Last updated: 2025-11-30
The proposal to provide the XING Job Ads platform, its modules and any accompanying or third-party services, and to use XING Job Ads is directed exclusively at business customers.
The contract regarding the use of the XING Jobs Ads platform and joint responsibility when handling personal data is concluded with New Work SE, Am Strandkai 1, 20457 Hamburg. Other contact details, commercial register data and the names of New Work SE authorised representatives can be found in the www.xing.com legal notice.
The following General Terms and Conditions of Use, including the agreement on joint data protection responsibility (hereinafter “T&Cs”) shall apply within the scope of the contractual relationship between business customers (hereinafter “Customer”) and New Work SE (individually also “Party” and both together as “Parties”).
(1) New Work SE is responsible for review and processing of all breaches of the protection of personal data as defined by Article 4 (12) GDPR (Personal data breach), including the fulfilment of any and all therefore existing obligations to report to the responsible supervisory authority in accordance with Article 33 GDPR or to data subjects in accordance with Article 34 GDPR, which occur with respect to the covered products and services for which there is joint responsibility in the sense of Article 26 GDPR. The Customer is accordingly responsible for data protection breaches that occur with respect to the correct technical implementation and configuration of the covered products and services for which there is joint responsibility in the sense of Article 26 GDPR.
(2) If the responsible party notifies a data protection breach to the responsible supervisory authority or to the data subject, that party shall then inform the other party immediately. If needed and at the request of the responsible party, the parties shall mutually support each other in the fulfilment of reporting obligations and shall immediately mutually provide all information in connection with the data protection breach as is needed to review the data protection breach and its consequences, as well as for the fulfilment of any reporting obligations in accordance with Articles 33 and 34 GDPR.
Both parties must inform each other immediately and in full if errors or irregularities in data processing or breaches of provisions of this Contract or applicable data protection law (in particular the GDPR) are identified.
Group of persons who are the subject of data processing:
The following data types are regularly the object of processing:
| Processing step under joint responsibility | Responsibility in the framework of joint responsibility | Comments | |
| 1 | Processing in the framework of recruitment by the Customer (classic “application data” processing), i.e. of job ad data as well as data concerning talented individuals/applicants and company users, including dialogue between talented individuals/candidates/applicants and company users in as far as it takes place in and via the company account | Customer | The processing of data concerning applicants and company users by the Customer outside the company account, as well as the upload process for such data by the Customer into the company account, take place outside joint responsibility, in the sole responsibility of the Customer. Joint responsibility applies as soon as data are included in the company account. |
| 2 | Display and recommendation of talented individuals in the company account | New Work SE | Data processing outside the company account takes place outside joint responsibility, in the sole responsibility of New Work SE. |
| 3 | Collection of usage data, tracking, including using cookies and similar technologies | New Work SE | |
| 4 | Provision of “Insights”: generation and provision of recruitment-relevant information and analyses based on data from the company account | New Work SE | |
| 5 | Adoption of data that is created/processed in the company account, including usage data/automatically collected data, including using tracking technologies/cookies, for proprietary purposes such as performing analysis for product improvement, etc. or the optimisation of recommending talented individuals. | New Work SE | The adopted data are (further) processed by New Work SE outside joint responsibility, in sole responsibility |
| 6 | Product support for talented individuals concerning the covered products and services, including information on product changes, etc. | New Work SE | |
|
7 |
Selection and implementation of third-party provider tools that are provided to the Customer for use in the framework of the covered products and services, as well as associated processing of data by commissioned processors and/or disclosure of data |
New Work SE |
|
Data subject right/ requirement |
New Work SE
|
Customer
|
Deviations with respect to XING Job Ads |
| Article 6: Requirement for a legal basis for joint processing |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility |
||
| Information obligations arising from Articles 13 and 14 GDPR |
X
(plus information specified and permanently integrated by New Work SE concerning joint responsibility as well as with respect to New Work SE’s area of responsibility.) |
People applying for vacancies with the Customer are informed about data processing under joint responsibility (in particular about applicable erasure periods). Note: The Customer is obliged to provide information about personal data processed by the Customer beyond the scope of joint responsibility. This information can be provided, e.g. by way of text in a job ad. |
|
| Right of access by the data subject (Article 15 GDPR), |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility
|
||
| Right to rectification (Article 16 GDPR), |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility
|
||
| Right to erasure (“Right to be forgotten”) (Article 17 GDPR), |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility (the Customer is therefore responsible for meeting its erasure obligations in the XING Jobs Ads platform within the scope of joint responsibility)
|
New Work SE stipulates the erasure periods applicable to the personal data of talents/candidates/applications. | |
| Right to restriction of processing (Article 18 GDPR) |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility
|
||
| Right to data portability (Article 20 GDPR), |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility
|
||
| Right(s) to object (Article 21 GDPR), |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility
|
||
| Article 26 (2) GDPR: Make the essence of this addendum available for controllers |
X
(by link to this Contract, which is accessible online, is included in the information specified by New Work SE concerning the information obligations arising from Articles 13 and 14 GDPR (see above) concerning joint responsibility.) |
New Work SE provides this information as required by Articles 13 and 14 GDPR by way of a link to this contract, which is available online. | |
| Right to obtain human intervention, to express a person’s own point of view, and to contest a decision in the event of automated decision-making in an individual case with legal/restrictive effect (Article 22 (3) GDPR). | X | ||
| Creation of the documentation for the record of processing activities in accordance with Article 30 (1) GDPR, |
New Work SE with respect to its area of responsibility
The Customer with respect to its area of responsibility
|
||
| Implementation of Privacy by Design (Article 25 GDPR) and/or Risk assessment for processing | X | ||
| Performance of a data protection impact assessment in accordance with Article 35 et seq. GDPR | If a data protection impact assessment is required in accordance with Section 35 GDPR, the parties shall mutually support one another to a reasonable extent. | ||