This is a translation of our German privacy policy (Datenschutzerklärung), extended by the section on connecting an AI assistant.
With the following privacy policy we would like to inform you which types of your personal data (hereinafter also referred to as "data") we process, for what purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").
The terms used are not gender-specific.
In accordance with the legal requirements, and taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the differing likelihood and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.
These measures include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access to, input, transfer, securing of availability and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to threats to the data. We also take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection by design and by data-protection-friendly default settings.
SSL encryption (https): To protect the data you transmit via our online offering, we use SSL encryption. You can recognise such encrypted connections by the prefix https:// in your browser's address bar.
We ask you to inform yourself regularly about the content of our privacy policy. We adapt the privacy policy as soon as changes in the data processing we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
Where we provide addresses and contact information of companies and organisations in this privacy policy, please note that addresses may change over time, and please check the information before contacting them.
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, the language settings on a website, the login status, a shopping cart or the point at which a video was watched. We also include under the term cookies other technologies that fulfil the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").
The following cookie types and functions are distinguished:
Notes on legal bases: The legal basis on which we process your personal data with the help of cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the consent you have given. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and its improvement) or, where the use of cookies is necessary, to fulfil our contractual obligations.
Storage period: Unless we provide you with explicit information on the storage period of permanent cookies (e.g. as part of a so-called cookie opt-in), please assume that the storage period can be up to two years.
Processing of cookie data on the basis of consent: Before we process or have data processed in connection with the use of cookies, we ask users for consent, which can be revoked at any time. Until consent has been given, at most cookies that are strictly necessary for the operation of our online offering are used.
In the context of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer the data subjects efficient and secure payment options and, in addition to banks and credit institutions, use other payment service providers for this purpose (collectively "payment service providers").
The data processed by the payment service providers include master data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, amount and recipient-related information. This information is required to carry out the transactions. However, the data entered is only processed and stored by the payment service providers. This means that we do not receive any account- or credit-card-related information, only information confirming or declining the payment. Under certain circumstances, the payment service providers may transmit the data to credit agencies. The purpose of this transmission is to check identity and creditworthiness. In this regard, we refer to the terms and conditions and privacy notices of the payment service providers.
The terms and conditions and privacy notices of the respective payment service providers apply to the payment transactions; they can be accessed on the respective websites or transaction applications. We also refer to these for further information and for asserting rights of withdrawal, access and other data subject rights.
Services and service providers used:
In order to provide our online offering securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offering can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.
The data processed in the context of providing the hosting offering may include all information relating to the users of our online offering that arises in the context of use and communication. This regularly includes the IP address, which is necessary to deliver the content of online offerings to browsers, and all entries made within our online offering or on websites.
Collection of access data and log files: We ourselves (or our web hosting provider) collect data on every access to the server (so-called server log files). The server log files may include the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, the referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.
The server log files can be used for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks), and to ensure the utilisation and stability of the servers.
You can connect an AI assistant such as ChatGPT to your myLebenslauf account. The assistant can then read and change the CV and cover letter stored in your account and create PDFs from them. This section describes what happens to your data when you use that connection. It applies in addition to the rest of this policy.
When you connect an assistant, you sign in on a page hosted by us (mylebenslauf.online), not inside the assistant. You can sign in with your email address and password, or with Google, Microsoft or LinkedIn.
We process this data only to provide the connection you asked for: to let the assistant read and edit your CV and cover letter, to create PDFs, to let you undo changes, to keep the connection secure, and to fix errors. We do not use it for advertising, and we do not sell it. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR) and, for security and error logs, our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR).
We send newsletters, emails and other electronic notifications (hereinafter "newsletters") only with the consent of the recipients or a legal permission. Insofar as the contents of the newsletter are specifically described when registering for it, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and about us.
To subscribe to our newsletters, it is generally sufficient to provide your email address. However, we may ask you to provide a name, for the purpose of addressing you personally in the newsletter, or other information if this is necessary for the purposes of the newsletter.
Double opt-in procedure: Registration for our newsletter generally takes place in a so-called double opt-in procedure. This means that after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's email address. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored with the mailing service provider are also logged.
Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them, in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of possibly defending against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a block list (so-called "blacklist").
The logging of the registration procedure takes place on the basis of our legitimate interests for the purpose of proving its proper course. Insofar as we commission a service provider to send emails, this is done on the basis of our legitimate interests in an efficient and secure mailing system.
Notes on legal bases: The newsletters are sent on the basis of the recipients' consent or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and insofar as this is permitted by law, e.g. in the case of advertising to existing customers. Insofar as we commission a service provider to send emails, this is done on the basis of our legitimate interests. The registration procedure is recorded on the basis of our legitimate interests in order to prove that it was carried out in accordance with the law.
Contents: Information about us, our services, promotions and offers.
Analysis and performance measurement: The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from its server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, is initially collected.
This information is used for the technical improvement of our newsletter on the basis of the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. Rather, the evaluations serve us to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The evaluation of the newsletter and the performance measurement take place, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.
Unfortunately, a separate revocation of the performance measurement is not possible; in this case, the entire newsletter subscription must be cancelled or objected to.
We process personal data for the purposes of online marketing, which may include in particular the marketing of advertising space or the display of promotional and other content (collectively referred to as "content") based on the potential interests of users, as well as measuring its effectiveness.
For these purposes, so-called user profiles are created and stored in a file (so-called "cookie"), or similar procedures are used by means of which the information about the user relevant to the display of the aforementioned content is stored. This information may include, for example, content viewed, websites visited, online networks used, but also communication partners and technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data, this may also be processed.
The IP addresses of users are also stored. However, we use available IP masking procedures (i.e. pseudonymisation by shortening the IP address) to protect users. In general, no clear data of the users (such as email addresses or names) is stored in the context of online marketing procedures, but pseudonyms. This means that neither we nor the providers of the online marketing procedures know the actual identity of the users, only the information stored in their profiles.
The information in the profiles is usually stored in the cookies or by means of similar procedures. These cookies can later generally also be read on other websites that use the same online marketing procedure, analysed for the purpose of displaying content, supplemented with further data and stored on the server of the online marketing procedure provider.
Exceptionally, clear data can be assigned to the profiles. This is the case if, for example, the users are members of a social network whose online marketing procedures we use and the network links the users' profiles with the aforementioned information. Please note that users may make additional agreements with the providers, e.g. by giving consent during registration.
As a rule, we only receive access to summarised information about the success of our advertisements. However, in the context of so-called conversion measurements, we can check which of our online marketing procedures led to a so-called conversion, i.e., for example, to the conclusion of a contract with us. The conversion measurement is used solely to analyse the success of our marketing measures.
Unless otherwise stated, please assume that cookies used are stored for a period of two years.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Services and service providers used:
We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could be more difficult to enforce the rights of users.
Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on user behaviour and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are generally stored on the users' computers, in which the usage behaviour and interests of the users are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed description of the respective forms of processing and the options to object (opt-out), we refer to the privacy policies and information provided by the operators of the respective networks.
Also in the case of requests for information and the assertion of data subject rights, we would like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. Should you nevertheless require assistance, you can contact us.
Services and service providers used:
We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These may be, for example, graphics, videos or social media buttons as well as posts (hereinafter uniformly referred to as "content").
The integration always requires that the third-party providers of this content process the IP address of the users, as they could not send the content to their browsers without the IP address. The IP address is therefore required for the display of this content or functions. We endeavour to use only content whose respective providers use the IP address solely to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the users' devices and may contain, among other things, technical information about the browser and operating system, referring websites, the time of the visit and other information about the use of our online offering, and may also be linked to such information from other sources.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
Integration of third-party software, scripts or frameworks (e.g. jQuery): We integrate software into our online offering that we retrieve from servers of other providers (e.g. function libraries that we use for the purpose of display or user-friendliness of our online offering). The respective providers collect the IP address of the users and may process it for the purpose of transmitting the software to the users' browsers, for security purposes, and for the evaluation and optimisation of their offering.
Services and service providers used:
Philipp Noller
Mettinger Straße 117
73728 Esslingen
Germany
Email address: hello@mylebenslauf.online