The protection of your personal data which we collect and process as a provider of staffing services is a key concern for us, Robert Half Deutschland GmbH & Co. KG (“Robert Half” or “we”/“us”). This privacy notice describes how we process your personal data and the rights you have.The services we offer, including this website, are not intended for children.
Data controller
Robert Half Deutschland GmbH & Co. KG
Mainzer Landstraße 50
60325 Frankfurt am Main
[email protected]Data protection officer
Olga Stepanova, lawyer
C/O bytelaw Koch Stepanova Veeck Partnerschaft von Rechtsanwälten mbB
Bockenheimer Landstraße 51-53
60325 Frankfurt am Main
[email protected]
II. How we process your personal data
1. Visitors to our website
In the section below we will describe how we process your personal data when you visit our website and use its functions. Please also note the special notes for candidates, job applicants, client contacts, supplier/service provider contacts and visitors to our premises.a. Visiting our website for information purposesWhen you visit our website exclusively for the purposes of obtaining information, the web browser you are using on your device will automatically collect and send information for technical reasons.Categories of personal data processed: Technical data (IP address, device type and model, operating system, web browser type and version, time zone and language settings, date and time of access, and the referrer URL – i.e. the website from which you were referred).Purpose of processing: We process these data categories to provide you with the contents of the web pages you access and to ensure the security of our IT systems. We will not use this data for any other purposes, in particular marketing.Data source: This data is collected directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. If you do not provide this data, you may not be able to view and use the full scope of functionalities provided on the web page.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interests in processing the data lie in providing the website and safeguarding the security of the IT systems used to do so.Duration of data retention: The data is retained only temporarily for the duration of the session. It will be deleted at the end of each session.Recipient category: NoneRecipient locations: -Guarantees for transfers to third countries: -b. Subscribing to our newslettersYou may subscribe to two different personalised newsletters on our website. When subscribing to our career newsletter, you will receive information on job searches, job applications, career development and the latest salary trends via email. When subscribing to our management newsletter, you will receive information on salary and job market trends as well as recruiting tips and research studies. Please feel free to subscribe to either one or both newsletters.Categories of personal data processed: Master data (first name, last name); contact details (email address); technical data (IP address, date and time of subscription).Purpose of processing: Personalising and sending the newsletter(s). We process your IP address and the time of your subscription to ensure that you personally subscribed to the newsletter(s), that your personal data was not misused and to have proof that you have given your consent to processing.Data source: This data is collected directly from you via the subscription form provided on our website and using the technical data transmitted by your browser.Obligation to provide data: You are under no legal or contractual obligation to provide this data. If you do not provide this data, we will not be able to send you the personalised newsletters.Legal basis: We process this data based on your consent to processing for a specific purpose according to Article 6(1)(a) GDPR which you have given via double opt-in. The double opt-in procedure is used to register and authenticate your e-mail address. Based on this procedure, the IP addresses are matched by your website visit and the confirmation of your e-mail address via a confirmation link.Duration of data retention: We will retain your data until you unsubscribe from our newsletter. You may unsubscribe simply by clicking the unsubscribe link provided in each newsletter. If we also received and process your name and email address for other purposes than sending you our newsletter, we will only delete this data upon your express request or when all purposes of processing have been fulfilled, we no longer require your data and they are no longer subject to any statutory retention obligations. If you only wish to unsubscribe, you will no longer receive our newsletters, but we will retain your data for such other purposes of processing.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 (3) GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.c. Contacting usPlease feel free to contact us using the contact details provided on our website. You may freely choose the medium for contacting us.Categories of personal data processed: Master data (first name, last name);contact details (postal address and/or email address, depending on your preferred method of contact); communication data (contents of your message).Purpose of processing: Receiving and responding to your communication.Data source: We receive this data directly from you via the contact medium you have chosen.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: If pre-contractual measures are initiated by the message or it was sent in connection with an existing contract, the data concerned is processed in accordance with Art. 6 (1) (b) GDPR. If this is not the case, the processing is based on the so-called legitimate interest in accordance with Article 6(1)(f) GDPR. Our legitimate interest in processing is receiving and responding to your contact.Duration of data retention: Where your communication does not lead to subsequent collaboration, we will retain your data only until we have responded to your enquiry or the completion of correspondence with you. Where your initial communication results in subsequent collaboration, the retention periods for the processing purposes indicated will apply. In general, your data will be deleted after expiry of the limitation period, starting at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Providing feedback to our websiteYour feedback is important to us. This is why we have provided a special feedback form (referred to as “Webmaster Feedback”) on our website which you may use to give us feedback or communicate any other information.Categories of personal data processed:Master data (name); contact details (email address); communication data (subject and your feedback).Purpose of processing: Obtaining your feedback and possibly responding to your feedback or questions you may have. We will not use this data for any other purposes, in particular marketing.Data source: We will collect this data directly from you via the feedback form provided.Obligation to provide data: You are under no legal or contractual obligation to provide this data. If you do not provide this data, you will not be able to give us your feedback via the form and we will not be able to use your feedback or respond to it.Legal basis: The processing is based on your consent in accordance with Article 6 (1)(a) GDPR.Duration of data retention: After implementing and/or responding to your feedback, we will promptly delete this data. In individual cases certain content of your feedback may be useful for us for a longer period of time. In this case we will anonymise your feedback so that you can no longer be identified as an individual.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 (3) GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.e. Web analytics toolsWe use web analytics services to gain insight into how our website is used so that we can measure and improve the performance, content and functionality of our website, optimize spend and enhance marketing campaign effectiveness. This includes using analytics data to analyze website behavior, campaign attribution and conversion activity. This data processing is based on your consent to non-essential cookies and similar technologies. You can find more information about the use of cookies in our Cookies policy.We use server-side tracking with first-party cookies provided by Tealium Inc. (9605 Scranton Rd., Ste. 600, San Diego, CA 92121, United States). However, all data processing takes place exclusively in the EU. If you consent to the use of non-essential cookies and similar technologies, Tealium will place a persistent cookie called "TAPID" on your browser. The TAPID cookie assigns a unique visitor ID to your browser, which allows us to recognize your visit when you return to our website. This unique visitor ID does not directly identify you by itself, as it does not collect any personal data about you, such as your name or other identifying details. It helps us understand how you found our website and how you navigate across different visits and sessions on our website. Categories of data processed by Tealium include the Tealium TAPID (unique visitor ID), website behavior, referring and current URLs, device technical data (such as device type and model, operating system, browser type and version, time zone, language setting, access time and date, and location information such as country, state, and city). We refer to this as “analytics data”. The unique visitor ID remains active on your device for up to six months from your last interaction with our site or until you clear your cookie cache.Tealium Inc. does not retain the analytics data or unique visitor ID after transferring this to our analytics service provider, Domo Inc. (802 E 1050 S, American Fork, Utah, 84003, USA). In Domo, web analytics data is stored in an unidentifiable form and linked only by a unique visitor ID. We cannot identify you until you provide additional personal data, such as your name, email address, or other contact details, by submitting a job application or completing a form on our website.When you submit personal data on our website, both the data you entered and your unique visitor ID are stored in one or more of our internal databases such as Domo, Leads Processing, Resume Feed, and Marketing Cloud, depending on your activities on our website. At that point, we associate your website activity, including analytics data linked to the Tealium TAPID unique visitor ID, with the personal data you submitted and any existing information we hold about you in our candidate and client databases. This allows us to relate your website activity to you based on the information you submitted and helps us evaluate the effectiveness of our marketing campaigns and website features, improve our services, and refine our marketing strategies.For backup, we store analytics data in Google BigQuery, a product provided by Google Ireland Limited (Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland). Google processes this data as a service provider/infrastructure provider for hosting and storage purposes and is not permitted to use it for its own purposes. Analytics data stored in BigQuery is transferred to Domo daily.You can withdraw your consent to the use of non-essential cookies at any time. This does not affect the lawfulness of any processing carried out before you withdraw your consent. To do so, click on the green symbol displayed at the bottom left of the page. If you reject or withdraw consent to non-essential cookies, the TAPID cookie and other non-essential cookies will not be used. As a result, we will not use the TAPID cookie to recognize your browser across different visits and sessions or link your personal data together to improve the effectiveness of our marketing campaigns and website features, as described above.We do not use this analytics processing for automated decision-making.Categories of data processed: Tealium TAPID (unique visitor ID), website behavior, referring URL and current URL, device technical data (device type and model, operating system, browser type and version, time zone, language setting, access time and date, and location information such as country, state, and city).Purpose of processing: measure and improve the performance content or functionality of our website, optimize spend and enhance marketing campaign effectiveness.Source of data: This data is collected directly from you through the use of our website.Obligation to provide the data: There is neither a legal nor a contractual obligation to provide this data.Legal basis: The processing is carried out on the basis of the consent you have provided via the cookie banner used in accordance with Art. 6 (1) (a) GDPR.Storage period: Tealium does not store the analysis data it processes. BigQuery retains the analytics data for 90 days before automatically deleting it. The Leads Processing database stores the data for 14 days, while the Resume Feed retains it for 30 days. Domo keeps the data until it is no longer needed to fulfill the purpose for which it was collected.Recipient category: Software providersLocation of recipient: EU and non-EUGuarantees for transfer to third countries: Standard contractual clauses of the EUf. Consent-ManagementWe use a consent management service for cookie management on our website.Categories of personal data processed: Date and time of the visit, browser information, information on consent, information on the end device, IP address of the requesting end device.Purpose of processing: The purpose of data processing is to offer visitors to our website the opportunity to consent to the use of cookies. The documentation of such consent is required in accordance with the accountability obligation under Art. 5(2) GDPR and is necessary to ensure the revocation of consent and to control the setting of cookies.Data source: This data is collected directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: The processing of the above data is carried out on the basis of Art. 6(1)(c) GDPR in conjunction with. § 25(1) TTDSG.Duration of data retention: We delete your personal data when it is no longer required to fulfil the purpose for which it was processed. This is usually the case after three years, starting at the end of the year in which the data was collected.Recipient category: Software providerRecipient locations: EUGuarantees for transfers to third countries: -g. Whistleblower systemWe have established an appropriate compliance policy to meet legal requirements. In addition to pertinent policies, the monitoring of existing and new processes and other preventative and reactive measures, this compliance policy also provides for the comprehensive investigation and clarification of suspected breaches of regulations. To facilitate in-depth investigation, we have established a whistleblower system allowing employees and external informants to report suspected breaches. For further general information on our whistleblower system, please see Link.Categories of personal data processed: Whistleblower/informant:Master data (first name, last name; contact details (email address, telephone number, postal address – if voluntarily provided); communication data (contents of the report).Accused (where necessary for investigating the suspected breach and/or if indicated by whistleblower/informant): Business master data (first name, last name, position, profession); business contact details (email address, telephone number, postal address); factual data (information on the matter reported as provided by the whistleblower/informant); communication data (content of emails from accused employees); other business documents from or about accused employees; special categories of personal data according to Article 9 GDPR (where indicated by the whistleblower/informant).Purpose of processing: Checking the plausibility of reports, investigating potential breaches, implementing measures that may be required where breaches have been determined, adopting preventative measures to avoid future misconduct, establishing, exercising or defending legal claims, defending accused persons, fulfilling any obligation to collaborate in investigations conducted by prosecution authorities and/or other authorities involved to the extent required and permitted by law.Data source: This data is collected directly from you, provided by the whistleblower/informant and may also be collected from managers, colleagues or third parties where this is required for investigating the matter reported.Obligation to provide data: The whistleblower/informant is under no legal or contractual obligation to report a suspected breach via the whistleblower system. When the reported matter is investigated, the accused may be legally and/or contractually obligated to provide personal data. In this case, we will inform you accordingly upon request.Legal basis: We process this data for the purposes of for complying with legal obligations Article 6(1)(c) GDPR in conjunction with § 13,14 Whistleblower Protection Act (HinSchG)); if you voluntarily provide us with your personal data in the whistleblower form, you hereby give us your consent in accordance with Article 6(1)(a) GDPR for this processing; because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in defending legal claims and supporting the defence of the accused where applicable and the anonymisation of data to improve preventive measures.Duration of data retention: We will retain the personal data involved for as long as this is necessary for investigating the matter reported and adopting any appropriate measures and also until expiry of the legal retention period. If the whistleblower/informant withdraws the consent given, we will promptly delete their identification and contact details. We reserve the right to retain certain information for a longer period of time where we consider this necessary. In this case we will previously anonymise such information so that the persons involved can no longer be identified as individuals.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 (3) GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
2. Candidates (temporary agency work, job placement and self-employed consultants)
a. Job searchOn our website, you may search for suitable job opportunities and apply for them. The job search is conducted based on the parameters you have selected in the web form. We will record your personal data only when you apply for a position. As long as you use our job search feature only for obtaining information, no personal data is recorded. If you decide to apply for a position listed on our website, you may do so by either uploading your CV directly or having your relevant data transmitted from LinkedIn or Xing to us. As a first step, you will receive a registration form in which we ask you to confirm that the information you have provided is correct and not misleading and that you wish to use the services provided by Robert Half. When we conduct searches to find other/additional job opportunities that we deem suitable for you, we will also use artificial intelligence (AI). For further information on the use of AI, please refer to the section “Automated decision-making and use of artificial intelligence”.Categories of personal data processed: The search parameters you have entered or selected (job title or search term, city/region, remote working (home office) preference, your specialisation and whether you are looking for job placement or temporary agency work); master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); placement data (information that you are registered as a job seeker – only if you have been recommended to us by the Federal Employment Agency and you decide to contact us or apply for any of our vacancies); salary expectations; any other information you may wish to provide via this means for your job application.Purpose of processing: Assessing your suitability for the position you are applying for, shortlisting candidates by our recruitment consultants according to the requirements of our clients, communicating with you regarding the position chosen and/or other job vacancies we may deem suitable for you, and drawing up a standardised candidate profile for potential presentation to the respective employer (please also refer to the section “Presentation to potential employers”).Data source: We will collect this data directly from you or, if you so wish and instruct, directly from LinkedIn or Xing. If you are registered with the Federal Employment Agency and they consider you suitable for a position we have advertised, we will receive your anonymized profile from the Federal Employment Agency. If you decide to contact us or apply for a position with us, we will be able to link your anonymized profile to you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data. If you choose not to provide individual items of the information listed above, we may not be in a position to present you to the potential employer you prefer because the employer expects this information and will not accept candidates without it.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR. We utilise artificial intelligence because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR in efficiently processing your job search.Duration of data retention: We will retain your data for as long as we are, upon your request, searching for a potential employer and/or a suitable position for you or you wish us to otherwise support you with your career. You may at any time ask us to stop searching for a potential job for you or otherwise supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. If you do not return the completed and signed registration form we send you, we will automatically delete your data after 90 days. In this case we will assume that you do not wish to use the services provided by Robert Half.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Job recommendations (candidate registration)If you have not found a suitable position orthrough our job search, would like to ask us to continue the job search on your behalf or if you wish to be generally included in our file of candidates to receive job recommendations, you may also upload your CV or have your data transmitted to us from Xing. As a first step, you will receive a registration form in which we ask you to confirm that the information you have provided is correct and not misleading and that you wish to use the services provided by Robert Half. When searching for suitable positions for you, we will also use artificial intelligence. For further information on the use of AI, please refer to the section “Automated decision-making and use of artificial intelligence”.Categories of personal data processed:Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you may wish to provide via this means for your job application.Purpose of processing: Searching for job vacancies that we deem to match your profile, communicating these to you via email and drawing up a standardised candidate profile for potential presentation to the respective employer (please also refer to the section “Presentation to potential employers”).Data source: We will collect this data directly from you or, if you so wish and instruct, directly from Xing.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR. We use artificial intelligence because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR in efficiently processing the job search.Duration of data retention: We will retain your data for as long as we are, upon your request, searching for a potential employer and/or a suitable position for you or you wish us to otherwise support you with your career. You may at any time ask us to stop searching for a potential job for you or otherwise supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. You may also unsubscribe from future job recommendations by clicking the link provided in the job alert emails. If you so wish, we will then promptly delete your personal data on file with us. If you do not return the completed and signed registration form we send you, we will automatically delete your data after 90 days. In this case we will assume that you do not wish to use the services provided by Robert Half.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUc. Online accountWhen you are applying for a job vacancy found through our job search, filing an unsolicited job application or if you have already been included in our file of candidates, you may register for an online account (Candidate Web). Through this online account, you can manage your personal information yourself and keep it up to date.Categories of personal data processed: Login data (email address and password of your choice).Purpose of processing: Setting up and providing your online account, allowing you to manage your data yourself.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We will process this data in the performance of the usage agreement concluded with you according to Art. 6(1)(b) GDPR.Duration of data retention: We will retain this login data for as long as you wish to use your online account. If you are no longer interested in using your online account, please inform us accordingly. In this case we will delete your Login data immediately. Should you wish not only your online account but your entire candidate file to be deleted, please inform us accordingly as well. We will then promptly delete your data. Your right to be deleted depends, among other things, on whether your personal data is still required to fulfill our legal obligations.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Participating in events/job fairsWe regularly organise events/job fairs for interested candidates and employers or participate in such events/job fairs organised by third parties. Where these events/job fairs cater to a restricted group of persons or we hold presentations at such events which you would like to receive afterwards as documents, we will process your personal data if you attend and wish to receive documents.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); requests/enquiries communicated at the event that you would like us to contact you about.Purpose of processing: Managing the event (checking whether you are authorised to attend, your invitation, welcoming you to the event); sending you the desired information materials after the event.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to invite you to events and/or send you the requested documents if you do not provide this data.Legal basis: This data is processed for the performance of the contract in accordance with Article 6(1)(b) GDPR.Duration of data retention: As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted or restricted immediately and only stored for the purpose of asserting or defending legal claims until the end of the three-year limitation period, starting at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage provider, event organisorRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUe. Satisfaction surveyIf you are registered with us as a candidate, we will from time to time or upon finalising a placement ask you to participate in a satisfaction survey. Taking part in such surveys is entirely voluntary; you are under no obligation to participate in them.Categories of personal data processed: Master data (first name, last name); contact details (email address); survey responses.Purpose of processing: Improving the services we offer candidates.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in improving the services we offer candidates.Duration of data retention: We will retain this data for as long as necessary for analysing the survey results and responding to any improvements you may have suggested or critical feedback you may have given us. Should you object to the processing of your data before that, we will promptly delete your data.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUf. Continued supportIf you have applied for a position or have filed an unsolicited application through our website, a job portal or on social media websites such as Xing, LinkedIn, Facebook, Instagram or X, or have informed us of your interest in being included in our file of candidates during a job fair, promotional event, networking or training session or have communicated your interest in our services through any other means and have subsequently returned the completed and signed registration form to us, we have included you in our file of candidates. We will support you not only in your current job search but will continue to do so following a successful assignment as a temporary agency employee, a job placement or the arrangement of a consultancy contract with a client of ours, assisting you in expanding your skills, updating and improving your candidate profile and thus promoting your further professional career.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; any other information you may wish to provide via this means for your career.Purpose of processing: Providing you with continuous advice for improving your skills, optimising your career or consultant profile; sending you job recommendations and career opportunities; offering interesting insights into professional and career development.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR.Duration of data retention: We will retain your data for as long as you wish us to support you with your career. You may at any time ask us to stop supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. You may also unsubscribe from future job recommendations by clicking the link provided in the job alert emails. If you so wish, we will then promptly delete your personal data on file with us. Your right to be deleted depends, among other things, on whether your personal data is still required to fulfill our legal obligations.Recipient category: Software provider, cloud storage provider, training platformsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUg. Learning platform (e-learning)We understand staffing services to include more than just placing you in a job. We would also like to support you with continuing your education and training and expanding your specialist knowledge. You may send a request to the Robert Half branch of your choice, and we will provide you with personal login data for our learning platform where you will be able to attend online courses on a variety of subjects free of charge.Categories of personal data processed: Master data (first name, last name); contact details (email address); allocation data (branch of your choice); communication data (content of your enquiry); login data (email address, password).Purpose of processing: Generating and transmitting your login data.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to send you login data and you will not be able to use our learning platform without it if you do not provide some or all of this data.Legal basis: We will process this data in the performance of the usage agreement concluded with you according to Art. 6(1)(b) GDPR.Duration of data retention: We will retain this login data for as long as you wish to use our learning platform. If you are no longer interested in attending our free online courses, please inform us accordingly. We will then promptly delete your data.Recipient category: Software provider, cloud storage provider, training platformsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUh. Internal interviewsWhen we have found a potential position for you, we may invite you to an initial internal job interview before arranging a job interview with our client in order to better brief you and finally assess your suitability for the position.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you have provided to us for your career; interview contents.Purpose of processing: Briefing you for job interviews with our clients and finally assessing your suitability for the position.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data. If you choose not to provide individual items of the information listed above, we may not be in a position to present you to our clients because our clients expect this information and will not accept candidates without it.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR.Duration of data retention: We will retain your data for as long as you wish us to support you with your career. You may at any time ask us to stop supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. You may also unsubscribe from future job recommendations by clicking the link provided in the job alert emails. If you so wish, we will then promptly delete your personal data on file with us.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUi. Presentation to potential employers/users/contracting partiesWhen we have found a potential position for you and consider you a suitable candidate for our client, we will present you to our client provided that you have expressed interest in the position. Our client will initially receive an anonymised and standardised candidate profile. If our client informs us that they are interested in getting to know you as a candidate for the respective position, we will – upon consulting with you – transmit the personal information we have collected from you through the processes described above.Categories of personal data processed:Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); salary expectations; remote working (home office) preference; any other information you have provided to us for your career; interview contents (only if we have conducted an internal job interview with you).Your requirements regarding potential positions and the further development of your career that you have communicated to us; the information you have provided in your CV or transmitted to us via LinkedIn/Xing (your identity, contact details, education and training and other qualifications, professional background and other information you have provided to us via these means); as well as additional information and requests you have communicated to us in the course of your career and, if an internal job interview has been held, the contents of the interview. We store in your file which customers we have introduced you to and which decision was made.Purpose of processing: Presenting your profile and presenting you to our clients for potential placement/assignment.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to offer you the full range of our job placement services if you do not provide some or all of this data. If you choose not to provide individual items of the information listed above, we may not be in a position to present you to our clients because our clients expect this information and will not accept candidates without it.Legal basis: We process this data for the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR.Duration of data retention: We will not put your data on file again, but we will include in your file the clients we have presented you to and the decision made in each case. You may at any time ask us to stop supporting you with your career and to delete your data. Please inform your recruitment consultant accordingly or inform us using the contact details indicated at the beginning of this notice. If you so wish, we will then promptly delete your personal data on file with us.Recipient category: Software provider, cloud storage provider, clientsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUj. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is usually the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
3. Job applicants
a. Applying for internal positionsIf you wish to start a career with Robert Half, we look forward to receiving your application. You are welcome to send us your job application and accompanying documents via postal service, email or our website.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); CV data (education and training, other skills and qualifications, professional background); placement data (information that you are registered as a job seeker – only if you have been recommended to us by the Federal Employment Agency and you decide to contact us or apply for a job with us); salary expectations; remote working (home office) preference; any other information you may wish to provide via this means for your job application.Purpose of processing: Organising the recruitment procedure.Data source: We will collect this data directly from you. If you are registered with the Federal Employment Agency and they consider you suitable for an internal position advertised by us, we will receive your anonymized profile from the Federal Employment Agency. If you decide to contact us or apply for a position with us, we will be able to link your anonymized profile to you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data for the purposes of deciding whether to establish an employment relationship with you and taking steps prior to entering into a contract according to Article 6(1)(b) GDPR.Duration of data retention: We will retain this data for the duration of the recruitment procedure and, if we reject your application, for another six months following the end of the recruitment procedure. Upon successful recruitment, we will include your personal data in your personnel file and store it there for the duration of contract execution.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Inclusion in talent poolWe may have to reject your application to an internal position in the course of the recruitment procedure. If we consider your profile especially interesting, we will ask you whether you would like to be included in our talent pool. When you are listed in our talent pool, we can directly take you into account when filling future vacancies.Categories of personal data processed: The personal data you have provided in the course of the recruitment procedure.Purpose of processing: Including you in our talent pool to be able to consider you for future vacancies.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data based on your consent to processing for a specific purpose according to Article 6(1)(a) GDPR. We will only ask you for your consent if we consider you suitable for inclusion in our talent pool.Duration of data retention: We will retain your data for a period of one year, unless you withdraw your consent earlier. Upon successful recruitment, we will include your personal data in your personnel file and store it there for the duration of contract execution.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EURight to withdraw consent: You can revoke your consent to the processing of the personal data you provided when contacting us at any time in accordance with Art. 7 GDPR. To do so, please contact: [email protected]. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.c. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is usually the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
4. Client contacts
a. Staffing requestYou are welcome to inform us of your staffing needs via email, telephone or using the web forms provided on our website.Categories of personal data processed: Search parameters (job title or professional area of your job vacancy, desired type of placement – temporary agency work, interim management, permanent employment or executive search); allocation data (nearest Robert Half branch); business master data (first name, last name, company/organisation name and legal status/structure, position); business contact details (email address, telephone number and postal code).Purpose of processing: Contacting you to further record your staffing needs and preparing the desired job placement services.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR; our legitimate interests lie in contacting you for the purpose of initiating a contract with your employer/company/organisation upon your request.Duration of data retention: We will retain this data for as long as you wish to receive staffing services or suggestions regarding your staffing needs from us. We will promptly delete this data upon your request.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Consultancy requestIn addition to staffing services in the narrow sense of the term, we can in collaboration with our affiliates Protiviti GmbH and Protiviti Services GmbH & Co. KG also offer you customised solutions tailored to your business. You are welcome to enquire about these by contacting us via telephone or email or by using the web form provided on our website. We will transmit your data to our affiliates only if mutually expressed interest in disclosure for the purpose of establishing contact by our affiliate. The expression of your interest in the transfer of your data to our affiliate does not constitute consent; the transfer takes place as listed under "Legal basis" on the basis of the legitimate interest in the transfer requested by you for the purpose of establishing contact by our sister company.Categories of personal data processed: Communication data (your enquiry and the professional area you are interested in); allocation data (nearest Robert Half branch); business master data (first name, last name, company/organisation name and legal status/structure, position); business contact details (email address, telephone number and postal code).Purpose of processing: Contacting you to further record your consulting needs and preparing the desired contractual collaboration.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR; our legitimate interests lie in contacting you for the purpose of initiating a contract with your employer/company/organisation upon your request.Duration of data retention: We will retain this data for as long as you wish to receive services or suggestions regarding your consulting needs from us. We will promptly delete this data upon your request.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUc. Satisfaction surveyWhen we have successfully placed employees with your company/organisation on temporary assignments or in permanent employment, we may ask you to participate in a satisfaction survey. These surveys help us to better understand our clients’ needs and wishes and to continuously improve our services accordingly. Taking part in such surveys is entirely voluntary; you are under no obligation to participate in them.Categories of personal data processed: Master data (first name, last name); contact details (email address); survey responses.Purpose of processing: Improving our services to clients.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in improving the services we offer our clients.Duration of data retention: We will retain this data for as long as necessary for analysing the survey results and responding to any improvements you may have suggested or critical feedback you may have given us. Should you object to the processing of your data before that, we will promptly delete your data.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Participating in eventsWe regularly organise events/job fairs for interested candidates and employers or participate in such events/job fairs organised by third parties. Where these events/job fairs cater to a restricted group of persons or we hold presentations at such events which you would like to receive afterwards as documents, we will process your personal data if you attend and wish to receive documents.Categories of personal data processed: Master data (first name, last name); contact details (email address, telephone number, postal address); requests/enquiries communicated at the event that you would like us to contact you about.Purpose of processing: Managing the event (checking whether you are authorised to attend, your invitation, welcoming you to the event); sending you the desired information materials after the event.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we will not be able to invite you to events and/or send you the requested documents if you do not provide this data.Legal basis: This data is processed for the performance of the contract in accordance with Article 6 (1)(b)Duration of data retention: As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted or restricted immediately and only stored for the purpose of asserting or defending legal claims until the end of the three-year limitation period, starting at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage provider, event organiserRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUe. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is usually the case until the end of the three-year limitation period, starting at the end of the year in which you asked us to delete your personal data.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
5. Supplier/service provider contacts
a. ProcurementIn the context of our business activities, the term "procurement" refers to all processes associated with the purchase of goods and services. In particular, this includes pre-contractual measures such as contract negotiations and the corresponding communication on purchasing. The personal data listed here is processed to identify and evaluate potential suppliers/service providers and to conduct the subsequent contract negotiations.Categories of personal data processed: Business master data (first name, last name, company/organisation name); business contact details (company’s email address, telephone number and postal address); contract data.Purpose of processing: Taking steps prior to entering into a contract, in particular conducting contract negotiations and associated communications.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we may not be able to conclude a supplier/service provider contract with you or your company/organisation if you do not provide this data.Legal basis: Where you personally are a potential supplier/service provider, we process this data for taking steps prior to entering into a contract according to Article 6(1)(b) GDPR. Where you are not personally our potential supplier/service provider (e.g. you are an employee), we process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in taking steps prior to entering into a contract with the potential supplier/service provider or its representatives.Duration of data retention: As soon as we no longer need your personal data for the aforementioned purpose, it will be deleted or restricted immediately and only stored for the purpose of asserting or defending legal claims until the end of the three-year limitation period, starting at the end of the year in which the contractual relationship was terminated. In addition, we are obliged to store the data until the end of the statutory retention period, which can be 6 to 10 years.Recipient category: Software provider, cloud storage providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUb. Supplier checkPursuant to the German Supply Chain Due Diligence Act (also known colloquially as the Supply Chain Act) we check our suppliers to prevent or minimise human rights or environmental risks or to prevent or remedy a violation in accordance with our due diligence obligations.Categories of personal data processed: Business master data of the supplier contact (first name, last name); business contact details of the supplier contact (email address, telephone number and postal address); communication data (contents of the communications and documents and information provided).Purpose of processing: Fulfilling our due diligence obligations under the Supply Chain Due Diligence Act.Data source: We will collect this data directly from you or from your employer.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we may have to request the required documents via other channels or terminate our collaboration with you as the supplier concerned if you do not provide this data.Legal basis: We process this data in accordance with Article 6(1)(c) GDPR in conjunction with the due diligence obligations incumbent on us under §§ 3 and 10 of the German Supply Chain Due Diligence Act (Lieferkettensorgfaltspflichtgesetz)Duration of data retention: We will retain this data for the duration of our collaboration with our suppliers, at least seven years after the documentation has been created.Please inform us of any change of contact to allow us to amend the master data and contact details accordingly.Recipient category: Software provider, cloud storage provider, authorities (if required by law)Recipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUc. Contract performanceIn the context of our business activities, the term "contract performance" refers to all measures that are necessary to fulfill the obligations arising from a contract and to demand the fulfillment of the contract by the supplier/service provider. Personal data is processed in order to provide/claim/accept services, process payments and ensure communication in connection with the performance of the contract.Categories of personal data processed: Business master data (first name, last name, company name); business contact details (company’s email address, telephone number and postal address); contract data; bank account details; invoice and payment data.Purpose of processing: Performing the contracts with our suppliers/service providers, including processing and paying invoices and performing any additional contractual services on our part, as well as the demand for fulfillment of the contract by the supplier.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that we may not be able to perform the contract if you do not provide this data.Legal basis: Where you personally are a supplier/service provider, we process this data for the purposes of performing the contract according to Article 6(1)(b) GDPR. Where you are not personally our supplier/service provider (e.g. you are an employee), we process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in performing our contract with our supplier/service provider.Duration of data retention: We will retain this data for the duration of the contract and also until expiry of the legal retention periods, which may be six to ten years.Recipient category: Software provider, cloud storage provider, payment service providerRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EUd. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims. This is generally the case until the end of the three-year limitation period, beginning at the end of the year in which the contractual relationship was terminated.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
6. On-site Visitors
a. Appointment and preregistrationWe want a visit to our offices to be a pleasant and enjoyable experience for you. We may therefore ask you to register with us prior to your visit. That way your contact can welcome you directly when you arrive without you first having to complete a form (see also “Visitor registration”) at our reception desk.Categories of personal data processed: Master data (first name, last name, company/organisation name, position); contact details (email address, telephone number); visit data (time and duration of visit, address of office visited); other information (vehicle number plate if you use our parking areas, any information communicated regarding special requirements such as accessibility needs).Purpose of processing: Verifying visitors’ identity, safeguarding the security of our premises and the equipment contained therein as well as our other property, our visitors and our employees. If indicated, ensuring accessibility for your visit or, if this is not possible without disproportionate effort, organising your visit in another office with guaranteed accessibility.Data source: We will collect this data directly from you. If you have asked one of your employees or colleagues to make the appointment and preregistration on your behalf, the data will be collected from them.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that in case of no preregistration we may have to require your onsite registration as a visitor to our premises for security reasons and that in the event of non-provision, entry to our premises may be prohibited for security reasons.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR; our legitimate interests lie in ensuring that your visit to our offices is a pleasant and enjoyable experience. We also process the data used to verify your identity and the time and duration of your visit to comply with our legal obligation to ensure an appropriate level of data security according to Article 6(1)(c) GDPR in conjunction with Article 32 GDPR.Duration of data retention: We will retain this data for the duration of your visit and another four weeks thereafter.Recipient category: NoneRecipient locations: -Guarantees for transfers to third countries: -b. Visitor registrationIf we did not ask you to register as a visitor prior to your visit or you declined to do so, we may ask you to register as a visitor at our reception desk.Categories of personal data processed:Master data (first name, last name, company/organisation name, position); contact details (email address, telephone number); visit data (time and duration of visit, address of office visited); other information (vehicle number plate if you use our parking areas, any information communicated regarding special requirements such as accessibility needs).Purpose of processing: Verifying visitors’ identity, safeguarding the security of our premises and the equipment contained therein as well as our other property, our visitors and our employees.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data. Please note that for security reasons you may be denied access to our premises if you do not provide this data.Legal basis: We process this data to comply with our legal obligation to ensure an appropriate level of data security according to Article 6(1)(c) GDPR in conjunction with Article 32 GDPR.Duration of data retention: We will retain this data for the duration of your visit and another four weeks thereafter.Recipient category: NoneRecipient locations: -Guarantees for transfers to third countries: -c. Establishing, exercising or defending legal claimsWe will also process personal data to establish, exercise or defend legal claims where this is necessary.Categories of personal data processed: All relevant personal data on file with us regarding your person that is necessary for establishing, exercising or defending legal claims and that may be processed for this purpose in compliance with legal requirements, i.e. the use of which is not prohibited.Purpose of processing: Establishing, exercising or defending legal claims.Data source: We will collect this data directly from you.Obligation to provide data: You are under no legal or contractual obligation to provide this data.Legal basis: We process this data because this is necessary for the purposes of our legitimate interests according to Article 6(1)(f) GDPR. Our legitimate interests lie in establishing, exercising or defending legal claims.Duration of data retention: We will retain this data for as long as necessary for establishing, exercising or defending legal claims and also until expiry of any legal retention periods.Recipient category: Software provider, cloud storage provider, law firms, authorities, courtsRecipient locations: EU and non-EUGuarantees for transfers to third countries: Standard contractual clauses of the EU
III. Cookies, Web Beacons/Pixel Tags, and Similar Technologies
We use cookies, web beacons/pixels, and similar technologies on our website to ensure the website’s functionality, gain insights into website usage, display personalized advertising, and measure the success of our advertising campaigns. For more information about the technologies we use and how they are categorized, please see the sections titled “Local and Session Web Storage” and “Cookie List” in this section. We use these technologies, which are not technically necessary, only if you have given us your consent via our cookie banner in accordance with Article 6(1)(a) of the GDPR.
1. General information on cookies, web beacons/pixel tags, and similar technologies
On this website we place cookies, web beacons (also called pixel tags) and similar technologies that use your device’s (laptop, tablet, smartphone, etc) browser storage to save and share information with our systems and trusted third-party service providers.The following information explains the types of technologies, what they do, and how we use them on this website:
A. COOKIES: Cookies are small text files that store a little bit of information on your device (like your laptop, tablet, or phone) when you visit our website. They are sent with each browser request to the server and can be created, read, or updated by the website’s code (including JavaScript). Each cookie includes an expiration date. Cookies help our website (and our trusted third-party partners) recognize your device, log you in, remember your preferences, and track how the site is used and performs. Some cookies come directly from us (called first-party cookies), while others come from outside companies that work with us (called third-party cookies). Cookies do not harm your device and do not contain viruses or other harmful software.There are two functions for cookies:Session Cookies: Temporary cookies that expire when you close your browser. They can be strictly necessary or non-essential. Persistent Cookies: Cookies that remain on your device until you manually delete them or they reach their expiration date. They can be strictly necessary or non-essential.Cookies can also be categorized as follows:Strictly necessary cookies – Essential for the website to function properly. Without these cookies, the services available to you on our website cannot be provided. These cookies do not require permission.Functionality cookies- These cookies allow for certain features, preferences or plugins to work on the site. These cookies will only be placed if you agree to their use.Performance cookies - Collect information about how you use our website (e.g., which pages you visit most often) to help us improve performance. These cookies will only be placed after you give permission to the use of cookies.Advertising/Social Media Cookies - Used to deliver relevant ads and enable social media features and integrations. These cookies will only be placed after you give permission to the use of cookies.
B. WEB STORAGE: Sometimes, a website needs to save more information than a cookie can hold. That’s when Web Storage is used. Web Storage files are saved directly in your web browser.They help websites remember things like:Cached data: Information saved by your browser so pages load faster next time. User preferences: The settings you’ve chosen, such as language or display options.Application state: Where you are in a process, like filling out a multi-step form.Unlike cookies, Web Storage files do not send information back to the website every time you visit a new page. This helps pages load faster and improves performance, especially on mobile devices. However, if you have consented to the relevant cookies/scripts, our website code can read this storage and transmit the necessary data to our servers to maintain your preferences or application state.There are three types of Web Storage:Local StorageWhat it does: It stores information that needs to persist across sessions, such as your saved settings, language preferences, or progress on a form.Security & Access: Local storage is designed to be domain-specific. This means data stored by our website (e.g., roberthalf.com) can only be accessed by pages and code originating from our website.When it expires: Due to how the technology works, data normally remains until it is deleted by script, the user (e.g. clearing site data), or the browser, rather than expiring on a set date like most cookies.When it’s placed on browser: After you have given permission for the use of cookies, unless they are strictly necessary for website functionality. You can manage or withdraw your permission using the Cookie Preference Center below or by clicking the green symbol on the bottom left-hand side of the website. If you withdraw permission after the files have been placed, they will be blocked by our consent manager. Processing of data from these files will stop.Session StorageWhat it does: It holds temporary information, such as data needed to complete a form or to checkout. Security & Access: The data is not shared across other websites or even other tabs/windows. It is designed to stay on the single tab or window you have opened at that time.When it expires: It is automatically removed when you close your browser tab/window. When it's placed on the browser: After you have given permission for the use of cookies, unless they are strictly necessary for website functionality. You can manage or withdraw your permission using the Cookie Preference Center below or by clicking the green symbol on the bottom left-hand side of the website. If you withdraw permission after the files have been placed, they will be blocked by our consent manager. Processing of data from these files will stop.IndexedDBWhat it is: A mini-database in your browser that can hold larger amounts of information for more advanced website features. What it does: It stores data used by complex web applications, such as video players, without slowing down the site. Security & Access: It is domain-specific. Data stored by our website can only be accessed by pages and code originating from our website.When it’s deleted: The data stays until you manually clear your browser’s cached data or automatically if the browser needs more space to run or there has been no activity for a designated period of time (the browser company determines the inactivity time for deleting the data). When it's used by the browser: After you have given permission for the use of cookies, unless they are strictly necessary for website functionality. You can manage or withdraw your permission using the Cookie Preference Center below or by clicking the green symbol on the bottom left-hand side of the website. If you withdraw permission after the files have been placed, they will be blocked by our consent manager. Processing of data from these files will stop.
C. JAVASCRIPT TAGS: JavaScript tags are small pieces of code added to a website to make certain features work. They can be placed in different parts of a webpage using the <script> tag or through tag management tools like Google Tag Manager or Tealium. When a tag loads, your browser runs the code so the website can do things like:Load extra scripts or content Change parts of the page Collect or send information to servers in real time Share data with analytics or advertising tools As part of what a tag does on a website, they may also use cookies or web storage files to store and send information through your browser. We use two types of JavaScript tags on our website:1. Essential Tags What they do: These tags support services you have explicitly requested or are essential to website functionality—such as logging into your account, maintaining your progress while uploading a résumé, or submitting a job application form. They also perform critical background functions like load balancing and security checks to keep the site stable and safe.How they work: They place code which may use local or session storage files and cookies that are needed for the website to operate correctly. Safety: These tags are safe to use and do not harm your device. They are free from viruses, Trojans, and malware. Consent: Because these are strictly necessary to deliver the services you have asked for or to ensure the security of our systems, they do not require permission.2. Web Beacons / Pixel TagsWhat they are: These are JavaScript tags, sometimes called tracking pixels or web beacons. They work with our third-party partners (Tealium, Google, Facebook) to measure and improve how our website/ads perform.How they work: A pixel is a tiny, invisible image built into the JavaScript’s code. It doesn’t store or change any information on your device. Instead, it sends limited data— the page you visited, when you visited it, your browser type, and cookie data—to the servers of our third-party partners. Storage used: These tags may create local or session storage files, set cookies, or use IndexedDB storage. Safety: Pixels do not harm your device and are free from viruses, Trojans, and malware. Consent: Pixel tags are only used after you give permission. You can manage or withdraw your permission anytime through the Cookie Preference Center or by clicking the green symbol at the bottom left of the website.
2. Managing cookie settings
You can reject all cookies that are not strictly necessary by changing your cookie settings in the Cookie Preference Center.
To clear your browser’s cache and remove all local storage files, go to your browser’s settings and clear your browsing data.
3. Local and Session Web Storage and Cookie list
Local and Session Web Storage
STRICTLY NECESSARY WEB STORAGEThese files are always active and do not require your consent because they are strictly necessary for the website to function. They allow the website to load properly, provide core services (like logging in), and ensure site security.
Name
Vendor
Domain
Type
Lifespan
Description
aiConsentObject
Adobe Experience Manager
Roberthalf.com
Session Storage
Session
Stores an indicator of consent for AI-based matching, which is read by Adobe Experience Manager to apply consent preferences and control AI functionality.
candidateJobsAppliedAlready
Adobe Experience Manager
roberthalf.com
Session Storage
Session
Stores an indicator of whether the user has already applied for a job during a browser session, which is read by Adobe Experience Manager to identify prior applications and display application status information.
header
Salesforce Experience Cloud
online.roberthalf.com
Session Storage
Session
Stores navigation-related information and links during a browser session, which is read by Adobe Experience Manager to render the site header and support navigation functionality.
jobRefUrl
Adobe Experience Manager
roberthalf.com
Session Storage
Session
Stores the job reference URL, which is read by Adobe Experience Manager to retain job context and support quick apply functionality.
js_location
Adobe Experience Manager
roberthalf.com
Session Storage
Session
Stores the user’s scroll position, read by Adobe Experience Manager to restore page position and support browsing continuity.
mimeType
Adobe Experience Manager
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores the file type (MIME type) of uploaded content, which is read by Adobe Experience Manager to validate file format and determine whether the uploaded file is acceptable for processing.
quickApplyRedirect
Adobe Experience Manager
Roberthalf.com
Session Storage
Session
Stores an indicator value, read by Adobe Experience Manager to manage redirection and support the quick apply functionality.
resume
Adobe Experience Manager
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores a flag value, which is read by Adobe Experience Manager to record that a user has submitted a job application or uploaded a resume and support application processing functionality.
selectedTimeZones
Adobe Experience Manager
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores the user’s selected time zone, which is read by Adobe Experience Manager to retain location preferences and support completion of the job application submission process.
unifiedProfileObject
Adobe Experience Manager
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores user profile information, read by Adobe Experience Manager to link the logged-in user to the website and support personalized functionality and application status display.
userID
Salesforce Experience Cloud
online.roberthalf.com
Session Storage
Session
Stores a user identifier during a browser session, which is read by Salesforce Experience Cloud to identify the authenticated user, maintain session context, and support authentication, authorization, personalization, and auditing functions.
userLocale
Salesforce Experience Cloud
online.roberthalf.com
Session Storage
Session
Stores the user’s language, preferences, and locale settings during a browser session, which are read by Salesforce Experience Cloud to determine the appropriate regional context and deliver a localized user experience.
FUNCTIONAL WEB STORAGEThese local storage and session files help improve the website’s functionality and enable a personalized user experience, but are not considered essential for the website to function properly. They may be used to store preferences, retain user interface settings, and enable optional platform features. Rejecting these technologies may affect certain non-essential features or limit the convenience and personalization of the website experience.
Name
Vendor
Domain
Type
Lifespan
Description
XingCodeVerifier
Xing
roberthalf.com
Session Storage
Session
Stores a temporary code verifier value, read by XING to validate authentication requests and support secure authorization.
PERFORMANCE WEB STORAGEThese technologies allow us to measure and improve the performance of our website. They are used to count visits, identify traffic sources, and see how users move around the site.We only store or access this data if you provide permission. If you do not provide permission, the tracking never begins. If you withdraw permission later, our systems will immediately stop accessing or updating these files for future tracking. However, due to browser limitations, the files may remain physically stored on your device until they are cleared from the cache by browser enhanced privacy settings, JavaScript or you.You can manage or withdraw permission at any time using the Cookie Preference Center or by clicking the green symbol on the bottom left-hand side of the website.
Name
Vendor
Domain
Type
Lifespan
Description
Q_Inter
Qualtrics
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores Qualtrics intercept identifiers and timestamps indicating when an intercept was displayed, which is read by Qualtrics to manage intercept frequency and determine whether and when surveys or other intercepts should be shown.
QSI_ActionSetHistory
Qualtrics
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores Qualtrics action set identifiers and associated timing or interaction history, which is read by Qualtrics to evaluate targeting rules and determine whether and when surveys, intercepts, or other configured actions should be displayed.
QSI_History
Qualtrics
roberthalf.com
Session Storage
Session
Stores referral and navigation-related session data, such as the originating site and previously visited page, which is read by Qualtrics to evaluate browsing-session targeting rules and determine when surveys, intercepts, or other configured actions should be displayed.
QSI_HistorySession
Qualtrics
roberthalf.com
Session Storage
Session
Stores session-level website activity data, including page views and time spent on the site, which is read by Qualtrics to evaluate browsing-session conditions and determine when surveys, intercepts, or other configured actions should be displayed.
tealium_timing
Tealium
roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores timing-related data for page load and tag execution events, which is read by Tealium to measure performance and support debugging and optimization of tag management functionality.
tealium_timing
Tealium
online.roberthalf.com
Local Storage
Remains until it is deleted by script, the user (e.g. clearing site data), or the browser
Stores timing-related data for page load and tag execution events, which is read by Tealium to measure performance and support debugging and optimization of tag management functionality.
ADVERTISING & SOCIAL MEDIA WEB STORAGEThese files allow us to measure the effectiveness of our advertising campaigns on third-party platforms (such as LinkedIn, Google, Facebook). They help us understand how you found our website (referral tracking) and verify if our advertisements led to a specific action on our site, such as a form submission (conversion tracking).While the primary unique identifiers are stored in our cookies, this web storage allows us to maintain necessary data linked to those identifiers, such as referral codes or the timestamp of when you clicked an advertisement. This information is aggregated in our advertising accounts to help us understand campaign performance.We only store or access this data if you provide permission. If you do not provide permission, the tracking never begins. If you withdraw permission later, our system will immediately stop accessing or updating these files for future tracking. However, due to browser limitations, the files may remain physically stored on your device until they are cleared from the cache by browser enhanced privacy settings, JavaScript or you.You can manage or withdraw permission at any time using the Cookie Preference Center or by clicking the green symbol on the bottom left-hand side of the website.
Name
Vendor
Domain
Type
Lifespan
Description
_gcl_ls
Google
roberthalf.com
Local Storage
Remains until deleted by script, the user (e.g. clearing site data), or the browser
Stores ad click information, which is read by Google Ads to associate ad interactions with subsequent conversions and support conversion attribution and measurement.
lastExternalReferrer
Facebook
roberthalf.com
Local Storage
Remains until deleted by script, the user (e.g. clearing site data), or the browser
Stores the URL of the user’s last external referrer, which is read by Meta Platforms to identify the external source from which the user arrived, track referral activity, and support attribution and measurement of advertising effectiveness.
lastExternalReferrerTime
Facebook
roberthalf.com
Local Storage
Remains until deleted by script, the user (e.g. clearing site data), or the browser
Stores a timestamp of the user’s last external referrer interaction, which is read by Meta Platforms to determine when a user arrived from an external source, track referral activity, and support attribution and measurement of advertising effectiveness.
topicsLastReferenceTime
Facebook
roberthalf.com
Local Storage
Remains until deleted by script, the user (e.g. clearing site data), or the browser
Stores a timestamp indicating when user interest topics were last updated or referenced, which is read by Meta Platforms to manage topic-based interest data and support personalization, targeted advertising, and measurement of ad performance.
IV. Automated decision-making and use of artificial intelligence
We use artificial intelligence (“AI”) in job placement to match our candidates’ CVs with our clients’ vacancies and find suitable jobs for our candidates.To achieve this, RH utilises a service provided by Textkernel BV, Nieuwendammerkade 26a5, NL-1022 AB Amsterdam (“TK”), a company based in the Netherlands/EU.This AI assists our recruitment consultants in conducting more efficient searches and matching suggested candidates with our clients’ vacancies. This allows our recruitment consultants to search a larger number of CVs and match our candidates’ datasets with our clients’ vacancies faster, disregarding irrelevant data. The AI generates a list of potential candidates for a client’s vacancy for our recruitment consultants. However, this does not result in automated decision-making and is only a tool that our consultants can use in addition to their own selection. Our recruitment consultants make decisions based on their expertise, knowledge of the job market, insights into the client’s business and role requirements, interviews with candidates, and other relevant criteria to shortlist candidates for a specific client position.The final decision in favour or against a candidate is always made by our clients. They decide which candidates will be invited for an interview, who will progress in any multi-stage interview process and who will be accepted for the position.You can object to the processing by TK AI at any time by contacting [email protected]. In this case, we will no longer use TK AI on your CV. This has nonegative consequences or impact on you, especially on your application or the search for suitable positions for you, as we always rely on our personal knowledge of you, the client and their business, the position and role requirements, and the market when making any decisions. If you object to the processing of your personal data by our AI tool, our recruitment consultants will continue to offer you job placement services but will employ alternative methods to search for job opportunities on your behalf. The personal data of candidates who are no longer available for employment, are no longer actively seeking a job, have recently taken up permanent employment, or have objected to the processing of their personal data by AI will be deleted by our AI service provider. More information about our AI tool can be found here.
V. Recipients
As a group of companies with global operations, we organise some activities centrally at our affiliates (recognizable by the company names "Robert Half" and/or "Protiviti"). You can obtain further information about our Group companies using the contact details provided at the beginning of this Privacy Notice, provided you are authorized to receive this information for certain regions or worldwide. In doing so, personal data may be transmitted to these affiliates to ensure efficient and consistent business processes as well as appropriate control of our business operations. As some of our divisions rely on matrix management, employees may be reporting to managers employed at other affiliates; this means that these managers may have knowledge of personal data to ensure effective management and organisation within the group. Where this is the case, these affiliates act as our data processors, processing your personal data according to our instructions.We also commission third-party service providers to act as data processors. These service providers include software providers, cloud providers, marketing agencies, financial services providers, subcontractors and technical support companies that are necessary for fulfilling our business purposes and that support us in improving the quality of our services and offering innovative solutions.We commission these service providers subject to a data processing agreement that obligates them to comply with data protection regulations and does not permit them to process personal data for their own purposes.Personal data may also be transmitted to independent data controllers such as tax advisers, law offices, courts or government agencies to the extent permitted or legally required to comply with statutory requirements, ensure compliance and establish, exercise or defend legal claims.When working with data processors and independent data controllers, we attach great importance to their compliance with the level of data protection required in the European Union. Where these business partners are not already subject to EU data protection law, they undertake to comply with EU data protection standards by signing the standard contractual clauses provided by the European Commission. These contractual arrangements ensure that the transfer of personal data to third parties outside the European Union or the European Economic Area complies with the strict requirements of EU data protection law.For further information on the transmission of your personal data, please refer to the individual purposes of processing described in this privacy notice.
VI. Data security
We have taken appropriate technical and organisational security measures to protect your personal data from accidental loss, unauthorised processing or access as well as alteration or disclosure.Furthermore, we limit access to your personal data to those employees, representatives, contractors and other third parties who need it for business purposes and are legally authorised to use it.We have put in place procedures to deal with any suspected personal data breach and we will notify you and the competent supervisory authority of a breach where this is necessary and we are legally required to do so.
VII. Links to other websites
Our website may contain links to third-party websites, plug-ins and applications. Clicking on these links or enabling these connections may allow third parties to collect and process your personal data. The processing of your personal data by these third parties is beyond our control and we ask you to consult their privacy notices to see how they process your data.
VIII. Your legal rights
1. Right of access - Article 15 GDPRYou have the right to request information on what personal data we process about you and how we process it at any time. Upon submitting such a data subject access request, you will also receive a copy of the personal data we hold on file about you. Where these copies also contain confidential information or personal data on other data subjects, we will either redact this information or we will inform you what personal data relating to you the copies contain and for which purposes.2. Right to rectification - Article 16 GDPRWhere your personal data on file with us is inaccurate or incomplete, you have the right to request the prompt rectification and/or completion of your personal data at any time.3. Right to erasure (“right to be forgotten”) - Article 17 GDPRYou have the right to request erasure of your personal data by us at any time. We will promptly fulfil your request unless we are subject to legal obligations that do not allow us to erase your personal data at that point in time. This may for instance be the case if we are obliged to retain your data for a longer period of time for tax purposes. Should this be the case, we will inform you accordingly in response to your request for erasure, restrict the processing of your personal data for all other purposes except retention and will promptly delete your personal data upon expiry of legal retention periods without requiring any additional request on your part.4. Right to restrict processing - Article 18 GDPRAs an alternative to your right to be forgotten, you also have the right to request that we restrict the processing of your personal data if:> you contest the accuracy of your personal data on file with us – until such time as we have been able to verify the accuracy of your data;> our processing of your personal data is unlawful, but you oppose erasure of your data and request that we restrict its use instead;> we no longer need your personal data, but you need this data for establishing, exercising or defending legal claims, or> you have objected to the processing pursuant to Article 21 GDPR – pending verification of whether our legitimate interests override yours. 5. Right to object to processing - Article 21 GDPRYou have the right to object at any time pursuant to the provisions of Article 21 GDPR. You may at any time object, on grounds relating to your particular situation, to the processing of your personal data which we process based on Article 6(1)(f) GDPR. This also applies to profiling based on those provisions. You may infer from the descriptions of processing above whether our processing is based on Article 6(1)(f). 6. Right to withdraw consent - Article 7 (3) GDPRWhere we process your personal data based on your consent, you have the right to withdraw your consent at any time with future effect. The lawfulness of processing before your withdrawal will not be affected. Please note that we will no longer be able to offer you certain services such as sending you our newsletters if you withdraw your consent. 7. Right to data portability - Article 20 GDPRYou have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format where technically feasible. You also have the right to transmit this data to another data controller without hindrance on our part.8. Automated decision-making in individual cases, including profiling - Article 22 GDPRIn accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. However, we do not currently use such methods.9. Right to file a complaint with the supervisory authority - Article 77 GDPRIrrespective of and in addition to the rights listed above, you have the right to file a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR.The competent supervisory authority is:Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Postfach 31 63, 65021 Wiesbaden
Telephone: +49 611 14080
Fax: +49 611 1408611
Email: [email protected]
Website: https://datenschutz.hessen.deBefore you contact the supervisory authority, we would ask you to give us the opportunity to discuss your concerns with you to find an easy and satisfactory solution for you. Please feel free to contact our data protection team by emailing [email protected] or our external data protection officer using the contact details shown at the beginning of this privacy notice.
IX. Version and review of this privacy notice
This privacy policy was last updated on: 30.06.2026Due to changing business requirements, legal or regulatory requirements and technical developments, it may be necessary to amend this privacy policy. We will inform you of any significant changes to the privacy policy. You can access the latest version of the privacy policy at any time on this website.Print this privacy statement using the print function in your browser or by pressing Ctrl+P on your keyboard.
