Privacy Policy

1. General Information on Data Processing and Legal Bases

1.1 This Privacy Policy explains the nature, scope, and purpose of the processing of personal data within our online service and the associated websites, features, and content (hereinafter collectively referred to as the “online service” or “website”). This Privacy Policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) on which the online service is operated.

1.2 The entity responsible for the processing of personal data is taskforce – Management on Demand AG (“taskforce” or “we”).

taskforce – Management on Demand AG

Beethovenplatz 2
80336 Munich
Germany

Phone: +49 89 588 0430-00
Email: information@taskforce.net

Registered in the Commercial Register of the Munich Local Court under HRB 283862

Represented by the Executive Board: Jens Christophers and Kristin Gölkel

Data Protection Officer:

Olga Teköz
Beethovenplatz 2
80336 Munich
Germany

Phone: +49 89 588 0430-00
Email: datenschutz@taskforce.net

1.3 The terms used, such as “personal data” or its “processing,” refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1.4 The personal data of users processed as part of this online service includes master data (e.g., names and addresses of customers), contract data (e.g., services used, names of case managers, payment information), usage data (e.g., the web pages visited on our online service, interest in our services), and content data (e.g., entries in contact forms, messages).

1.5 The term “user” encompasses all categories of individuals affected by data processing. These include our business partners, clients, experts, customers, prospective customers, and other visitors to our online service (e.g., job applicants). The terms used, such as “user,” are to be understood as gender-neutral.

1.6 We process users’ personal data only in compliance with the relevant data protection regulations. This means that users’ data is processed only if there is a legal basis or the user’s consent, such as when data processing is necessary to provide our contractual services (e.g., displaying your manager profile, searching for candidate profiles, or advertising projects) or is required by law, or is justified on the basis of our legitimate interests (such as our interest in the analysis, optimization, and cost-effective operation and security of our online offering) within the meaning of Article 6(1)(f) of the GDPR, particularly with regard to measuring reach, collecting access data, and using third-party services.

1.7 We note that the legal basis for consent is Article 6(1)(a) and Article 7 of the GDPR; the legal basis for processing to fulfill our services and carry out contractual measures is Article 6(1)(b) of the GDPR; the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) of the GDPR, and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) of the GDPR.

1.8 We implement state-of-the-art organizational, contractual, and technical security measures to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

2. What Personal Data We Collect and How We Use It

2.1 Types of Data and Purposes of Processing

Master data (e.g., names, addresses, email addresses, phone numbers, manager profiles, project postings),
contract data (e.g., services utilized, names of contact persons, payment information), and
communication data (e.g., messages exchanged between project providers and candidates)
Payment data (e.g., bank account information, invoices, payment history),
as well as application and profile data (e.g., resumes, qualifications, work experience, certificates, uploaded documents).
Processing is carried out to provide our contractual services, to make the platform functions available, and to optimize our online offering in accordance with Art. 6(1)(b) and (f) of the GDPR.

2.2 Registration, Profiles, and Platform Use

In connection with the registration, creation, and use of a user account, as well as when creating and editing profiles (e.g., manager profiles), we process the data you provide.

This includes, in particular:

Master data and contact information,
profile information (e.g., professional background, qualifications),
uploaded documents and attachments,
message content, and project-related information.
This processing is carried out to fulfill the user agreement and to facilitate the matching of projects and candidates as part of our platform services in accordance with Article 6(1)(b) of the GDPR.

2.3 Communication and Provision of Information

We also process your contact information to inform you about significant changes, technical information, and project-related notifications.

This includes, in particular:

Notifications about new project requests,
Alerts regarding incoming messages,
System and service information.
The processing is carried out for the purpose of fulfilling the contract and maintaining platform operations in accordance with Article 6(1)(b) of the GDPR.

2.4 User Accounts and Data Deletion

User accounts are not publicly visible and are not indexed by search engines.

When a user account is deleted, the associated data is deleted, provided there are no legal retention requirements (e.g., under commercial or tax law). In such cases, processing is restricted.

Users are responsible for backing up their data before terminating their user relationship.

We reserve the right to delete or block data in accordance with legal requirements.

2.5 Logging of Accesses and Actions

As part of the use of our platform, we store IP addresses as well as the time and type of certain user actions (e.g., logins, registrations, or security-related activities).

This processing is based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR, in particular to protect against misuse, to ensure system security, and to ensure the platform’s functionality.

This data will only be disclosed if required by law or necessary for legal proceedings.

2.6 Automatically Collected Usage Data

When you visit our website, the following data may be collected automatically:

(truncated) IP address,
location data (to the extent technically and legally permissible),
browser type and version,
operating system and device,
referrer URL,
pages and content accessed,
search terms and filters,
interactions within the platform,
duration and frequency of use.
This data is collected in part using cookies and similar technologies.

2.7 Purposes of Data Processing

The processing of the above-mentioned data is carried out in particular for the following purposes:

Provision and operation of the website and platform,
technical administration and troubleshooting,
ensuring stability, security, and protection against misuse,
improvement and optimization of our services,
display and personalization of content,
analyzing usage to further develop our offerings,
matching projects and profiles within the platform.

2.8 No Automated Profiling

Automated decision-making within the meaning of Article 22 of the GDPR does not take place.

Profiles are used exclusively for filtering and searching based on specific criteria (e.g., qualifications, industries, or tags). No automatic evaluation or decision regarding users takes place.

2.9 Job Applications

If you apply for a position through our platform or by other means, we process your personal data to carry out the application process.

The legal basis is Article 6(1)(b) of the GDPR and Section 26 of the BDSG.

2.10 Inclusion in the Candidate Pool (Consent)

With your express consent, we will process your application data beyond the current application process in our candidate pool so that we can consider you for suitable project opportunities.

This includes, in particular:

Resume,
qualifications and skills,
professional experience,
contact information,
other application documents you have submitted.
Processing is carried out exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.

You may revoke your consent at any time with future effect. The lawfulness of the processing carried out prior to revocation remains unaffected.

The data is generally stored for a maximum of three years, unless earlier deletion is requested or statutory retention obligations preclude this.

3. Transfer and Disclosure of Data

3.1 Transfer of Data to Third Parties

Personal data is transferred to third parties exclusively in accordance with legal requirements.

Data is transferred only if it is necessary:

to fulfill a contract or to take steps prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR,
to comply with legal obligations pursuant to Article 6(1)(c) of the GDPR, or
based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR, in particular to ensure the economical, efficient, and secure operation of our business, as well as for the purposes of legal enforcement and defense.
On this basis, personal data may be transferred, in particular, to service providers, business partners, affiliated companies, consultants, government agencies, and courts.

3.2 Use of Data Processors

If we engage external service providers as data processors pursuant to Article 28 of the GDPR, this is done exclusively on the basis of corresponding contractual agreements.

In doing so, we implement appropriate technical and organizational measures to ensure the protection of personal data in accordance with legal requirements.

3.3 Data Transfers to Third Countries

If, within the scope of this Privacy Policy, services or providers are used that are based outside the European Union or the European Economic Area (so-called third countries), personal data may be transferred to these third countries.

Such transfers will only take place if the respective third country provides an adequate level of data protection or if appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR are in place, in particular through:

the conclusion of Standard Contractual Clauses of the European Commission,
the EU-U.S. Data Privacy Framework (if applicable), or
other legally recognized safeguards such as Binding Corporate Rules.
A copy of the safeguards used can be provided upon request using the contact information listed in Section 13.

Access to personal data is restricted to those recipients who need it to perform their respective duties.

4. Opt-in for Direct Marketing

4.1 Consent and Double-Opt-In Procedure

We use personal data for direct marketing purposes—in particular, to send newsletters, event information, or other promotional communications—only with your explicit consent in accordance with Article 6(1)(a) of the GDPR.

Subscription to our newsletter is handled via the so-called double opt-in procedure. This means that after you subscribe, you will receive an email asking you to confirm your subscription. Your subscription will be activated only after you provide this confirmation.

This procedure is designed to prevent misuse and ensure that no unauthorized subscriptions occur.

The following data is logged as part of the registration process:

Email address,
Time of registration,
Time of confirmation,
IP address at the time of registration.
In addition, changes to the data we store in connection with the distribution of the newsletter are logged in order to comply with legal record-keeping obligations.

4.2 Withdrawal of Consent

You may withdraw your consent to receive the newsletter and other promotional information at any time with future effect.

You can withdraw your consent, in particular, by clicking the unsubscribe link included in every email. Alternatively, you may also contact us directly.

The lawfulness of data processing carried out up until revocation remains unaffected by this.

5. Specifics Regarding Data Protection in Connection with Project Inquiries

5.1 Project-Related Communication

To fulfill our contractual obligations and provide our services, we will notify you via email—in accordance with Article 6(1)(b) of the GDPR—about new project inquiries, relevant platform activities, and other contract-related information.

By registering and accepting our Terms of Use, you agree that we may contact you in this manner.

You can specify in your user account which types of project offers (e.g., specific functional areas or subject areas) you would like to be informed about.

5.2 Email Service Provider Mailjet

Emails and project-related notifications are sent via the service Mailjet SAS, 43 Rue de Dunkerque, 75010 Paris, France.

Mailjet is a service for organizing and technically executing email delivery, as well as for analyzing delivery and open rates.

The data required for this purpose (in particular your email address) is processed on servers located within the European Union.

Mailjet SAS is part of the Mailgun Group. The parent company is Mailgun Technologies, Inc., 112 E Pecan St #1135, San Antonio, TX 78205, USA. It cannot be ruled out that personal data may also be transferred to the United States in connection with the technical provision of services.

We have entered into a data processing agreement with Mailjet in accordance with Article 28 of the GDPR. Processing is carried out exclusively in accordance with our instructions and in compliance with applicable data protection regulations.

For more information on data protection at Mailjet, please visit:
https://www.mailjet.de/av-vertrag/
https://www.mailjet.de/sicherheit-datenschutz/
https://www.mailjet.de/privacy-policy/

5.3 Web Beacons / Tracking in the Newsletter

Our emails may contain so-called web beacons (tracking pixels). These are small files embedded in the email that are retrieved from our server when the message is opened.

As part of this retrieval, technical information is processed, in particular:

Information about the browser and device used,
IP address (truncated if necessary),
Time of retrieval.
This data is used for the technical optimization of email delivery as well as for statistical analysis.

5.4 Reach Measurement and Analysis

As part of our email communications, we may conduct statistical analyses, specifically:

whether emails are opened,
when they are opened,
which links are clicked.
These analyses are used exclusively to improve the relevance and content of our communications and to better tailor content to users’ interests.

We do not monitor the behavior of individual users on a personal basis.

5.5 Unsubscribing from the Newsletter and Project Information

You may unsubscribe from newsletters and/or project-related email notifications at any time, effective immediately.

You can unsubscribe by clicking the corresponding link in each email or by notifying us.

After unsubscribing, your email address will be added to a blacklist to ensure that no further emails are sent to you.

The lawfulness of the processing carried out up until the time of revocation remains unaffected by this.

5.6 Opting Out of Project Inquiries

You can opt out of receiving emails regarding new project inquiries at any time. A corresponding unsubscribe link is included in every project notification.

Alternatively, you can adjust the settings directly in your user account.

5.7 Retention Period

Data collected in connection with email distribution is generally stored only for as long as your subscription is active.

After you unsubscribe, your data will be removed from the active mailing system. Data is stored in opt-out lists solely to comply with opt-out requirements.

Data processed for other purposes (e.g., contractual or communication data related to platform use) remains unaffected by this.

6. Use of the Interim Management Platform for Project Matching

6.1 Use of the Platform

We operate the platform https://interim.taskforce.net/ to match users with interim management projects and to provide corresponding platform features to users.

In the course of using the platform, personal data is processed to the extent necessary to provide the platform, facilitate project matching, and enable communication between users.

6.2 Use of Microsoft 365

We use Microsoft 365 for communication related to project inquiries, general inquiries, and ongoing business communication.

The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

If you contact us via email, the personal data you provide (e.g., name, email address, message content) will be processed for the purpose of handling your inquiry and for any follow-up questions.

Processing is based on Article 6(1)(b) of the GDPR (contract or pre-contractual measures) and Article 6(1)(f) of the GDPR (legitimate interest in efficient and secure communication).

To the extent that personal data is transferred to third countries, in particular to the United States, this is done on the basis of the European Commission’s Standard Contractual Clauses as well as other appropriate safeguards within the meaning of Articles 44 et seq. of the GDPR.

6.3 Use of Mistral AI (Application and Analysis Processes)

To support our application process and to evaluate application documents more efficiently, we use services provided by Mistral AI SAS.

The provider is Mistral AI SAS, 15 Rue des Halles, 75001 Paris, France.

As part of this use, personal data from application documents (in particular resumes, cover letters, and the contact, qualification, and career information contained therein) may be automatically processed and analyzed. This is done exclusively for the purpose of supporting the selection and placement process.

The processing is based on Article 6(1)(b) of the GDPR (implementation of pre-contractual measures) and Article 6(1)(f) of the GDPR (legitimate interest in efficient candidate and project placement).

We have entered into a data processing agreement with Mistral AI in accordance with Article 28 of the GDPR. Processing is carried out exclusively on our instructions.

To the extent that personal data is transferred to third countries, this is done only with appropriate safeguards in accordance with Article 44 et seq. of the GDPR, in particular through the European Commission’s Standard Contractual Clauses.

There is no automated decision-making within the meaning of Article 22 of the GDPR. The final decision regarding applications and placements is always made by a human.

6.4 Use of HubSpot (CRM and Marketing)

We use the CRM and marketing software provided by HubSpot Inc. to manage customer and prospect data, as well as to process contact inquiries and carry out marketing activities.

The provider is HubSpot Inc., 2 Canal Park, Cambridge, MA 02141, USA.

HubSpot is used in particular for the following purposes:

Management of contact and master data (CRM system)
Processing of contact and project inquiries via online forms
Email marketing and newsletter distribution (if used)
Marketing automation and campaign management
Analysis of user interactions (if enabled)
Organization and documentation of project-related communication
In the course of use, the following personal data in particular may be processed:
Contact and communication data (e.g., name, email address), content data from forms and emails, usage data, and technical data (e.g., IP address, device and browser information).

Processing is based on Article 6(1)(b) of the GDPR (contract or pre-contractual measures) and Article 6(1)(f) of the GDPR (legitimate interest in efficient customer and communication management).

We have entered into a data processing agreement with HubSpot in accordance with Article 28 of the GDPR. To the extent that personal data is transferred to the United States, this is done on the basis of the EU Standard Contractual Clauses (SCCs) as well as additional technical and organizational safeguards.

To the extent that HubSpot is used for analytics or marketing purposes, this is done exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR via our consent management tool.

For more information on data processing by HubSpot, please visit:
https://legal.hubspot.com/de/privacy-policy

6.5 Use of ERP and Document Management Systems

We use external software solutions to manage our business processes and to organize, store, and process company data in a structured manner.

These include, in particular, an enterprise resource planning (ERP) system for handling business processes such as customer management, invoicing, and project organization, as well as a document management system (DMS) for the audit-compliant storage and management of documents.

In the course of using these systems, personal data is processed to the extent necessary to fulfill contractual obligations, for internal organizational purposes, and to comply with statutory retention requirements.

In particular, the following categories of data are processed:

Customer and business partner profile and contact information
Contract and billing data
Communication and project data
Where applicable, application and personnel data, to the extent required by business processes
The systems we use include, in particular:

weclapp (ERP system)
DocuWare (document management system; may be referred to as DocuVita within our organization)
Processing is based on:

Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures),
Art. 6(1)(c) GDPR (legal obligation), and
Art. 6(1)(f) GDPR (legitimate interest in efficient, secure, and structured business organization).
To the extent that the providers of the systems used act as data processors pursuant to Art. 28 GDPR, their use is based exclusively on corresponding data processing agreements.

Personal data is transferred to third countries only if appropriate safeguards within the meaning of Art. 44 et seq. GDPR are in place (e.g., EU Standard Contractual Clauses or comparable protective mechanisms).

7. Cookies and Other Technologies

7.1 General Information on Cookies

Cookies are small text files that are stored on the user’s device when visiting a website and contain certain information. They serve to store information about users during or after their visit to an online service or to make such information retrievable repeatedly. This may include, for example, language settings, login status, shopping cart contents, or progress in the playback of media content.

In addition to cookies, we also use similar technologies that store information on your device or access information already stored there (e.g., local storage, pixels, or pseudonymous identifiers, also known as “user IDs”).

7.2 Legal Basis for Processing

The processing of personal data in connection with cookies is based—depending on the specific type and purpose of the cookies—on your consent pursuant to Article 6(1)(a) of the GDPR or on our legitimate interests pursuant to Article 6(1)(f) of the GDPR, in particular to ensure the functionality, stability, and security of our online offering, as well as to provide our content in a user-friendly and cost-effective manner.

To the extent that cookies are necessary to enable the provision of services you have expressly requested (e.g., to perform a contract or to provide basic website functions), the processing is additionally based on Article 6(1)(b) of the GDPR.

7.3 Retention Period

Unless we provide you with different information regarding the retention period via a cookie consent tool, the retention period for persistent cookies is generally up to two years. After that, the cookies are automatically deleted.

7.4 Withdrawal of Consent and Objection (Opt-Out)

You may withdraw your consent at any time with future effect or object to the processing of your personal data through cookie technologies.

You can adjust these settings using our cookie consent tool, as well as through your browser settings, where you can delete or block cookies at any time. Please note that this may limit the functionality of this website.

You can also object to the use of cookies for online marketing purposes via the following services:
https://optout.aboutads.info
https://www.youronlinechoices.com/

7.5 Cookie Consent Management

We use a cookie consent management system to obtain, manage, and document users’ consent for the use of cookies and related processing activities.

Consent that has been granted is stored so that it does not need to be requested again and to ensure compliance with the legal documentation requirements under the GDPR. Storage takes place either on the server side or in a cookie (a so-called opt-in cookie) or via comparable technologies.

In particular, the following information is processed:

Time of consent
Scope of consent (e.g., categories of cookies and services used)
A pseudonymous user identifier
Information about the browser, operating system, and device used
Consent data may be stored for up to two years.

7.6 Use of Cookiebot

This website uses the features of the cookie consent management service Cookiebot provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark.

Cookiebot is used to obtain and manage consent for the use of cookies and similar technologies.

For more information on data processing by Cookiebot, please visit:
https://www.cookiebot.com/de/privacy-policy/

8. Links to Other Websites and Social Media, Forms, Comments

Links to external websites are provided on our website solely for informational purposes. When accessing external websites via these links, the privacy policies of the respective providers apply. The operators of these external websites are solely responsible for the processing of personal data on their sites.

8.1 LinkedIn

Our website uses features from the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The transmission of personal data to LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, cannot be ruled out.

The integration of LinkedIn features is based solely on your consent in accordance with Article 6(1)(a) of the GDPR via our cookie consent tool. Without your consent, no such connections to LinkedIn will be established.

When you visit a page with LinkedIn features enabled, a connection to LinkedIn’s servers may be established. In particular, your IP address and information about your visit to our website may be transmitted to LinkedIn. If you are logged in to LinkedIn, LinkedIn may associate your visit to our website with your user account.

We have no influence over the nature and scope of the data processed by LinkedIn or its further use.

For more information on data processing by LinkedIn, please visit:
https://de.linkedin.com/legal/privacy-policy

8.2 XING

Our website uses features from the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

The integration of XING features is based exclusively on your consent pursuant to Art. 6(1)(a) of the GDPR via our cookie consent tool. Without your consent, no connections to XING will be established.

When you visit the relevant pages, a connection to XING’s servers may be established. According to the provider, no personal data related to your visit to the page is stored or analyzed in this process.

For more information on data processing, please visit:
https://privacy.xing.com/de/datenschutzerklaerung

8.3 Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser transmits automatically. This includes, in particular:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is not associated with specific individuals and is not combined with other data sources.

Processing is based on Article 6(1)(f) of the GDPR (legitimate interest), in particular to ensure the security, stability, and functionality of the website, as well as for technical optimization.

We reserve the right to review this data retrospectively if there are concrete indications of unlawful use.

8.4 Google Web Fonts

This website uses Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The integration takes place exclusively with your consent in accordance with Art. 6(1)(a) of the GDPR via our cookie consent tool. Without your consent, no Google Fonts will be loaded from external servers.

When you visit our website, a connection to Google’s servers may be established, during which your IP address, in particular, may be transmitted to Google. A transfer to the United States cannot be ruled out in this context.

For more information on data processing by Google, please visit:
https://policies.google.com/privacy

8.5 Vimeo

This website embeds videos from the provider Vimeo, Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.

This integration is based exclusively on your consent pursuant to Art. 6(1)(a) of the GDPR via our cookie consent tool. No Vimeo content will be loaded without your consent.

When you view embedded videos, Vimeo may collect personal data (in particular, IP address and usage data) and may also transfer this data to servers in the United States.

This processing is carried out to provide video content on our website.

For more information on data processing, please visit:
https://vimeo.com/privacy

9. Shop and E-Commerce

9.1 Order Processing and Contract Performance

We process our customers’ personal data to the extent necessary for the provision, execution, and fulfillment of orders, the sale of goods or services, and their payment and delivery.

This includes, in particular, order, contact, payment, and delivery data.

To the extent necessary for contract fulfillment, we disclose personal data to contracted service providers, in particular to shipping and logistics companies that handle the delivery of the ordered goods.

Processing is based on Article 6(1)(b) of the GDPR (performance of a contract and pre-contractual measures), Article 6(1)(c) of the GDPR (legal obligation), and Article 6(1)(f) of the GDPR (legitimate interest in the efficient and secure processing of our business transactions).

9.2 Payment Processing

We use external payment service providers to process payments. The personal data provided during the ordering process is transmitted to the respective payment service provider exclusively for the purpose of payment processing.

This includes, in particular:

Personal information (e.g., name, address)
Payment information (e.g., bank account information, credit card information)
Transaction information (e.g., amount, recipient, time of payment)
Technical data related to payment processing
The data is processed exclusively by the respective payment service provider. We ourselves do not receive complete payment data (e.g., no complete credit card or bank account details), but only information regarding the status of the payment (e.g., “successful” or “failed”).

In individual cases, payment service providers may transmit data to credit bureaus if this is necessary for identity or creditworthiness verification. We have no influence over this. The respective privacy policies of the payment service providers apply.

The legal basis for payment processing is Article 6(1)(b) of the GDPR (performance of a contract).

Payment Service Providers Used

PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg
Website: https://www.paypal.com/de
Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe
Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA
Website: https://stripe.com
Privacy Policy: https://stripe.com/de/privacy

10. Data Retention

We store personal data only for as long as is necessary for the respective processing purposes or as long as we are legally required to retain it.

As soon as the purpose of data processing no longer applies or a statutory retention period expires, the personal data will be deleted or its processing restricted (blocked) in accordance with legal requirements.

Longer retention may occur, in particular, to the extent necessary to fulfill statutory retention obligations, for example, under commercial or tax law.

In such cases, the data will be blocked from further processing and used exclusively for the purposes prescribed by law.

11. Your Rights

11.1 Right of Access

You have the right to request information about the personal data we process. This includes, in particular, information about the purposes of processing, the categories of personal data, the recipients or categories of recipients, and the planned retention period.

Registered users can also use a data export function via their user account to obtain an overview of the stored data.

11.2 Other Data Subject Rights

You are entitled to the following rights under applicable law:

Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure of your personal data (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR), insofar as such processing is based on Art. 6(1)(f) GDPR
You also have the right to lodge a complaint with a data protection supervisory authority.

11.3 Withdrawal of Consent

If you have given us your consent to process personal data, you may withdraw it at any time with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

11.4 Deletion of the User Account

As a registered user, you may request the deletion of your user account and the associated personal data at any time, provided that no statutory retention obligations prevent this.

To do so, please contact us using the contact information provided in the Legal Notice or by email at: datenschutz@taskforce.net

12. Data Security

12.1 Technical and Organizational Measures

We implement appropriate technical and organizational measures to protect personal data against loss, destruction, and manipulation, as well as against unauthorized access, disclosure, or processing.

These measures are continuously adapted and improved in accordance with the current state of the art.

12.2 Encryption of Data Transmission

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://,” as well as by the padlock icon in the browser address bar.

When encryption is enabled, the transmitted data cannot be read by third parties.

13. Contact Regarding Data Protection

If you have any questions, concerns, or complaints regarding data protection at taskforce or our handling of your data, please contact us directly.

taskforce – Management on Demand AG

You can reach our Data Protection Officer at:

Olga Teköz
Beethovenplatz 2
80336 Munich
Germany

Phone: +49 89 588 0430-00
Email: datenschutz@taskforce.net

14. Changes to the Privacy Policy

14.1 Updates to the Privacy Policy

We reserve the right to update this Privacy Policy if required due to changes in the legal landscape, technical developments, or changes to our services or data processing practices.

Any changes will be made exclusively in accordance with the applicable data protection regulations.

14.2 Duty to Inform and Up-to-Date Status

We recommend that you review the content of this Privacy Policy regularly.

The most current version is available on our website at any time.

Effective as of: July 20, 2026