- Introduction
The protection of your personal data is of the utmost importance to Job2Student. With this privacy policy, we inform you, in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), about which personal data we collect, the purposes for which we process them, and which rights you have.
This policy applies to all services offered via the domain www.job2student.de and related subdomains.
2. Controller (Data Controller)
Job2Student
Francois Tsanko
Regerstr. 6
70195 Stuttgart
Germany
E-Mail: info@job2student.de
3. Categories of Processed Data
We process in particular the following categories of personal data:
- Account Data: Name, email address, password (encrypted), telephone number, billing address
- Profile Data: Age confirmation (18+), university, educational level, skills, job preferences
- Contract & Transaction Data: Job postings, applications, contracts, payment-related data (via external payment providers)
- Technical Data: IP address, browser type, operating system, cookies, log files
- Communication Data: Platform messages, support requests
4. Hosting & Server Log Files
Our website is operated by an external hosting provider within the EU, providing infrastructure, storage space, and security services.
When visiting our website, the following data (server log files) are automatically processed:
- IP address
- Date and time of access
- Accessed pages/files
- Referrer URL
- Browser type, operating system
Processing is carried out to ensure the functionality and security of the website (Art. 6 (1) lit. f GDPR).
5. Purposes of Data Processing
The collected data is used for:
- Operation, security, and optimization of the platform
- Mediation of students/helpers to employers
- Account management, authentication, and fraud prevention
- Handling of fees, invoices, and payments
- Sending relevant notifications
- Compliance with legal obligations (e.g., tax record retention)
6. Legal Bases for Processing
- Art. 6 (1) lit. b GDPR – Contract performance (e.g., mediation of assignments)
- Art. 6 (1) lit. c GDPR – Legal obligations (e.g., invoicing)
- Art. 6 (1) lit. f GDPR – Legitimate interests (e.g., IT security, fraud prevention)
- Art. 6 (1) lit. a GDPR – Consent (e.g., newsletter, marketing, cookies)
7. Data Sharing & Processing on Behalf
Your data will only be shared where necessary for operating the platform:
- Service Providers: Hosting, payment providers, IT support, newsletter delivery
- Contract Partners: Employers/students within job mediation
- Authorities: Where there is a legal obligation
Data will not be disclosed to third parties for advertising purposes.
8. Storage Periods
- Account data: until deletion of the user account
- Server log files: approx. 1 month
- Transaction & contract data: up to 10 years (tax regulations)
- Communication data: up to 3 years
- Cookies: depending on type, between session and max. 2 years
9. Cookies & Tracking
We use cookies and similar technologies to:
- Ensure the functionality of the platform
- Collect usage statistics (e.g., Google Analytics/Matomo)
- Personalize content
- Enable secure login sessions
Upon first visit, a consent banner appears where you can give or withdraw your consent. You can also control cookies in your browser settings.
10. Newsletter & Marketing (if used)
If you subscribe to our newsletter, we process your data only with your consent (Art. 6 (1) lit. a GDPR).
- Subscription via double opt-in (confirmation by email)
- Logging of consent (IP address, timestamp)
- Unsubscription possible at any time via link or message
- Additionally, users may activate or deactivate job alerts (emails/SMS with offers).
11. Social Media & Plugins
Our website may contain links or plugins from social media platforms (e.g., Facebook, Instagram, LinkedIn).
When accessed, data (e.g., IP address) may be transmitted to the providers.
12. International Data Transfers
If data is transferred to countries outside the EEA, this only takes place under appropriate safeguards (e.g., EU Standard Contractual Clauses).
13. Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse (e.g., SSL/TLS encryption, access restrictions, hosting within the EU).
14. Rights of Data Subjects
You have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification of incorrect/incomplete data (Art. 16 GDPR)
- Erasure (“right to be forgotten”) of your data where no legal obligations prevent this (Art. 17 GDPR)
- Restriction of processing in certain cases (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of consent at any time with effect for the future (Art. 7 (3) GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
Job2Student encourages individuals to contact us directly first to enable a quick and amicable resolution.
15. Minors
Use of the platform is restricted to persons aged 18 years or older. We do not knowingly process data of minors.
16. Changes to this Privacy Policy
This privacy policy is currently valid (as of September 2025).
Legal changes or technical developments may make adjustments necessary. The current version is always available on our website.