Privacy Policy

Notes on data protection

We collect, process and use your personal data in accordance with the content of this data protection notice and the applicable European and German data protection regulations.

By sending us your information by e-mail, you expressly consent to the processing of the relevant information for an unlimited period of time. This includes in particular the transmission of the information to our customers (potential employers). You are advised that you are not obliged to consent to the processing of the data and that if you do consent, you may withdraw your consent at any time by sending an e-mail to the contact details provided.

This data protection information explains the extent to which personal data about you is collected, processed and used. We therefore kindly ask you to read the following carefully.

1. Name and contact details of the data controller

Person responsible pursuant to Art. 4 (7) of the General Data Protection Regulation (DS-GVO):

Dirk Fichna Personalberatung GmbH (hereinafter: DFP).
c/o Quhr
Gesundheitscampus-Süd 17
44801 Bochum
Phone: +49 173 7432360

2. Collection and storage of personal data and the type and purpose of their use

For the purpose of our advisory service, personal data is provided by you, is collected during the implementation or is collected and processed by us.

In particular, this involves the following data:

– Candidate data (e.g. name, date of birth, marital status, private contact details, address, salary, notice period), position title, curriculum vitae/curriculum vitae (CV), data from social networks or publicly accessible sources on the Internet.

This data is collected:

– for the purpose of evaluating candidates and subsequent placement with DFP clients.

The legal basis for the collection of the corresponding data is the consent of the candidates (Art. 6 para. 1 p. 1 lit. a DS-GVO). This consent is given by sending the above-mentioned data by e-mail. The provision of the data is voluntary. The more information provided, the better an assessment of suitability for client positions and subsequent placement of candidates is possible. In order to assess the candidate’s professional profile, it may be necessary to also collect information about the candidate via social media or sources publicly available on the internet, which are further relevant for the assessment of candidates.

By submitting your information, you agree that we may store your candidate information indefinitely. This indefinite storage is done in the interest of the candidates in a long-term cooperation, which also exists beyond the one-time placement. You can revoke your consent at any time using the contact details provided.

3. Transfer of data

Personal data is only passed on to clients if a candidate is suitable for a position with a client or fits the client’s requirement profile.

In this case, the client receives a confidential report on the candidate. The confidential report contains all relevant information that the client needs about the candidate in order to be able to assess whether the candidate is suitable for a position. Disclosure of the data to the client is mandatory for a successful placement.

The legal basis for the disclosure is the consent of the candidate (Art. 6 para. 1 sentence 1 lit. a DS-GVO) and, if applicable, a legitimate interest (Art. 6 para. 1 sentence 1 lit. f DS-GVO).

It is expressly pointed out that it may be possible that database servers of clients to whom information of the candidate:in is sent are located in third countries outside the European Economic Area (EEA), in which no adequate level of data protection has been confirmed by the EU Commission. By giving consent in the form of data transfer, the candidate expressly and unambiguously agrees that the relevant information may also be disclosed to corresponding recipients.
In some cases we use external research service providers to process your personal data. They are bound by our instructions and are regularly monitored. The data passed on to our service providers may only be used by them to fulfil their tasks. A contract for commissioned data processing has been concluded.

The legal basis for this is the consent of the candidates (Art. 6 para. 1 sentence 1 lit. a DS-GVO) and the fulfilment of contractual obligations (Art. 6 para. 1 sentence 1 lit. b DS-GVO).

4. Data subject rights

– Right to information: about your personal data processed by us (Art. 15 DS-GVO);
– Right of rectification: of inaccurate or incomplete personal data stored by us (Art. 16 DS-GVO);
– Right to erasure: of personal data stored by us, insofar as it is not (any longer) necessary for processing and no legal provisions prevent this (Art. 17 DS-GVO);
– Right to restrict: the processing of your personal data (Art. 18 DS-GVO);
– Right of data portability: to receive your provided data or transfer it to another controller (Art. 20 DS-GVO);
– Right of withdrawal: of your consent (Art. 7(3) DS-GVO); and
– Right of appeal: to the competent supervisory authority (Art. 77 DS-GVO).

We are available for corresponding requests or notifications at the contact details provided.

Information is generally provided in electronic form (by e-mail). If you make use of this possibility of providing information via e-mail, the e-mail address provided (both sender and recipient) will not be used for any purpose other than providing information and documenting it.

5. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 lit. f DS-GVO, you have the right to object to the processing of your personal data pursuant to Article 21 DS-GVO, provided that there are grounds for doing so which arise from your particular situation. When exercising your right of objection accordingly, we ask you to explain the reasons why we should not process your personal data. If your objection is justified, we will stop or adapt the data processing or inform you of compelling reasons worthy of protection on the basis of which we will continue the processing.

6. Deletion

We delete your personal data as soon as it is no longer required for the relevant purposes. It may be the case that personal data is retained for the period in which claims can be made against us (e.g. statutory limitation period of three or thirty years). Furthermore, we are legally obliged to store certain data due to obligations to provide proof and to retain data, among other things from the German Commercial Code, the German Fiscal Code or the German Money Laundering Act. These storage periods are up to ten years. If we are not obliged to store personal data and the data is no longer required to protect or defend claims, the data will be deleted immediately unless you have consented to further storage in accordance with Art. 6 Para. 1 S. 1 lit. a DS-GVO.

7. up-to-dateness and amendment

Due to changes in legal or official requirements, it may become necessary to amend this data protection notice.

8. Accessing and using

For technical reasons, data traces of your use remain everywhere on the Internet when you call up and use the website. When you visit, the following data is transmitted by your internet browser and recorded in so-called log files:

Referrer (previously visited website)
Requested website or file
Browser type and browser version
Operating system used
Type of device used
Time of access
IP address in anonymised form
This data is processed in order to provide you with our website for use and to ensure technical stability and security, as well as for the purpose of error diagnosis and troubleshooting. The data is also processed in anonymised form for statistical purposes (number of users and page impressions) and for quality assurance.
The data processing is necessary to protect our legitimate interest in enabling our existing/potential customers and interested parties to use our website and to ensure its technical functionality. We base the processing of this data on the legal basis of Art. 6 para. 1 letter f DS-GVO. This data is automatically processed when the website is called up. Without the provision of the data, you cannot use our services.

We store your personal data until the purpose of the data processing no longer applies. You can revoke your consent to data processing or request deletion. Retention periods under tax and commercial law prevent this.

9. Cookies uses cookies. Cookies are small text files that are saved on your end device as soon as you access the website. Viruses or malware are not transmitted by cookies. They contain information that can identify the user in order to make the website as a whole more user-friendly and effective.

Types of cookies used:

Temporary – when you close the browser, they are automatically deleted. The processing of your personal data using session cookies is Art. 6 para. 1 lit. f DS-GVO. If you object to the use of session cookies, some functions of our website cannot be offered. Your personal data will only be stored for the duration of your use of the website and will then be deleted.

Persistent – after a set duration they are deleted. You can delete them at any time in the security settings of your browser. Persistent cookies differ according to whether they are technically necessary or not. If this is to be affirmed in the individual case, they are also based on Art. 6 para. 1 lit. f DSGVO. Persistent cookie use takes place with your consent. The legal basis for data processing is Art. 6 para. 1 lit. a DSGVO. Cookies cannot be stored on your end device if you can set your internet browser accordingly. If you do not accept cookies, this may lead to restrictions in functionality.

Cookies from third-party providers (third party cookies) may also be integrated with your consent. Third-party data packets are stored in your browser or transmitted to them. You can usually also prevent the use of third-party cookies by setting your browser accordingly. The legal basis for the processing of your personal data using third-party cookies is Art. 6 para. 1 lit. a DS-GVO. You can revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

10. Contact form

When using the contact form, the data you provide will be stored by us in order to contact you.

The legal basis for the processing of this data is the legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f DS-GVO. If your contact aims at the conclusion of a contract, Art. 6 (1) lit. b DS-GVO applies to the processing.

11. Plug-ins (social media) currently uses the plug-ins of Xing and LinkedIn.

When using the corresponding logo of Xing or LinkedIn plug-in, you are taken directly to the provider and can communicate directly with the managing director of Dirk Fichna Personalberatung GmbH, Mr. Dirk Fichna. Only then will the provider receive information about your use. We do not yet know the full extent of the data collection, the purposes of the processing and the storage periods, nor do we have any influence on the collected data and data processing procedures. Furthermore, we do not have any information on the deletion of the collected data by the plug-in provider.

You can find the plug-in provider and URL with their data protection information at:

Xing New Work SE, Am Strandkai 1, 20457 Hamburg, DE

LinkedIn 2029 Stierlin Court, Mountain View, California 94043, USA

11. Google Analytics uses functions of the web analysis service Google Analytics. The provider is Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of your consent pursuant to Art. 6 Para. 1 lit. a DS-GVO. You may revoke your consent at any time by sending an informal e-mail. This does not affect the legality of the data processing operations carried out until the revocation.

The following personal data is collected through the use of cookies:

Date and time of access
Duration of the visit
type of terminal device
operating system used
the functions you use
amount of data sent
type of event
IP – address
domain name
Location of the terminal device used (country and city)
Operating system
Resolution of the terminal device
Browser used
source of visitors
Advertisements clicked on in Google search
individual pages of the online shop visited
IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plug-in

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:

Data collection settings

You can prevent the collection of your data by Google Analytics by disabling statistics cookies when visiting our pages. You can make the corresponding settings here. You can find more information on how Google Analytics handles user data in Google’s privacy policy: #Cookies

12. Hosting is hosted by IONOS SE. The provider is IONOS SE, Elgendorferstr. 57, 56410 Montabauer. When you visit this website, IONOS SE collects various log files including your IP address. Further details can be found in the IONOS SE privacy policy at

The use of IONOS SE is based on Art. 6 para. 1 lit. f DS-GVO. The reliable presentation of our website is in our interest. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art.6 para.1 lit.a DS-GVO. You can revoke your consent at any time. The basis for the order processing with IONOS SE is a valid contract. The contract under data protection law ensures that it only processes the personal data of our visitors in accordance with our instructions and in compliance with the DS-GVO. The contract in accordance with Art.28 DS-GVO has been part of the GTC’s of IONOS SE since 19.07.2022 and does not require a separate agreement.

13. Encryption

For security reasons we use SSL/TLS encryption. This ensures that the data you transmit to us cannot be read by third parties.

For security reasons, we use SSL/TLS encryption. This ensures that the data you transmit to us cannot be read by third parties.

14. Google Web Fonts uses web fonts provided by Google for the uniform display of fonts. There is no connection to Google servers because the Google Fonts are installed locally.

15. IONOS Web Analytics uses the analysis services of IONOS SE (address see above). The analysis tool Webanalytics uses basic data regarding visitor numbers, visitor behaviour, page analysis, pages of origin, browsers and systems. In detail, the following personal data is collected: Visitors, Sessions, Page views, Search engine robots, Duration per session, Page views per session, Bounce rate, Entry page, Exit page, Error page, Most visited pages, Pages with high bounce rate, Search terms, All origin pages, Referring pages, Browsers, Browser versions, Operating systems, Operating system versions.

Cookies are not used by the tool and data collection is completely anonymous, according to IONOS SE. In order to provide the service, IONOS SE stores the following data in particular:

Referrer (previously visited website)
Requested website or file
Browser type and version
Operating system used
Type of device used
Time of access
IP address in anonymised form
You can revoke your consent at any time and have your data deleted (see points 5 and 6).