Last updated: February 2026

This Privacy Policy informs you, in accordance with Articles 12 et seq. of the General Data Protection Regulation (GDPR), about the nature, scope, and purpose of the processing of personal data in connection with the use of the online job portal “jobspot.de”.

1. Controller within the Meaning of the GDPR

The controller responsible for data processing is:

Dipl.-Ing. Josef Hesse
Marketingberatung
Marienburger Str. 1
10405 Berlin
Germany

Tax ID: 31/345/66178

Phone: +49 (0)30 / 3010 2525
Email: info@jobspot.de
Website: https://jobspot.de

2. General Information on Data Processing

We process personal data exclusively in compliance with the applicable data protection regulations, in particular the GDPR, the German Federal Data Protection Act (BDSG), and the German Telecommunications-Telemedia Data Protection Act (TTDSG).

Personal data means any information relating to an identified or identifiable natural person.

Processing takes place only insofar as:

• it is necessary to provide a functional online job portal,
• it serves to perform contractual or pre-contractual obligations,
• we are legally obliged to do so, or
• you have given your consent.

3. Legal Bases for Processing

Personal data is processed in particular on the basis of the following legal grounds:

• Art. 6(1)(a) GDPR – Consent
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – Compliance with a legal obligation
• Art. 6(1)(f) GDPR – Legitimate interests

If special categories of personal data within the meaning of Art. 9 GDPR are processed, this is done only on the basis of explicit consent or a statutory authorization.

4. Hosting and Server Log Files

Our website is hosted by an external hosting provider. A data processing agreement pursuant to Art. 28 GDPR has been concluded with this provider.

When accessing our website, the following data is automatically collected:

• IP address
• Date and time of access
• Accessed pages/files
• Referrer URL
• Browser type and version
• Operating system
• Amount of data transmitted

Processing is carried out on the basis of Art. 6(1)(f) GDPR to ensure the technical stability, security, and optimization of our website.

Server log files are deleted regularly, at the latest after 30 days, unless retention is required for security reasons.

5. Registration and User Accounts (Employers and Applicants)

Certain features of the platform require registration.

a) Applicant Account

When creating an applicant profile, we process in particular:

• Name
• Contact details (email address, optionally telephone number)
• CV data
• Qualifications
• Professional experience
• Application documents
• Profile photo (optional)

Processing is carried out to provide our platform and to facilitate job placement in accordance with Art. 6(1)(b) GDPR.

b) Employer Account

For employer profiles, the following data is processed:

• Company name
• Contact person
• Contact details
• Company information
• Payment data (if paid services are booked)

Processing is carried out for the performance of a contract pursuant to Art. 6(1)(b) GDPR.

6. Processing of Application Data

Application data is processed for the purpose of facilitating employment relationships.

The data:

• is used exclusively for job placement purposes,
• is transmitted only to employers selected by the applicant or involved in the application process,
• is not published without the applicant’s consent.

The legal basis is Art. 6(1)(b) GDPR.

Application data will be deleted as soon as it is no longer required for the intended purpose, at the latest 6 months after deactivation of the user account, unless statutory retention obligations apply.

7. Contact Form and Email Contact

When contacting us via contact form or email, the following data may be processed:

• Name
• Email address
• Content of the message
• Any additional information provided voluntarily

The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

The data will be deleted once the request has been fully processed, unless statutory retention obligations apply.

8. Newsletter

If a newsletter is offered, it will only be sent following registration using the double opt-in procedure.

The following data is stored:

• Email address
• Date and time of registration
• IP address at the time of registration
• Confirmation date and time

The legal basis is Art. 6(1)(a) GDPR.

You may unsubscribe at any time via the unsubscribe link included in each newsletter.

9. Cookies and Consent Management

Our website uses cookies and similar technologies in accordance with the TTDSG.

We distinguish between the following categories:

• Strictly necessary cookies
• Preference cookies
• Statistics cookies
• Marketing cookies

Non-essential cookies are only set after obtaining prior consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDSG.

Consent is managed via a consent management tool that allows users to grant, withdraw, or modify their preferences at any time.

Further details are provided in our Cookie Policy at:
https://jobspot.de/cookie-richtlinie-eu/

10. Analytics and Tracking Tools

We may use web analytics tools to improve our services.

If Google Analytics or comparable services are used:

• processing is based on your consent (Art. 6(1)(a) GDPR),
• IP anonymization is activated,
• a data processing agreement has been concluded.

Any transfer of data to third countries takes place only on the basis of appropriate safeguards (e.g., EU Standard Contractual Clauses).

11. Plugins and External Services

Depending on the functionality of the platform, the following services may be integrated:

• Social media plugins
• Payment service providers
• Content delivery networks (CDNs)
• Map or video services

Integration is carried out either on the basis of Art. 6(1)(b) GDPR or—if not technically necessary—only after consent pursuant to Art. 6(1)(a) GDPR.

12. Disclosure of Data to Third Parties

Personal data will only be disclosed:

• to employers within the scope of applications,
• to processors pursuant to Art. 28 GDPR,
• to comply with legal obligations,
• based on your explicit consent.

No further disclosure will take place.

13. Transfers to Third Countries

Personal data will only be transferred to countries outside the EU/EEA if:

• an adequacy decision by the European Commission exists, or
• appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

14. Retention Period and Deletion

Personal data will only be stored for as long as necessary for the respective purpose.

Statutory retention periods (e.g., under commercial or tax law) remain unaffected.

After the purpose ceases to apply or statutory periods expire, the data will be deleted or restricted.

15. Rights of Data Subjects

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, a simple notification to the contact details listed above is sufficient.

16. Right to Withdraw Consent

You may withdraw any consent given at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.

17. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority.

The competent authority for Berlin is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

18. Data Security

We implement appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect personal data against loss, manipulation, and unauthorized access.

These measures include in particular:

• SSL/TLS encryption
• Access restrictions
• Regular security updates
• Data backups
• Role-based access control

19. Obligation to Provide Data

The provision of personal data is partly necessary to create a user account or submit applications.

Without this data, the job portal cannot be used or can only be used to a limited extent.

20. Automated Decision-Making / Profiling

Automated decision-making within the meaning of Art. 22 GDPR does not take place.

Profiling to evaluate personal aspects does not occur.

This Privacy Policy applies to all pages of https://jobspot.de and the services offered therein.