Purpose and legitimate interest

We operate online profiles on various social media platforms to engage with users, prospective clients, and customers, and to inform them about our services and topics related to IT consulting. Our social media channels complement our own website and offer an alternative means of communication, especially for users who prefer these platforms.

We currently maintain the following company profiles:

LinkedIn Company Profile (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
YouTube Channel (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
XING Company and Review Profile (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)
Kununu Company and Review Profile (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)

Our website does not use embedded social media plugins or interfaces that enable automatic data transmission when visiting our pages. Our social media channels are accessible exclusively via external links. By clicking these links, you leave the protected area of our website and enter the responsibility of the respective network provider, where their own privacy policies apply.

Please note that you use these platforms and their functions under your own responsibility. This applies in particular to interactive features such as likes, comments, shares, or ratings.

The respective networks generally process the data you provide in your profiles and may also collect further usage data (e.g. interactions, visits, session duration) to offer personalized content or ads.

Legal basis

The processing of personal data takes place to stay in contact with our customers, to provide information, and to carry out pre-contractual measures with potential clients or applicants in accordance with Art. 6 para. 1 lit. b) GDPR.
In addition, we have a legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR in effective communication and information sharing with users and prospects, and for marketing purposes, such as increasing reach, visibility, and employer branding.
We also use aggregated statistics to continuously improve the relevance of content provided on our company profiles.

If you have given your consent pursuant to Art. 6 para. 1 lit. a) GDPR (e.g. by setting your LinkedIn or XING status to “open to work”), we may contact you directly with suitable job opportunities.

Recipients of the data

The primary recipients of the data are the respective social network operators, who may process the data for their own purposes and may share it with third parties under their own responsibility.
In addition, the content you post may be publicly accessible to anyone.

Third country transfers

When accessing our company profiles on LinkedIn and YouTube, personal data may be transferred to third countries, especially the United States.

For the U.S., an adequacy decision from the European Commission under the EU-U.S. Data Privacy Framework has been in place since July 10, 2023. This applies to companies certified under the framework. A list of certified companies is available here.

YouTube (Google LLC) is certified under the EU-U.S. Data Privacy Framework and relies on this adequacy decision for data transfers.

LinkedIn is not currently certified under the framework but has confirmed to the U.S. Department of Commerce that it complies with the EU-U.S. Data Privacy Framework Principles. According to LinkedIn, data transfers are only made to countries with an adequacy decision under Art. 45 GDPR or based on appropriate safeguards under Art. 46 GDPR.

In addition, we have entered into standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR with LinkedIn and YouTube/Google. These can be accessed at the following links:

LinkedIn: www.linkedin.com
YouTube/Google: www.business.safety.google, www.policies.google.com

A copy of the standard contractual clauses is available upon request.

There is no transfer of personal data to third countries when using XING and Kununu. Processing takes place exclusively within the European Union (EU).

Storage period

Data is deleted as soon as it is no longer needed for the purpose for which it was collected. As a rule, private messages you send to us are deleted after three years, starting at the end of the calendar year in which they were received.
Comments remain stored on the respective network until you delete them yourself.
We have no control over how social networks handle your data and are not responsible for any third-country transfers by U.S.-based providers.

Provision voluntary or required

Providing your personal data on social media is voluntary. Without it, however, you will not be able to interact with us or our content on those platforms.

Right to object

LinkedIn: https://www.linkedin.com/help/linkedin/ask/TS-DPRO and www.linkedin.com
YouTube: www.myaccount.google.com and www.support.google.com
XING: www.privacy.xing.com and www.xing.com

Please also read your right to object under Art. 21 GDPR below.

Your contact to Xenium

How can we help you?

Newsletter registration