Privacy Policy

Privacy policy

Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

CareerFoundry GmbH,
c/o THE GATE,
Torstraße 177,
10115 Berlin,
Deutschland

Telephone: +49 30 4849 2016
Web: https://careerfoundry.com
Managing Director: Martin Ramsin

Your data subject rights

You can exercise the following rights at any time by contacting our Data Protection Officer:

  • right of access to and to information about your data stored by us and its processing (Art. 15 GDPR),
  • correction of inaccurate personal data (Art. 16 GDPR),
  • deletion of your data stored by us (Art. 17 GDPR),
  • restriction of processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • objection to the processing of your data by us (Art. 21 GDPR) and
  • data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
  • If you have given us consent, you can withdraw it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g., the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller.

A list of the supervisory authorities (for the non-public sector) with addresses can be found at:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Collecting general information when visiting our website 

Nature and purpose of the processing:

When you access our website, i.e., even if you do not register or otherwise transmit information, information of general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

In particular, this data is processed for the following purposes:

▪ ensuring a connection to the website,

▪ ensuring a smooth use of our website,

▪ evaluation of system security and stability, and

▪ to optimise our website.

We do not use your data to draw conclusions about your person. We might statistically evaluate these information in an anonymized form in order to optimise our website and the technology behind it.

Legal basis and legitimate interest:

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be our technical service providers who act as data processors in the area of operation and maintenance of the website.

Third country transfer:

The data collected will be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards in place for the USA, there is a certain risk as to guaranteeing data subject rights. However, we have concluded so-called Standard Contractual Clauses with our service providers. Nevertheless, it cannot be excluded that authorities in the respective third country gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Retention period

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymised, so that an assignment of the calling client is no longer possible.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

Registration for events and webinars

Nature and purpose of the processing:

When registering to use our personalised services, personal data such as name, address, contact and communication information (e.g., e-mail address) is collected. If you are registered with us, you can access content and services that we only offer to registered users.

Registered users have the option to change or delete the data entered during registration at any time. In addition, we will provide you with information about the personal data we have stored about you at any time.

Legal basis:

The processing of the data entered in the registration form is based on your consent (Art. 6(1)(a) GDPR).

If you register in order to be able to use one of our fee-based offers, the data entered in the registration form is processed in order to carry out pre-contractual measures (Art. 6(1)(b) GDPR).

Recipient:

Recipients of the data may be our technical service providers (e.g. Eventbrite, Inc.) who act as our data processors.

Third country transfer:

The collected data may be transferred to the following third countries:

A transfer of personal data to the USA takes place. As there is no adequacy decision of the European Commission or other safeguards in place for the USA, there is a certain risk as to guaranteeing data subject rights. However, we have concluded so-called Standard Contractual Clauses with our service providers. Nevertheless, it cannot be ruled out that authorities in the respective third country gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Retention period:

In this context, the data will only be processed as long as the corresponding consent is been given. Afterwards, it will be deleted, unless there is a legal obligation to retain the data.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only offer our personalised services if you provide us with the relevant data via the registration form

Provision of fee-based services

Nature and purpose of the processing:

For the provision of chargeable (fee-based) services, we request additional data, such as payment details, in order to be able to process your order.

Legal basis:

The processing of the data required for the conclusion of the contract is based on Art. 6(1)(b) GDPR.

Recipient:

Recipients of the data are, if applicable, data processors and providers entrusted with payment processing (e.g. PayPal).

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards in place for the USA, there is a certain risk as to guaranteeing data subject rights. However, we have concluded so-called Standard Contractual Clauses with data processors (e.g. Paypal, Fastspring USA) and other providers. Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Retention period:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years and stem from tax law.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our contents and services.

Newsletter

Nature and purpose of the processing:

For the delivery of our newsletter, we collect personal data that is transmitted to us via a registration form.

In order to register for the newsletter, we require a valid e-mail address. In order to check whether a registration is actually made by the holder of an e-mail address, we use the "double opt-in" procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected.

Legal basis:

Based on your consent (Art. 6(1)(a) GDPR), we will regularly send you our newsletter or similar information by e-mail to your specified e-mail address.

Recipient:

Recipients of the data are, if applicable, data processors.

Third country transfer:

There may be a transfer of the personal data collected to third countries. As there is no adequacy decision of the European Commission or other safeguards in place for these third countries, there is a certain risk as to guaranteeing data subject rights. However, we have concluded so-called Standard Contractual Clauses with the provider (Hubspot). Nevertheless, it cannot be ruled out that authorities in the respective third country gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Retention period:

In this context, the data will only be processed as long as the corresponding consent is given. Afterwards, they will be deleted.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Withdrawal of consent:

You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a corresponding link in each newsletter. You can also unsubscribe directly on this website at any time or inform us of your withdrawal using the contact option provided at the end of this privacy notice.

Contact forms

Nature and purpose of the processing:

The data you enter via the contact forms embedded into our website will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This way, we can answer your inquiry, and you can book a time slot for a personal telephone call. The provision of further data is optional.

Legal basis:

The processing of the data entered in the contact form is based on our legitimate interest (Art. 6(1)(f) GDPR).

By providing the contact form, we would like to provide you with an easy way to contact us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. If you contact us to request a quotation, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients:

Recipients of the data are, if applicable, our data processors.

Third country transfer:

There may be a transfer of the personal data collected to third countries. As there is no adequacy decision by the European Commission or other safeguards in place for these third countries, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with the provider (Hubspot). Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Retention period:

Data will be deleted no later than 12 months after the request has been processed. If a contractual relationship arises, we are subject to statutory retention periods and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Job applications

Nature and purpose of the processing:

You can send us your application via e-mail or the service provider we use, Workable. We will only process the data you provide for the purpose of assessing your professional suitability and contacting you.

Legal basis:

The processing of the application data is based on the initiation of an employment relationship pursuant to Art. 6(1)(b) GDPR (if applicable, in conjunction with Section 26(1) of the German Federal Data Protection Law (BDSG)). The processing of your application data for the purpose of considering you for open positions at a later point is based on your consent in accordance with Art. 6(1)(a) GDPR.

The information you provide will be stored for the purpose of carrying out the application process and, if necessary, for the purpose of considering your application at a later point.

Recipients:

Recipients of the data are, if applicable, data processors, as well as the offices within CareerFoundry GmbH responsible for carrying out the application process, which require the data to fulfil contractual, legal or supervisory obligations, as well as to safeguard legitimate interests.

Retention period:

In the event that we reject your application, your data will be deleted six months after notification of the decision. If an employment relationship is established, the application documents will be stored at least for the duration of the employment.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only consider your application if you provide us with your data.

Cookies and comparable technologies

Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. There, you can delete individual cookies or the entire cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage at the outset. Depending on the provider of your browser, you will find the necessary information under the following links:

▪ Mozilla Firefox https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

▪ Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-deletemanage-cookies

▪ Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

▪ Opera: http://www.opera.com/de/help

▪ Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

For more detailed information on the services used, please refer to our "Cookie Policy".

Google Analytics

Insofar as you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA; in Europe Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland is responsible (hereinafter: "Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google’s server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other countries of the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google’s server in the USA and shortened there.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The data processed by us and linked to cookies, user IDs (or advertising IDs is automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision by the European Commission or other safeguards in place for the USA, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with Google LLC. Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Withdrawal of consent:

You can prevent tracking by Google Analytics on our website by clicking on this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

You may also refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: Browser Add On to deactivate Google Analytics.

Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page with a YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider sets cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's privacy policy, where you will also find further information on your rights in this regard and options for protecting your privacy (https://policies.google.com/privacy).

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards for the USA, there is a certain risk for the guarantee of data subjects rights. However, we have concluded so-called Standard Contractual Clauses with Google LLC. Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use all functions of our website.

Google AdWords

Our website uses Google Conversion Tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In Europe, Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland is responsible. If you have reached our website via an ad placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

You can find more information about data processing by Google in the Google data protection information: https://policies.google.com/privacy. There, you can also change your personal data protection settings in the data protection centre.

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision by the European Commission or other safeguards in place for the USA, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with Google LLC. Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use all functionalities of our website.

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The operating company of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, in the European area Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland is responsible (hereinafter "Google").

The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognise the visitor when they visit websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.

You can find more information about data processing by Google in the Google data protection information: https://policies.google.com/privacy. There, you can also change your personal data protection settings in the data protection centre.

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards in place for the USA, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with Google LLC. Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

The following data protection guarantees are in place: Standard Contractual Clauses

We will provide you with a copy of the Standard Contractual Clauses upon request.

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website fully.

Google Marketing Platform

This website uses the marketing platform of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; in the European area, Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland is responsible.

Hotjar

This website uses the Hotjar analytics tool provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St. Julian's STJ 3141, Malta.

We use Hotjar to obtain information about how a user interacts with our site. In doing so, your personal data is automatically anonymised. The data that is processed is:

● IP address

● screen size

● browser information

● your location

● language settings

● pages visited (on our website)

● date and time of access

In this case, your data is also processed in the USA, i.e., outside the EEA. As there is no adequacy decision, we use additional guarantees and measures to ensure an appropriate level of protection for data processing.

We have concluded Standard Contractual Clauses with Hotjar (pursuant to Art. 46 GDPR).

Additional information about Hotjar can be found in Hotjar's privacy policy, which can be found at https://www.hotjar.com/legal/policies/privacy/.

Withdrawal of consent:

The provider offers an option for a simple opt-out or blocking of data transmission. Instructions for this can be found at https://www.hotjar.com/policies/do-not-track/.

If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use all functionalities of our website.

LinkedIn Analytics / LinkedIn Ads

This website uses the conversion tracking tool LinkedIn Insights Tag provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View CA 94043, USA, in the European area by LinkedIn Ireland Unlimited, Wilton Place, Dublin 2, Ireland.

We use LinkedIn Insights Tag for pseudonymised behavioural analysis of website usage for the purpose of improving our company website. We use LinkedIn Ads for the purpose of showing you ads that are more relevant to you.

This technology can be used to serve personalised ads to visitors of this website on LinkedIn. Furthermore, it is possible to create anonymous reports on the performance of the advertisements as well as information on website interaction. For this purpose, the LinkedIn Insight Tag is embedded on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards for the USA, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with LinkedIn Inc. Nevertheless, it cannot be ruled out that authorities in the respective third country gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

Information on the Standard Contractual Clauses used can be found at https://de.linkedin.com/legal/l/dpa & https://www.linkedin.com/legal/l/eu-sccs .

Additional information about LinkedIn can be found in LinkedIn's privacy policy at https://de.linkedin.com/legal/privacy-policy .

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website fully.

Facebook Connect / Facebook Custom Audience

Facebook Connect and Facebook Custom Audience are services of Meta Platforms Inc. In the European area, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland is responsible.

Facebook Connect allows you to log in to our website using the access data of your Facebook account. We offer this to you for the purpose of simplifying login and thus enabling a more pleasant use of our website. We use Facebook Custom Audiences to show you advertising that is more relevant to you.

When registering via Facebook Connect, the following data, among others, is forwarded to us, provided the user has enabled this in their user settings:

● full name

● profile picture

● age

● gender

● friends list

Facebook Custom Audiences processes the following personal data, among others:

● e-mail address

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards in place for the USA, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with Meta. Nevertheless, it cannot be ruled out that authorities in the respective third country gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

Additional information about Meta can be found in Meta's privacy policy at https://de-de.facebook.com/privacy/policy/ .

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website fully.

Microsoft Clarity / Microsoft Ads

This website uses the services Microsoft Clarity and Microsoft Ads provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

We use Microsoft Clarity for pseudonymised behavioural analysis on our website for the purpose of improving our online offering. We use Microsoft Ads for the purpose of showing you advertising that is more relevant for you.

Within the scope of these services, the following personal data, among others, are processed:

● access times

● IP addresses

● cursor and scroll movements

Third country transfer:

The collected data may be transferred to the following third countries:

There is a transfer of personal data to the USA. As there is no adequacy decision of the European Commission or other safeguards in place for the USA, there is a certain risk for the guarantee of data subject rights. However, we have concluded so-called Standard Contractual Clauses with Microsoft. Nevertheless, it cannot be ruled out that authorities in the respective third country may gain access to the transmitted data in order to collect and evaluate it. The enforcement of your data subject rights can therefore not be guaranteed.

For additional information about Microsoft, please see Microsoft's privacy policy at https://privacy.microsoft.com/de-de/privacystatement .

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use all functionalities of our website.

VWO Engage

This website uses the VWO Engage, an automated marketing service provided by Wingify Software Pvt. Ltd, KLJ TOWER, 1104, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034, India.

In this context, data is processed also in India and the USA, i.e., outside the EEA. As there is no adequacy decision in each case, we use additional guarantees and measures to ensure an appropriate level of protection for data processing and have concluded Standard Contractual Clauses with Wingify (pursuant to Art. 46 GDPR).

Additional information about Wingify can be found at https://vwo.com/de/compliance/gdpr/ and in Wingify's privacy policy https://vwo.com/de/privacy-policy/ .

Withdrawal of consent:

No option for a simple opt-out or blocking of data transmission is currently offered by the provider. If you wish to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website fully.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Information about your right to object according to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Please address your objection to:

CareerFoundry GmbH

Attn: Data Protection Officer

c/o THE GATE

Torstraße 201

10115 Berlin

Germany

E-mail: datenschutz@careerfoundry.com

Changes to our privacy notice

We reserve the right to adapt this privacy notice so that it always complies with the current legal requirements or in order to consider changes to our services in the privacy notice, e.g. when introducing new services. The new privacy notice will then apply to your next visit.

Questions to the Data Protection Officer

If you have any questions about data protection, please send us an e-mail to: datenschutz@careerfoundry.com.

For strictly confidential matters, you can alternatively contact our Data Protection Officer directly at: datenschutzbeauftragter@careefoundry.com