Data Protection and Privacy Policy
management4education GmbH (operating this website)
Hebelstr. 11
60318 Frankfurt am Main
Germany
As a data controller places high priority on the protection of your personal data and treats your privacy in compliance with the General Data Protection Regulation (GDPR) of the European Union and the applicable national legislation on personal data protection.
You may, at any time, contact our Data Protection Officer directly with all questions, requests and suggestions concerning data protection:
dataprotection@m4health.pro
It is possible to use this website without providing any personal data. Personal data (for example name, address, or e-mail address) on our website is collected on a voluntary basis insofar as this is possible. We will only process your personal data in accordance with this Policy or notices provided to you at the time we collect your personal data (if necessary for the intended processing). This data will not be disclosed to any third party without your express consent.
Please note that data transmission via the internet (e.g., in the case of communication by e-mail) may be subject to security gaps. It is not possible to protect such data completely against access by third parties.
Purpose of Data Collection, Processing, or Use
management4education GmbH – herein referred to as m4edu – is an international development consultancy firm specialised in the design, the implementation, and the monitoring and evaluation of international education projects and programmes.
In the context of our normal business activities, personal data is collected, processed, used, and, where applicable, transmitted for the purpose of business development and the provision and invoicing of services. As a client or as a potential client, m4edu may process personal data in order to provide consultancy services, or to conclude or fulfil an agreement.
In this regard, m4edu may process personal data such as name, e-mail, phone number, e-mail correspondence, address, and other contact details, job title, job position, curriculum vitae, and personal data contained therein as well as information about the actual business relations.
The legal basis for the processing of this personal data is Article 6 para. 1 lit. b GDPR as the processing of personal data is necessary to enter into or to fulfil an agreement. If no agreement has been reached, the legal basis for the processing of this personal data is Article 6 para. 1 lit. f GDPR as it is a legitimate interest of m4edu to try to reach an agreement.
In the human resources and financial departments, personal data is collected, processed, used, and, where applicable, transmitted for internal purposes (such as personnel and payroll management, recruitment, travel management) and to comply with legal requirements.
The purpose of processing personal data in connection with our recruitment activities is to assess the qualifications and suitability for a position a candidate has applied for or in cases of unsolicited applications. The personal data may also be used to contact the applicant with a view to offering an employment contract and may further be used to screen if other open job vacancies might be of interest to the applicant.
The legal basis for the processing of this personal data is Article 6 para. 1 lit. b GDPR as the processing of personal data is necessary for m4edu to take preparatory steps prior to entering into a contract.
m4edu may also obtain personal data indirectly from third-party sources such as recruitment platforms and websites or social media sites. The processing of this personal data serves to identify and source talents for m4edu and to evaluate candidates’ profiles for open positions matching their experience and qualifications.
In this regard, m4edu may process publicly available personal data, including the name, e-mail, phone number, resume, CV, cover letter, primary language, experience, education, qualifications, and any other relevant personal data that has been made available.
The legal basis for the processing of this personal data is Article 6 para. 1 lit. f GDPR as it is a legitimate interest of m4edu to attract talented candidates to the workforce.
If we receive an enquiry by e-mail, we store the information provided by the sender, i.e., name, e-mail address and message text in order to process the query and possibly a further follow-up correspondence. This data will never be disclosed without the explicit consent.
The data is processed according to Art. 6 para. 1 lit. b GDPR for the purpose of receiving the query formulated in the contact form.
Data Subjects (Affected Persons and Groups)
In the context of our normal business activities and operations, names, addresses, contractual and payment information, and data concerning electronic information for clients, employers, consultants as well as freelance experts and employees of partner consulting companies are collected, processed, and used.
In the human resources department (employees, visiting staff, national staff, integrated professionals, family members, applicants, former employees), additional information concerning qualifications and applications, duration of employment, remuneration, social security information, contact details, bank details, work documents are collected, processed, and used.
Recipients to Whom the Data may be Disclosed
The data may only be disclosed:
- to entrusted internal administrators (bookkeeping, accounting, contracts department, personnel and project management, telecommunications, and IT) and external clients to whom we offer our services,
- public authorities on the basis of statutory regulations (social insurance carriers, tax authorities, health insurance companies) to meet legal requirements, and
- bank institutions (for salary transactions); creditors (in the case of wage / salary garnishment) and travel agencies.
Standard Periods for the Deletion of Data
Personal data is deleted on a regular basis when it is no longer needed for meeting contractual obligations and if the person in question has not provided its explicit approval to retain said data or if statutory retention obligations and deadlines do not stipulate that data shall be retained for a longer period.
Personal data collected through enquiries and contacts by e-mail, will be deleted as soon as the relevant communication is concluded, unless (i) a separate consent to store your personal data longer was explicitly given, (ii) personal data is needed to fulfil a contractual obligation, or (iii) statutory retention obligations require us to retain the personal data for a longer period.
Planned Transmission of Data to Third Countries
Data is only transmitted to third countries (countries outside the European Union or the European Economic Area) if required to do so by law, in case of a declared consent, or if this is necessary for the fulfilment of a contractual obligation.
In general, no personal data will be transmitted to third countries by electronic means. Exceptions to this are possible if there is a specific legal basis for such a transmission. If our staff is contacted during business trips outside the EU by e-mail, the message will be received through a secure connection, so that the data is not transmitted to a third party and remains within the sphere of influence of our company.
Your Rights
You may at any time request information about the use of your personal data (§ 15 GDPR) or request the verification, correction, or erasure of your personal data (§§ 16 and 17 GDPR). You may also at any time request the restriction of the use or processing of your personal data (§§ 18 and 19 GDPR), request the transmission of your personal data to third parties (§ 20 GDPR), or object to the use of your personal data (§ 21 GDPR).
If you want to exercise any of the above-mentioned rights, please send an e-mail to: dataprotection@m4health.pro
You also have the right to file a complaint against the use of your personal data. The competent complaints office is the Data Protection Supervisory Authority of the State of Hesse (https://datenschutz.hessen.de/).