1. Privacy Policy

4. Information we obtain about you from other sources

We also process data that we haven’t obtained directly from you. This occurs whenever a user provides us with information or we collect information from other sources. In such cases, we process the data as part of the performance of our contractual obligations towards the respective user or towards you and/or for the purposes of safeguarding our legitimate interests (or those of third parties), while taking into account and balancing your interests.

Data from LinkedIn Profile Import (LinkedIn Member Portability API)

This includes data that can be retrieved from your LinkedIn profile via a data portability interface (LinkedIn Member Data Portability API), such as:

  • Given name and surname
  • Email address
  • Profile photo
  • Job title and company (all your jobs)
  • Industry (business context)
  • Location (city and country)
  • Education (for instance, university and diploma)
  • Latest LinkedIn queries (for instance for persons, content, jobs)
  • Your job preferences: for instance, preferred job types, locations, industries, company size, title, activity level
  • Jobs you have saved to view them later
  • Job notifications you have activated (including date, URL, etc)

Purpose

By means of the LinkedIn import function, we enable you to automatically fill in your profile with any relevant profile data from your LinkedIn profile. This makes it easier to create or update a profile, and it helps avoid redundant data entries. In this way, you can quickly and consistently complete your profile using existing information. If we permanently store the transferred data in your profile as a part of this function, we will provide you with appropriate tools to manage (edit or delete) this information. You can stop the aforementioned processing of your personal data anytime, for instance, by deleting the imported information or deactivating LinkedIn integration.

Data source

The data originates from your LinkedIn profile, which you will explicitly share to XING as a part of the import process via LinkedIn (authentication and data release via LinkedIn OAuth interface).

Visibility

Upon completion of the import, the imported profile information is subject to the same visibility rules as other profile data on XING. This information is visible to other XING members and, depending on your settings, to non-members (e.g. via public search engines), depending on your privacy settings. No further disclosure to third parties beyond XING takes place, and in particular, no profile data will be transferred back to LinkedIn.

Data retention period

As the imported LinkedIn data become a part of your profile, we will generally retain them until you either delete the information from your profile or delete your user account entirely. If you disconnect LinkedIn connection in your account settings or revoke access to your LinkedIn profile, no further updates or data transfers from LinkedIn will take place. Be reassured that you will be able to edit or delete data you have already transferred to your profile anytime.

Ongoing updates (Changelog API)

As long as your OAuth token is valid, XING can use the LinkedIn Changelog API to check if your LinkedIn profile data has changed.

  • Any changes will be displayed to you.
  • There is no automated data transfer to your profile. In every instance, you decide for yourself whether and which information should be transferred
  • Once the token expires or is revoked, XING will no longer retrieve any further updates.

Legal basis

The legal basis for this processing of personal data is Article 6(1)(b) EU GDPR and/or Article 6(1)(a) EU GDPR, as the retrieval and transfer of profile information is carried out at your request

Data concerning the up-to-dateness of your profile compared to your LinkedIn profile

This includes information or an assessment of whether the data in your profile are up to date in comparison with your LinkedIn profile. Specifically, this consists of your XING profile URL and an indication of whether your LinkedIn profile is equally, less, or more up to date. No further data will be processed in this context.

Purpose

Correct and up-to-date profile information is essential for XING and the fulfillment of the service agreement. To this end, we request the aforementioned information on your profile on a regular basis. We therefore aim to assess whether your profile is up to date, including in order to offer you, where applicable, options to update and maintain your profile (for example, by means of a LinkedIn profile import).

Data source

We receive the aforementioned data from a service provider.

Visibility

Where applicable, we might share the assessment of your profile in comparison to your LinkedIn profile to other users.

Data retention period

We retain this information until you delete your user account.

Legal basis

The legal basis for this processing of personal data is Article 6(1)(b) and Article 6(1)(f) of the EU GDPR. Among other things, we pursue the legitimate interest of assessing whether the information in your profile is accurate and complete in accordance with the requirements set out in the XING Terms of Use. Furthermore, we pursue the legitimate interest of other users in obtaining clarity as to whether the information in your profile is accurate and complete.

Data from address book or list uploads

This includes data which can be extracted from an address book or list (e.g. smartphone address book, e-mail address book or CSV file), e.g.:

  • First and last name
  • E-mail addresses
  • Phone numbers
  • Job title and company name
  • Place: City and country
  • Twitter and Facebook handles

Intended purpose

We provide users, if applicable, with various address book and list upload features to enable them to expand their network on XING or to invite non-users. If we permanently save the data uploaded by way of an aforementioned feature, we make appropriate functions available to users to manage the data and, in particular, to delete this data. Users have the right and the option to cease the processing of personal data at any time.

Source of the data

Users who already have access to your data can upload this information to XING.

Visibility

No third parties have access to the uploaded data.

Period saved for and objection

If the respective upload feature is only used for a single user search, categorisation or grouping, the data uploaded will be deleted immediately afterwards. If the respective upload feature requires permanent storage of the uploaded data, we save this data until the respective user either deletes this data themselves or their user account is deleted.
The invited non-users can select an opt-out link in the invitation e-mail to object to the sending of further invitations or invitation reminders to their respective e-mail address.

Legal basis

The legal basis for this processing of personal data is Article 6 (1) f) of the EU General Data Protection Regulation (GDPR) .

Back to overview of all topics
Cookies:

Small files that enable us to store specific information related to you, the user, on your end device. You can edit the settings of your browser to prevent cookies from being saved.

Third country:

A country outside of the European Union.

EU GDPR:

The Regulation (EU) 2016/679 of the European Parliament and the Council dated 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data, and on the repeal of the EU Data Protection Directive 95/46/EC.

Newsletter:

Newsletters or status e-mails and advertising for XING’s own similar products and services, or surveys for the purpose of XING’s own market research.

Personal data:

Pursuant to Article 4 (1) of the EU General Data Protection Regulation (GDPR), any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Pixel:

Pixel: An image file or link to an image file that is added to the website code but not sent to your end device (e.g. PC, smartphone). Pixels are usually used in conjunction with cookies.

Profile:

The page on the XING Websites where the personal data made available by the user is displayed in the social network.

Profiling:

Pursuant to Article 4 (4) of the EU General Data Protection Regulation (GDPR), any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or move-ments.

Social network:

The contact and communication forums belonging to the applications of the service XING.

XING:

The service XING and the applications belonging to the service XING (XING, kununu, onlyfy. etc.).

XING Websites:

All websites, subdomains, aliases, mobile applications, background applications, web services and embedding in third-party websites where the service XING is available.