Privacy notice
Draft – complete and obtain legal review before publication.
This draft describes the technical implementation of this website. Before publication, it must be adapted to the actual operator, service providers and binding retention periods.
1. Controller
[TO COMPLETE: the actual operator’s name or full legal name, address for service and privacy contact.] The intended company name does not identify the current controller.
2. Hosting and website delivery
Deployment on Vercel is planned. Page requests may involve IP addresses, timestamps, requested URLs, and browser and device information for delivery and security. Review Article 6(1)(f) GDPR as a legal basis against the actual implementation. [TO COMPLETE: contracting entity, processing locations, log retention, data processing agreement and any international transfer safeguards.]
3. Contact enquiries
The form collects your name, email address, optional organisation and message to handle your enquiry and related communication. Depending on the enquiry, Article 6(1)(b) or (f) GDPR may apply. Acknowledging this notice is not consent to marketing. Delivery is activated only after configuration; the form is currently not accepting messages.
4. Email delivery and abuse prevention
The code supports Resend for email delivery and Upstash Redis for request limiting. Once configured, Resend receives the form contents and email metadata. Abuse prevention stores a key derived from the IP address and a secret, with a request counter, for ten minutes. This key is pseudonymous, not anonymous. Application code does not log message contents. [COMPLETE BEFORE ACTIVATION: actual recipients, contracting entities, regions, data processing agreements, legal bases and any international transfers.]
5. Retention
[TO COMPLETE: specific retention periods for enquiries, mailboxes and provider logs.] Enquiries should be deleted when no longer needed unless legal retention obligations or other lawful reasons require further storage.
6. Cookies, fonts and external links
This implementation uses no analytics or marketing cookies and contains no tracking services. Language selection uses the URL path without cookies. Fonts and the Jobwelt preview are served locally. External sites are contacted only when you open their links, and their own privacy notices apply. Review the hosting configuration separately before publication.
7. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. You may complain to a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. [TO COMPLETE: confirmed contact for exercising these rights.]
8. Version and changes
Draft dated 12 October 2026. Update and obtain legal review before publication and whenever service providers, forms or hosting change.