Privacy policy

1. Who is responsible

Responsible for data processing on www.deinazubi.de and app.deinazubi.de:

2. The short version

• You can search positions, compare careers and read guides without an account. We collect no information about you for that.
• You can also create a CV and cover letter without an account. The drafts then stay in your browser.
• With an account we store your documents and applications so you can apply from the app and track where you stand.
• www.deinazubi.de sets no cookies and uses no tracking, no advertising pixels and no fonts or scripts from other providers.
• We count anonymously how often pages are viewed and buttons are used, such as "Apply directly". This sets no cookies, and none of it can be linked to you.
• We only collect what a feature needs, and we never sell data.
• When you delete your account, we delete its data completely.

3. Visiting the website

When you open a page, our hosting provider processes technically necessary data: IP address, date and time, the address requested, the page you came from, and your browser and operating system. No page can be delivered without this data, and it helps to detect attacks.

The legal basis is our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). Logs are kept only as long as needed for operation and security, then deleted.

4. Hosting

The website runs on Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the data in section 3 on our behalf under a data processing agreement. For transfers to the USA, Vercel is certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

For statistics we count anonymously how often pages are viewed (Vercel Web Analytics) and how often buttons are used, such as "Apply directly", "Download CV" or "Post a position", per day and per position or career. We set no cookies for this and store nothing in your browser; IP addresses and other details that point to you are not stored. The legal basis is our legitimate interest in improving the service (Art. 6(1)(f) GDPR).

5. Database

Positions, careers, company profiles and, if you have an account, your account data are stored with Supabase, Inc. The database is located in the EU (Ireland). A data processing agreement is in place; the EU Standard Contractual Clauses cover any access from outside the EU.

Every table is set up so that users can only see their own data. Files such as certificates are kept in private storage and can only be opened through short-lived links.

6. Cookies and browser storage

www.deinazubi.de sets no cookies. The language is part of the address (/ for German, /en for English).

Some tools save your input only in your browser, for example a CV draft without an account. This data does not leave your device; you can delete it in your browser settings at any time.

Your photo and signature for CV and cover letter are processed in your browser: we keep only the cropped image, the original file does not leave your device. With an account, photo and signature are saved with your CV and deleted with it or with your account.

When you sign in, we keep your sign-in (an access key) in your browser's storage so that you stay signed in. This is technically necessary for signing in (Section 25(2) No. 2 TDDDG). When you sign out, we remove the sign-in and the copies of your documents from this browser.

So that you see a "No connection" page instead of an error when you are offline, the website places a small script (service worker) in your browser. It stores only that one page and the logo, never pages from your account or your documents. Notifications also arrive through the service worker if you switched them on (section 10).

7. Job listings and company profiles

We take the Ausbildung positions from the public job search of the German Federal Employment Agency. From these listings we build company profiles: name, locations, open positions, website and the company's own description. Some listings name contact persons; this information comes from the companies themselves.

The legal basis is our legitimate interest in giving applicants an overview of publicly advertised positions (Art. 6(1)(f) GDPR). Listings are removed once they are no longer advertised. If you are a contact person or a company and want information removed, write to info@deinazubi.de.

8. Applying

Applying through DeinAzubi: when you apply directly through DeinAzubi, we send your application to the company on your behalf: your message, your CV and the documents you choose. The email comes from "Your name via DeinAzubi"; the company's replies go straight to your email address, and you get a copy. We keep when and to whom you applied, the subject and the names of the attachments in your account so you can track the application; we do not keep the files themselves. Against misuse we count how many applications an account sends per day and delete that count after 30 days.

For this we process the details of your application and the company's address (Art. 6(1)(b) GDPR). The company receives your application and is responsible for processing it from then on. You can delete saved applications at any time; they are deleted completely with your account.

We check with the email service whether your application was delivered. If it was not, your tracker shows it and we send you an email. Addresses that applications repeatedly do not reach are no longer offered for applying through DeinAzubi.

Applying with your own email app: for some positions, "Apply by email" opens your own email app. The message then goes straight from you to the company; we do not receive it.

Links to company websites or to the Federal Employment Agency lead to other providers, whose privacy policies apply there.

9. Account and user area

You only need an account for features that save something for you: CVs and cover letters, applying through DeinAzubi, the application tracker, saved positions and job alerts.

We then store: your email address, your password (encrypted only), your name and what you enter yourself, such as German level, preferred career, country of origin, CVs, cover letters, uploaded certificates and your applications with their status. All profile information is optional.

Certificates and references you upload are kept in protected storage at Supabase in the EU. Only you can open them; they are loaded straight into your browser for that. Photos of certificates are turned into a PDF in your browser, which drops metadata such as where the photo was taken. We check every file for harmful content such as scripts before it is stored and before it is sent.

The legal basis is the user agreement (Art. 6(1)(b) GDPR). We keep the data until you delete your account; then we delete your profile, CVs, applications and uploaded files completely. Statutory retention obligations remain unaffected.

To improve DeinAzubi, our team sees in an internal overview how the account features are used: for example how many CVs someone has created, which positions applications through DeinAzubi went to and whether they arrived. This overview only uses data that is stored for your account anyway (Art. 6(1)(f) GDPR).

You sign in directly on www.deinazubi.de, where you find everything in your account. Only our own team still uses the former address app.deinazubi.de, for administration; there we use Sentry (Functional Software, Inc., USA) for error analysis and Vercel Web Analytics for anonymous usage statistics. Other services are only loaded with your consent.

10. Emails from us

For emails such as address confirmation, password reset, job alerts and applications you send through DeinAzubi we use Resend (Resend, Inc., USA) as the sending service, under a data processing agreement and the Standard Contractual Clauses.

You only receive job alerts and news about features if you switched them on (Art. 6(1)(a) GDPR). You can unsubscribe in every email and in your account.

Reminders from the application tracker: when you enter an interview date there, we send you an email the evening before (Art. 6(1)(b) GDPR). Without a date there is no reminder.

Notifications on your phone or computer: in your account you can switch on notifications for a device. Your browser then asks for permission. Your browser gives us an address at its notification service (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, Microsoft for Edge) and two keys, which we store with your account. Every notification is encrypted for your device: the notification service only passes it on and cannot read it. We send the same news as by email: new positions, the reminder of an interview, an application that did not arrive, and the check of your language certificate (Art. 6(1)(a) GDPR). You can switch notifications off at any time in your account or in your browser settings; when you sign out, we switch them off for this device and delete the address.

11. AI features

Some features use artificial intelligence from Anthropic (Claude, Anthropic PBC, San Francisco, USA), for example summarising and formatting listings or suggestions for your CV. Requests go through our server; your browser does not talk to Anthropic directly. A data processing agreement is in place; the EU Standard Contractual Clauses cover the transfer to the USA. Anthropic does not use data from API use to train its models.

For listing summaries only the public listing texts are sent. For CV suggestions we only send the parts of text you ask a suggestion for, and only when you start the feature yourself (Art. 6(1)(b) GDPR). The AI only suggests: you see and edit every text before it is used.

Language certificates: when you upload a document as "Language certificate", Claude reads it once (at most the first six pages). We store only the result: exam institution, level, passed modules, whether name and date of birth match your profile, a fingerprint of the file, and an encrypted reference of the certificate number that lets us notice the same certificate used in several accounts. We do not store the number itself. We do not store the name or date of birth from the certificate. Applications through DeinAzubi are only possible with a certificate checked this way at B1 or above, because they are sent to companies in our name (Art. 6(1)(b) GDPR). Anything that cannot be decided with certainty is looked at by a person from our team. You can always ask for a person to review a decision and give your point of view (Art. 22(3) GDPR). If you delete the document, we delete the check result too.

12. Contacting us by email

If you write to us, we process your message and contact details to reply (Art. 6(1)(b) or (f) GDPR). We delete them once your request is settled and no retention obligation applies.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time for the future (Art. 7(3)).

Write to info@deinazubi.de. You can also complain to a data protection authority, for example the one responsible for us:

14. Minimum age

You can create an account from age 16. Younger people need their parents' consent.

15. Our pages on social networks

We run pages on Facebook, Instagram and Threads (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland), a channel on Telegram (Telegram FZ-LLC, Dubai, United Arab Emirates) and a WhatsApp channel (WhatsApp Ireland Ltd., Dublin). There we post new apprenticeships. The posts contain only public information from the job listings, never data of applicants.

When you visit, follow or comment on our pages there, the provider processes your data under its own privacy policy, also outside the EU. For the statistics of our Facebook and Instagram page (Page Insights) we are joint controllers with Meta (Art. 26 GDPR); the agreement is at https://www.facebook.com/legal/terms/page_controller_addendum. The legal basis is our legitimate interest in making apprenticeships known (Art. 6(1)(f) GDPR).

On www.deinazubi.de we embed no content, buttons or scripts of these networks. The page www.deinazubi.de/heute shows the positions from our posts; we count visits there only as a number, without a cookie and without any details about you.

16. Changes

When our service changes, we update this policy. The version on this page applies; the date at the top shows when it last changed.