Privacy

• Scope of the data protection statement
  This data protection statement applies to the entire platform mr-asclepius.com (hereinafter referred to as "M.A.").
• Controller
  We, the company mr-asclepius.com, are the controller within the meaning of the EU Data Protection Regulation, which decides on the purposes and means of the processing of personal data. Our contact details are: Papiermühle 21, D-73035 Göppingen, Germany, Tel.: +49 (0) 7161 40 67 413, E-mail: info@mr-asclepius.com.
• Data Protection Officer
  Our data protection officer is Mr Matthäus be Malke, Papiermühle 21, D-73035 Göppingen, Tel. : +49 (0) 7161 40 67 413, e-mail: matthaeus.bemalke@mr-asclepius.com
• Further processing for another purpose
  The purposes for which we process your personal data are described in section 1. General information on data processing purposes. If we intend to further process your personal data for another purpose - i.e. not for the purpose for which the personal data was originally collected - we will inform you again.
• Duty to provide/require personal data for conclusion of contract
  The provision of personal data is not required by law. However, the data required for the conclusion of the usage contract, such as name and e-mail address, must be provided. Without these, we are unable to enter into a usage relationship with you. As part of the usage contract, you will be contractually obliged to keep the data provided true and complete with regard to all applications used by you for the entire duration of the contract. We will inform you during the input process if the provision of personal data is required for the respective function or application ("mandatory field"). In the case of required data, failure to provide it will result in the relevant function or application not being provided. In the case of optional data, failure to provide such data may mean that we are unable to provide our services in the same form and to the same extent.

• General information on the purposes of data processing
  In essence, we process personal data in order to fulfil our contractual obligations towards our users. The processing of data is a prerequisite for us to be able to suggest suitable contacts, skilled professionals and information to you, for example.

  The operation of a service such as M.A. is naturally subject to very dynamic development. It is therefore not possible to present every single detail. However, we would like to show you essential details of data processing. Data is processed in particular to fulfil our contractual obligations to our users. In derogation of this, we process your data to safeguard our legitimate interests, weighing them against your interests (e.g. when we send you promotional newsletters). And of course, in some cases we are legally obliged to process data (e.g. to hand over data to investigating authorities). In all other cases, we obtain separate consent from you for data processing. As part of the performance of our contractual obligations to our users, we always try to adapt our products and services to the needs of the users. Personalisation plays an important role in this. In doing so, interest and usage profiles are created. In order to be able to show you suitable recommendations, e.g. for jobs, events or contacts, or to be able to suggest you to other users as a valuable business contact or potential employee, we need to understand what interests you might have. To determine these interests, we use the information you share with us, but also implicit feedback, i.e. information we receive automatically based on your use of our service (through so-called "tracking") as well as information we may receive indirectly (e.g. via a CV upload).

• Information you share with us
  This is data we receive directly from you and information you publish or send on the platform www.mr-asclepius.com, for example:
  • Access data (e.g. username and password)
  • Profile data (e.g.. job title, company name, industry, education, contact details, photo)
  • news (current), event participation, payment details
  There are both mandatory details (which are marked as such) and optional details.
  Access data
  As part of the applications of M.A. that require registration. we must collect and process certain personal data from you as your access data.
  • Category, e.g.
    • User name
    • Login email address
    • Password
  • Visibility
    Your access data is not visible to third parties. We will never pass on this data to third parties.
  • Storage period
    We delete this data when you delete your user account.
  • Legal basis
    The legal basis for this processing of personal data is Art. 6 I b) EU-DSGVO.
  • Mandatory information on the digital platform
    When registering, you must fill in certain mandatory fields. These details are essential for a functioning professional network.
  • Category, e.g.
    • Salutation, first name and last name
    • Job title and company name
    • Industry
    • Location: city and country
  • Visibility
    Of the mandatory details, the following are always and fully visible to other users on the social network:
    • First name, last name
    • Job title and company name
    • Industry
    • Location: city and country
  • Storage period
    We delete this data when you delete your user account.
  • Legal basis
    The legal basis for this processing of personal data is Art. 6 I b) EU-DSGVO.
  • Optional details on the digital platform M.A.
    In addition to the necessary mandatory details, you can provide additional details that make it easier for other users to get to know you better and thus, for example, to select you as a suitable business contact.
  • Category, e. g. E.g.
    • Business email address and phone number
    • Private interests
    • Private means of contact
    • Education
    • Photo
    • Portfolio
  • Visibility
    Your optional details will be visible to all users on the platform once entered. For some optional details, you can decide on a case-by-case basis whether these details should be visible to a specific other user on the social network.
  • Privacy
    You can revoke most optional details at any time for the future by deleting the relevant details from your profile.
    For your contact details and date of birth, you can decide on a case-by-case basis whether and to what extent these details should be visible to a specific other user on the platform.
  • Storage period
    If you have not already deleted the data yourself, we will delete it when you delete your user account.
  • Legal basis
    The legal basis for this processing of personal data is Art. 6 I b) EU-DSGVO.
  • E-mail address(es)
    We use the electronic postal address(es) you have provided to send you regular newsletters or status e-mails as well as advertising for our own similar products and services or surveys for the purpose of our own market research by electronic means, unless you have objected to such use. In the newsletters, we may, for example, inform you about new features at M.A., suggest interesting contacts or provide you with certain personal statistics. In addition, we use the email addresses you have provided (with the exception of the login email address) to make your profile findable for other users of the platform and to be able to display your profile to these users.
  • Privacy
    You can unsubscribe from the newsletters at any time in your notification settings on the digital platform or by email using the link provided at the end of the respective newsletter.
  • Storage period
    If you have not already deleted the email addresses yourself, we will delete them when you delete your user account.
  • Legal basis
    The legal basis for this processing of personal data is Art. 6 I f) (regarding newsletters) or Art. 6 I b) EU-DSGVO.
    Your shared content and reactions in the social network
    In the social network, there are different possibilities to share content with others as well as to react to content.
  • Category, e. g.
    • Shared posts and links on the homepage
    • Posts in groups
    • Recommendations
    • Comments
    • "Interesting marks"
    • "Approvals"
      
  • Visibility
    Your shared content and reactions in the social network are basically visible to all users in the social network.
    Further visibility exists with regard to your comments on news articles as well as your contributions in groups that are marked as "public". These can also be accessed by non-users outside the social network and can be found in internet search engines. In individual functions, the visibility may be more restricted (e.g. visibility only for contacts). In such cases, the visibility will be indicated in the context of the function. Please note that even with limited visibility, your shared content and reactions may become visible beyond your own network if they are further shared by your contacts.
  • Privacy
    You can deactivate the discoverability of your posts in groups marked as "public" by Internet search engines or by RSS readers in your privacy recruitment settings.
  • Storage period
    If you have not already deleted your shared content and reactions yourself, we will delete or anonymise them when you delete your user account.
  • Legal basis
    The legal basis for this processing of personal data is Art. 6 I b) EU-DSGVO.
• Information we automatically receive based on your use of M.A.
  While you use or visit the M.A. platform, data is automatically collected from you via tracking. Here you can find out
  • how tracking happens,
  • why we use tracking (ensuring security, providing our service, measuring success and determining statistical parameters).
  When you use or visit the M.A. platform, we automatically collect data from you during your use or visit. This is done with the help of various tracking technologies.
  • How does the tracking happen?
    In the so-called backend, i.e. on the level of our web server, we collect data from users and third parties, which we primarily use to provide and maintain the security of the M.A. service. In the frontend, i.e. on your terminal device, we collect data from users and third parties by means of cookies, pixels and similar tracking technologies to provide our services and to evaluate user behaviour, as well as for statistical purposes. In addition, we determine, for example, if your e-mail programme allows HTML, whether and when you have opened an e-mail. Within the scope of tracking, access data (e.g. date and time of the visit, referrer, IP address, cookie ID, location data, product and version information of the browser or app used, device identifiers or device data) as well as interaction data (e.g. pages viewed or performed) are collected. (e.g. pages viewed or search queries performed). When we measure user behaviour to provide and improve our product experience, the data is linked to your user ID during analysis. In all other cases, tracking is done without linking to the user ID - for example, to measure success for statistical purposes. In order to be able to identify you as a user during your visit to M.A., we use so-called session cookies. These session cookies are automatically deleted after the end of the respective session. These cookies are necessary in order to use M.A.. You can choose to remain logged in when you register. A cookie is then stored in the browser of your terminal device, which makes a renewed login unnecessary for the duration of the cookie's lifetime. In addition, we carry out a very rough geo-localisation with regard to your person at the level of the cities you visit. For this purpose, we use your shortened and anonymised IP address and, if you have consented to this in your mobile device, your geo-coordinates. We do not store where exactly you are. We only store in which cities you regularly stay. Concrete addresses or geo-coordinates are not stored.
  • Purposes of tracking and your options to prevent it
    • Guaranteeing security
      Tracking is carried out, among other things, to ensure and safeguard the legitimate interest of user protection, the security of user data, as well as the M.A. platform. For this purpose, we store the collected data for up to 90 days in complete form. Only a few of our employees with appropriate access rights have access to this data. The legal basis for this processing of personal data is Art. 6 I f) EU-DSGVO.
    • Provision of our service
      The tracking and analysis of user behaviour helps us to check and optimise the effectiveness of our service and to correct errors. We always try to adapt our products and services to the needs of the users. Personalisation plays an important role in this. The evaluation of information obtained through tracking is necessary in order to provide you with personalised services in accordance with M.A.'s contractual purpose and to ensure that you receive the greatest possible benefit from M.A.. The implicit feedback you provide to us as a result of our tracking through your use of M.A. is an important part of understanding what content you are more or less interested in as well as suggesting you to other users as a valuable business contact or potential employee. Implicit feedback is of enormous importance because the information you share largely reflects the past or present, but says little about what you are interested in regarding the future. Interest profiles based on e.g. click data or search queries performed are often a better basis for assessing whether you are interested in e.g. jobs and what kind of jobs you might be interested in. We delete or anonymise the personal data obtained for the provision of our service through tracking when you delete your user account.
  • Determination of statistical characteristic values
    The aim of the reach measurement is to determine the intensity of use, the number of users of our platform and the surfing behaviour statistically - on the basis of a uniform standard procedure - and thus to obtain values that are comparable across the market. The decision on the storage period of the data is the responsibility of the service providers. Tracking of content and your options to prevent this
  • Tracking in embedded third-party content
    On M.A. applications you will also find content from external providers. These are integrated from external sites into the familiar M.A. environment. In the case of this external content, we have no influence on the type of tracking.
  • Include tracking within the M.A. environment
    If you want to exclude tracking from external providers within the M.A. environment, you can switch off the integration. As soon as you then make use of external content, you will leave the M.A. environment and be automatically redirected directly to the provider's site. Note: This does not necessarily result in less tracking, only that it takes place outside of M.A.
• • Information we receive about you from other sources
    Sometimes we process data about you that we have not collected directly from you. This may be the case, for example, if a user sends us the information or we collect it from other sources.
    We also process data that we have not collected directly from you. This is the case when a user provides us with the information or we collect the information from other sources. In these cases, we process the data in each case as part of our contractual performance vis-à-vis the respective user and/or to safeguard our legitimate interests in
  • visibility
    No third party has insight into the uploaded data.
  • Storage period and objection
    We store this data until the respective user deletes it himself or until his user account is deleted.
    The invited non-users can object to the sending of further invitations or invitation reminders to the respective email address via an opt-out link in the invitation email.
  • Legal basis
    The legal basis for this processing of personal data is Art. 6 I f) EU-DSGVO.

• Who receives data about you?
  Here you can find out to whom we pass on data, what purpose this serves and how you can individually set your privacy at M.A.. We only pass on your personal data to third parties if this is necessary to fulfil our own business purposes (i.e. in particular to provide the services owed to you) (e.g. if we make your profile accessible to another user), if you have given your consent for this (e.g. if you use an external application) or if we are obliged to do so by law or due to a court or official order. If we work with external service providers in the context of data processing (e.g. for software development), this is usually done on the basis of so-called commissioned processing, in which we remain responsible for the data processing. We check each of these service providers in advance for the measures they have taken for data protection and data security and thus ensure the contractual regulations provided for by law for the protection of personal data.

  • Users of the M.A. platform
    You can find information on visibility to other users under "Information you share with us".
  • Non-users of the M.A. Platform
    You can make your data contained in the user profile findable, e.g. via search engines, in order to increase your visibility and accessibility.
  You decide whether the data contained in your profile can be retrieved and found by non-users of the M.A. platform, for example via search engines on the Internet. Separate privacy settings are available to you for this purpose. If you do not set any restrictions, the data contained in your profile will be viewable and discoverable by non-users of the M.A. platform, but not personal contact data such as e-mail addresses or telephone numbers.
  The standard external retrievability and discoverability of profile information is a central element of M.A., to support the networking of users, because many contacts are only established, for example, when other users (or third parties) find a user's name through a search in a search engine.
  In some functions on M.A. (e.g. in the context of group contributions or in the case of participant lists), another user decides whether and how the data used or disclosed in the relevant function can be viewed and found by other users and/or non-users and who has read and/or write access. If you cannot influence these settings through your own privacy settings, we will inform you about the corresponding use of data in the context of the respective function.

  People you would like to invite to the M.A. Platform
  As a user, you can invite other people to use the M.A. Platform. We process the data collected in this process on your behalf solely for the purpose of expanding your network, and do not use it for any other purpose.
  We send a reminder email ("automatic reminder") to the people you invite on your behalf a certain time after the invitation. You can stop the sending of the automatic reminder by deleting the invitation in your recruitment. In addition to the automatic reminder, you can also trigger reminder emails manually. The email addresses to which the invitations were sent are stored by us in encrypted form. To display the email addresses in your account, the encryption is temporarily removed. You can delete the data in your account at any time. Each invited person has the possibility to object to the use of his/her email address for invitations with effect for the future.
  Please note that the recipient of the invitation will be shown the following data about you when you send an invitation:

  • Your name
  • Your company
  • Your position
  • Your email address
  • Your photo
  • Your user status

  Selected developers and companies ("API Partners")
  We provide selected developers and companies (""API Partners"") with the M. A. API for the development and operation of applications that allow users of the API Partners' applications to access data and content outside of M.A. and to integrate content into M.A. from outside.
  The goal is to make M.A. even more attractive and useful to users by connecting external applications. The XX API is a so-called Application Programming Interface, i.e. an interface provided by us, which allows the API partner to connect one or more applications operated by it to XX in a reading and, if necessary, writing manner in accordance with our contractual specifications.
  This requires access activation in each case by the M.A. user using the application; An API application of an API partner can therefore only access data after a conscious decision by the M.A. user. Depending on the application, a separate declaration of consent for data processing may also be required. The processing of M.A. users' data by the API partner is carried out on behalf of the user who has activated the application.
  Any application of an API partner with which access to users' data is to take place requires prior approval by us. We have established criteria to ensure the security of M.A. users' data.
  If an application involves the processing of personal data in countries outside the European Union, we will enter into the necessary contractual arrangements with the API partner to ensure an adequate level of protection for personal data.

  Third countries
  Data transfers to third countries will only take place in compliance with the legally regulated conditions of permissibility.
  In particular, we make certain data available to other users or third parties worldwide in order to fulfil our contract with you. This does not require an adequacy decision under Art. 45 EU GDPR or appropriate safeguards under Art. 46 EU GDPR.
  If the transfer of data to a third country is not for the performance of our contract with you, we do not have your consent, the transfer is not necessary for the assertion, exercise or defence of legal claims and no other exemption applies, we will only transfer your data to a third country if an adequacy decision under Art. 45 EU-DSGVO or appropriate guarantees according to Art. 46 EU-DSGVO are available.
  One of these adequacy decisions is the so-called "Privacy Shield" for the USA. For transfers to companies certified under the Privacy Shield, the level of data protection is generally considered adequate within the meaning of Article 45 EU GDPR.
  As a rule, however, we do not rely on the Privacy Shield, but create appropriate safeguards under Article 46 EU GDPR as well as an adequate level of data protection by concluding the EU standard data protection clauses issued by the European Commission with the receiving entity.
  Copies of the EU standard data protection clauses are available on the website of the European Commission.

  Other categories of possible recipients
  • State authorities and courts
  • Technical service providers
  • Hosting service providers
  • Email delivery service providers
  • Email marketing service providers
  • Marketing automation service providers
  • CRM- "social plugins
  • Event partners
  mr-asclepius.com - the central pool of skilled workers
  mr-asclepius.com serves companies with regard to recruitment via M.A.. Via mr-asclepius.com, companies can quickly and precisely search for candidates on M.A. and manage applications and profiles of M.A. members. The use of and access to mr-asclepius.com is exclusively carried out by specially authorised employees of the respective company.
  Within mr-asclepius.com, several recruiters of a company can work together in the personnel search via M.A. and exchange information and content with each other ("share").
  With mr-asclepius.com, the member has the possibility to manage M.A. members who are interesting for his company in the so-called "skilled professional pool" of M.A. and to contact them for future M.A. candidates. mr-asclepius.com gives the member access to automatically updated profiles of skilled professionals consisting of M.A. members. In mr-asclepius.com, the company is additionally informed about relevant activities of the professional pool candidates on M.A. and can easily stay in touch with candidates through campaigns.
  Mr-asclepius.com also allows employers to send messages to candidates to inform them of suitable job recommendations.

Right of objection
You may object at any time to the processing of your personal data based on Art. 6. para. 1 letter f) EU-DSGVO.

General
You have the right to object at any time to the processing of personal data concerning you which is carried out in accordance with Art. 6 para. 1 letter f) EU-DSGVO; this also applies to profiling based on these provisions. Please use our contact form for your objection.

Direct advertising / newsletter
If we process your personal data for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. You can unsubscribe from our newsletters at any time on M.A. in your notification settings or by e-mail via the link provided at the end of the respective newsletter, without incurring any other costs. Individual applications allow you to unsubscribe from newsletters or notifications in other ways. Logged in, you can deactivate the receipt of the newsletter via your profile settings.

Right to information
You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right to be informed about this personal data.
You also have a right to the following information:

• the purposes of the processing
• the categories of personal data processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that period
• the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or a right to object to such processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject, any available information on the origin of the data
• the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) EU GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject

Where personal data are transferred to a third country or to an international organisation, you as the data subject have the right to be informed about the appropriate safeguards (pursuant to Art. 46 EU-DSGVO) in connection with the transfer.

Right of rectification
You have the right to demand that we correct any inaccurate personal data relating to you without undue delay. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.

Right to erasure
You have the right to request that we erase personal data concerning you without undue delay, provided that one of the following reasons applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed. You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) EU GDPR and there is no other legal basis for the processing. You object to the processing pursuant to Article 21(1) EU GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) EU GDPR. The personal data have been processed unlawfully. The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject. The personal data has been collected in relation to information society services provided directly to a child in accordance with Article 8(1) EU GDPR. Upon your request, we are obliged to delete the relevant data without delay. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

Right to restriction of processing
You are entitled to request a restriction in the processing of your personal data if the accuracy of the personal data is contested by you, for the period of time that enables the controller to verify the accuracy of the personal data. If the processing is unlawful and you refuse to erase the personal data and instead request that we restrict the use of the personal data, we will comply with the request. The restriction of processing also takes place if we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend your own legal claims, or you have objected to the processing in accordance with Article 21 (1) EU-DSGVO, as long as it is not yet clear whether the legitimate reasons of the controller outweigh your reasons. You will be informed by us before the restriction is lifted.

Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided. The prerequisite is that a) the processing is based on consent pursuant to Art. 6(1)(a) EU GDPR or Art. 9(2)(a) EU GDPR or on a contract pursuant to Art. 6(1)(b) EU GDPR and b) the processing is carried out with the aid of automated procedures. When exercising the right to data portability, you have the right to request that the personal data be transferred directly from us to another controller, where this is technically feasible.

Right of withdrawal in case of consent
If the processing is based on your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of complaint
If you are of the opinion that the processing of personal data concerning you violates the EU Data Protection Regulation, you can complain to a supervisory authority. In particular, you can also contact the supervisory authority of your usual place of residence, your place of work or the place of the alleged infringement for this purpose. Further regulations on the complaint procedure can be found in Art. 77 EU-DSGVO.

As of: 06.01.2022