Privacy policy (Datenschutzerklärung)

This policy explains what personal data we process when you use englishspeakingjobs.de, why we do it, and what your rights are. The site has no accounts. Analytics only run if you agree in the cookie banner.

Mussie Haile, Guiding-Ventures

Lohmühlenstraße 65, 12435 Berlin, Germany

Email for data protection requests: [email protected]

Further details are in our site notice (Impressum).

You have these rights over your personal data:

• Access to the data we hold about you, and a copy of it (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability in a structured format (Art. 20 GDPR)
• Withdrawal of consent at any time, with effect for the future (Art. 7(3) GDPR)

You may object at any time to processing based on Art. 6(1)(f) GDPR, on grounds relating to your situation (Art. 21 GDPR).

To use any of these rights, email [email protected].

You can also complain to a supervisory authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Alt-Moabit 59-61, 10555 Berlin, www.datenschutz-berlin.de.

Each section below names its legal basis: consent (Art. 6(1)(a) GDPR), contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR) or legitimate interests (Art. 6(1)(f) GDPR).

We keep data only as long as the purpose needs it, unless a law requires us to keep it longer, such as tax and commercial retention rules. We don't use automated decision-making or profiling that has legal effects on you.

This website is hosted and delivered through Cloudflare Pages, and our domain's DNS runs on Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. To deliver pages and protect the site from attacks, Cloudflare processes connection data such as your IP address, browser type, requested URL, referring URL and time of the request.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure and stable website)

Cloudflare's privacy policy

Your browser loads the job list from Supabase, which runs our database and server functions on AWS servers in Frankfurt, Germany. Supabase receives the connection data needed to answer that request, such as your IP address.

Legal basis: Art. 6(1)(f) GDPR (showing the job list). Supabase acts as our processor under Art. 28 GDPR.

Supabase's privacy policy

Our fonts are served from our own website. Your browser doesn't contact a font provider.

If you email us, we use your email address and message to answer you, and delete them once the matter is closed, unless we must keep them by law. Emails to us are processed by Google Workspace, provided by Google Ireland Limited, as our processor. The report and removal links on job pages open your own email program, and nothing is sent until you send it.

Legal basis: Art. 6(1)(b) GDPR for questions about a contract, otherwise Art. 6(1)(f) GDPR (answering enquiries)

If you ask to connect your company's job board, we store the company name, your work email address, the board link, the terms version you accepted and the time of your request in our Supabase database. We use them to check that you speak for the company, to contact you about the connection, and as a record of the permission. We don't store your IP address with the request.

We delete declined requests, and requests we can't connect, within 90 days. For a connection that went live, we keep this record for 3 years after it ends, so we can show what was agreed.

Legal basis: Art. 6(1)(b) GDPR (steps towards and carrying out the agreement), and Art. 6(1)(f) GDPR (proving the permission)

Listings link to employers' own postings, or to the job's page on Jobicy. When you follow that link, you leave our website. We don't receive, store or pass on what you submit there. The employer and its provider are responsible for that data, under their own privacy policies.

We keep your cookie choices in your browser's local storage. This is strictly necessary to remember them, so it needs no consent under § 25(2) no. 2 TDDDG. We set no cookies before you make a choice in the banner. You can clear local storage in your browser settings.

We use Usercentrics to ask for and record your consent. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, acting as our processor under Art. 28 GDPR.

Data processed: Your choices per service, a consent ID, date and time, banner version and language, your browser's user agent and the referring URL.

Storage: Your choices stay in your browser's local storage so the banner doesn't reappear on every visit. Usercentrics keeps proof of consent until it's no longer needed for that purpose.

Legal basis: Art. 6(1)(c) GDPR with Art. 7(1) GDPR (duty to demonstrate consent)

You can change your choice at any time with the "Cookie settings" link in the footer of every page. If your browser blocks the banner, the link can't open it. In that case no optional services run.

Usercentrics' privacy policy

If you consent, we use Google Analytics 4 to understand how the website is used, such as pages viewed, approximate location, and device and browser type. Google Analytics is loaded only after you consent. Without consent, your browser doesn't contact Google for analytics and no analytics cookies are set.

After consent, Google sets the cookies _ga and _ga_HWHRB3D20P, which last up to 2 years. Google keeps event data for no longer than 14 months. If you withdraw consent, we stop Google Analytics and remove these cookies.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Google's privacy policy

Cloudflare, Google and Supabase, and their subprocessors, may process data outside the EU, including in the USA. These transfers rely on the EU Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) where the recipient is certified, and otherwise on EU Standard Contractual Clauses (Art. 46 GDPR).

We use technical and organisational measures to protect your data against manipulation, loss and unauthorised access, including encrypted connections and access rules in the database.