Privacy statement

‍

About us

sparkm GmbH & Co. KG and visionm GmbH (hereinafter collectively “we”) are specialized personnel consultancies for recruiting and recruitment services that work closely together. Protecting your personal data is important to us.

In this privacy policy, we inform you which personal data we collect, for what purposes and on what legal basis we process it — e.g. when you visit our website, as part of applications, when initiating or carrying out a business relationship or working with service providers.

This privacy policy is intended for anyone who belongs to one of the following groups:

• applicants for whom we provide recruitment services or who apply for open positions with us,
• customers and their contacts with whom we maintain or establish a business relationship,
• potential applicants and potential customers as well as their contacts with whom we get in touch to present our services,
• service providers and their contacts who provide services for us,
• users of our websites.

Responsible person & contact

The company with which you are in contact, whose service you use or which contacts you as part of its business activities is responsible for processing your personal data.

‍Joint data processing

visionm GmbH and sparkm GmbH & Co. KG work closely together and can exchange and share personal data with each other. This is done in order to be able to offer you our services in the best possible way. Both companies are jointly responsible for processing your data when it is processed as part of the joint services. In cases where one of the companies processes data on its own responsibility, this company remains solely responsible. By submitting an application or contacting us as a customer or service provider, you expressly agree to the transfer of your data to the other company.

Hosting & technical infrastructure

Our website is powered by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Webflow stores cookies and other recognition technologies that are necessary for the operation, presentation and security of the website (necessary cookies). Log files, including IP addresses, can also be processed.

Webflow is used on the basis of our legitimate interests in a stable and secure website. Data is transferred to the USA using the standard contractual clauses of the EU Commission.

For more information, see the Webflow privacy policy.

To perform our services and ensure the operation of our IT systems, we work with various IT service providers and technical partners who process personal data for us on behalf of us. These include providers of CRM systems, email services, cloud services, IT support, data storage and backup solutions.

These service providers only have access to personal data insofar as this is necessary to provide their services. We conclude appropriate order processing contracts with all such service providers to ensure the protection of your data in accordance with the General Data Protection Regulation (GDPR).

Purposes & legal bases of data processing

We process personal data for the following purposes:

• provision of recruiting and recruitment services,
• communication as part of applications or business relationships,
• maintaining and managing existing business relationships,
• operating and improving our website,
• Compliance with legal obligations.

Depending on the context, data processing is based on the following legal bases:

• Art. 6 para. 1 lit. a GDPR — when you give us consent for certain processing operations,‍
• Art. 6 para. 1 lit. b GDPR — to carry out pre-contractual measures or to fulfill the contract,‍
• Art. 6 para. 1 lit. f DSGVO — in case of legitimate interest, e.g. for efficient business transactions or direct marketing,
• Art. 6 para. 1 lit. c GDPR — to fulfill legal obligations.

Rights of data subjects

You have the following rights under the GDPR:

• information about the personal data we process,
• rectification incorrect or incomplete data,
• erasure your data, provided that there are no legal storage requirements,
• Restriction of processing subject to certain conditions,
• contradiction against processing, insofar as this is based on legitimate interests,
• data portability, provided that processing is based on your consent or a contract.

To exercise these rights, please contact the contact address given above.

Third country transfer

Insofar as we transfer personal data to service providers in third countries (e.g. USA), we ensure that appropriate data protection guarantees exist, e.g. through EU standard contractual clauses or adequacy decisions by the EU Commission.

Contact & communication

If you contact us (e.g. by email, telephone or contact form), we process your data to process your request. The processing is carried out:

• to implement (pre-) contractual measures (Art. 6 para. 1 lit. b GDPR), or
• based on our legitimate interest in efficient communication (Art. 6 para. 1 lit. f GDPR).

Applications

If you apply to us or are contacted by us as part of a recruitment agency, we process your application data to check your suitability for open positions and to place you with potential employers. The processing is carried out:

• on the basis of Article 6 (1) (b) GDPR (contract or pre-contractual measure), or
• based on your consent (Art. 6 para. 1 lit. a GDPR), e.g. in the case of longer-term storage.

Safety measures

We use appropriate technical and organizational measures to protect your personal data from loss, unauthorised access or misuse. These include encryption, access restrictions, and regular security checks.

Data storage

We only store personal data for as long as is necessary to fulfill the respective purposes or is required by law. The duration depends, among other things, on legal storage obligations and on the need to defend or assert legal claims.

Right to lodge a complaint with supervisory authorities

If you believe that the processing of your personal data is unlawful, you have the right to complain to a data protection supervisory authority. The supervisory authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information

Postfach 3163

65021 Wiesbaden

E-Mail: poststelle@datenschutz.hessen.de

Amendments & status of the privacy policy

We reserve the right to update this privacy policy, in particular if there are changes in legal requirements or our processing processes. The latest version can be found on our website.

Status: 01.05.2025