Privacy

Last updated: 27 April 2026

Jobdex is operated from Germany. The authoritative privacy notice is the German Datenschutzerklärung. This English version is provided for convenience.

1. Controller

The controller within the meaning of the GDPR is:

Alexander Schauff
Jobdex
Mühlenstr. 223a
41236 Mönchengladbach
Germany
Email: [email protected]

2. At a glance

You can browse most of Jobdex without giving us personal data. If you create an account (optional, used for email alerts), we process your email address to send the sign-in link and keep you signed in.

3. Data we process

When you just visit: your browser transmits technical data (IP address, user-agent, request timestamp). Our hosting provider stores these briefly in server logs to defend against abuse and keep the service available (Art. 6(1)(f) GDPR).

When you create an account: we store your email address and a session identifier (cookie). We also store your language preference, digest setting, and, where applicable, proof of opt-in and opt-out for marketing emails.

When you want to delete your account: right now, send a short email to [email protected]. We will delete your data within the time limit set by Art. 17 GDPR. A self-service delete button in the account settings is coming soon.

4. Legal bases

  • Art. 6(1)(b) GDPR, contract: sign-in link, account operation
  • Art. 6(1)(a) GDPR, consent: marketing emails (digest). Consent is collected exclusively inside an existing session authenticated via magic link. Because email ownership is already proven by the prior login verification, no separate double-opt-in is required; an explicit opt-in click with a logged record (timestamp, text version, IP hash, user agent) satisfies section 7(2) UWG. Withdrawal is available at any time through settings or the unsubscribe link in every email.
  • Art. 6(1)(f) GDPR, legitimate interest: abuse protection, security, uptime

5. Recipients and processors

For processing your personal data we use the following service providers:

  • Resend Inc. (USA), transactional email delivery (sign-in mails, digest). Emails are sent from the EU region (eu-west-1, Dublin); account metadata and logs remain in the United States. Resend reports back delivery, bounces, and spam complaints, so we can automatically disable sending to addresses with hard bounces or complaints. We have a data processing agreement and EU standard contractual clauses in place; Resend is additionally certified under the EU-US Data Privacy Framework.
  • Contabo GmbH, Aschauer Straße 32a, 81549 München, Germany. Runs the servers Jobdex operates on (data centre in Germany). Data processing agreement in place.

6. International transfers

Transfers to the US (Resend for email delivery) rely on the EU-US Data Privacy Framework (European Commission adequacy decision) combined with standard contractual clauses as a belt-and-braces safeguard.

7. Cookies

We only set strictly-necessary cookies (notably one session cookie after sign-in). These are exempt from consent under section 25(2) No. 2 TDDDG. There are no analytics or marketing cookies, no trackers, no embedded third parties. See the cookie policy for the details.

8. Retention

  • Server logs: up to 14 days
  • Sign-in tokens (verification values): 10 minutes, deleted on use
  • Sessions: up to 30 days after last activity
  • Accounts: until deletion on request (email [email protected])
  • Email events (delivered, bounced, etc.): 12 months for deliverability quality
  • Marketing opt-in and opt-out records: 3 years after withdrawal (§ 195 BGB, burden of proof per BGH case law)

9. Your rights

You have the following rights regarding personal data we process about you:

  • Right to access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

Signed-in users can already see some of their data on the account settings page. For access, export, deletion, or any other privacy request, email [email protected]; we respond within the timeframe set by Art. 12(3) GDPR.

10. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

11. Changes

This notice may change to reflect legal developments or new product features. The current version is always published on this page.