact: info@hrforecast.de
External Data Protection Officer contact:
Dr. Sebastian Kraska email@iitr.de

When you access our website, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is only information that does not allow conclusions about your person. This information is technically necessary to correctly deliver the contents of web pages requested by you and is mandatory when using the internet. Anonymous information of this kind is statistically evaluated by us, in order to optimize our Internet appearance and the technology behind it.

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. This automatically gives us certain data, such as IP address, browser used, operating system from your computer and your connection to the Internet.

Different categories of cookies are used:

• Essential cookies are necessary for ensuring the core functionality of our website
• Functional cookies are cookies that are used for tracking user behaviour on our website to improve the functionality of our website
• Marketing cookies are cookies we are using for serving interest-based ads
• External media cookies: These cookies serve the purpose of displaying external media (such as videos or maps)

The legal basis for the use of essential cookies is Art. 6 (1) (f) GDPR -a legitimate interest. Our legitimate interest for the usage of these cookies is providing a functioning website. The legal basis for the usage of the other cookies is Art. 6 (1) (a) GDPR — your consent. Without your consent no non-essential cookies will be set. You can withdraw your consent anytime with effect for the future and deactivate all non-essential cookies.

In order to provide and continuously improve our services, we use the services of the following third-party providers, which may also process personal data. These third party providers have been carefully selected in accordance with the requirements of the GDPR.

A) Google
Unless otherwise stated in the data privacy policy, the operator of all Google services mentioned here is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

I) Google Tag Manager
This website uses the service “Google Tag Manager”. The tag manager is a tool for managing so-called tags that are used during tracking in online marketing. In doing so, the tag manager does not process any personal data, since it merely serves to manage other services – e.g., Google Analytics, etc.  You can find further information on the tag manager at: https://www.google.com/intl/de/tagmanager/use-policy.html

II) Google Analytics
This website uses the service “Google Analytics”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics is a web analysis service that enables conclusions to be drawn about user behavior on our website by setting cookies and the information obtained as a result. The information generated by the cookies is transferred to a Google server in the USA and stored there. Our website uses the Google Analytics service on an exclusively pseudonymous basis. Your IP address is only recorded in abbreviated form and thus anonymized.

The following data is collected and processed:

• IP-Addresses (anonymized)
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Pages visited
• Referrer URL
• Downloads
• Flash-version
• Location information
• Widget interactions
• Date and time of visit

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR.. If you do not want Google Analytics to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future. The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

III) Google Audiences / Remarketing
This website uses the service “Google Audiences/Remarketing”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of this service is to display advertising to users based on their interests. This requires conducting an analysis of website use, which is carried out using cookies. In this process, the cookies store anonymized or pseudonymized data regarding the use of the website.  If you visit additional websites that also use these services, then you will be shown advertising that matches your previous interests. You can find more information at  https://www.google.com/privacy/ads/

The following data is collected and processed:

• Pages visited
• IP Addresses
• Duration of visit
• Other data on use of websites
• Content user is interested in

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google Audiences to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future. The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Audiences. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

IV) Google Ads (formerly GoogleAdwords) and Google Ads Conversion Tracking
This website uses the service “Google AdWords”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of this service is so-called conversion tracking, i.e., we can detect what happened after you clicked on our advertisements. Cookies are placed for this purpose, but they are only valid for a limited time.

The following data is collected and processed:

• Cookie-ID
• Visited Pages
• IP Addresses
• Duration of visit
• Usage data
• Content user is interested in
• Clicked Ads
• Web requests
• Cookie information
• Referrer URL
• Browser language
• Browser type

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future. The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Ads. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

V) Google Optimize
The web analysis and optimization service “Google Optimize” is used on our website, also a service of Google. We use the Google Optimize service to enhance the attractiveness, content and functionality of our website by making new functions and content available to a percentage of our users and statistically evaluating changes in use. Google Optimize is a sub-service of Google Analytics. Google Optimize uses cookies to help optimize and analyze how you use our website. The information generated by these cookies about your use of our website is usually transferred to a Google server in the USA and stored there. We use Google Optimize with the extension “_anonymizeIp()”. You can find more information on this in the section on Google Analytics within this Privacy Statement. The legal basis for the processing of your data is our legitimate interest within the meaning of article 6(1)(f) GDPR to increase the attractiveness, content and functionality of our website. In addition, data processing terms within the meaning of article 28 GDPR have been entered into with Google.

VI) YouTube
This website uses the service “YouTube” to insert videos into the page. The operator of the software necessary for this purpose is the company Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.  The integration of YouTube content is carried out in “extended privacy mode”. This ensures that YouTube does not initially store cookies on your device. As a result, YouTube no longer stores any information about visitors until you watch the video. When you click on the video, your IP address is sent to YouTube, which tells YouTube that you have watched the video. If you are logged in to YouTube, this information is also associated with your account. This can be prevented by logging out of YouTube before viewing the video.

Accordingly, the following data can be collected and processed:

• IP Addresses
• Referrer URL
• Device Information
• Watched videos

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want YouTube to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future. The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by YouTube. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

VII) Google Web Fonts
On this website the service Google Web Fonts is used. The service is provided by Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.  Google Web Fonts enables us to load and display external fonts, so-called Google Fonts, on our website. Google Web Fonts is locally integrated on our website. This means that the fonts are not loaded from Google servers.

In the context of processing via Google Web Fonts, the following personal data is collected and processed:

• IP address

The legal basis for this processing is Art. 6 (1)(f) GDPR — a legitimate interest. Our legitimate interest in the processing is to present the website in an attractive and user-friendly manner. Local hosting ensures that no data is transferred to Google, and no data transfer takes place. Personal data is stored for as long as it is necessary to fulfill the purpose of processing. The data is deleted as soon as it is no longer required for the purpose.

VIII) Google Maps
This website incorporates the API service “Google Maps” in order to be able to depict geographical information. The use of Google Maps makes it possible for Google to collect, process and use data on your use of the service.  By using Google Maps, information about the use of this website including your IP address and the (start) address entered in the route planner function can be transmitted to Google in the USA.  The map content is transmitted by Google directly to your browser and integrated by it into the website. Personio has no influence on the scope of the data collected by Google in this way. Personio also has no influence on the further processing and use of the data by Google. We have no influence and therefore cannot accept any responsibility for this.You can find further information on the processing of your data by Google at the Google  data privacy information.

The following data is collected and processed:

• IP addresses
• Location information
• Usage data
• Date and time of visit
• URLs

The legal basis for this data processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google to collect, process or use data about you via our website, you can refuse your consent or withdraw it at any time with effect for the future. The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Maps. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

b) Hotjar
We use the Hotjar web analysis service of Hotjar Ltd, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (Hereinafter: Hotjar). Hotjar uses cookies, i.e. small text files, which are stored locally in the cache of your web browser on your end device and which enable an analysis of the use of our online presence by you. Personal data can thus be stored and evaluated, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system) and a tracking code (pseudonymised user ID). The information thus collected will be transferred by Hotjar to a server in Ireland and stored there in an anonymised form. Further information on the collection and storage of data by Hotjar can be found here.

In the context of processing by Hotjar, the following data may therefore be collected and processed:

• Data and time of visit
• Browser information
• Usage data
• Click path
• IP addresses

The legal basis for this data processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google to collect, process or use data about you via our website, you can refuse your consent or withdraw it at any time with effect for the future. The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

c) Mailchimp
Mailchimp is an e-mail dispatch service of the U.S. provider The Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. We use Mailchimp to provide you with the services of our newsletter. The legal basis for this is article 6(1)(b) GDPR. In addition, data processing terms within the meaning of article 28 GDPR have been entered into with Mailchimp.

d) Hubspot
On this website we use HubSpot for different purposes. HubSpot is a software company from the USA with a branch office in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500.

Hubspot is an integrated software solution that we use to cover different aspects of our online marketing. This includes, among others:

Email marketing, social media publishing & reporting, reporting, contact management (e.g., user segmentation & CRM), landing pages and contact forms.

Our registration service enables visitors to our website to find out more about our company, to download contents and to provide their contact information, together with further demographic information. This information, together with the contents of our website are stored on the servers of our software partner HubSpot. We can use it to make contact with visitors to our website and to determine which of our company’s services are interesting for them. All information collected by us is subject to this data privacy policy. We use all information collected exclusively for optimizing our marketing measures.

More information about the Privacy Policy can be found here.
More information about Hubspots regarding the EU-Data Protection Regulations can be found here.

More Information about HubSpots Cookies can be found here and here.

As part of the optimization of our marketing activities, Hubspot may collect and process the following data:

• Geographical position
• Browser type
• Navigation information
• Reference URL
• Performance data
• Information about how often the application is used
• Mobile apps data
• HubSpot subscription service credentials
• Files that are displayed on site
• Domain names
• Viewed pages
• Aggregated use
• Version of the operating system
• Internet service provider
• IP address
• Device identification
• Duration of the visit
• Where the application was downloaded from
• Operating system
• Events that occur within the application
• Access times
• Clickstream data
• Device model and version

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

Data may be transferred to the USA as part of processing by Hubspot. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, Art. 49 (1)(a) GDPR can serve as a legal basis. Please note the reference to the risk of data transfer to an unsafe third-country under sub-item “7. Forms”.

a) Contact form
If you contact us via e-mail or our contact form, the data you provide (your e-mail address, your name, company name, company size and telephone number, if applicable) will be stored by us to answer your questions. The legal basis for this is article 6(1)(b) GDPR. This can be done by means of a customer relationship management or similar system. For further purposes, safeguarding legitimate interests pursuant to article 6(1)(f) GDPR serves as the legal basis. We delete the data arising in this context if storage is no longer required or we restrict the processing if there are legal obligations to retain data. We review the necessity every two years.

b) Web demo
If you request an appointment for a web demo, we will use your information to contact you and work with you to schedule and conduct the appointment:

• Collected data: First name, last name, company name, company size, phone number, work email
• Purpose of use: Coordination and holding of the web demo, as well as preparation for and follow-up on the demo
• Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. The data are stored as long as is needed to prepare, hold and follow-up on the appointment.
• Legal basis: article 6 (1) b) GDPR

c) Free offer of digital contents and product datasheets
In order to provide you with our downloadable content, we collect personal data from you. Below we explain these data:

• Collected data: First name, last name, company name, company size, phone number, work email
• Purpose of use: Coordination and holding of the web demo, as well as preparation for and follow-up on the demo
• Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. The data are stored as long as is needed to prepare, hold and follow-up on the appointment.
• Legal basis: article 6 (1) b) GDPR

d) Webinars
If you register for a webinar, then we use your data to ensure that you receive the necessary information and to enable you to participate in the webinar:

• Collected data: First name, last name, company name, company size, phone number, work email
• Purpose of use: Coordination and holding of the web demo, as well as preparation for and follow-up on the demo
• Storage period: As a general rule, the data is only stored for as long as is needed to fulfill the purpose. The data are stored as long as is needed to prepare, hold and follow-up on the appointment.
• Legal basis: article 6 (1) b) GDPR

e) Newsletter
If you subscribe to our newsletter, then we store your e-mail address and use it for sending the newsletter. Your email address will not be published or shared with third parties.

Data collected: First name, last name, email address
Purpose of use: Sending the requested newsletter
Duration of storage: The data is generally stored only as long as necessary to fulfill the purpose. For the newsletter, the data will be stored as long as the sending of a newsletter is to be expected and as long as you have not objected to the use of your data.
Legal basis: Article 6 (1) a) GDPR – Consent.
Cancellation: You can unsubscribe from our newsletter at any time via a link contained in each issue. We will then delete your e-mail address from our distribution list. Alternatively, you can unsubscribe from the newsletter at any time by sending an email to info@hrforecast.de.

You have the following rights with respect to the personal data relating to you:

• Right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to the processing
• You also have the right to complain to a data protection supervisory authority about our processing of your personal data

Version: 04/2021