Privacy Policy

Last updated: November 10, 2025

At CareerSide (operated by Iotonic GbR), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Data Controller

Iotonic GbR

Kaufmannshof 15, 55120 Mainz, Germany

Email: info@iotonic.dev

Phone: +49 176 55755595

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, password (encrypted)
  • Profile Information: CV/resume, job preferences, skills, experience
  • Job Search Data: Job queries, saved vacancies, application tracking
  • Communication: Messages, support requests, feedback

2.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent (only with consent)
  • Device Information: Browser type, IP address, operating system
  • Cookies: Session cookies (necessary), analytics cookies (optional with consent)

2.3 Third-Party Data

  • Job Listings: Data scraped from public job platforms (LinkedIn, Glassdoor, Indeed, etc.)
  • Company Information: Publicly available company data

3. How We Use Your Information

3.1 Necessary Processing (Legal Basis: Contract Performance)

  • Create and manage your account
  • Provide job search and matching services
  • Analyze CVs and provide recommendations
  • Track your job applications
  • Send service notifications (new matches, application updates)

3.2 With Your Consent

  • Analytics: Understand usage patterns via Google Analytics 4 (anonymous)
  • Marketing: Send personalized job recommendations and feature updates
  • Functional: Remember your preferences and settings

3.3 Legitimate Interest

  • Improve our services and develop new features
  • Detect and prevent fraud and abuse
  • Comply with legal obligations

4. How We Share Your Information

We do NOT sell your personal data.

We may share your information with:

  • Service Providers: Hosting (AWS/DigitalOcean), analytics (Google Analytics 4), email delivery
  • AI Processing: OpenAI API for CV analysis (data is not used for training their models)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In case of merger, acquisition, or sale of assets

5. Google Analytics 4

With your consent, we use Google Analytics 4 to understand how users interact with our service. GA4 collects anonymous usage data including:

  • Pages visited and features used
  • Time spent on pages
  • Browser and device information
  • General location (country/city level)

You can opt-out at any time via your account settings or the consent banner. Data is anonymized and not shared with third parties for advertising.

Learn more: Google Privacy Policy

6. Your Rights (GDPR)

Under EU data protection law, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Change your consent preferences any time

To exercise these rights, email us at info@careerside.ars899.com or manage your consent in Account Settings.

7. Data Retention

  • Account Data: Retained while your account is active
  • Job Search History: Deleted 90 days after last activity
  • Analytics Data: Anonymized and retained for 26 months (GA4 default)
  • Consent Records: Kept indefinitely for legal compliance (audit trail)
  • After Account Deletion: Most data deleted within 30 days, except as required by law

8. Data Security

We implement industry-standard security measures:

  • SSL/TLS encryption for data in transit
  • Encrypted storage for sensitive data
  • Secure password hashing (bcrypt)
  • Regular security audits
  • Access controls and authentication

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Cookies

9.1 Necessary Cookies (Always Active)

  • Session Cookie: Keeps you logged in
  • CSRF Token: Security protection
  • Consent Cookie: Remembers your cookie preferences

9.2 Optional Cookies (Requires Consent)

  • Analytics Cookies (_ga, _gid): Google Analytics tracking
  • Functional Cookies: Remember your preferences

Manage your cookie preferences in the consent banner or Account Settings.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the EU, including the United States (Google Analytics, OpenAI). We ensure adequate safeguards through:

  • Standard Contractual Clauses (SCCs) approved by the EU Commission
  • Data Processing Agreements with all processors
  • Privacy Shield principles (where applicable)

11. Children's Privacy

CareerSide is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Continued use after changes constitutes acceptance.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

Supervisory Authority:
You have the right to lodge a complaint with a data protection authority:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz, Germany
Email: poststelle@datenschutz.rlp.de
Website: www.datenschutz.rlp.de

Back to Home