agb_tel agb_fax

Privacy policy

JobLeads GmbH Privacy Policy

Comprehensive reporting about the collection, processing and use of your data ("data processing”) is the cornerstone of an effective privacy policy. As a result, we would like to inform you

  • for what type of activities we process data and when
  • what types of data we process and the purposes for processing
  • who will receive the data
  • what your rights are associated with our processing of your data.

This Privacy Policy only governs the use of personal data on our websites,,,,,,,,,,,,,,,,,,,,,,,,,,,,, and, including their subpages and (hereinafter respectively referred to as “website”). If you leave our website via a link or visit our pages on a social media platform, you leave the scope of this Privacy Policy as well.

The transmission of information to or from this website is secured with TLS encryption.

You can access, print, or download this Privacy Policy permanently and at any time here at

I. Contact Information

Responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR):

JobLeads GmbH
Brandstwiete 4
20457 Hamburg, Germany
ICO Registration Number: A8927111

Further information can be found in the Site notice section of this website.

For additional support, we have appointed a Data Protection Officer (DPO), who can be contacted at:

II. General Information on Data Processing

1. Collecting and processing personal data

The service of providing this website requires the processing of various types of information. Furthermore, the scope of data processing depends on your use of the functionalities of the website, e.g. whether you register in the job portal, communicate with us via the contact form or consent to the processing of data.

You are not required to provide us with personal data. However, if the provision of data is technically required when you access our site, refusal will result in your being unable to access and use our website.

As a visitor to our websites, you are not subject to any automated decision-making within the meaning of Art. 22 GDPR.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is explained in the following section.

Reason for processing Legal basis as per GDPR Comments
Contract fulfillment or precontractual activities Art. 6 para. 1 b) Processing will only take place to the extent necessary to carry out and exercise the rights and obligations arising from the contract. Unless expressly stated otherwise, data will only be processed by us to this extent.
Justifiable interest Art. 6 para. 1 f) Processing is carried out to the extent of our legitimate interest unless prevented by conflicting overriding interests on the part of the data subject. Our specific interest is explained in this privacy policy within the context of the processing description.
Consent Art. 6 para. 1 a) The data will be processed if you have expressly consented to the type and scope of data processing in question. You may withdraw your consent at any time going forward. However, this will not affect what has already been processed up until that point in time.
Legal obligation Art. 6 para. 1 c) Processing will occur to the extent it is necessary to fulfill German or European statutory requirements.

3. Data deletion and duration of storage

If there is no longer a legal basis for processing your data, it will be deleted. In some cases, however, a legal basis may exist in a separate arena, or, a rationale that is no longer applicable may be replaced by a new one, e.g. the obligation to retain certain data as a statutory record keeping requirement.

III. Data Processing for the Provision of Services Associated with this Website

In order to set up a fully functionable website for you, it is necessary to process certain types of information. This happens each time you visit our website. In addition, we offer various functionalities on our website which require additional data processing.

1. Log Files

When you visit our website, information about your visit is stored on our servers (so-called log files). The data stored include your IP address which we treat as personal data. In addition, the following data is collected:

  • Date and time of the server request
  • Browser type and version
  • Operating system/version
  • Retrieved data volume
  • Http Response Code
  • Referrer
  • URL retrieved
  • Web server process ID

The data cannot be merged with any other data sources. The storage of log files including your IP address serves the legitimate interest of providing our website and preventing its misuse. Stored log files shall be deleted after 70 days at the latest, unless longer storage is necessary, for example, to fend off or investigate an attack on our website.

2. Cookies required for technical reasons

We use these cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be required to establish a connection or to improve the use of the website.

You can prevent the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

The use of technically required cookies and the associated data processing springs from our legitimate interest in providing you with a website that has a solid architecture and is easy to use. Technically required cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The following technically required cookies are used on our website:

Cookies Data collected Storage period Purpose
Localization cookie cityName, countryCode, countryName, currency, latitude, locale, longitude, radiusRangeList (for searching), radiusUnit (for searching), regionName, timezoneName, timezoneOffset, version, worldRegion 1 year For correct display and processing of localized content (language, units, currency, etc.)
Known user cookie UserID (hashed), if user has a user account 1 year User recognition
Server ID cookie Web server on which session is running Session Directing all requests to the same web server
Session Cookie Session ID Session Receipt of session, technical implementation of website.
Cloudflare cfduid Cookie Cloudflare Id 1 year Use of the Cloudflare content delivery network
JobLeadsUserAutoLogin Cookie UserID (hashed) 1 month Automatic login (if enabled by user)

How long persistent cookies are stored is determined by the provider and can also be checked by you in your browser.

3. Registration with JobLeads

Access to this website’s basic functionalities and the job portal always requires registration. The scope of data to be provided during registration can vary in detail. Mandatory fields are clearly marked. The following data must always be provided: Last name, first name, email address, gender and a password to be selected: The data processing in question has its legal basis in the necessity to initiate and fulfill the services offered on this platform. The data processing in question has its legal basis in the necessity to initiate and fulfill the services offered on this platform.

4. Application via JobLeads

Once you have registered, you may add various other personal information to your profile and upload documents such as CV and certificates to complete it. Any additional information is provided voluntarily. Your data will be processed accordingly on the basis of your consent.

We use your required and voluntary additional information exclusively for purposes of providing the job portal and its functionalities. This also applies to data that you enter in the uploaded documents. You may define the visibility of your data in the settings of your profile. If you share your information as part of an application or make it publicly visible in your profile, we will transmit it accordingly or present it in such a way that it can be viewed by these users. Publicly visible data may also be accessed by headhunters or other recruiters for recruitment purposes. Your data cannot be viewed by third parties outside the job portal.

If you use the portal’s “Apply” function to apply to a job ad, we will only share your application documents with the respective employer. In all other cases, the data is collected directly via a frame by the employer or the service provider used for the candidate search.

As a rule, the legal basis for the processing of your data is the necessity to fulfill our contractual obligations. If you submit an application independently, the legal basis consists of your consent to share your data.

5. Resume review by TopCV

Upon your consent, we will share your resume, your first and last name, and your email address with TopCV for a free analysis (i.e., CV review). TopCV is a trademark of Talent Worldwide Inc., 113 University Place, #5, New York, NY 10003, USA. Information on how to revoke your consent is provided in Section V. JobLeads deletes your data immediately after the transfer is completed and is not provided with the results of the review. The free resume review is conducted in accordance with TopCV’s Terms of Use and in line with TopCV’s own responsibilities under data protection law. Further information on data privacy and protection at TopCV is available here.

6. Applying for positions via JobLeads

The website offers you the option to apply directly to positions via JobLeads.

In order to manage applicants, we require your contact data (first and last name, telephone number, email address), information on your education, details about your professional career, and skills. In some cases, information on your further education and training (resume and cover letter) is also required.

We process such data insofar as this is necessary in accordance with Art. 26 of the Federal Data Protection Act (BDSG) to carry out the application process or if you have given us your consent in accordance with Art. 6 (1) (a) GDPR. We may also be required to process the data as based on the legal provisions of Art. 6 (1) (c) GDPR.

The data of applicants who have not been offered employment shall be deleted after six months.

The data you submit as part of your application will be transmitted using TLS encryption and stored in a database. The database is operated by our service provider GREENHOUSE SOFTWARE, INC., 18 West 18th Street, 11th Floor, New York, NY 10011, USA. We have concluded an agreement for contract data processing with GREENHOUSE SOFTWARE, INC. in accordance with Art. 28 GDPR. Further information on GREENHOUSE SOFTWARE, INC. is available at:

GREENHOUSE SOFTWARE, INC. is located in the USA and is therefore based in a so-called “Third country” in accordance with Art. 44 GDPR.

7. Payment processing

Our payment transactions are processed by PAYONE GmbH, Fraunhoferstraße 2 - 4, 24118 Kiel, Germany. Your payment data will be collected by us and transmitted to PAYONE for further processing. These activities are limited to payment processing and consequently also fall under the legal basis of contract fulfillment. PAYONE's processing of your data is governed by its privacy policy, which is available at

8. Contact form

You may send us an inquiry at any time using the various contact forms on our website. To facilitate your inquiry, we request that you submit the following information: Email address, subject and content of your request (if you contact our sales team, also include: industry). The information is marked as mandatory fields. The provision of any other data you transmit to us as part of the inquiry, also via free text field or in documents uploaded and attached to your inquiry, is voluntary.

We use this data exclusively to respond to your inquiry and to facilitate associated communications. The legal basis of this type of data processing depends on the content of your request. As a rule, our legitimate interest in providing contact functionality and responding to your inquiry by using the transmitted data applies here. If your request is aimed at entering into a contract with us, any processing is based on the extent of this precontractual obligation.

Your data will be deleted as soon as your request has been processed. In the event of a contract being entered into, we may conduct additional processing to fulfill our contractual obligation.

9. Email notifications/Newsletters

An essential component of our services offered on the job portal is to notify you of interesting job opportunities. If you register, we will also use your email address to send you email notifications and newsletters informing you about suitable job opportunities and services offered by JobLeads. You can unsubscribe from these notifications at any time by clicking on the unsubscribe link at the bottom of each newsletter and in the notification settings in the “My Account” section of your account. You will not incur any additional costs. To the extent required for the processing of services offered on the job portal and for the provision of information about our own range of services, the legal basis for the processing of your data is our legitimate interest in maintaining and expanding existing usage arrangements.

10. Google Maps

On our website, we use the map service Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to show our location.

When you enter the page on which the Google map is integrated, our website sends various pieces of information including your IP address to Google USA where they will be stored on its servers. If you have a Google Account and are logged in at the time you visit our site, the information will be associated directly with your account. But even without a user account, Google will create a user profile about you. This happens regardless of whether Google provides a user account that you are logged in to or no such user account exists.

Our transfer of data to Google supports our legitimate interest in offering you the map function of Google Maps on our website.

You can prevent the linking of the data we transmit to your user account by logging out of Google before you visit our website. To completely stop the data transfer to Google, you have to switch off the JavaScript application in your browser. The map display can then no longer be used.

More information about Google and the use of Google Maps can be found here:

11. Google Fonts

The website uses so-called web fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to display fonts.

When a page is loaded, your browser loads the requisite web fonts into your browser in order to display texts and fonts correctly. To do so, the browser you use connects to Google’s servers and then tells Google that our website was accessed via your IP address.

Google Fonts are used in the interest of a uniform and appealing presentation of our website. If your browser does not support Google Fonts or web fonts, a standard font from your terminal device will be used.

Further information on Google Fonts and the Google Privacy Policy can be found at the following online addresses:

12. Sentry

To permanently improve our performance, we constantly analyze our systems for errors and weak points. To do this we also use the Sentry service of Functional Software, Inc., 132 Hawthorne Street, San Francisco, California, USA ("Sentry"). When an error occurs, information is sent to Sentry, including the user who has encountered the error. As a rule, only one user ID is sent, but under certain circumstances the following data can also be transmitted to Sentry, some of which may also have personal reference:

  • IP address
  • Date and time of the server request
  • Browser type / version
  • Operating system / version
  • Retrieved data volume
  • HTTP Response Code
  • Referrer
  • URL retrieved
  • Web server process ID
  • Name or address of user
  • User input in form fields
  • Preferred Language

Data processing is based on our legitimate interest to detect problems and errors in our systems at an early stage, to fix them and thereby steadily increase the security of personal data. Your data will be deleted as soon as it is no longer needed to correct the error. The legal basis in this regard is Article 6 (1) (f) GDPR.

IV. Usage analysis and tracking

We would like to further improve the usability of this website and the appeal of our services. For this reason, we also collect data on usage behavior that we evaluate for this purpose when you visit our website. For this reason, the following tracking and analysis cookies are used on our website in addition to the technically required cookies described below.

1. Google (Universal) Analytics

This website uses Google Analytics, a web analysis service by Google. Using a cookie, Google collects information about your use of this website (including your IP address) in the USA and stores this information. We use Google Analytics exclusively using an anonymization feature. This means that, before transmitting it, Google will shorten the IP address of users within member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in rare cases will the full IP address be transmitted to a Google server in the USA and shortened there. Analyzing the information collected, Google sends us reports on usage activities on our website while providing us with additional services for this purpose. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.

In addition to your browser blocking all cookies, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link:

As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting information from this website in the future. This opt-out cookie only works in this browser and only for this domain. If you want to delete your cookies in this browser, you must click the link again: Disable Google Analytics.

Further information on Google Analytics can be found in the Google Privacy Policy:

2. Google AdWords

Our website uses Google's AdWords advertising tool including its conversion and remarketing function.

The remarketing tool allows us to display targeted advertising on other websites you visit. For this purpose, Google analyses your use of our website and stores a corresponding ID in your browser. This ID allows us to assign you to a specific user group and to recognize you when you visit websites that are part of Google's advertising network. These websites can then display advertisements related to your use of our website. During this process, Google does not collect any personal data; you are assigned to a specific user group exclusively through your browser. The collected data is stored and processed in the USA.

We use conversion tracking to determine how successful advertising for our services is on other websites. To do this, a conversion cookie is set when you click on one of our ads. We use this cookie to recognize that you came to our site through this ad. With such usage statistics, we create statistics to evaluate the conversion of our ads. We do not obtain any personal information. The conversion cookie that is set in your browser is unique and cannot be used by other Google AdWords customers for their statistics.

You can prevent remarketing by deactivating the function at
Further information on the Google Privacy Policy is available on the following websites:

3. Doubleclick

JobLeads also uses Google's Doubleclick service. As part of this service, a cookie is set and a pseudonymous identification number (ID) is assigned to your browser. The cookie determines whether and which advertisements were displayed and clicked in your browser. This enables us to tailor your advertising even closer to your interests. Since we have activated Google's IP anonymization on this website, your IP address is also shortened within the scope of Doubleclick before being transmitted by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Analyzing the information it collects, Google sends us reports on usage activities on our website while providing us with additional services for this purpose. The IP address transmitted by your browser via Google Analytics will not be merged with other Google data.

In addition to the above-mentioned general options for preventing cookies, you can also prevent Google from saving the Doubleclick cookie by downloading a browser plugin. It is available here.

4. Facebook-Custom Audience

We use Facebook pixels on our websites. This pertains to the function of a web analysis service provided by Facebook. Facebook pixels are invisible graphic files built into our website. When you visit our website, information from the pixel is stored in your browser. This enables us to track which of our subpages you have visited. We share this information with Facebook to better match our ads there to your real interests and to analyze the effectiveness of our ads on Facebook. Depending on your use of our website, Facebook assigns you to certain groups of interested parties known as custom audiences. The information generated by the cookies are usually transferred to a Facebook server in the USA and stored there. Further information on how Facebook’s tracking pixel captures data is available at or at

We have no control over Facebook's data processing operations. Facebook uses the data for purposes of advertising, market research and offerings optimization. These activities are governed by Facebook's Privacy Policy. It should be noted that the use of such a tracking procedure makes possible the identification of users via numerous websites. You can deactivate this function in your Facebook account settings for all the devices you use: For further information, please refer to Facebook’s Privacy Policy and Terms of Use.

5. LinkedIn Insight tag

On our website we also use the Insight tag provided by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, represented by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland (“LinkedIn”). By doing this, a cookie is placed on your browser that allows for the collection of various data when accessing our website. Your IP address will also be collected and sent to LinkedIn. If you are an active member of LinkedIn, more information from your profile might be added.

The data is first encrypted at LinkedIn and anonymized within 7 days. LinkedIn does not share personal data with us, but only provides general reports on the use of our website. The data can also be used by LinkedIn for retargeting. This allows us to review the success of our advertising campaigns.

The anonymized data will be deleted by LinkedIn after 90 days. As a LinkedIn member, you can prevent LinkedIn from processing data to display ads in your account settings. Click on the following link to opt out of LinkedIn Retargeting:

Further information on how LinkedIn processes data is available in its privacy policy and in its cookie policy

Irrespective of this, you can generally object to the use of such cookies via various third-party sites, e.g.:

The legal basis of our data processing activities for analytical purposes is our legitimate interest in obtaining a statistical analysis of your user activities in order to improve services and marketing of our website on an ongoing basis.

During your visit to our website, data processing for usage analysis only occurs until the time you withdraw your consent.

6. Bing Ads/Universal Event Tracking

Our website uses the Universal Event Tracking (UET) service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

UET is a mechanism that allows us to notify Microsoft Advertising of user activity on our website after a user has clicked on our ad. It enables us to determine the effectiveness of our advertising. According to Microsoft, no personal information on the user’s identity is shared in this process.

Should you wish to opt out of UET, you can, for example, use your browser’s controls to define the extent to which the websites you visit may use cookies, and you can revoke consent by deleting or blocking cookies.

Further information on Microsoft’s Privacy Statement is available here:

V. Opt-out and deletion option

If any data processing is linked to your consent or legitimate interest, you have the right to object to the processing or to revoke your consent at any time. Your objection or revocation has forward-looking effect only. If the analytics cookies used carry their own technical options for deactivation, this is shown in the explanation above. You may at any time exercise your right of objection or revocation by contacting If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons for protecting processing which outweigh your interests, rights and freedoms.

VI. Rights of the data subject

If personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As the data subject, you have the following rights with regard to your personal data. To exercise these rights, please contact us using the contact details above.

Right of access according to Art. 15 GDPR

You have a right of access to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.

Right to rectification according to Art. 16 GDPR

You have the right to correct incorrect personal data without delay and to amend incorrect personal data.

Right to erasure according to Art. 17 GDPR

You have the right to request the deletion of your personal data if one of the reasons mentioned in Art. 17 GDPR takes precedence, in particular if there is no longer a legal basis for the processing.

Right to restriction of processing according to Art. 18 GDPR

Instead of having your data deleted, you also have the right to demand that the processing of your personal data be restricted, if one of the reasons mentioned in Art. 18 GDPR prevails, especially if any restrictive action is triggered by your request.

Right to data portability according to Art. 20 GDPR

You have the right to access all personal data stored by us about you in a structured, current and machine-readable format and to share this data with another person authorized to handle it without obstruction by the person responsible to whom the personal data was originally provided.

Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR

According to Art. 77 GDPR, you have the right to file a complaint with the appropriate authority in your jurisdiction.

VII. Recipients of data

Processing of your personal data within the context of providing this website and the job portal is in part carried out by contracted processors. In particular, this applies to payment processing, hosting of the website, maintenance and servicing of the IT systems, sending emails, answering user inquiries and the use of analytical tools. Such activities are included exclusively on the basis of a supplemental agreement to an order agreement in accordance with Art. 28 para. 3 GDPR.

VIII. Data transfer to third countries

The personal data we collect from you through the website will not generally be transferred to third countries outside the European Economic Area.

In the exceptional cases described above and when Google Analytics and Google Fonts are used, your IP address may first be shortened after transmission to Google. When using Google Maps, your IP address will also be transmitted.

The use of Facebook Custom Audience and the LinkedIn Insight tag also result in the transmission of data to Facebook in the USA. Google, Facebook and LinkedIn are domiciled in the USA and thus in a so-called "third country" according to Art. 44 GDPR.

In each case, these transfers are carried out based on standard contractual clauses in accordance with Art. 46 (2) (C) GDPR.

The transfer to the US-based TopCV is carried out on the basis of your express consent in accordance with Art. 49 (1) (A) GDPR after you have been informed of the possible risks of such transfers associated with you due to the absence of an adequacy decision and appropriate safeguards.

IX. Social Media Pages

We operate our own pages on the social networks Facebook, LinkedIn, Twitter, and Xing. These networks process your personal data, for example, to create user profiles which match your interests. Cookies may be stored on your device for this purpose. In-depth information on how the individual networks process data can be found in the networks’ respective privacy policies and, if applicable, cookie policies:

In addition, these privacy policies contain information about what type and scope of data is processed by the respective networks as well as the options available to you to assert your rights as a data subject (right of access, right of confirmation, right to rectification, right to erasure, right to restriction of processing, right to data portability, and right to lodge a complaint with the supervisory responsible for data protection).

We do not know which user data is processed by the social networks. We are not granted full access to collected user data or user profiles. We are only able to access public profile information. You can change the information that is made available to the public by making adjustments in your account settings.

If available, we utilize user data from the chat functions to answer your questions. We use the collected customer data to contact the user and provide the information and offers which have been requested.

Based on the legitimate interest to use our site, social networks may send us anonymous statistics, such as on

  • Followers: number of people following us – including growth and development over a defined period of time.
  • Reach: number of persons who have viewed a specific post. Number of interactions with a post. This allows you, for example, to determine what content does better in the community as other content.
  • Advertising performance: how many people viewed and interacted with an ad or post.
  • Demographic: average age of visitors, gender, place of residence, language, industry.

These statistics are used to continuously improve our online content and to better serve our users’ interests. We are not able to link the statistical data with the profiles of our fans or individual users. You can use your account settings on social networks to decide what type of targeted advertising you would like displayed to you.

Special information on Facebook

Alongside Facebook, we are responsible for operating the Facebook fan page in accordance with data protection law. The data controller in Europe is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Shared responsibility is outlined on Facebook’s page "Information about Page Insights" which is available at Further information on the processing of Page Insights data is provided at

Under certain circumstances, data may be processed outside Europe by Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

The legal basis for processing your personal data on our fan page is our and Facebook’s legitimate interest in accordance with Art. 6 (1) f) GDPR in providing advertising, recommendations, and measurements and in offering a channel of information and communication to interested parties. You can object to data processing at any time. Please contact to Facebook to do this. Information on this topic is available in Facebook’s Privacy Policy: You can also adjust your browser settings yourself at any time to prevent the storage of cookies or to delete existing cookies.

Special information on LinkedIn

Alongside LinkedIn we are responsible operating the company page on LinkedIn in accordance with data protection law. The data controller in Europe is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Shared responsibility is outlined on the “Page Insights Joint Controller Addendum” which is available at :

Under certain circumstances, data may be processed outside Europe by LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA.

The legal basis for processing your personal data on our fan page is our and LinkedIn’s legitimate interests in accordance with Art. 6 (1) f) GDPR in providing advertising, recommendations, and measurements and in offering a channel of information and communication to interested parties. You can object to data processing at any time. Please contact to LinkedIn to do this. Information on this topic is available in LinkedIn's Privacy Policy: You can also adjust your browser settings yourself at any time to prevent the storage of cookies or to delete existing cookies.

Version: April 2021