On this page
Privacy notice
1. Controller
The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:
KGS Ausbildung Germany GmbH
Frankfurter Straße 63-69
65760 Eschborn
Germany
Email: info@kgs-germany.de
2. General information on data processing
We process personal data only insofar as this is necessary to provide a functional website, our platform, and our content and services. Processing is carried out in compliance with the GDPR, the German Federal Data Protection Act (BDSG), and other applicable German legal provisions.
3. Which data we process
Depending on how you use our website and platform, we process in particular the following data:
- master and contact data such as name, email address, telephone number, and company information
- registration and access data
- content and profile data of candidates and company users
- communication data from inquiries, support, or business communication
- contract, booking, and billing data
- usage and log data such as IP address, timestamps, browser information, accessed pages, and technical events
- language settings or local shortlist/favorites settings stored in the browser
4. Purposes and legal bases of processing
We process personal data in particular for the following purposes:
a) Provision of the website and IT security
For the technical provision of our website, stability, error analysis, and security, we process technical connection and log data.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in the secure and uninterrupted operation of the website and platform.
b) Registration, login, and account administration
If you create a user account or log in, we process the information required for this in order to provide and manage your access and prevent misuse.
Legal basis: Art. 6 para. 1 lit. b GDPR.
c) Placement and platform services
Where we provide candidate profiles, company access, unlocks, visibility settings, favorites, inquiries, or similar platform functions, we process the personal data necessary for the performance of pre-contractual measures or contractual obligations.
Legal basis: Art. 6 para. 1 lit. b GDPR.
d) Communication and support
If you contact us, we process your information to handle the request and continue communication.
Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR, depending on the reason for the inquiry.
e) Compliance with legal obligations
Where we are legally obliged to retain, document, or disclose data, we process data to comply with these obligations.
Legal basis: Art. 6 para. 1 lit. c GDPR.
f) Enforcement, misuse prevention, and proof
We may process data to review claims, detect misuse, trace access, and protect the integrity of our platform processes.
Legal basis: Art. 6 para. 1 lit. f GDPR.
5. Recipients and categories of recipients
Within our company, personal data is disclosed only to those departments that need it to fulfill the respective purposes.
In addition, data may be transferred to external recipients, in particular to:
- hosting and infrastructure providers
- IT and software providers
- authentication and security providers
- payment service providers, where paid services or unlocks are processed
- advisory, audit, or legal service providers where required
- authorities or courts if there is a legal obligation
Where we use processors, this is done on the basis of a processing agreement pursuant to Art. 28 GDPR.
6. Transfers to third countries
Personal data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA) only if this is necessary for the operation of individual services and the legal requirements are met. In such cases, we ensure appropriate safeguards, in particular adequacy decisions or standard contractual clauses.
7. Storage period
We store personal data only for as long as necessary for the respective purposes or as long as statutory retention periods apply.
Relevant factors include in particular:
- duration of the user relationship or business initiation
- statutory retention obligations under commercial and tax law
- limitation periods for asserting, exercising, or defending legal claims
After that, the data is deleted or blocked in accordance with data protection law unless further processing is required.
8. Cookies, local storage, and similar technologies
Our website may use technically necessary storage mechanisms, for example for language settings, login status, or functional user preferences. Where technologies requiring consent are used in addition, we obtain any necessary consent separately.
Legal bases:
- Section 25 para. 2 TDDDG for technically necessary access to end devices
- Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. a GDPR for subsequent data processing, depending on the respective function
9. Obligation to provide data
The provision of certain personal data is necessary for the use of individual functions or for the conclusion and performance of a contract. Without this data, we may not be able to provide certain services or may only be able to provide them to a limited extent.
10. Rights of data subjects
Subject to the applicable legal requirements, you have in particular the following rights:
- right of access under Art. 15 GDPR
- right to rectification under Art. 16 GDPR
- right to erasure under Art. 17 GDPR
- right to restriction of processing under Art. 18 GDPR
- right to data portability under Art. 20 GDPR
- right to object under Art. 21 GDPR
- right to withdraw any consent at any time with effect for the future
To exercise your rights, you can contact us at any time using the contact details provided above.
11. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement.
12. Automated decision-making
There is no solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR unless we inform you separately in an individual case.
13. Updates to this privacy notice
We reserve the right to amend this privacy notice if this becomes necessary due to legal, technical, or organizational changes. The version published on this website shall apply.
