Dear careerloft user,
careerloft is the career network for college students and graduates. We believe that every student and graduate deserves to have the best possible job and employer. That is why we provide guidance and support throughout your studies and show you how to start working for top companies during your studies and after you graduate. It doesn’t matter what you study or what sector you’d like to work in: We’ll connect you!
Protecting your data is incredibly important to us. All web activities are carried out in accordance with the applicable legislation on protecting personal data and data security, in particular, the GDPR (EU General Data Protection Regulation). That’s why we have compiled a list of answers to all frequently asked questions about data protection. If you’d like to know more about data protection at careerloft, please email us at: firstname.lastname@example.org. We’re happy to help.
1. Who is responsible for protecting my data?
2. What data do you collect, and how long is it processed?
If you cease to be a member of careerloft, we will retain the personal data we have collected about you for three years for administrative purposes (legal basis: Art. 6 (1) 1 f) GDPR) and, following the end of legally mandated retention periods, will delete the data during the next monthly cleanup (legal basis: Art. 6 (1) 1 c) GDPR, within ten years at the latest, calculated from the end of the year in which data was last saved), insofar as further processing of the data is not required for the assertion, exercise or defense of legal claims (legal basis: Art. 17 (3) e) GDPR).
Until the data is deleted, it is otherwise used only to respond to requests for information as provided for by law and for administrative purposes, such as for ensuring that financial support available to every user only once is not claimed twice following new registration. Processing of the stored data for any other use is restricted until the data has been deleted.
Posts and comments that were written by users on the careerloft website during their period of use shall not be deleted. The sender’s picture and name shall be anonymized, however.
2.1 Information required when registering
In order for you to be able to register with careerloft, we need you to provide the following information:
In order for you to use and access careerloft, we also need the following information:
2.2 Optional information
In addition to the information required, you have the option to enter further information in your profile. For example, you can specify where you live, your grades or your job search preferences (e.g., companies, job titles, cities/regions). However, this information is not required for you to register with or use careerloft.
For the profile service that careerloft provides to its users at no charge, data is taken by our team from a resume uploaded to careerloft in PDF or Word format, for example, and transferred to the careerloft website in a structured form. In order to be able to use these features, users must send careerloft a document with the relevant information.
We’ve compiled a chart to give you another overview of what data we collect, use and store and whether such collection, use and storage involves required or optional information (including special cases).
Compulsory profile (members):
Compulsory profile (scholarship holders):
Additional contact details, for example, telephone (and/or cell phone) numbers, may be required in order to access individual support services (to schedule appointments, for instance). The phone number will then be used for this purpose only.
2.4 Social media channels
You can also register with careerloft using your Facebook, XING or LinkedIn profile. The data privacy policies of these providers apply in each instance. The following is a list of addresses for these providers, including URLs with their data protection information:
The US providers Facebook and LinkedIn participate in the EU-US Privacy Shield framework: https://www.privacyshield.gov/EU-US-Framework. The legal basis for registration via your chosen social media platform is Art. 6 (1) 1 b) GDPR.
In this case, the following data is transmitted by Facebook, XING or LinkedIn:
In return, Facebook, XING or LinkedIn will be notified that you have registered as a careerloft user. Additional data will not be sent to Facebook, XING or LinkedIn by careerloft. You can, of course, cancel the linking of your accounts at a later date. In order to do so, simply withdraw the corresponding access authorizations for “instant personalization” from the provider (Facebook, XING, LinkedIn).
For more information on this and logging in with other websites, please visit Facebook at https://www.facebook.com/full_data_use_policy#loggingin
or XING at: https://dev.xing.com/plugins/login_with
Using social media channels, you also have the option of sharing editorial articles.
2.5 Log files
Personal information is information that can be used to help identify a person, such as a name and email address, or surfing behavior on the Internet. In the event that you visit our website merely for informational purposes, and not for registration, we do not collect any personal data except the data transmitted by your browser to enable your visit to the website (log files, legal basis: 6 (1) 1 f) GDPR). Log files are a technical necessity for us to be able to send the website you requested to your computer to be displayed. They are deleted within seven (7) days of your visit to the website. Log files contain the following data:
The log files are also used for statistical analyses, to improve the website and to ensure its stability and security (legal basis: Art. 6 (1) 1 f) GDPR). By using the log files, for example, we can detect possible errors, such as incorrect links. When you use the website, the IP address of the computer you use is also recorded. Under certain circumstances, it may be possible to identify website users via their IP address. However, we do not analyze IP addresses recorded in log files for this purpose. The IP addresses are analyzed solely from a statistical point of view and in anonymized form.
3. Which of your data is visible to other registered users and partners?
3.1 Registered users
In the default setting, your data can be viewed by other registered users so that other members can see the progress of your studies and your interests and be able to contact you. You can change this setting in your profile.
If a user comments on a post on careerloft, their picture (profile picture) and name are visible to all users in connection with this comment. If the user deletes their careerloft account, their posts and comments are not deleted, but the picture and name of the poster is anonymized.
You can view careerloft’s current partners here. Affiliated companies of the partners only receive their own access to careerloft if they themselves register as partner companies.
As part of a graduated model, partners can view your profile and user data. If the use of actual, non-anonymized and unencrypted data is not necessary during the search for a candidate (not needed to identify its source, for instance, in the course of analyzing and selecting data according to the selection criteria provided by the partner), then personal data is processed in such a way that the data cannot be correlated with a specific data subject without drawing on additional information. This additional information is stored separately and subject to appropriate technical and organizational measures for ensuring data security. Non-anonymized, unencrypted data must be processed, for example, when a partner makes a job-related offer directly to specific users.
3.3 Online scholarship partners
4. What is my data used for?
4.1 Use of and access to careerloft
Legal basis Art. 6 (1) 1 b) GDPR:
Legal basis Art. 6 (1) 1 f) GDPR:
In your profile, you can select (and change or cancel at any time) the type of notifications you wish to receive. With regard to networking, for example, you can select whether you want to receive information from careerloft only and/or from partners only. Regardless of those settings, however, careerloft may contact you for administrative purposes or to convey general information about its services and changes in services, since that is part of the purpose of being a member of careerloft (legal basis: Art. 6 (1) 1 b) GDPR).
With your express consent, given separately in each instance (in that case legal basis Art. 6 (1) 1 a) GDPR), your data may further be used for the following purposes and, where necessary, sent to partners or other third parties as specified by you:
Additional information on the collection and use of your data is provided directly each time you enter data, through notes provided on the respective input screen and as part of the respective declaration of consent.
4.2 Use of service providers
4.3 Security agencies
Please note that in particular cases, we are authorized, upon receiving orders from the relevant authority, to provide information about data to the extent this is necessary for purposes of law enforcement, for the prevention of threats by police agencies of the Bundesländer, for the fulfillment of the statutory duties of the authorities responsible for the protection of the constitution in the German Federal Government and the Bundesländer, of the German Federal Intelligence Agency (Bundesnachrichtendienst) or of the German Federal Armed Forces Counterintelligence Office (Militärischer Abschirmdienst), or for the assertion of intellectual property rights (legal basis: Art. 6 (1) 1 c) GDPR).
5. What security measures have been taken?
We implement the measures required according to Art. 32 GDPR to ensure a level of protection appropriate to the risk for the user data. We are involved in the Information Security Management System of Gruner + Jahr GmbH & Co KG and are subject to regular audits by the auditors of Bertelsmann SE & Co. KGaA.
6. Right of objection
You can object at any time with future effect to the processing of your personal data for advertising purposes (legal basis: Art. 6 (1) 1 f) GDPR). This applies as well to an evaluation of certain characteristics of the data, as in the case of a data analysis. You can revoke your consent to the use of personal data for advertising purposes can be informally via a link in the newsletter, for example, or by reaching us through our contact data provided on the website’s legal notice.
7. Does careerloft store cookies on my computer?
Other cookies remain on your computer and enable us to recognize your browser the next time you visit our website (persistent cookies, legal basis: Art. 6 (1) 1 f) GDPR). Persistent cookies are only used as long as is necessary for this purpose; they have a life span of a maximum of two (2) years. You can delete the cookies from the hard disk of your computer at any time using the privacy settings of your browser. In this case, the features and user-friendliness of the online content may be restricted.
8. Use of Google Analytics
The IP address transmitted by your browser for the purposes of Google Analytics will not be consolidated with other data from Google.
You can also prevent Google from recording the data in the cookie related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Google Analytics with the “_anonymizeIp()” extension. This allows IP addresses to be shortened before they are processed further, therefore preventing direct personal references. To the extent that the data collected about you contains any personal reference, that reference is therefore promptly eliminated and the personal data thus immediately deleted.
We use Google Analytics so that we can analyze the use of our website and make routine improvements. With the statistics available from Google Analytics, we can improve our content and make it more interesting to you as a user. For the exceptional cases in which personal data is transferred to the United States, Google participates in the EU-US Privacy Shield framework, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) 1 f) GDPR.
9. Are social networks integrated into this website (social plug-ins)?
No, social plug-ins from social networks are not used on our website, because we have no influence over the extent of data collection by social networks using a plug-in, and we want to ensure the highest possible level of data protection and data security on our website. Section 2.4 applies when registering via social media channels.
11. What rights do I have, and how can I exercise them?
As the operator of this website, TERRITORY CTR GmbH, is a subsidiary of Gruner + Jahr GmbH & Co. KG / Bertelsmann SE & Co. KGaA, please contact the Group’s data protection officers for questions regarding the processing of your personal data:
Bertelsmann SE & Co. KGaA / Gruner + Jahr GmbH & Co. KG
Corporate Data Protection
33311 Gütersloh, Germany
12. Can I request the content of any consent I have provided, and can I revoke this consent at any time?
We have recorded and stored all consent agreements you have agreed to when using our website (for example, when registering with careerloft). You may request the content of these consent agreements from us at any time. To do so, please get in touch with the contact persons for data protection specified above, e.g., via email, or use our contact data as published on the website.
To the extent that the processing of your data is based on your consent (legal basis: Art. 6 (1) 1 a) GDPR), you have the right to revoke your consent at any time without affecting the legality of the processing that occurred up until the revocation. Permissions provided for by law remain unaffected by a revocation of consent.
13. Further information pursuant to GDPR
You have the right to appeal to a data protection authority, such as the agency with supervisory authority over our work, the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf, email@example.com.