Privacy Policy
Information on data processing under GDPR
Controller under the General Data Protection Regulation (GDPR): Fabian Rossbacher, Kärntener Strasse 21, 42697 Solingen, Germany (contact: [email protected]). Below we explain which personal data we process when you use Jobanzeiger Mittelrhein, for what purposes, on what legal basis and for how long. Unless stated otherwise, personal data is stored on servers in Germany with German providers.
Anonymous and pseudonymous usage data
When visiting without registration we may process pseudonymous usage data to operate and improve the service. This includes a pseudonymous visitor hash (cookie site_anonymous_user_hash), logged job searches (city, job type, category, result count, timestamp, domain), clickout events when leaving for external job pages (target URL, filters, user agent, UTM parameters) and a session-based shortlist of saved jobs. This data is not linked to your user account unless you are logged in. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operation, reach measurement and abuse detection). You may object under Art. 21 GDPR.
User account and registration
If you register voluntarily we collect email address, first name, last name and a password chosen by you (stored only as a cryptographic hash). Optionally you may sign in via Google OAuth; we then receive profile data required for login (e.g. email, name, Google account ID).
Purpose: providing a personal account, login, email verification, password reset and managing profile data under /user-preferences. Legal basis: Art. 6(1)(b) GDPR. Acknowledgement of this privacy policy and acceptance of the terms are recorded at registration.
Retention: account data is kept until you delete your account or we remove it after prolonged inactivity. Verification and password reset tokens are deleted after use or expiry.
Email notifications for new jobs
Logged-in users may voluntarily enable email notifications for new job listings (job alert). We store your selected search criteria (city, job type, category) and send emails when matching new jobs are found.
Legal basis: Art. 6(1)(a) GDPR (consent). You can deactivate or delete alerts in the dashboard at any time. Each notification email includes information on how to unsubscribe. No promotional emails are sent without an active alert.
Hosting, storage location and processors
Personal account data, email alert settings, login logs and anonymous statistics are processed on servers in Germany with German hosting and infrastructure providers. Core storage is not transferred to third countries. Email delivery (verification, job alerts, contact form) uses SMTP providers; message content is routed through their servers in Germany or the EU. Data processing agreements under Art. 28 GDPR are in place where required.
Google services (OAuth login and Tag Manager)
You may optionally register or sign in with Google OAuth. Provider: Google Ireland Limited / Google LLC, USA. Data is transmitted to Google (including IP address, login information). Legal basis: Art. 6(1)(a) and (b) GDPR.
After cookie consent, Google Tag Manager may load tags that collect usage statistics. Google may transfer data to the USA. Appropriate safeguards may include EU Standard Contractual Clauses. More information: https://policies.google.com/privacy
You can adjust Google privacy settings at https://adssettings.google.com/ . You can withdraw analytics consent via our cookie banner.
Google privacy policy: https://policies.google.com/privacy
Contact form
When you use the contact form we process the data you enter (name, email, subject, message) to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
The message is sent to the operator by email and is generally not stored permanently in a database. Retention in the mailbox follows internal deletion periods.
Security and login logging
On login we store timestamp, domain, your email, optional Google ID, IP address and browser identifier (user agent) in login logs (user_logins) for security purposes.
Legal basis: Art. 6(1)(f) GDPR. Logs are kept only as long as necessary for security and evidence.
Controller and privacy contact
Controller: Fabian Rossbacher, Kärntener Strasse 21, 42697 Solingen, Germany. Email: [email protected] (please use “Privacy” in the subject line).
For questions about processing or exercising your rights please contact the address above.
Your rights and supervisory authority
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21) where processing is based on legitimate interests. You may withdraw consent at any time. You may lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de. Operator contact details are in the imprint at /imprint.