Privacy Policy

JobUniversity GmbH

In der Dalheimer Wiese 20,
55120 Mainz,
Germany

Phone: +49 6131 49371 80
Email: info@jobuniversity.eu

Represented by the Managing Director
Darko Repovecki

If you have any questions about data protection, you can contact us at:

Email: info@jobuniversity.eu

We process personal data for the following purposes:

Providing and securely operating our website
Legal basis: Art. 6 para. 1 lit. f GDPR
Handling contact requests
Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR
Handling company and partner enquiries
Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR
Handling applications and apprenticeship enquiries
Legal basis: Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. f GDPR, where applicable local employment law
Collecting and managing consent for cookies, analytics, marketing, or similar technologies
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 TDDDG
Proving consent and meeting legal documentation duties
Legal basis: Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR
IT security, abuse prevention, and troubleshooting
Legal basis: Art. 6 para. 1 lit. f GDPR

When you access our website, our hosting provider and technical infrastructure automatically process information transmitted by your browser, including:

IP address
Date and time of access
Requested page
Referrer URL
Browser type and version
Operating system
Language settings
Access status and data volume

This processing is necessary to provide the website, maintain security and stability, and detect attacks or malfunctions.

If you contact us by email, phone, contact form, WhatsApp, or other channels, we process the data you provide in order to handle your request.

This may include:

Name
Contact details
Company
Request details
Communication content

If you contact us as a company, interested business, or cooperation partner, we process your data to initiate, manage, and follow up a business relationship.

This may include:

Name
Company
Position
Phone number
Email address
Request content
UTM parameters and campaign source, Where applicable

We use ZOHO CRM and this data may be stored there for structured handling and follow up.

We analyze site usage to maintain site security, evaluate technical performance, and improve overall user experience.

1. Anonymous Basic Measurement (Without Consent / Cookie-Free)

If you decline consent via our cookie banner, we do not set tracking cookies or access storage on your device. In this state, we collect only essential, non-identifiable aggregate metrics (such as basic page loads). Your IP address is removed or fully anonymized prior to processing, making it impossible to identify your individual device or session.

2. Enhanced Analytics & Behavioral Insights (With Consent)

Where you explicitly grant consent, we activate enhanced third-party tools—specifically Google Analytics and Microsoft Clarity—to better understand website interaction and user journeys.

With your consent, processed data may include:

Traffic & Campaign Metrics: Detailed page views, navigation paths, traffic sources, and UTM parameters (via Google Analytics)

Behavioral Interaction Data: Click patterns, scroll depth, visual heatmaps, and session replays (via Microsoft Clarity)

Device & Technical Identifiers: Browser type, screen resolution, operating system, and unique cookie IDs

Tools Used:

Google Analytics (Google Ireland Ltd.): Measures user journeys, acquisition channels, and aggregate performance metrics.

Microsoft Clarity (Microsoft Ireland Operations Ltd.): Analyzes site usability through heatmaps and session recordings to identify navigation obstacles and technical bugs.

Where website forms are connected to our systems, your data will be transferred to Zoho CRM and Zoho Recruit in order to process business enquiries and applications.

Entity Name: Zoho Corporation B.V.

Registered Address: Beneluxlaan 4B, 3527 HT Utrecht, The Netherlands

Role under GDPR: Data Processor (with your organization acting as the Data Controller)

Primary Hosting Region: European Union (EU)

Data Center Locations: Amsterdam (The Netherlands) and Dublin (Ireland), with additional redundant backup infrastructure located within the EU (Frankfurt, Germany).

Data Residency Assurance: All customer service data, candidate files, and CRM records created by EU accounts are stored at rest strictly within EU borders.


Transfer Context: While primary storage resides within the EU, technical support, maintenance, or infrastructure operations may involve limited, controlled access by sub-processors or Zoho subsidiaries in third countries (e.g., Zoho Corporation Pvt. Ltd. in India or Zoho Corporation in the USA).

Legal Transfer Mechanism: Transfers outside the European Economic Area (EEA) are conducted under Article 46 GDPR mechanisms and, where applicable, the EU-U.S. Data Privacy Framework (DPF).

Standard Contractual Clauses (SCCs): Execution of the updated European Commission Standard Contractual Clauses (Implementing Decision (EU) 2021/914) attached to the Data Processing Addendum.

Certifications: Certified under ISO/IEC 27001 (Information Security), ISO/IEC 27701 (Privacy Information Management), ISO/IEC 27017 (Cloud Security), and ISO/IEC 27018 (Personal Data Protection in Cloud).

Technical & Organizational Measures (TOMs):

Encryption in transit using TLS 1.2/1.3.

Encryption at rest using AES-256 bit standard.

Strict Role-Based Access Controls (RBAC) and IP whitelisting.

Retention Periods & Erasure Guidelines

Candidate & Contact Data: Retained for as long as necessary to complete the recruitment or business purpose, or according to defined statutory retention periods (e.g., standard 6-month retention post-rejection under German AGG/GDPR guidelines, unless candidate consent for a talent pool is granted).

Post-Termination Retention (Zoho System Level): Upon account or service termination, Zoho retains data in active databases for up to 6 months before automated deletion, followed by complete removal from backup systems within an additional 3 months.

Data Processing Agreement (DPA)

Agreement Type: Executed Data Processing Addendum (DPA) pursuant to Article 28 GDPR, forming an integral component of the Zoho Terms of Service.

Access & Execution: Standard DPA terms are accessible and downloadable directly via the user admin console at accounts.zoho.eu under the Privacy Settings tab.

Where we embed videos, maps, social media content, or other third party features, data may be transferred to the respective provider. Such content is only loaded where technically necessary or where you have given consent.

We use Google reCAPTCHA on our website forms to protect against automated spam and bot abuse. For this purpose, technical data (such as IP address and interaction patterns) are transmitted to Google servers (including in the USA). The legal basis for this processing is our legitimate interest in securing our website pursuant to Art. 6(1)(f) GDPR.

We use necessary cookies and similar technologies to operate the website. Optional technologies for analytics, marketing, embedded media, social features, or chat functions are only used if you have given valid consent. Under German law, non essential technologies require prior consent under Section 25 TDDDG, and consent must meet the GDPR standard of being informed, specific, freely given, and revocable as easily as it was given.

You can change or withdraw your choice at any time via our “Cookie Settings”.

If you apply, register as an interested candidate, or request information about apprenticeship opportunities, we process the data you provide to review your application and carry out pre contractual steps.

This may include:

Name
Contact details
Date of birth
CV
Language level
Apprenticeship interests
Certificates and supporting documents
Communication history
Application status

If an AI based chatbot is used on our website, we process the data you enter in the chat in order to answer your request, provide information, and guide you to the appropriate contact or application channel.

This may include:

Name or voluntarily provided details
Contact data, if submitted
Chat content
Technical metadata
Time and duration of use

Chat content is stored only where technically necessary or explicitly configured for that purpose. Chat content is not used to train general models unless expressly stated otherwise.

Your data may be shared with the following categories of recipients where necessary:

Hosting and IT providers
Website development and maintenance providers
Consent management providers
CRM and applicant management providers
Analytics and marketing providers
Chatbot providers
Authorities and courts where legally required
Tax, legal, or professional advisers where necessary

Where external providers act as processors, this is done on the basis of a processing agreement under Art. 28 GDPR.

Where providers outside the EU or EEA are used, or where access from third countries occurs, transfers only take place in accordance with Arts. 44 to 49 GDPR. Information duties also require transparency about such transfers and the safeguards used.

Appropriate safeguards may include:

EU Standard Contractual Clauses
Adequacy decisions of the European Commission
Supplementary technical and organisational measures

We store personal data only for as long as necessary for the relevant purpose or as required by law.

Typical retention periods:

Server log files: a few days to a few weeks where required for security
Contact requests: until final handling plus an appropriate follow up period
Applications: according to the applicable recruitment and retention rules
Consent records: as long as consent remains relevant and as required for proof obligations
CRM and recruit data: according to the relevant business purpose and deletion concept

Under the GDPR, you have the following rights in particular:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability
Right to withdraw consent with effect for the future
Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority. Our primary supervisory authority is:

The State Commissioner for Data Protection and Freedom of Information Rhineland Palatinate
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 6131 8920 0
Email: poststelle@datenschutz.rlp.de

Where we request data in connection with contact requests, applications, or contract initiation, providing the data that is necessary for handling your request is required. Without that data, we may be unable to process your request fully.

We do not carry out automated decision making, including profiling within the meaning of Art. 22 GDPR, unless explicitly stated otherwise in a separate notice.

We may update this privacy policy where the law, our website, or the services we use change.

June 2026