Privacy Policy

1. Data protection at a glance

The protection of your personal data is important to us. Below, we inform you about which data we collect, how we use it and which rights you have under the General Data Protection Regulation (GDPR). Personal data is any data by which you can be personally identified.

2. Controllerntwortlicher

The controller within the meaning of the GDPR is:
GAGU Personalleasing GmbH
Landsberger Straße 218
12623 Berlin
Phone: +49 (0)30 – 726 211 019
E-Mail: info@gagupersonal.com
A data protection officer has not been appointed due to the size of the company.

3. General information on data processing

We process personal data exclusively within the framework of the statutory provisions of the GDPR and the German Federal Data Protection Act (BDSG). Processing is carried out in particular on the following legal bases:
Die Verarbeitung erfolgt insbesondere auf folgenden Rechtsgrundlagen:
Art. 6 para. 1 lit. a GDPR (consent)
Art. 6 para. 1 lit. b GDPR (contract / pre-contractual measures)
Art. 6 para. 1 lit. f GDPR (legitimate interest)
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies.

4. Data collection when visiting the website (server log files)

When you visit our website, our hosting provider automatically collects the following data:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
IP address
Time of the server request
This data serves the technical security and stability of the website.
Legal basis: Art. 6 para. 1 lit. f GDPR
Storage period: 7–14 days

5. Hosting

Our website is hosted by an external service provider.
Hosting provider:
Host Europe GmbH
c/o Spaces
Gertrudenstraße 30-36
50667 Cologne
Personal data collected on this website is stored on the host’s servers. This may include in particular IP addresses, meta and communication data as well as website accesses.
The use is carried out:
for contract performance (Art. 6 para. 1 lit. b GDPR)
for the secure provision of the website (Art. 6 para. 1 lit. f GDPR)
A data processing agreement pursuant to Art. 28 GDPR exists with the hosting provider.

6. Cookies & cookie banner

Our website uses cookies. Cookies are small text files that are stored on your device. To manage consent, we use the following consent tool: BORLABS COOKIES.
Borlabs GmbH
Hamburger Str. 11
22083 Hamburg
When you first visit our website, you can give or refuse your consent via the cookie banner.
Necessary cookies: Art. 6 para. 1 lit. f GDPR
Analytics/marketing cookies: Art. 6 para. 1 lit. a GDPR
You can withdraw your consent at any time.

7. Contact form and e-mail contact

If you contact us via contact form or e-mail, your information will be stored for the purpose of processing your request. Legal basis:
Art. 6 para. 1 lit. b GDPR
Art. 6 para. 1 lit. f GDPR
Storage period: maximum 6 months after completion of the request

8. Applications & applicant data

If you apply to us, we process personal data such as:
Contact details
CV and qualifications
Application documents
Processing is carried out for the purpose of conducting the application process. Legal basis:
Art. 6 para. 1 lit. b GDPR
§ 26 BDSG
Data is passed on to customers only:
if this is necessary for placement
or with your consent
Storage period:
Rejection: max. 6 months
Hiring: duration of the employment relationship + statutory periods

9. Google Analytics

This website uses Google Analytics, a web analytics service of:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Google Analytics uses cookies that enable analysis of usage. Your IP address is anonymized. It cannot be ruled out that data may be transferred to the USA. The transfer is based on standard contractual clauses pursuant to Art. 46 GDPR. Google is also certified under the EU-U.S. Data Privacy Framework.
Legal basis: Art. 6 para. 1 lit. a GDPR
You can withdraw your consent at any time via the cookie banner.

10. Social Media

Links to the following platforms are integrated on our website:
Facebook (Meta Platforms Ireland Ltd.)
Instagram (Meta Platforms Ireland Ltd.)
Data transfer takes place only when you actively click on the respective link.
Further information:
https://www.facebook.com/privacy/policy
https://privacycenter.instagram.com

11. YouTube

Our website uses YouTube (Google LLC).
The integration takes place in enhanced privacy mode. A connection to YouTube’s servers is established only when a video is played.
Legal basis: Art. 6 para. 1 lit. a GDPR
Further information:
https://policies.google.com/privacy

12. SSL or TLS encryption

For security reasons, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line begins with “https://”.

13. Your rights

You have the right at any time to:
Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Withdrawal of your consent (Art. 7 GDPR)

Right to object pursuant to Art. 21 GDPR
If the processing of your personal data is based on Art. 6 para. 1 lit. f GDPR, you have the right to object at any time.

Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
Competent authority:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin

14. Data security

We use technical and organizational measures to protect your data against loss, manipulation or unauthorized access.

15. Validity and amendments

This privacy policy is currently valid and may be adapted in the event of changes.

Last updated: 04/2026