Privacy policy

2. What data we process

When you apply, we process the details you send us:

• name, date of birth, nationality, place of residence
• phone number and email address
• desired occupation, work experience, qualifications, driving licence categories, language skills
• uploaded documents such as passport, CV, driving licence, references
• case-handling data: the status of your placement, internal notes, the time of your consent and the IP address used

3. Purposes and legal bases

• job placement and preparation of the employment relationship — Art. 6(1)(b) GDPR
• passing your documents to specific employers and, where the procedure requires it, to competent authorities — Art. 6(1)(a) GDPR (your consent)
• operation and security of the website — Art. 6(1)(f) GDPR
• compliance with statutory retention duties — Art. 6(1)(c) GDPR

4. Recipients

Your data is received only by: potential employers in Germany to whom we present you with your consent; the Federal Employment Agency and the competent German mission where the procedure requires it; and technical service providers acting for us as processors.

5. Hosting and technical providers

• Server and database: Contabo GmbH, Munich. The data centre used is located in France, i.e. within the European Union. Uploaded documents are stored there encrypted (AES-256-GCM) and are not reachable via public addresses.
• Email delivery: Resend, Inc. (USA), on the basis of the European Commission's standard contractual clauses.
• Network and bot protection: Cloudflare, Inc.

6. Cookies and consent

We store information on your device only where that is strictly necessary to run the site. Such storage requires no consent under § 25(2) no. 2 TDDDG:

• hn_applicant, hn_employer, hn_staff — signing in to your account area. Without them the area stays closed. Lifetime: until you sign out, at most 30 days. Readable only by the server (HttpOnly), only over HTTPS.
• hn_consent — your cookie decision itself, so that we do not ask again. Lifetime: 12 months.
• Cloudflare Turnstile — protects our forms against automated requests. We run it without a clearance cookie (“no_clearance”); it serves security alone, not recognition for advertising.

Anything beyond that — audience measurement and evaluating our adverts — runs only after your express consent under Art. 6(1)(a) GDPR. No such script is loaded before. Where such services are configured, we ask on your first visit; refusing is exactly as easy as agreeing.

You can withdraw your consent at any time with effect for the future, via “Cookie settings” in the footer of every page. We record when you decided so that we can demonstrate it under Art. 7(1) GDPR.

7. Retention

We delete or anonymise applicant data no later than 24 months after the last contact, unless a placement has come about and no statutory retention duty applies. You may request earlier deletion at any time.

8. Your rights

You have the right of access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20) and objection (Art. 21 GDPR). You may withdraw consent at any time with effect for the future.

An email to [email protected] is enough for any request.

You may also lodge a complaint with a data protection supervisory authority.