Purpose of Data Collection
StepStone aims to assist you with your life long career development. StepStone offers you an excellent career development service, wherever you are in your career, whatever your next step will be. We are committed to establishing a long term relationship, delivering a range of services available to you 24 hours a day, 7 days a week that will help you to take control of your career, your life and your future. StepStone wishes to make your job search as easy as possible. You can apply for job vacancies or use the services in the Personalized User Space. Our CV database and our Job Agent both aim at informing you about job offers or at establishing the contact between you and the potential employer.
One of the fundamentals of the relationship with StepStone - in fact of any relationship - is trust. With StepStone, you can trust we are 100% committed to protecting your privacy. Our goal is to offer you, the user, a secure and risk free service. We will use our best efforts to ensure that the information you submit to us remains confidential, and is used only for the purposes described on our site. If you feel however that we are not abiding by the terms of this statement or data protection regulations, please contact our data protection officer:
Mr. Sebastian Creutz
StepStone Deutschland GmbH
Hammer Straße 19
Fon: +49 (0) 211 - 934 93-0
We will contact you as soon as possible.
1. What information do we collect?
1a) Personalized User Space
If you register for the Personalized User Space we will store your email address so that we can send you the StepStone Services (Job Agent, Newsletter, Career Information and requests for your CV). If you do not wish to receive emails from StepStone on your own email address you can receive emails in your personal StepStone Mailbox in the Personalized User Space and view them online at any time. This Mailbox is exclusively designed for corresponding with the StepStone Services and cannot be used for private email correspondence. If you wish to use the StepStone Mailbox you will have to enter your email address so that we can send you your login details in case you have forgotten them.
If you register for The Personalized User Space and also wish to enter your CV, we will ask you for person related data. Stored together with your CV, these personal data contains email, name, address, phone number, mobile phone number, photo, sex, citizenship, and date of birth ("personal user data"). The personal user data are treated in strict confidence and are not forwarded to employers unless you create an active, public CV (s.b. item 2) or have given your explicit consent. Furthermore, you have the possibility of forwarding these data to a potential employer - provided that you have explicitly authorized this.
Due to technical reasons we have to request certain personal data (email address, sex, name, zip-code, date of birth) when you register for The Personalized User Space. However, you do not have to fill in any further personal data, except for an active email address, as long as you do not wish to enter a CV. When you create your CV the provision of any personal user data , except for name, email address and postal address is also completely optional and voluntary. We may also use your personal data in order to send you offers from potential employers through other ways of communication than email.
1b) Job Agent
If you register for the Job Agent, you will receive regular information on listings which match a profile that has been defined by you in advance. Accordingly we are not only sending you job ads published on the StepStone web site, but also such job ads from selected partners, such as Berliner Morgenpost, Hamburger Abendblatt and Die Welt.
Of course we will not disclose your personal profile and details to such partners.
StepStone is a Career Web site and we give you the possibility of placing your CV in our database. If you wish to create your CV - i.e. a summary of your education, your professional experience and skills - with the StepStone CV Center you will have to disclose your personal user data.
2.1 As a job seeker you have three ways of using StepStone's CV database:
2.1.1 Inactive CV
You can use your CV stored in our database to attach applications if you apply online to one of the job offers on the StepStone sites. You can attach active as well as currently inactive CV's. Inactive CV's are not disclosed and are not searchable. They are just a form of electronically stored support of your application. The data contained therein will not be disclosed, in any form, to any third parties. However, the CV will be forwarded to potential employers as a link not as a snapshot. Therefore, any changes you make later to your CV will also change the version that has been forwarded to a potential employer. Of course, we cannot exclude that the employer enters and stores your CV as a snapshot in his databases.
2.1.2 Partial Active CV
You can also activate only one part of your CV. This means that although you activate your general profile, the section with your personal user data remains deactivated. Employers thus have the possibility of reading and selecting that part of the CV without the personal user data section, using certain criteria in order to fill their vacancies. However, employers have no access to your personal user data (Name, Address, eMail, Phone number). Only the year of birth and your sex, as far as you have voluntarily provided this information, will be attached to the partial active CV and will be disclosed to the employer if he reads your partial active CV. All other content, entered outside the boxes for your personal user data, can be seen by the employer. Please bear this in mind if you enter details about former or current employers or if you use the free text boxes.
Important Notice: Only the StepStone Group has access to your user data in the personal user section and we will under no circumstances forward these to employers. Employers always see the non-personal part of this CV (i.e. excluding the personal user data section). If an employer is interested in you he can only contact you via StepStone. The employer will only have access to your indentity if you authorise a disclosure in each individual case.
You can deactivate your partial active CV at any time to prevent access. It will however remain in the system so that you can use it for attaching to your online applications.
Of course, you can also remove your CV completely from the system at any time. Naturally we accept no liability for the confidential treatment of your data by employers. Please keep this in mind when you enter personal information into the visible section of your CV or if you disclose personal information to an employer.
2.1.3 Active public CV
You can also activate and publish your CV. This means that your personal user data (email, name, address, telephone number and as far as voluntarily provided by you also, sex and date of birth) is fully visible to employers, who are logged in to StepStone's CV Center. Such employers will have the possibility of reading and selecting the public CV and may also search for a public CV using certain personal data. Please bear this in mind if you decide to publish your CV.
You can deactivate your public CV at any time or choose the partial active CV option to prevent access to your CV. If you choose the partial active CV option, section 2.1.2 will apply. If you choose to deactivate the CV, it will however remain in the system so that you can use it for attaching to your online applications, section 2.1.1 will apply. Of course, you can also remove your CV completely from the system at any time.
Naturally we can accept no liability for the confidential treatment of your data by employers. Please keep this in mind when you publish your CV.
2.2 Active CV's - Channels
Selected active or partial active CV's may - also in abbreviated form - be published in StepStone Channels and the part which is active may be accessed by everyone.
2.3 CV Agent
Active CV's may be provided by email link to potential employers on their request if they match certain criteria defined by the potential employer. Depending on your settings the respective CV will be sent in the partial active version (excluding your personal user data) or public.
We use a Cookie for the "vote" button in our survey windows, which will be stored on your computer for one week. A separate notice will be displayed for these cookies within the surveys. Apart from that StepStone only uses session Cookies, to make access to our Web site easier. Such Cookies are deleted as soon as you log out.
4. Scalable Central Measurement System
Our website uses the "Scalable Central Measurement System" ("Skalierbare Zentrale Messverfahren" - SZM) provided by INFOnline (https://www.infonline.de) for the determination of statistical data about the use of our website. The measurement data is collected anonymously. In order to recognize a computer system the SZM reach measurement altenatively uses either a Cookie with the identifier "ivwbox.de" or a signature which is generated based on several different information which is transmitted by your computer. IP addresses are not stored as part of the method and are used in anonymized form only.
The reach measurement was developed in consideration of data protection. The intention of the reach measurement is to define the intensity of use and the number of users of a website by statistical means. At no time individual users will be identified. Your identity will be protected at any time. You will not receive advertisements via the system.
For websites that are member of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. (IVW - www.ivw.eu) or which participate in the study "internet facts" of the Arbeitsgemeinschaft Online-Forschung e.V. (AGOF - www.agof.de) the user statitics are published monthly by AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. (ag.ma - www.agma-mmc.de), as well as by IVW and are accessible via http://www.agof.de, http://www.agma-mmc.de und http://www.ivw.eu.
Apart from the publication of measurement data the IVW monitors the SZM-method continuously with respect to a generelly compliant and data protection compliant use.
Further information about the SZM-method can be found at the website of INFOnline GmbH (https://www.infonline.de), who operates the SZM-method, the data protection website of AGOF (http://www.agof.de/datenschutz) and the the data protection website of IVW (http://www.ivw.eu).
You may oppose to the use of data by the SZM via following link: http://optout.ivwbox.de
5. Log Files and Statistics
In our Logfiles, we collect and store Internet Protocol addresses (IP addresses) for a limited period, as far as it is necessary for data safety reasons. We also use Internet Protocol addresses to create anonymous statistics, in order to measure the number of visitors to our Web site (traffic) and we use it for accounting purposes to calculate the number of clicks received via Web sites of our business partners, but we do not draw up user profiles or link these to personally identifiable information.
6. Box number job offers
If you reply to a job with a box number you therewith give us your consent to forward your covering letter and all data included therein to the customer of that box number. We are entitled but not obliged to forward your cover letter. We do not check the content of your message on a regular basis. However, we are entitled to do so. We will not forward your covering letter if we discover that it contains illegal content as defined below. Furthermore we will accept any lock flags for particular companies, if you have given us the detailed and correct name (name and legal form of the company) and address. Due to the time consuming research involved we cannot accept lock flags for a whole group or organisation. As an exception we will, however, accept such lock flags that define every single company of such group or organisation giving the detailed name, address and legal form.
We do not forward any additional data apart from your covering letter (e.g. data from your CV), there is no matching with the personal data you have entered into our system.
7. Illegal Content
Please note that you are solely responsible for all texts entered into our system or sent to us (e.g. for forwarding to box number advertisements). Please ensure that you do not send us any attachments that contain viruses or worms. Personal details provided to StepStone should not contain: information on illnesses, information about pregnancy, any information about ethnic origin, political opinion, religious or philosophical beliefs, trade union membership, health and sexual orientation; defamatory or slanderous information; information having no reasonable relation to the job profile. The information you send us must be accurate and must not infringe copyrights, trademarks or other intellectual property rights, contravene law, competition law or other applicable provisions, official regulations, the rights of third parties in general or public policy ("Illegal Content"). This includes but is not limited thereto that you may not create CVs for third persons without their explicit consent or create CVs for non-existent persons and that photos provided to us must be up to date and display the face of the actual candidate. We point out that you are responsible for keeping your contact details, particularly your e-mail address up to date and ensuring that you can be contacted at the email address provided and that the email address is not transferred to third persons. It is not allowed to create CVs for the purpose of advertising the services of a company but only for the individual jobsearch and for freelancers to offer their personal services on their own account. Please note that you undertake to indemnify us against all claims made against us as a consequence of your failure to prevent Illegal Content appearing in any information you provide.
8. Who is processing your data?
Our Web site is hosted by StepStone NV, Avenue des Arts, 3/4/5, 1210 Brussels, Belgium. The servers are maintained by Belgacom Netcenter, Rittwegerlaan 15, 1830 Machelen, Belgium on their premises. These companies are responsible for the processing of your data. As far as StepStone works together with business partners to deliver its services, StepStone may forward your data to these partners if and in so far as this is necessary for technical administration and maintenance of the StepStone products. StepStone will provide information about this in its currently valid Privacy Statement.
9. With whom do we share your personal data?
The partial active and the public CV can be accessed by potential employers (normally employers or recruiters) within the StepStone CV Center. It can also be forwarded by email or print to interested recruiters in order to increase the reach and response rates. The StepStone CV Center can be reached directly via the StepStone Web sites or via simple or qualified links with StepStone's cooperation partners on the Internet. Our websites are accessible worldwide through the internet. The potential employer could be located outside Germany or even outside the EU which could involve a transmission of data outside the EU. Only in case of public CV's your personal user data in your CV will be disclosed without further request within the CV Center. If you have chosen the option of partial active CV, you may decide in each individual case and after you have been informed about the recipient whether you would like your personal user data to be disclosed to a potential employer who requests this information. Once your personal user data has been disclosed to a potential employer we cannot prevent misuse of such disclosed data. Also, StepStone cannot avoid that individuals other than employers, recruiters or HR consultants use the CV database.
If you have entered a partial active or active CV it is possible that your profile is contacted by email for other purposes or by other companies.
In order to establish an international element to our data base, we are planning to implement the StepStone CV Center in other countries of the StepStone Group enabling these to access the data. Further information about these companies is available at www.stepstone.com or at the end of this Privacy Statement.
10. Right of access to, editing and deletion of your CV data:
You have a right of access, information and rectification of your data.
If you wish to edit or delete your data or your CV in the database, simply log in at The Personalized User Space and use the corresponding functions. You can delete one or more stored CV's in the menu "CV"; all data stored for the registration with the Personalized User Space can be deleted completely in the menu "Your Account". If you want us to delete your personal data or CV we will be happy to do so on your behalf. Also, we will inform you immediately about your personal password in case you have forgotten it. StepStone is entitled to withdraw its services at any time, or to delete your data in whole or in part without giving further notice. You have no right to claim publication of your data.
Important Notice: We will delete your data at no cost to you if they have not been updated for 5 years. The reason for this is that StepStone intends to process your data in a talent pool to assist you during your life long career rather than just help you find a one off job like a standard job board.
11. Data Security
We use a variety of methods, such as encryption (SSL), firewalls, intrusion detection software and manual security procedures, to help protect the accuracy and security of your personal information and to prevent unauthorized access or improper use by third parties. The SSL encryption is activated if the key symbol is displayed at the bottom of your browser and if the address starts with "httpS://...". This means the data transfer is protected by SSL (Secure Locket Layer) with a 128 bit encryption, preventing third parties from illegally accessing your data. If the encryption is not activated you should consider whether you should send confidential information via the internet. Emails are only encrypted if, in addition to the above, you use the StepStone Mailbox, not if you use your own email address.
Please note that this also applies to the personal password required for certain functions on the StepStone pages and the email confirmation you receive after your first registration if you receive these via your own email address. Please note we do not use encryption in our emails. We recommend that users change the password sent to them with a new personal password. You can also change your password at any time in the Personalized User Space at "Your Account".We only store personal data that you have entered into The Personalized User Space. No other person related data will be stored.
Please note that some employment contracts may not permit private use of the Internet during working hours or from your work place. Some employers systematically monitor unauthorised Internet activities on your work place. Although you are connected via a multiple network environment, you should be aware that there is a risk of unwanted access.
StepStone does not guarantee or warrant that the services are available at certain times. Disturbances, interruptions or a possible breakdown of the online service cannot be excluded by StepStone. Systematic backups of the servers are carried out regularly. In so far as data have been transferred to StepStone - regardless their form - we recommend that you create your own backup copies. StepStone reserves the right to delete a publication, without reason at any time without notice. The user has no right to claim publication. StepStone reserves the right to change, extend, limit or withdraw its services at any time. Therefore, StepStone shall not be liable for any deleted data or loss of data.
Our Web site contains links to other sites. Please be aware that we are not responsible for the privacy practices of these other sites. We encourage our visitors to be aware of this when they leave the StepStone Web site, and to read the Privacy Statements of each and every Web site that collects personally identifiable information. This Privacy Statement applies only to information collected on our Web site. Privacy Statement changes
13. Facebook Plug-ins
In order to make our internet presence more attractive for users we cooperate with the social network facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. We use so called plug-ins to integrate facebook into our site. This can be in the form of "facebook connect" or "facebook - share".
If you click on any such plug-in then your browser will take up a direct connection with the facebook server. Then, you will see a description of the content of such a plug-in (for example the friends-box). In this case, facebook will receive your IP address and other equipment related information. Also, it is possible that a cookie will be placed on your PC that will be deleted when you close the browser. You can choose in your browser setting if you want to allow cookies or not.
When the plug-in is loaded (when you enter a site that has a plug-in integrated), facebook will receive the information that a user with a certain IP address has visited the internet site of Stepstone. If you are logged-in to facebook at the same time, then facebook can relate your facebook account to your visit to StepStone. That is why you can be shown to your friends in the plug-in. Purpose and scope of the data collection, further processing and use of that data by facebook as well as your rights and options for your facebook settings to protect your privacy can be found in the facebook privacy declaration.
With the facebook-share button, you can recommend the StepStone service to your friends. They will see that you have visited a certain site (listing) of StepStone and receive a recommendation.
With the facebook-connect, you can use your facebook account to open or to connect to an existing account at StepStone. Upon creation of an account via facebook we will receive certain account details from facebook (namely: facebook user ID, your email address, first name, last name, birthday, your facebook user groups, your education history, your work history).
We will use these details to pre-fill your StepStone account. The StepStone account will not be visible to anyone except StepStone and its technical processors (for more information see the relevant parts in this privacy declaration). Third parties will only see any of your personal data if you allow this explicitly, e.g. by choosing the option "partial active CV" or "public CV".
14. BranchOut Integration
In order to make the use of StepStone more attractive for job seekers we cooperate with BranchOut, Inc, a professional networking application on facebook. We use BranchOut's "InsideConnections" button ("IC Button") as part of the job ads published on our websites.
When the IC Button is loaded (when you enter a site that has the IC Button integrated), BranchOut will receive the information that a user with a certain IP adress has visited the website of StepStone.
If you do not yet have a BranchOut account or are not logged in to it and you click on the IC Button your browser will be directed to a Welcome Screen provided by BranchOut. There you may choose to continue and create an account with BranchOut. In order to create an account with BranchOut you have to use a facebook account.
Once you have a BranchOut account and are logged in when you visit a job offer published on our website BranchOut can relate your BranchOut account to your visit to StepStone. BranchOut will then be able to show who of your BranchOut connections works at the company whose job offer you are currently viewing.
Any changes to our privacy commitment will always be available here on our homepage so that our visitors are always aware of what information we gather, how we might use that information, and whether we will disclose it to third parties. At the bottom of this page you will find links to former versions of our Privacy Statement. If you want to store this Privacy Statement, please press ctrl-s, to print press ctrl-p
The public register of processing information (Verfahrensverzeichnis) can be obtained upon request from firstname.lastname@example.org.
In case of any questions or concerns in respect to our obligations under data protection law, please send us an email to email@example.com or contact us at:
0800 - 78 37 786
Head Office StepStone Deutschland GmbH
Hammer Straße 19
Or contact our data protection officer:
Mr. Sebastian Creutz
StepStone Deutschland GmbH
Hammer Straße 19
Düsseldorf, July 10th 2012