Privacy Policy

Information on how we handle your personal data in accordance with GDPR

1
1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:

Erfolgswind GmbH & Co KG
Rödingsmarkt 14
20459 Hamburg
Email: info@erfolgswind.de
(Further contact details see imprint)

2
2. General Information on Data Processing

We only process personal data of our users to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by legal regulations.

3
3. Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. This data is temporarily stored in so-called server log files. The following data may be collected: browser type and browser version, operating system used, referrer URL, hostname of the accessing computer, time of server request, IP address.

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Storage in log files is done to ensure the functionality of the website. The data also serves to optimize the website and ensure the security of our information technology systems. Data is not evaluated for marketing purposes in this context.

4
4. Registration and User Accounts

On our website, we offer users (especially companies) the opportunity to register by providing personal data. The data is entered into an input form and transmitted and stored by us. Data is not passed on to third parties unless there is a legal obligation to do so. The following data is collected as part of the registration process: email address, password (stored encrypted), company name and contact details if applicable.

User registration is required for providing certain content and services on our website (e.g., publishing job postings, managing applications). The legal basis for processing data is Art. 6 para. 1 lit. a GDPR if the user has given consent. If registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, an additional legal basis for processing data is Art. 6 para. 1 lit. b GDPR.

Data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For data collected during the registration process, this is the case when registration on our website is canceled or modified.

5
5. Job Postings and Applications

Companies can publish job postings on our platform through their user account. These contain information about the company and the advertised position. Users can apply for these job postings, with application data (e.g., name, contact details, CV, cover letter) being transmitted directly to the advertising company (or via a system we provide, if implemented).

We store job posting data for display on the platform. Application data may be temporarily stored for technical transmission. Processing serves to initiate and conduct application processes. The legal basis is Art. 6 para. 1 lit. b GDPR (contract initiation) and possibly Art. 6 para. 1 lit. a GDPR (consent).

6
6. Course Information

We display information about courses offered by educational providers. This data is provided to us by the providers or taken from publicly available sources. We do not process personal data of course participants unless an explicit function for contact or registration via our platform is implemented.

7
7. Use of Supabase

We use Supabase (Supabase Inc., 970 Folsom St, San Francisco, CA 94107, USA) as a backend-as-a-service platform for providing our database, authentication services and possibly other backend functions. When you register, log in, or enter data via our platform (e.g., profile data, job postings), this data is processed and stored on Supabase servers.

Supabase potentially processes data in the USA as well. We have concluded a data processing agreement (DPA) with Supabase and rely on Standard Contractual Clauses of the European Commission to ensure an adequate level of data protection (Art. 46 GDPR).

The legal basis for using Supabase is our legitimate interest in efficiently and securely providing our platform functions (Art. 6 para. 1 lit. f GDPR) and possibly fulfilling contractual obligations (Art. 6 para. 1 lit. b GDPR).

Further information on data protection at Supabase can be found at: https://supabase.com/privacy

9
9. Your Rights as a Data Subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:

1
Right of access (Art. 15 GDPR)
2
Right to rectification (Art. 16 GDPR)
3
Right to erasure ("right to be forgotten") (Art. 17 GDPR)
4
Right to restriction of processing (Art. 18 GDPR)
5
Right to notification (Art. 19 GDPR)
6
Right to data portability (Art. 20 GDPR)
7
Right to object (Art. 21 GDPR)
8
Right to withdraw data protection consent (Art. 7 para. 3 GDPR)
9
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact the contact address mentioned above.

10
10. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and dated April 2025. Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can always be accessed and printed on the website at /privacy by you.

Back to top