Last updated: 04/2026
We would like to provide you with a simple overview of what happens to your personal data when you visit our website and, where applicable, use special services on our website. Personal data is any data by which you can be personally identified.
In general, the use of the HR Universal GmbH website is possible without providing per-sonal data. However, if a data subject makes use of special services offered by our website, processing of personal data may become necessary. If the processing of per-sonal data is required and there is no legal basis for such processing, we will obtain consent.
The processing of personal data, such as the name, address, email address, or tele-phone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with applicable national data protection regulations.
By means of this privacy policy, we would like to inform you about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.
As the controller, HR UNIVERSAL GmbH has implemented numerous technical and or-ganizational measures to ensure the most complete protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may generally have security gaps, so absolute protection cannot be guaranteed. For this rea-son, every data subject is free to transmit personal data to us via alternative means, for example by telephone.
Further detailed information on data protection can be found in the privacy policy listed below. This privacy policy applies to the use of our website. A printable version can also be downloaded as a PDF at the following URL: https://hr-universal.de/pdf/Datenschutzerklaerung-en.pdf
Data Collection on Our Website
Who is responsible?
Data processing is carried out by:
HR UNIVERSAL GmbH, represented by Managing Director Markus Rohm
Christophstraße 19
50670 Cologne
Email: info@hr-universal.de
Phone: +49 221 12 60 66-0
The party responsible is the natural or legal person who alone or jointly with others de-termines the purposes and means of processing personal data (e.g., names, email ad-dresses, etc.).
How do we collect your data?
Your data is collected:
- through information you provide (e.g., contact form, application, email, telephone)
- automatically by IT systems or after your consent when visiting the website (e.g., browser, time, IP address)
What do we use your data for?
Some of the data is collected to ensure error-free provision and security of the website. Other data may be used to analyze your user behavior with your consent. In addition, your data may be used to process inquiries or carry out application procedures.
Legal basis
Processing is carried out based on:
- Art. 6 (1) lit. a GDPR (consent)
- Art. 6 (1) lit. b GDPR (contract / pre-contractual measures)
- Art. 6 (1) lit. f GDPR (legitimate interest)
How do we process your data?
If you contact us, for example by sending an email or by using our application form on our website, in which we collect data such as name, address, etc., your information will be stored for the purpose of processing your inquiry. For the processing and storage of your personal data, we use the recruiting solution HR SIMPLEX developed by HR UNI-VERSAL.
The legal basis for this is:
Art. 6 (1) lit. b GDPR or lit. f GDPR
Storage period:
Your data will be deleted as soon as your inquiry has been conclusively processed, pro-vided that no statutory retention obligations exist.
Applicant Data
Processing in the application process
If you apply to us, we process your personal data (e.g., name, contact details, CV, quali-fications) for the purpose of carrying out the application process. This data is primarily collected to carry out contractual relationships (for example, in the context of your online application or personnel requests). Personal data is generally collected and stored only to the extent necessary for the performance of our activities.
Legal basis:
Art. 6 (1) lit. b GDPR
Use of internal systems
To process your application, we use internal systems for the structured processing of applicant data. Your application documents may be digitally recorded, stored, and eval-uated to enable efficient and targeted processing. Automated decision-making within the meaning of Art. 22 GDPR does not take place. The final assessment is always car-ried out by our employees.
Transfer to client companies
Your data will only be transferred to other third parties, i.e., companies not legally affili-ated with us (e.g., companies advertising positions), to the extent necessary for pro-cessing your request. This is, for example, the case if another company (client) is listed alongside HR UNIVERSAL in the job advertisement. The necessity of transferring data to third parties is based on the jointly created search and offer profile. If you apply directly to one of our clients, we hereby inform you that our client may notify us of this.
We share personal data with providers who perform services on our behalf in accord-ance with our instructions. We permit these providers to use or disclose the data only to the extent necessary to perform services on our behalf or to comply with legal require-ments.
Furthermore, we may disclose your personal data if we are legally obliged to do so; to law enforcement authorities, courts, or government officials based on a lawful disclo-sure request; and if we believe that disclosure is necessary or appropriate in connec-tion with an investigation of suspected or actual fraudulent or illegal activities.
Storage period
Your data will generally be stored for up to 6 months after completion of the application process. Longer storage will only take place with your consent. If an employment con-tract is concluded, the retention periods are based on statutory regulations.
Customer and Supplier Data
Processing is carried out for contract execution and communication.
Data that you provide to us as a customer is stored to ensure smooth contract pro-cessing and execution and to provide optimal services. This includes personal data of contact persons within the organization, notes from conversations, reported positions, and job placements. The focus is on data necessary to conclude contracts, fulfill con-tracts, and establish contact with the contact person responsible (for new hires, con-tract extensions, invoicing, etc.).
We store (and, if necessary, update) your data in our database so that we can contact you in connection with orders and agreements.
In individual cases, we may also use your personal data to exercise, assert, or defend legal claims. We may use your personal data for the purposes described above if we consider this necessary for our legitimate interests. If you do not agree with this, you have the right to object under certain circumstances.
Legal basis:
Art. 6 (1) lit. b and lit. f GDPR
Your Rights
You have the right at any time to obtain information free of charge about the origin, re-cipients, and purpose of your stored personal data. You also have the right to request the correction, restriction, or deletion of this data. Reasons that may justify such ac-tions include: the original purpose of data processing no longer applies, you have with-drawn your consent, or the data has been processed unlawfully. If you have given us consent to store, process, or transfer your data to third parties, you have the right to withdraw this consent at any time with effect for the future.
Furthermore, you have the right to transfer your data from one controller to another (da-ta portability). In this context, we will provide the data to you in a commonly used for-mat, protected by a password; or transmit the data ourselves on your behalf. This ap-plies to personal data that you have provided to us and to personal data that we process based on your consent or for the performance of a contract.
For this purpose and for further questions about data protection, you can contact the address provided in the legal notice, our data protection officer named below, or the responsible body for data processing also named below at any time. Furthermore, you have the right to lodge a complaint with the competent supervisory authority (State Commissioner for Data Protection NRW).
General Information and Mandatory Information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data pro-tection regulations and this privacy policy.
If you use the special services of our website (e.g., registration, contact, or application forms), various personal data will be collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Data security
To prevent misuse of your data, we secure our systems through technical and organiza-tional measures against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons. In addition to SSL encryption, we use firewalls as well as antivirus and anti-hacking programs. The SSL protocol secures the transmission be-tween a domain on a web server and the visitor of that domain. You can recognize acti-vated SSL encryption by the symbol (closed lock) next to the URL address field of your browser. If encryption is not active, data can easily be read by third parties. You should therefore carefully consider transmitting sensitive data. Contact via email is generally not encrypted. Even when choosing this communication method, you should be aware of the risks, as complete protection cannot be guaranteed.
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to advertising emails
We hereby object to the use of contact data published as part of the legal notice obliga-tion for sending unsolicited advertising and information material. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.
Data Protection Officer
Legally required data protection officer:
Sonja Schweren
Christophstraße 19
50670 Cologne
Email: datenschutz@hr-universal.de
Phone: +49 221 12 60 66-0
Cookies and Consent Management
Our website uses cookies.
- Technically necessary cookies → without consent
- Analysis and marketing cookies → only with consent
Consent is given via our consent management tool (Real Cookie Banner) and can be revoked at any time.
Websites sometimes use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically de-leted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
The website operator has a legitimate interest in storing technically necessary cookies for the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these are treated sepa-rately in this privacy policy.
Legal basis:
Section 25 TTDSG in conjunction with Art. 6 (1) lit. a GDPR
Technically necessary cookies are based on Art. 6 (1) lit. f GDPR
Server Log Files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The basis for data processing is Art. 6 (1) lit. f GDPR. The website operator has a legiti-mate interest in the technically error-free presentation, stability, security, and optimiza-tion of its website – for this purpose, the server log files must be recorded.
Analysis Tools and Third-Party Tools
When visiting our website, your surfing behavior may be statistically evaluated. This is primarily done using cookies and so-called analysis programs. The analysis of your surfing behavior is generally pseudonymized and cannot be directly attributed to you. You can object to this analysis or prevent it by not using certain tools. Detailed infor-mation can be found in the following sections of this privacy policy.
Hosting, Data Processing Agreement
The website is hosted by the external service provider webgo GmbH, Heidenkampsweg 81, 20097 Hamburg. Some data is also hosted on Microsoft Azure.
We have concluded a data processing agreement (DPA) with the above-mentioned pro-vider. This is a contract required under data protection law, which ensures that the pro-vider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
Google Analytics helps us evaluate user behavior on our website in order to improve our online offering technically and in terms of content. In particular, information about web-site usage, devices used, pages accessed, approximate location information, referrer URLs, and interactions on the website may be processed. Processing is generally pseu-donymized and without direct attribution to your person. Google Analytics uses cookies and comparable technologies for this purpose. Google states that for data traffic from the EU, IP addresses are not logged or stored and are discarded before logging.
The use of Google Analytics is based exclusively on your consent.
Legal basis: Art. 6 (1) lit. a GDPR in conjunction with Section 25 TTDSG
You can withdraw your consent at any time with effect for the future via our consent management tool.
A transfer of personal data to the USA cannot be excluded. Google refers to its participa-tion in the EU-US Data Privacy Framework; depending on the processing context, addi-tional appropriate safeguards, in particular standard contractual clauses, may also be relevant.
If a data processing agreement has been concluded with Google, the use of Google Ana-lytics is based on this agreement.
Further information on data processing by Google can be found in Google’s privacy in-formation.
Demographic Characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about age, gender, and interests of website visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific per-son. You can deactivate this function at any time via the ad settings in your Google ac-count or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.
Registration on this Website
You can register on our website to use additional functions on the site. The data entered for this purpose will only be used for the purpose of using the respective offers or ser-vices for which you have registered. The mandatory information requested during regis-tration must be provided in full. Otherwise, we will reject the registration.
For important changes, such as changes to the scope of the offer or technically neces-sary changes, we use the email address provided during registration to inform you in this way.
The processing of data entered during registration is based on your consent (Art. 6 (1) lit. a GDPR). You can revoke any consent you have given at any time. An informal notifica-tion by email to us is sufficient. The legality of data processing already carried out re-mains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected. Your data will not be published or passed on to third parties.
These statements are limited to the function “Stay informed”. With this function, you can request current job offers for a selected professional field. As with registration, de-registration for this function is also carried out via the homepage.