Skip to content
Berjobs

Privacy Policy

Last updated: 26 September 2026

This policy explains what personal data Berjobs processes, why, and your rights. The controller is Ichii GmbH (see Imprint, contact: info@berjobs.com).

What we process

  • Account data: your email address and a securely hashed password.
  • Job profile: the answers you give in the questionnaire (e.g. target roles, experience, skills, languages, work permit category, preferred locations, salary expectation, optional notes).
  • Matches and feedback: which jobs we matched to you, why, what we emailed you, and any “good match / not for me” feedback.
  • Email delivery data: when alerts were sent and whether sending succeeded.
  • Usage events: a small set of first-party events (e.g. profile completed, email link clicked) linked to your account ID. We don't store IP addresses in these events.
  • Website analytics (only with your consent): if you accept, Google Analytics records which pages are visited, roughly from where (country/city), device and browser type, and how you got here. See “Google Analytics” below.
  • Payment data: if you upgrade, payments are handled by Stripe. We store your subscription status, not your card details.
  • Employers submitting a job: the job link you paste and the public job posting we read from it. If you pay, Stripe processes the payment and gives us your email address (for the confirmation email and important information about that job) and the payment status — never card details. An optional, unchecked-by-default request for employer updates is stored with its date and version and is independent of the purchase. Unpaid checks are deleted after 7 days.

Why (legal bases)

  • To provide the service you signed up for — matching jobs to your profile and sending alerts (Art. 6(1)(b) GDPR).
  • To keep the service secure and working, e.g. rate limiting and error logs (Art. 6(1)(f) GDPR).
  • To meet legal obligations such as tax records for payments (Art. 6(1)(c) GDPR).
  • Website analytics, only if you agree (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw consent at any time with effect for the future.

Your work permit category is used only to flag jobs that explicitly can't sponsor a visa. We never sell your data or share your profile with employers or recruiters. You apply to jobs yourself, on the employer's website.

Service providers

  • Neon — database hosting (AWS, Frankfurt, Germany).
  • Vercel — application hosting.
  • Resend — sending emails.
  • Stripe — payment processing for Pro.
  • Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) — Google Analytics, only with your consent.
  • AI model providers via Vercel AI Gateway — to analyse job postings and assess how well a job fits a profile. We send the job posting and the matching-relevant parts of your profile (roles, experience, skills, languages, work permit category, location preferences, notes) — never your name or email address.

Where providers process data outside the EU/EEA, this is based on EU Standard Contractual Clauses or an adequacy decision.

How long we keep data

We keep your account and profile until you delete your account. Deleting your account (in Settings) immediately removes your profile, matches, feedback and email history. Payment records are kept as long as tax law requires.

Your rights

You can access, correct, export or delete your data, restrict or object to processing, and complain to a data protection supervisory authority. You can edit your profile and delete your account yourself at any time; for anything else, contact us.

Google Analytics

We only load Google Analytics after you click “Accept” in the banner; before that, and if you reject, no request goes to Google. With your consent, Google Analytics sets cookies (_ga, _ga_…, up to 2 years) to recognise repeat visits and sends Google the pages you view, your browser and device type, approximate location and the referring website. We send page addresses without their query parameters (so no links, tokens or email addresses from our emails), we never send your name, email address or account ID, and Google signals and advertising features are switched off. Google Analytics 4 doesn't log or store IP addresses; data may be processed on Google servers in the USA, which is covered by the EU–US Data Privacy Framework and Standard Contractual Clauses. Analytics data is kept for 14 months.

Cookies and similar storage

Necessary: a session cookie that keeps you signed in, and a local-storage entry that remembers your analytics choice (and unsaved questionnaire answers). Optional: the Google Analytics cookies above, only after you accept.