New Work SE General Data Processing Policy

You are visiting this page because you clicked on a link to find out more about how we handle (your) personal data. We are happy to provide the information on this page to comply with our duty to inform data subjects as to where personal data are collected pursuant to Article 12 et seq. of the General Data Protection Regulation (GDPR).

Please note that separate privacy policies apply when visiting our website or using XING services. These policies are available here:

For XING:
https://privacy.xing.com/en

New Work SE shareholders can find a separate privacy policy here:
https://www.new-work.se/en/investor-relations/

If you work for New Work SE or have applied for a position with us, you will have already received details about privacy during your application or hiring process.

1. Who is responsible for data processing?

We, New Work SE, are the controller as defined by the EU GDPR, meaning that we are the legal person who determines the purposes and means of the processing of personal data. You can contact us as follows: Am Strandkai 1, 20457 Hamburg, Germany, Tel.: +49 40 419 131 0, Fax: +49 40 419 131 11, e-mail: info@xing.com

For more information about our company and our legal representatives, and for other contact details, please visit the ‘About this site’ page on our website: https://www.xing.com/legalnotice

2. Which of your data do we process? And for what purposes?

If we receive data from you, we will only ever process it for the purposes for which we received or collected it.

Data will only be processed for other purposes in order to comply with legal obligations pursuant to Article 6 (4) of the GDPR. It is a given that we comply with any information to be provided pursuant to Article 13 (3) GDPR and Article 14 (4) of the GDPR.

Aside from any specific statutory regulations, Article 6 of the GDPR forms the legal basis for processing personal data. This includes the following points in particular:

  • Consent (Article 6 (1) (a) of the GDPR)
  • Processing for the performance of contracts (Article 6 (1) (b) of the GDPR)
  • Processing based on a balancing of interests (Article 6 (1) (f) of the GDPR)
  • Processing for compliance with a legal obligation (Article 6 (1) (c) of the GDPR)

If personal data is processed with your consent, you have the right to withdraw this consent at any time with future effect.

If we process data based on a balancing of interests, you as the data subject have the right to object to the processing of your personal data as provided for in Article 21 of the GDPR.

4. What is the retention period for personal data?

We process data as and when required for the given purpose.

In the event of any statutory retention requirements, e.g. based on commercial or fiscal law, the affected personal data will be stored for the required retention period. Once the retention period expires, the situation will be reviewed to verify whether data processing is still required. If data processing is no longer required, the data will be deleted.

You have the right to request the personal data we have saved about you at any time (see below). Provided your personal data are not subject to any statutory retention requirements, you have the right to restriction of processing or to erasure of your personal data.

5. To whom are my data transferred?

Your personal data will only be transferred to third parties if required to fulfil our contract with you, if permitted based on a balancing of interests in accordance with Article 6 (1) (f) of the GDPR, if we are legally required to transfer your personal data, or if you provided your consent to do so.

Data transfers to third countries do take place, but only in compliance with the legally regulated conditions governing admissibility.

If the transfer of data to a third country does not serve to fulfil our contract with you, if we have not obtained your consent, if the transfer is not necessary for the assertion, exercise or defence of legal claims, and if there are no other exceptions, we will only ever transfer your data to a third country if an adequacy decision in accordance with Article 45 of the GDPR or suitable guarantees in accordance with Article 46 of the GDPR are in place.

As a rule, we create suitable guarantees in accordance with Article 46 of the GDPR and ensure an appropriate level of data protection by concluding the EU standard data protection clauses issued by the European Commission with the receiving body.

6. Your rights as a data subject

You have the right to request your personal data we have processed.

Please note that we may ask you to provide us with proof of identity before supplying your data.

You also have the right to rectification, erasure and restriction of processing as provided for by the GDPR.

In addition, you have the right to object to processing within the scope of statutory requirements. You also have the right to data portability within the scope of statutory requirements.

In particular, pursuant to Article 21 (1) and (2) of the GDPR you have the right to object to processing of your personal data in connection with direct marketing when based on a balancing of interests.

7. Our Data Protection Officer

Our Data Protection Officer is Christian Schmidt, Am Strandkai 1, 20457 Hamburg, Germany, e-mail: datenschutzbeauftragter@xing.com

8. Right to lodge a complaint

The supervisory authority responsible for our company is: Free and Hanseatic City of Hamburg, The Hamburg Commissioner for Data Protection and Freedom of Information, 7th floor, Ludwig-Erhard-Str. 22, 20459 Hamburg Tel.: 040 428 54 4040, Fax: 040 428 54 4000. For more information (in German), visit www.datenschutz-hamburg.de

If you feel that your personal data is not being processed in compliance with the EU GDPR, you have the right to lodge a complaint with a supervisory authority. You can lodge a complaint with a supervisory authority in your habitual residence, place of work or place of alleged infringement. Further provisions regarding the complaint process are available in Article 77 of the EU GDPR.

Last updated: July 2022