Privacy Policy

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the 'Responsible Party' section.

How do we collect your data? Your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.

Other data is automatically collected or collected with your consent when you visit the website by our IT systems. This is mainly technical data (e.g., internet browser, operating system, or time of page access).

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future.

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR.

We use tools from companies based in the USA or other third countries that are not secure under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.

Our websites use cookies. Cookies are small data packets that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device.

Cookies that are necessary to carry out the electronic communication process, to provide certain functions you have requested, or to optimize the website are stored on the basis of Art. 6 para. 1 lit. f GDPR. For all other cookies, we obtain your consent.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Time of server request
• IP address

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

You can register on this website to use additional functions. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full.

When you view a published CV, we process technical data about your visit: approximate location (country and city, derived from your IP address at the time of the request — the IP address itself is not stored), device type, browser, operating system, referrer URL, campaign parameters (UTM), viewing duration, scroll depth, and whether the CV was downloaded as a PDF. This information is made available to the owner of the CV as visitor statistics.

The legal basis is Art. 6 para. 1 lit. f GDPR. The CV owner and we have a legitimate interest in measuring the reach and usage of published CVs. You can object to this processing at any time (see “Your Rights as a Data Subject”).

CV owners can create personalised share links and assign them to a specific contact (for example a recruiter). If you open such a link, your visit can be attributed to that contact by the CV owner. Share links can be password-protected or set to expire by the owner.

For some published CVs, downloading the PDF requires you to provide your name, your email address and optionally your company. This data is shared with the owner of the CV, who may use it to contact you. Processing only takes place after you have actively given your consent in the download dialog.

The legal basis is Art. 6 para. 1 lit. a GDPR (consent). You can revoke your consent at any time with effect for the future by contacting us or the CV owner.

This website uses PostHog, a web analytics service. PostHog uses cookies that enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transmitted to and stored on a PostHog server.

The use of this analytics tool is based on Art. 6 para. 1 lit. a GDPR (consent). You can revoke your consent at any time.

You can prevent PostHog from collecting data by changing the cookie settings on this website and rejecting analytics cookies.

With your consent, PostHog additionally records sessions (mouse movements, scrolling, page interactions) to help us improve the product. Text you enter and sensitive content are masked and are not part of the recording. Recording only takes place if you have accepted analytics cookies; the legal basis is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time in the cookie settings.

For payment processing, we use external payment service providers. Your payment data is transmitted directly to the respective payment service provider and processed there. We do not have access to complete payment data.

Payment processing is handled by Stripe. When you purchase a subscription, your payment data is transmitted directly to Stripe and processed there; we only receive a payment confirmation and the information required for billing. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of contract).

For transactional emails (e.g. registration confirmation, password reset, notifications about CV views, and digest emails) we use the delivery service Resend. For this purpose, your email address and the message content are processed. Links in our emails are routed through our domain links.xhub.io, which lets us see whether a message was clicked. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable delivery).