XING E-Recruiting and Prescreen become onlyfy ✨

Privacy Policy

Last Update: 09/2022

We New Work SE as operator of onlyfy ((hereinafter referred to as “we,” “us,”, “onlyfy“) inform you about

Who is responsible for data processing?

New Work SE is responsible for data processing within the meaning of data protection law. Our contact details are: Am Strandkai 1, 20457 Hamburg, Germany


Our data protection officer

Our data protection officer is Felix Lasse, Strandkai 1, 20457 Hamburg, Germany,

Website Encryption

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the inquiries you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in your browser address bar. If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.

Your data protection rights

Right to withdraw:

You may withdraw your consent for the processing of your personal data at any time effective for the future. This shall not affect the lawfulness of processing that has taken place until your withdrawal.

Right of access:

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you shall have a right of access to this personal data as well as to further information, e.g. the purposes of the processing, the categories of personal data processed, the recipients, and the envisaged period for which the personal data will be stored and/or the criteria used to determine that period.

Right to rectification:

You have the right to obtain rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.

Right to erasure:

You have the right to request that we delete personal data concerning you immediately if one of the following reasons applies: the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; You revoke your consent on which the processing was based in accordance with Art. 6 Paragraph 1 Letter a or Art. 9 Paragraph 2 Letter a EU GDPR and there is no other legal basis for the processing; You object to the processing in accordance with Art. 21 (1) EU GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) EU GDPR; the personal data have been unlawfully processed; the erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject. Upon your request, we are obliged to delete the relevant data immediately. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.

Right to restriction of processing:

You are entitled to request a restriction in the processing of your personal data if the accuracy of the personal data is disputed by you, for a period of time that enables the person responsible to verify the accuracy of the personal data. If the processing is unlawful and you refuse to delete the personal data and instead request that we restrict the use of the personal data, we will comply with the request. The processing is also restricted if we no longer need your personal data for processing purposes, but you need them to assert, exercise or defend your own legal claims, or you object to the processing in accordance with Art. 21 Para. 1 EU- DSGVO have filed as long as it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons. You will be informed by us before the restriction is lifted.

Right to data portability:

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another person in charge without hindrance from us, to whom the personal data was provided. The prerequisite is that a) the processing is based on consent pursuant to Art. 6 Para. 1 Letter a) EU GDPR or Art. 9 Para. 2 Letter a) EU GDPR or on a contract pursuant to Art. 6 Para. 1 Letter b) EU-DSGVO and b) the processing is carried out using automated procedures. When exercising the right


Our website uses cookies, which are small text files stored on your hard drive, assigned to the browser used by you, and through which certain information flows to the site that sets the cookie.

Our website uses transient and persistent cookies:

Transient cookies are automatically erased when you close your browser. They include in particular session cookies. These store a session ID with which different requests from your browser can be assigned to the common session. This means that your computer can be recognised again when you return to our website. The session cookies are erased when you log out or close the browser.

Persistent cookies are automatically erased after a specified period of time which can differ depending on the cookie. The period of time that the individual cookies are stored can be found in the list below.

Our website uses first-party cookies and third-party cookies

In addition to the first-party cookies set by us, third-party cookies from other service providers are also used. We notify you of the use of third-party cookies and of the cooperation with external service providers that render services such as web tracking or reach measurement on our behalf further below in this Privacy Policy.

Access to your consent settings:

Within the scope of consent management (cookie banner), we give you the option of deciding whether cookies should be set as part of our offering in accordance with your specifications. You have the option of changing the decision made there at any time, and of providing or withdrawing your consent at a later date.

Your cookie History:


Change cookie settings


The legal basis for processing personal data using cookies as required for technical reasons is Article 6 (1) (f) GDPR. Otherwise, we base processing on Article 6 (1) (1) (a) GDPR (“Consent”).

As a user you have complete control over the use of cookies. You can disable or restrict the transmission of cookies by changing your browser settings. Cookies that have already been stored can be erased at any time.

Usage data and logfiles

When you use our website solely for informational purposes, i.e. if you do not register or otherwise provide us with information, our system automatically records data and information that your browser sends to our server (usage data):

The data is temporarily stored in our system’s log files. This data is not stored together with other personal data.

The legal basis for temporarily storing the data is Article 6 (1) (f) GDPR.

Temporary storage of data by the system is necessary in order for us to provide our website to you. The user’s IP address in particular must remain stored for the duration of the session for this purpose.

The data is stored in log files in order to ensure the functionality of the website. The data is also used to ensure that our information technology systems stay secure. These purposes also represent our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR.

The data will be erased once it is no longer required to achieve the purpose for which it was collected. This is the case once the respective session has ended where data is collected for the purposes of providing the website. This is the case after 14 days at the latest where data is stored in log files.

The collection of data for provision of the website and storage of data in log files are mandatory for the purposes of operating the website. The visitor to the website therefore has no right to object in this case.

Overview of our cookies


Essential cookies enable basic functions and are necessary for the website to function properly.


PurposeThis list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any other purpose than the one listed below. Provision and functionality of the website - PHPSESSID: provision and loading of the website - pll_language: language settings Legal basis: Art. 6 Paragraph 1 lit. f GDPR
Privacy policy
Cookie namePHPSESSID, wp-wpml_current_language
Cookie running timeSession

Provision of our services

In order to provide our services, in particular to always adapt our products and services to the needs of the users, we need tracking technologies.

Adobe Digital Analytics

NameAdobe Digital Analytics
PurposeWe use the tracking tool Adobe Digital Analytics. Tracking is pseudonymous, i.e. we cannot draw any direct personal conclusions from the information we have received via tracking. The cookies that are used for the web analysis process contain an identification number with which the browser of your end device can be identified. We have concluded an order data processing contract with the provider: Your IP addresses will be made unrecognizable immediately after collection. Tracking using Adobe Digital Analytics can be prevented at any time if the following link is accessed and participation in the web analysis process is excluded ("opt-out"): The prevention takes place by setting a cookie on the end device. If the cookie is deleted or different computers or web browsers are used, the prevention must be set up again.
Privacy policy
Cookie running time13 Month

Optimization of advertising

Here you can determine for yourself whether we (and companies commissioned by us) may use cookies and other tracking technologies in order to show you suitable advertising or to measure the success of the advertising. We also explain here what it is all about. There is even more information in our privacy policy.


PurposeMouseflow is a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar meta data. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you'd like to opt-out, you can do so at If you'd like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at For more information, see Mouseflow’s Privacy Policy at For more information on Mouseflow and GDPR, visit
Privacy policy
Cookie namemf*
Cookie running time3 Month


ProviderVirtual Minds GmbH
PurposePurposes • Store and/or retrieve information on a device • Selection of simple ads • Create a personalized ad profile • Select personalized ads • Measure ad performance • Use market research to gain insights into audiences • Develop and improve products
Privacy policy

Google Ads

NameGoogle Ads
ProviderGoogle Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
PurposeWe use the remarketing function within the Google Ads service. Remarketing allows website visitors to be addressed on other websites that have already interacted with our website. Our offers and recommendations are delivered when a user visits a Google website or a website in the Google advertising network (Google Search, YouTube, Google Display). In this way we can make you special offers that are tailored to your interests. We use so-called remarketing lists for this. When we create such a list, we use rules to determine when website visitors are added to the list. A remarketing tag (JavaScript code excerpt) is used, which enables Google to collect information about your visit to and use of our website in order to add you to these lists according to the previously defined rules.
Privacy policy
Cookie name1P_JAR
Cookie running time2 Jahre

Bing Ads

NameBing Ads
ProviderMicrosoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin, Ireland 18, D18 P521
PurposeOn our website we use technologies from Bing Ads, which are provided and operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin, Ireland 18, D18 P521 (“Microsoft”). Microsoft places a cookie on your device if you have reached our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone clicked on an ad, was redirected to our website and reached a previously determined target page (“conversion site”). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft uses the cookie to collect information from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed. If you do not want information about your behavior to be used by Microsoft, you can deactivate the required setting of a cookie as described above under "Cookies" by changing the browser settings. In addition, you can prevent the collection of the data generated by the cookie and relating to your use of the website and the processing of this data by Microsoft by deactivating the "Show personalized advertising in the browser" button. The legal basis for data processing for the use of Bing Ads is the consent of the website visitor in accordance with Art. 6 Para. 1 lit. a GDPR. For cases in which personal data is transferred to the USA, Microsoft has submitted to the Standard Contractual Clauses (SCCs). Further information on data protection and the cookies used by Microsoft and Bing Ads can be found here.
Privacy policy
Cookie nameMUID,_uetmsclkid,_uetsid,_uetvid
Cookie running time1 Year


ProviderLinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland
PurposeIn order to collect information on how visitors use our website, we also use a service from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For this purpose, the LinkedIn Insight Tag (a JavaScript code excerpt) is integrated on our website, which enables LinkedIn to collect information about your visit and the use of our website and to provide us with corresponding aggregated statistics on this basis. This information is also used to be able to show you interest-specific and relevant offers and recommendations on other websites after you have found out about certain services, information and offers on our website. This information is stored in a cookie and is used to make you special offers that are tailored to your interests (“retargeting”). The legal basis for data processing for the use of LinkedIn is the consent of the website visitor in accordance with Art. 6 Para. 1 lit. a GDPR. You can find LinkedIn's privacy policy here.
Privacy policy
Cookie nameJSESSIONID, PLAY_LANG, PLAY_SESSION, UserMatchHistory, bcookie, g_state, lang, lidc, lissc, liveagent_oref, liveagent_ptid, liveagent_sid, liveagent_vc, spectroscopyId
Cookie running time6 Monate


ProviderOutbrain UK Ltd., Outbrain UK Limited, 5 New Bridge Street, London, EC4V 6JAUK
PurposeWir verwenden auf unserer Website eine Technologie von Outbrain UK Ltd., Outbrain UK Limited, 5 New Bridge Street, London, EC4V 6JAUK („Outbrain“), um Informationen über das Surfverhalten der Websitebesucher zu Marketingzwecken in pseudonymisierter Form zu sammeln. Outbrain kann so das Surfverhalten analysieren und anschließend gezielte Produktempfehlungen als passendes Werbebanner anzeigen, wenn andere Websites besucht werden. In keinem Fall werden die pseudonymisierten Daten von uns verwendet, um den Besucher der Website persönlich zu identifizieren. Outbrain platziert ein Cookie auf Ihrem Computer, aus dem Informationen zur Ausspielung von Werbung gewonnen werden. Die Cookie-Textdateien enthalten Informationen zu Ihren Besuchen auf unserer Website, insbesondere zu den Produkten, die Sie sich angesehen haben, um bei folgenden Besuchen auf unserer Website oder den Websites Dritter spezifische Produktempfehlungen geben zu können. Das Cookie enthält ein per Zufallsgenerator vergebenes Alias. Wenn Sie innerhalb eines bestimmten Zeitraums unsere Website erneut besuchen, erkennt Outbrain Sie durch dieses Alias wieder. Diese Information kann jedoch nicht mit Ihrer Person verknüpft werden. Weder wir noch Outbrain führen diese Information mit Ihren personenbezogenen Daten zusammen und geben keine personenbezogenen Daten an Dritte weiter. Sie können der Speicherung und Nutzung von Daten in einem Cookie von Outbrain widersprechen indem Sie diesen Link aufrufen und die Schaltfläche „Outbrain-Dienste deaktivieren” klicken. Bitte beachten Sie, dass die Einstellung für alle von Ihnen genutzten Browser vorgenommen werden muss. Wenn alle Ihre Cookies in einem Browser gelöscht werden, ist davon auch das Opt-Out-Cookie von Outbrain betroffen. Rechtsgrundlage der Datenverarbeitung für die Nutzung von Outbrain ist die Einwilligung des Websitebesuchers gemäß Art. 6 Abs. 1 lit. a DSGVO. Die Datenschutzerklärung von Outbrain finden Sie hier.
Privacy policy
Cookie name_gcl_au; obca_sid; _psr; obca_vid; obca_data; _ga; _fbp
Cookie running time1 Jahr

Information for prospective customers and interested parties who send us data as part of a query

Contact forms

If you use our contact form to obtain advice from our e-recruiting specialists, we collect the data you enter there (first and last name, e-mail address, telephone number, company, any personal information from the optional message to us). Data that you send to us this way will be processed by us electronically in our system (see section “Data processing systems”) for the purposes of answering and processing your query. We invoke Article 6 (1) (b) GDPR as the legal basis for this (implementation of pre-contractual steps for product queries).

Via e-mail

If you communicate with us via e-mail, e.g. via, you transmit data such as your sender address, information contained in the content or your signature (e.g. your position and contact details), general data such as the time of dispatch, and specific data which you may send in an attachment (e.g. your CV in the case of applications). Data that you send to us this way will also be processed electronically in our system (see section “Data processing systems”) for the purposes of answering and processing your query. We provide this channel of communication to enable you to contact us quickly by electronic means. The legal basis in these cases is Article 6 (1) (f) GDPR. Our legitimate interest is to ensure an efficient and effective service.

Via telephone

If you speak with one of our employees by telephone, we record certain traffic and communication data, such as the telephone number used or the duration of the call. Our employees are also required to record the content of the conversation briefly in our system (see section “Data processing systems”). The legal basis in these cases is Article 6 (1) (f) GDPR. The purpose and our legitimate interest in this data processing is to provide a more efficient service (e.g. to forward information regarding your matter within the company and to be able to give you the best possible advice when you call us again).

Via post

If you contact us by post, we collect details on your sender address and the content of the document. The documents you send are also stored digitally in some cases for faster processing. We also invoke Article 6 (1) (f) GDPR as the legal basis for this.

Via personal contact, e.g. at trade fairs

You may also contact us at events, presentations, or trade fairs and leave your details with us there, e.g. in the form of a business card. We digitise the data collected this way by transferring it to our CRM system (see section “Data processing systems”). The associated content of the discussion may be logged in a report. We invoke Article 6 (1) (b) or Article 6 (1) (f) GDPR as the legal basis for this. Our legitimate interest is in being able to give you the best possible advice in any subsequent discussions.

Contact for the purposes of downloading whitepapers, case studies, and webinars

You must register with us before you can receive free downloads via e-mail. We collect the data you enter there (first and last name, e-mail address, telephone number, company, any personal information from the optional message to us). Data that you send to us this way will be processed by us electronically in our system (see section “Data processing systems”) for the purposes of processing your query. We use this data to send you the requested download via e-mail. In return for this free service, we may contact you via e-mail or telephone to provide you with information about our products and services. We invoke Article 6 (1) (b) GDPR as the legal basis for this.

Review and enhancement of data

In order to be able to answer queries in the best possible way and to verify and update our database, we may supplement personal data through research and enhancements (e.g. by adding a salutation to a letter or allocating a position or department). We will only use publicly accessible sources as our sources for this. The legal basis for this data processing is Article 6 (1) (f) GDPR.

Duration of the storage

We will store your data for as long as required to process a request. This does not apply to data that we are not yet allowed to erase due to our statutory obligations (e.g. documents that must be kept in accordance with tax or commercial law), and data that is required to safeguard legitimate interests, e.g. to assert claims.

Our newsletter

Our website gives you the option of subscribing to our newsletter, which provides regular updates on news from the Prescreen HR magazine, events, and information regarding Prescreen’s services and products.

We use the double-opt-in process for registrations to our newsletter. This means that once you have registered, we will send an e-mail to the e-mail address you provide in which we ask you to confirm that you wish to receive the newsletter. If the e-mail address is not confirmed within one week, it will be automatically erased. We also store your IP address and the times of the registration and confirmation. The purpose of this procedure is to ensure that there is evidence of your registration, and to resolve any potential misuse of your personal data.

The legal basis is Article 6 (1) (1) (f) GDPR to the extent that we store data in order to ensure that there is evidence of your registration, and to resolve any potential misuse of your personal data. We store your e-mail address with your consent. The legal basis is Article 6 (1) (1) (a) GDPR.

You may withdraw your consent to receive the newsletter and cancel the newsletter at any time. You can exercise your right to withdraw by clicking on the link provided in each newsletter e-mail, by sending an e-mail to, or by sending a message to the contact details provided in the Legal Notice.

Information for customers and other business partners

In the case of customers and other business partners, we process personal data primarily for the initiation, establishment, and processing of contractual and pre-contractual relationships.

We collect the following information in particular for this:

Data processing is necessary in accordance with Article 6 (1) (b) GDPR for steps prior to entering into a contract, proper implementation of the contractual relationship, reciprocal fulfilment of the obligations from the contractual relationship, and to terminate the contractual relationship.

If necessary, we may process your data beyond the actual fulfilment of the contract in order to safeguard legitimate interests, e.g. for the assertion of legal claims and as a defence in legal disputes. The legal basis in these cases is Article 6 (1) (f) GDPR.

In addition, we process personal data for the purposes of fulfilling statutory retention obligations (e.g. under commercial and tax law) in accordance with Article 6 (1) (c) GDPR.

We also process the data stated above in order to carry out customer surveys, marketing campaigns, market analyses, competitions, or similar campaigns and events. The legal basis in these cases is Article 6 (1) (f) GDPR. You have the right to object to processing (in particular to the sending of direct marketing).

Your personal data will be erased provided that this is no longer required to fulfil the purpose of the storage, and no legal retention obligations or the assertion of legal claims prevent it from being erased.

Data processing systems / service providers used

We commission service providers for the following services: contract management, newsletter distribution, customer feedback/satisfaction surveys, webinar and web meeting hosting, support request processing, ticket system, e-mail system, ERP software, CRM system.

If we provide data to service providers, e.g. for processing, they may only use said data to carry out their duties. We meticulously screen and select service providers who are contractually bound to follow our instructions and have suitable technical and organisational measures in place to protect the rights of data subjects. The legal basis for this processing of personal data are Article 6 (1) a) (separate consent) of the EU GDPR, Article 6 (1) b) (processing necessary for the performance of a contract) of the EU GDPR, Article 6 (1) f) (processing based on the weighing of interests) of the EU GDPR, and Article 6 (1) c) (processing necessary for compliance with a legal obligation) of the EU GDPR.

Our legitimate interest is to receive efficient support from these service providers while reducing the level of in-house resources needed to provide data processing systems.

Third countries

Data is transferred to third countries, but only in compliance with the legally regulated conditions of admissibility.

If the transfer of data to a third country is not for the performance of our contract with you, if we do not have your consent, if the transfer is not necessary for the establishment, exercise or defence of legal claims, and if no other exemption applies, we will only transfer your data to a third country if an adequacy decision pursuant to Article 45 EU GDPR or if appropriate safeguards pursuant to Article 46 EU GDPR are available.

As a rule, we provide appropriate safeguards in accordance with Article 46 EU GDPR as well as an adequate level of data protection.
Copies of the EU standard data protection clauses are available on the European Commission website.

Automated decision making including profiling

A decision-making based solely on automated processing – including profiling – does not take place.