Information about data processing

V2 (022024)

Herbert Hänchen GmbH uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Herbert Hänchen GmbH.

Shared responsibility

With regard to interaction within the company account of Herbert Hänchen GmbH, Herbert Hänchen GmbH and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here to gain information on the key aspects of the agreement.

Data processing by New Work SE

onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.

With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Herbert Hänchen GmbH, detailed information is available in the XING Privacy Policy at You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.

Job applications with onlyfy one

When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).

Pausing your online application

You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Herbert Hänchen GmbH in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Herbert Hänchen GmbH only.

Visibility of your data

The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.

Notes on the special functions of onlyfy one

Calendar function

If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: and

WhatsApp application

If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.

The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.

Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here:

Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.

Applicability of the Swiss Federal Data Protection Act (FADP)

The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.

Data privacy policy

We shall explain which information is collected during your application procedure and how it is used below. New Work SE, Am Strandkai 1, 20457 Hamburg, Deutschland (hereinafter referred to as Onlyfy) operates the e-recruiting system Onlyfy on the website, where companies can advertise job vacancies, receive and manage applications.
The company that you wish to contact with regard to your application shall be responsible in terms of data protection, for the use of Onlyfy. However, should you have any questions for Onlyfy, you may contact by e-mail.
  1. What is personal data?

    Personal data is considered to be all information that does not allow any conclusions to be drawn with regards to your personal or factual circumstances or from which it is possible to identify you.

  2. What data is recorded?

    The following data is collected and processed for automated processing of your application:
    • First name, last name, town, e-mail, date of birth, gender, tel. no.
    • Additional questions depending on the respective job offer (e.g. driving licence)
    • Professional experience and training
    • Skills (e.g. Photoshop, MS Office)
    • Qualifications, awards and language abilities
    • Application photo
    • Cover letter

    In addition, the communication between you and the company to which you are sending your application shall be stored.

  3. Use of data

    Your data shall only be used to process your application. Only those persons involved in handling your application shall be allowed access to your data. All employees entrusted with processing the data shall be obligated to keep your data confidential.

  4. What are cookies?

    Onlyfy uses cookies in various places. These are used make our website content more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer. Session cookies are deleted as soon as you leave our website. Permanent cookies (e.g. to enable you to return to the application procedure at a later stage) remain on your computer's hard drive until such a time when they are deleted by your browser. You can prevent the installation of cookies on your computer by adjusting your browser software accordingly. However please note that, in this case, not all functions of Onlyfy may be available to you in their full capacity.

    Below is a list of the cookies used.
    _gaPersistent cookieAnalysisThis cookie is used to record the usage behaviour of applicants.The cookie loses its validity after 24
    _gatPersistent cookieAnalysisThis cookie is used to record the usage behaviour of applicants.The cookie loses its validity after 24
    PHPSESSIDSession cookieFunctionalityThis cookie is used to identify the user during his/her use of Prescreen. The cookie is mandatory for correct functionality.The cookie loses its validity upon closing the
    REMEMBERMEPersistent cookieFunctionalityThis cookie is used to re-establish a session that has timed out.The cookie loses its validity after 2
  5. Is data forwarded to or collected by third parties?

    Data collected within the context of the application is not published or forwarded without authorisation, in particular therefore without your consent, to third parties. This shall, of course, not apply to the exchange of data between you and the company for whom the application is intended. This shall also not apply for cases where there is a legal obligation to disclose data.

  6. Your rights with regards to stored data

    You have the right, at any time and free-of-charge, to request information on the data stored by us; you also have the right to have this personal data corrected, deleted or blocked at any time. Where retention periods under commercial or tax law or other reasons do not allow deletion of the data, your data shall be blocked instead of deleted.

  7. Withdrawal option

    You may withdraw any consent you may have given as required by data protection law effective in the future at any time and at no cost.