Privacy Policy

1. Data controller and data protection officer

The data controller within the meaning of the EU General Data Protection Regulation (GDPR) is

HRCast GmbH
Saarbrücker Straße 20
10409 Berlin

represented by:

  • Florian Blaschke
  • Mengühan Ünver
  • Marcel Poelker

The data protection officer is:
IITR Datenschutz GmbH, Dr. Sebastian Kraska, Marienplatz 2, 80331 Munich, Email: email@iitr.de, Phone: 089-18917360

If you have any questions about data protection, please contact privacy@hrcast.io.

2. Collection and storage of personal data, type and purpose of use

When you visit our website www.hrcast.io, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.

The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the accessed file,
  • website from which the access was made (referrer URL) and
  • the browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring a comfortable use of our website,
  • evaluation of system security and stability and
  • for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. The log files are stored for as long as is necessary for the respective purpose, generally no longer than 14 days.

We also use cookies and analysis services when you visit our website. You will find more detailed explanations in sections 7 and 8 of this privacy policy.

3. Use of our platform

If you would like to book one of our services, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. We process the data you provide to process the order. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

In this context, we only transfer your personal data to third parties if this is necessary in the context of contract processing, e.g. to the host provider of our platform or to the company commissioned with payment processing. Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes.

You can voluntarily register on the website and create a customer account, through which we can save your data for future orders. When you create an account, the data you provide will be stored on a revocable basis. You can delete all other data, including your user account, at any time in the customer area.

We may also process the data you provide in order to inform you about other interesting products from our portfolio. For this purpose, we use existing information, e.g. on the products you have viewed. This is based on our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. If you do not wish to receive personalized advertising, you can object to this at any time by sending a message to the data protection officer.

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. They will be deleted after the retention obligations have expired.

4. Contact form

For questions of any kind, we offer you the opportunity to contact us by email at info@hrcast.io. In order for us to know who sent the request and to be able to answer it, we must process the data provided in the request (e.g. your name, email address). The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

After your inquiry has been dealt with, the processed data will be deleted in accordance with the data protection regulations.

5. Newsletter

If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to send you our newsletter on a regular basis.

It is sufficient to provide an email address to receive the newsletter. The potential provision of further data is voluntary and is used to address you personally. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purposes of advertising by means of the newsletter.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter. Alternatively, you can also send your unsubscribe request at any time to newsletter@hcast.io by email. Once you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

6. Data sharing

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which can be revoked at any time,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

7. Cookies

We use cookies (small text files that are placed on your device) and similar technologies such as pixel tags, web beacons and clear GIFs (which are added to the website), all of which are collectively referred to below as "cookies". In the following, we will distinguish between different categories of cookies.

7.1. Required Cookies

In order for the website to function properly, we use so-called necessary cookies. Such cookies make a website usable by providing basic functions such as page navigation and access to protected areas of the website or language settings. Due to their importance for the functioning of the website, you cannot refuse this type of cookie. We base the associated processing of personal data on Art. 6 para. 1 sentence 1 lit. b GDPR.

Cookies required to provide this website include cookies that

  • recognize whether a user is using Java Script,
  • allow a user to receive content from one of several servers while the user is visiting the website
  • determine whether a user has accepted a particular category of cookies in the cookie banner
  • maintain the user's status for all page views (including future views).

7.2. Session Cookies

Session cookies allow you to navigate quickly and easily through many pages of a website without having to re-enter all the settings you have already made or authenticate for each area you visit. Session cookies are a combination of one or more temporary cookie files that are deleted when you close your browser. If you restart your browser and return to the website that created the cookie, the website will not recognize you. You will have to log in again (if login is required) or select your preferences/themes again if the website offers these functions.

8. Analytics and tracking tools

The tracking measures listed below are used on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke the consent you have given at any time without disadvantages and with effect for the future. To change your settings, please click here and select "Manage cookies" at the bottom of the page.

With these tracking measures, we want to make our website more efficient, obtain information and statistics about its use and recognize your device on subsequent visits.

In the case of third-party providers who transfer the data to the USA, we would like to point out that the level of data protection in the USA is not comparable with the GDPR. Your consent to the use of these tools therefore also includes the transfer of data to the providers of these tools in the USA.

The specific data processing purposes and data categories of the individual third-party providers are explained in more detail below:

8.1. Google Analytics

With your consent, we use Google Analytics, a web analytics service provided by Google LLC, for the purpose of designing and continuously optimizing our website to meet your needs. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • host name of the accessing computer (IP address) and
  • Time of the server request

are transmitted to a Google server in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking). The data collected is stored for 14 months.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help section at support.google.com/analytics/answer/6004245 or in the Google Analytics terms of use at www.google.com/analytics/terms/de-html.

8.2. Google Ads

With your consent, we use the online marketing process "Google Ads" to place ads in the Google advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who are presumed to be interested in the ads.

We also measure the conversion of the ads. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a so-called "conversion tracking tag". However, we ourselves do not receive any information that can be used to identify users.

The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.  You can find more information in Google's privacy policy at policies.google.com/privacy

8.3. Google Tag Manager

On this website, we use the Google Tag Manager service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool allows "website tags" (i.e. keywords that are integrated into HTML elements) to be implemented and managed via an interface.

By using Google Tag Manager, we can automatically track which button, link or personalized image you have actively clicked on and can then record which content on our website is of particular interest to you.

These processing operations are only carried out with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR; § 25 para. 1 TTDSG. Further information on Google Tag Manager and Google's privacy policy can be found at www.google.com/intl/de/policies/privacy.

8.4. Google Remarketing

We use the "Google Audiences/Remarketing" service on this website with your consent. The operator of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland. The purpose of this service is the interest-based display of advertisements for users. This requires website usage to be analyzed using cookies.

The cookies store anonymized or pseudonymized data relating to the use of the website. If you visit other websites that also use these services, you will be presented with advertisements that match your previous interests. The following data is collected and processed:

  • pages visited
  • IP address
  • duration of visit
  • Other information on the use of websites
  • Content in which the user is interested

If you do not want Google Audiences/Google Remarketing to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The personal data will be stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose. In addition to Google Ireland Limited, the data may also be transmitted to Google LLC and Alphabet Inc. as part of the processing.

8.5. Hubspot (CRM Management)

Mit Ihrer Einwilligung setzen wir auf unserer Webseite zu Analysezwecken HubSpot, einen Dienst der HubSpot Inc., aus den USA mit einer Niederlassung in 2nd Floor 30 North Wall Quay, Dublin, Irland ein. Hierbei werden von uns Cookies gesetzt, die auf Ihrem Computer gespeichert werden und die eine Analyse Ihrer Benutzung der Website durch uns ermöglichen. Die erfassten Informationen (z.B. IP-Adresse, der geographische Standort, Art des Browsers, Dauer des Besuchs und aufgerufene Seiten) wertet HubSpot im Auftrag von HRCast aus, um Reports über den Besuch und die besuchten Seiten von HRCast zu generieren. Wir nutzen alle erfassten Informationen ausschließlich zur Optimierung unseres Marketings. Weitere Informationen finden Sie unter https://legal.hubspot.com/de/privacy-policy.

8.6. Facebook Pixel

With your consent, we use "Facebook Pixel" on our website - a tracking tool from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If you are based in the EU, this tracking tool is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook pixels can be used to track the behavior of visitors to our website after they have been redirected to our website by clicking on a Facebook ad. This makes it possible to evaluate the effectiveness of Facebook ads for statistical and market research purposes and to optimize advertising measures.

As the operator of the website, we only receive the collected data in anonymous form and cannot draw any conclusions about the identity of the users. However, data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This enables Facebook to place advertisements on Facebook pages and outside of Facebook. As the operator of the website, we cannot influence this use of data by Facebook.

You can find further information on protecting your privacy in Facebook's privacy policy: www.facebook.com/about/privacy/.

You have the option of deactivating the remarketing function "Custom Audiences" in your Facebook profile in the settings for advertisements at www.facebook.com/ads/preferences, whereby you must be logged in to Facebook to do this.

If you do not have a Facebook account, you have the option of deactivating usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: www.youronlinechoices.com/de/praferenzmanagement/.

8.7. LinkedIn Ads, Insight Tag

With your consent, our website uses the "LinkedIn Insight Tag" conversion tool from LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. This tool creates a cookie in your web browser that enables the collection of the following data, among others: IP address, device and browser properties and page events (e.g. page views). This data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. LinkedIn does not share any personal data with HRCast, but offers anonymized reports on the website target group and display performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. HRCast can use this data to display targeted advertising outside its website without identifying you as a website visitor. You can find more information on data protection at LinkedIn in the LinkedIn privacy policy at de.linkedin.com/legal/privacy-policy.

LinkedIn members can control the use of their personal data for advertising purposes in their account settings.

9. Other service providers

We commission service providers to process your personal data for the purposes described in this data protection notice. These service providers process the data only on our behalf and in accordance with our instructions.  

The data processed within the scope of these contracts will not be stored for longer than necessary, but at most for the duration of the contractual relationship with the relevant service provider or other legal requirements.

9.1. fly.io

Our website and our services are hosted on servers of fly.io Inc. in Frankfurt am Main. Accordingly, the data processed via the website and as part of our services is stored on fly.io servers. This data processing is necessary for the provision of our services, Art. 6 para. 1 sentence 1 lit. b GDPR.

You can find further information at

9.2. PostHog

We use the GDPR-compliant open source software platform PostHog for product analysis and further development of our software. Posthog offers the possibility to analyze, test, monitor and provide new functions and provides valuable insights into the user behavior of our customers (e.g. button clicks or page views).

Provider: PostHog Inc, 2261 Market Street #4008, San Francisco, CA 94114

Further information can be found at

9.3. New relic

The newrelic service is used to monitor our server performance.

Provider: New Relic Inc. with registered office at 188 Spear Street, Ste. 1000, San Francisco, California, 94105 and New Relic Germany GmbH 20, Oskar-von-Miller-Ring, 80333 Munich, Germany

Further information can be found at

9.4. skylight

The skylight service is used to monitor our server performance.

Provider: Tilde Inc. with registered office at 812 SW Washington St #1000, Portland, OR 97205, United States

Further information can be found at

9.5. Rollbar

We use the rollbar service for the monitoring and error tracking of our software.

Provider: rollbar Inc. with registered office at 548 Market St Suite #60587, San Francisco, CA 94104, USA

You can find further information at

9.6. Webflow

The "Webflow" service is used to provide the content of the website. This tool is operated by Webflow, Inc., a Delaware corporation located at 398 11th Street, Floor 2, San Francisco, CA 94103. Interested parties can use this website to request information about the product launch or to make an appointment for a product demonstration by providing their name and e-mail address. Webflow uses this information to send and statistically evaluate the notifications on our behalf. The legal basis for this is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, which you can revoke at any time for the future.

Further information on data protection be found at webflow.com/legal/privacy

10. Rights of data subjects

You have the right

  • in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details
  • in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us
  • in accordance with Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
  • in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and
  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

11. Right of withdrawal

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to privacy@hrcast.io.

12. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13. Responsible data protection authority

If you have any questions or concerns about data processing, you can also contact the data protection authority in the member state of your habitual residence or the data protection authority responsible for us:  

Berlin Commissioner for Data Protection and Freedom of Information

Alt-Moabit 59-61, 10555 Berlin
Phone: +49 30 13889-0
Fax: +49 30 2155050
E-mail: mailbox@datenschutz-berlin.de

14. Date and changes of this privacy policy

This privacy policy is currently valid and was last updated in January 2024. 

It may become necessary to amend this privacy policy as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at hrcast.io/privacy.