The protection of your privacy is of particular importance to us.
Honeypot GmbH, Schlesische Straße 26, 10997 Berlin, Germany, e-mail: [email protected] (see imprint),hereinafter “Honeypot”, as operator of the website “www.honeypot.io” is the controller for the use of the personal data of users of the website pursuant to Art. 4 (7) of the EU General Data Protection Regulation (“GDPR”) . You can contact our data protection officer via [email protected] or our postal address with reference to “Data protection officer”.
Furthermore, it is important to us that you know, at any point, when we store your personal data and how we use it.
We will collect, process and use your personal data in compliance with applicable European and German data protection law.
What is personal data?
Personal data is any information relating to an identified or identifiable natural person. A person is identifiable, if the person can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. This may include data such as e.g. name, email address, telephone number and mailing address. We process your data in the context of our service only when you have given us your consent to do so, the data is necessary for the performance of the contract or where it is permissible by law.
You may withdraw your consent to the processing of personal data at any time. A revocation has direct influence on the admissibility of the processing of your personal data as soon as directed to us.
If the processing of your personal data is based on legitimate interests, you have the right to object to processing the personal data. If you exercise your right of objection, we kindly ask you to explain the reasons why we should not process your personal data. If your objection is justified, we will review the facts and adjust or modify the processing of data or inform you about imperative legitimate grounds for the processing.
We will delete your personal data as soon as the data is no longer necessary for the respective purpose. It may occur that personal data is kept for the time during which possible claims may be asserted against us (for example statutory limitation period of three or in some cases, thirty years). Furthermore, we are required by law to store certain data due to the duties of proof and retention, inter alia from the German Commercial Code, the German Tax Code or the Money Laundering Act. The storage periods can be up to ten years.
What kind of personal data does Honeypot collect? With every access of our Service data related to this event is being saved to a protocol file or database on the server of our hosting service provider. This also applies to data you enter in order to use the Service or contact us.
We collect the following information:
File name of the content retrieved (respectively, information submitted by you in the course of using our service); Date and time of the request; Amount of data transferred, access status (content transmitted, content not found, etc.); Operating system, browser and device type; Screen resolution, language and time zone settings; Referrer-URL, i.e. internet address of the website visited previous to accessing our offering; IP address and name of your internet service provider. The IP address is stored for the period of use only and will be deleted or anonymized afterwards immediately.
We collect the aforementioned data as this is technically necessary for us to be able to display our website and to ensure the stability and security of the website. The legal basis of this processing is Art. 6 (1) sentence 1 lit. f) GDPR.
How does Honeypot use my personal data? Honeypot uses the data for the following purposes:
Providing the services you requested, e.g. matching you with other members of our service. Making certain that you have the best possible user experience, e.g. edit your profile and manage your privacy settings. Honoring our contractual obligations to you, e.g. inform you about possible connections (Interview Invites) via the platform, email or phone. Enabling you to participate in our interactive service as far as you like. To inform you about changes to our service. On our website you can set up an account to use our services in form of an online job marketplace platform. In case you sign up as a candidate (“Talent”), you are required to enter your personal data such as name and e-mail,. In addition, you need to add languages and other skills, employment and education history as well as location to create an account. You can also sign up with your LinkedIn or Github account (for further information please see provisions about social media plug-ins below). In this case, further information may be required, such as name, photo, current position, etc. Honeypot can contact the Talent to determine further information required and update the profile accordingly. Signing up as an employer requires to enter the company name, hiring location, number of employees, contact person and contact e-mail. The information required for the implementation of the contract relationship will be processed for this purpose only. In most cases, companies access the profiles of Talents by themselves on the platform after searching for certain skills and contact the Talent directly. Furthermore, however, Honeypot can contact the Talent or the employer via phone, email or messaging service and suggest companies which fit the Talent´s profile or suggest Talents which fit the company´s profile. The legal basis of this processing is Art. 6 (1) sentence 1 lit. b) GDPR. A storage of data can be revoked at any time.
The specified data and your entire user account can always be deleted in the customer area. You agree to treat personal access data confidentially and not to make such data available to unauthorized third parties. We do not assume liability for misused passwords unless we are responsible for the abuse. You should notify us immediately if you are concerned about a third party having knowledge of your password, if the password is used unauthorized or this seems to be likely. You are responsible for ensuring that your information is accurate and complete and that you notify us of any changes to the information provided. You can review and update the information provided and your account settings section of our website. After completing communication with Honeypot you should log out and close the browser window, especially if you share the computer with other people.
Due to commercial and tax regulations, we may be obliged to store part of the personal data transferred (e.g. payment data) for a period of 10 years. After a period of [e.g. 2 years] we restrict the use of specific data and, as a consequence, the data may be used to comply with legal obligations only.
Does Honeypot transfer data to third parties? We transmit your personal data to third parties only if you have consented to the transfer, if the transfer is necessary for the performance of the contract, or we are enforced to do so by law.
Companies we cooperate with to mediate the Talent and try to match the right person with the right job have access to profiles of the Talents and therefore personal data of Talents are transmitted to the companies as a result. The companies are only allowed to process these personal data within the framework of the application process (especially save the data in their applicant tracking system) and to contact the Talent in case there are interested. The legal basis of this processing is Art. 6 (1) sentence 1 lit. b) and f) GDPR.
We sometimes use external service providers to process your personal data and to provide our services. They are carefully chosen and instructed by us. They are bound by our instructions and are regularly inspected. The data provided to our service providers may be used by them to fulfill their tasks only.
In particular, Honeypot transfers personal data to service providers to be able to create and publish Talent profiles on the platform, to proof the Talent´s qualification, to invite Talents to online interviews with companies or with Honeypot, to ensure communication between Talents and companies and between Talents and Honeypot and to help Talents and companies with the Visa process.
In order to improve the services of Honeypot and to assess on whether a contract between Talent and Company will take place soon, Honeypot is able to access the communication between Talent and Company on the platform.
If we transfer personal data outside the European Economic Area (EEA), we will do so only if the EU Commission has decided that the third country ensures an adequate level of data protection or other appropriate safeguards exist (e.g. EU standard contractual clauses or binding corporate rules) or a person has given its consent to do so.
We use transient and persistent cookies on our website. If you close your browser, transient cookies are automatically deleted. These cookies include, in particular, session cookies. This will allow us to recognize your computer when you return to our website. Session cookies are deleted as soon as you close the browser or log out.
In contrast, persistent cookies are automatically deleted after a specified period of time. These cookies can be deleted at any time in the security settings of your browser.
Generally, you can configure your browser settings in accordance with your personal demands and, for example, decline all cookies. However, non-acceptance of cookies may limit the functionality of our website.
Does Honeypot use analytics tools? Honeypot uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are saved on your computer and that allow an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transmitted to and stored on a Google server in the USA. However, in the event of activation of IP anonymization on our website, your IP address will be truncated previously by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be sent to a Google server in the US and truncated there. On behalf of Honeypot, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide other services related to website activity and internet usage to Honeypot.
The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
You can prevent the storage of cookies by an appropriate setting of your browser software; however, please note that in this case, you may not be able to use the full range of all functions of our website. You may also prevent the collection of the data generated by the cookie and relating to your use of our website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Honeypot uses Google Analytics with the extension "_anonymizeIp ()". Accordingly, IP addresses are truncated and, thus, a reference to persons can be ruled out. If the data collected about you have a personal reference, this reference is immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google is part of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis of this processing is Art. 6 (1) sentence 1 lit. f) GDPR.