Privacy Policy

The protection of your data is important to us. Here you can find out which data we process, for what purpose and what rights you have.

This is a translation for convenience; the German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR; German: DSGVO) is:

PersoFlex GmbH
Angelburger Straße 18
24937 Flensburg
Represented by: Marcel Minich
Phone: 0172 8197074

Email for data protection requests: info@perso-flex.com

2. Hosting

This website is operated on a server in Germany. Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen; server location Falkenstein (Saxony). A data processing agreement under Art. 28 GDPR has been concluded with the provider. Your data is not transferred to countries outside the European Union.

3. Visiting the website and IP addresses

Our web server does not store access logs (log files) containing IP addresses.

When you visit the website, your browser transmits technical data to the server, including your IP address. Without the IP address, the pages cannot be delivered to your device. We also use the IP address to protect against spam and abuse by limiting the number of requests per address (rate limiting). For this purpose, the IP address is processed only briefly in the server’s working memory and only as a hash value with a secret key (keyed hash). It is not stored permanently.

The legal basis is our legitimate interest in the technical provision and secure operation of the website (Art. 6(1)(f) GDPR).

In addition, we count page views anonymously and aggregated per day: which page was viewed and from which source the visit came (e.g. search engine, ChatGPT or social network, determined from the referrer or the “utm_source” parameter). In order to count visitors, visits as well as entry and exit pages, we create a checksum (hash) from the IP address and browser identifier (user agent) together with a random value that is newly generated every day. This checksum is kept only in the server’s working memory, at most until the end of the day, and is never stored; the random value is discarded every day. Only aggregated figures are stored (e.g. “12 visitors on 02.10.”). No cookies are set and no information is stored on or read from your device; it is not possible to identify individual persons. The legal basis is our legitimate interest in data-minimising audience measurement (Art. 6(1)(f) GDPR).

4. No cookies, no tracking

This website does not use cookies or tracking pixels. No external fonts, scripts or content delivery networks (CDN) are loaded; the fonts are hosted on our own server. Therefore, no data is transmitted to third parties when you visit the website.

5. Application questionnaire

5.1 Which data we collect

When you fill out the questionnaire, we process the following information:

  • type of ID document and country (passport or ID card of an EU country, Ukrainian passport, statement that you are a family member of an EU citizen, or German residence title that permits employment),
  • whether you are already in Germany,
  • date of birth,
  • name,
  • phone number,
  • email address,
  • preferred contact method (e.g. phone or messenger),
  • desired job,
  • whether you need accommodation,
  • origin of the request (campaign parameters such as UTM parameters and referring page),
  • the page of our website from which you submitted the questionnaire (e.g. a city page); it is stored as the entry page (landing page),
  • date and time of your consent.

We process this data to assess your suitability for employment, to contact you and to offer you suitable jobs. The legal bases are:

  • Art. 6(1)(b) GDPR (taking pre-contractual steps at your request),
  • Art. 6(1)(a) GDPR (your consent, which you give when submitting the questionnaire).

We use the date of birth to check that you are of legal age and to plan suitable assignments (occupational safety requirements for the respective job). It is not used to reject applications on the grounds of age.

We use the information on the origin of the request and the entry page to find out through which channels applicants find us.

5.3 If the requirements are not met

In the first step of the questionnaire, we check whether you are allowed to work in Germany and are at least 18 years old. If there is no right to work in Germany or you are younger than 18, we do not store any personal data. In that case, we only record an anonymous counter with the date, reason and campaign source. It is not possible to identify you.

5.4 Spam protection

To protect against automated requests (spam), your browser solves a small computational task (proof of work) when you submit the form. This takes place entirely in your browser and on our server; no third-party provider is involved. The legal basis is our legitimate interest in secure operation under Art. 6(1)(f) GDPR.

5.5 Contact and application via WhatsApp

You can also write to us via WhatsApp. The WhatsApp service is provided by Meta Platforms Ireland Ltd., Merrie Square, Dublin 2, Ireland. We use the WhatsApp Business Platform (Cloud API); Meta processes the messages as a processor. In this context, data may be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR). WhatsApp’s own privacy policy also applies to the use of WhatsApp itself.

In doing so, we process your WhatsApp phone number, your profile name, the contents of the chat and – if you apply via the chat – the same information as in the application questionnaire (document/country, stay in Germany, date of birth, name, job, need for accommodation). The application is only passed on to our recruiters after your express consent in the chat. The legal bases are taking pre-contractual steps at your request (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR).

The chats are stored in encrypted form on our server. If you do not meet the requirements or do not consent to the transfer, we delete the chat immediately. We delete chats without an application 180 days after the last message, and chats with an application together with the application. By sending the message “löschen” (delete), you can delete the chat and application yourself at any time; with “stop”, you end automatic replies.

5.6 Chat on this website

You can ask questions and apply via the chat window on this website. In doing so, we process the contents of the chat and – if you apply – the same information as in the application questionnaire, as well as your phone number. So that the chat is kept when you change pages, a random chat identifier is stored in your browser (local storage); it is technically necessary for the chat you are using (§ 25(2) No. 2 TDDDG) and does not contain any personal data. The application is only passed on to our recruiters after your express consent in the chat. The legal bases are Art. 6(1)(b) and (a) GDPR. The same rules as for the WhatsApp chat (section 5.5) apply to storage, deletion and rejections. We delete stored chats without an application 180 days after the last message.

5.7 Automatic answers to questions

Free-text questions in the WhatsApp chat and in the website chat are answered by an automatic assistant (AI) based on the content of this website. For this purpose, the text of your question and the most recent messages of the chat (without phone number) are transmitted to Mistral AI SAS, 15 rue des Halles, 75001 Paris, France, and processed there in the EU. Mistral AI acts as a processor and does not use the data for training. If the assistant cannot answer a question reliably, a member of staff takes over. No automated decision is made about your application (Art. 22 GDPR); the selection is made exclusively by our recruiters. The legal basis is Art. 6(1)(b) GDPR.

Confirmation of the application via WhatsApp

After submitting the form, you can voluntarily confirm your phone number via WhatsApp so that we can be sure it belongs to you: you send a prepared message with an application code to our WhatsApp number and receive a 6-digit confirmation code there, which you enter on the website. In doing so, WhatsApp (Meta Platforms Ireland Ltd.) processes your phone number and the message. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and our legitimate interest in preventing false or abusive applications (Art. 6(1)(f) GDPR). If the confirmed WhatsApp number differs from the number entered, we use the confirmed number.

Uploading your ID document

Later in the application process, we may ask you to upload a photo of your passport, ID card or residence title via a personal link that is valid for 7 days. The sole purpose is to check whether you are allowed to work in Germany before an employment contract is concluded. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and your consent under Art. 6(1)(a) GDPR, which you give when uploading and which you can withdraw at any time; for residence titles, there is also a legal obligation to check them and to keep a copy (§ 4a(5) AufenthG, Art. 6(1)(c) GDPR). You may black out information that is not necessary for the check (e.g. the access number on the ID card).

The files are stored in encrypted form (AES-256) on our server in Germany and are viewed only by authorised staff; every access is logged. They are not processed by artificial intelligence or automated text recognition and are not passed on to third parties. The files are automatically deleted no later than 30 days after uploading, and immediately if your application is rejected or deleted. If an employment contract is concluded, the employer’s statutory retention obligations apply.

6. Recipients

Your data is processed exclusively by authorised employees of PersoFlex GmbH.

Technical service providers that handle the operation and hosting of the website process data only on our behalf on the basis of a data processing agreement (Art. 28 GDPR). The host Hetzner is named in the “Hosting” section. If you contact us via WhatsApp, Meta (WhatsApp) and, for automatic answers, Mistral AI are additional processors (see 5.5 to 5.7).

Your data is not passed on to client companies or other third parties. Should this become necessary for a specific placement, we will obtain your separate consent beforehand.

7. Storage and security

Your information is stored in encrypted form (AES-256) on our server in Germany. Only authorised recruiters have access, and they must log in with two-factor authentication.

8. Storage period

Your data is automatically deleted 180 days after the questionnaire is submitted. This does not apply if

  • an employment relationship with us is established – in which case the statutory retention periods for employees apply – or
  • you have expressly consented to longer storage.

9. Your rights

Under the GDPR, you have the following rights:

  • Access to the data stored about you (Art. 15),
  • Rectification of incorrect data (Art. 16),
  • Erasure of your data (Art. 17),
  • Restriction of processing (Art. 18),
  • Data portability (Art. 20),
  • Objection to processing (Art. 21),
  • Withdrawal of consent given, with effect for the future (Art. 7(3)); the lawfulness of processing carried out before the withdrawal remains unaffected,
  • Complaint to a data protection supervisory authority (Art. 77), in particular in the member state of your residence, your place of work or the place of the alleged infringement.

To exercise your rights, an informal message to the following address is sufficient: info@perso-flex.com

10. Obligation to provide data

Providing your data is voluntary. However, without your name and contact details, we cannot reach you or offer you a job.

11. Language versions

This privacy policy is also available in English and Russian. Only the German version is legally binding.