careerloft Privacy Policy

Dear careerloft user,

careerloft is the career network for college students and graduates. We believe that every student and graduate deserves to have the best possible job and employer. That is why we provide guidance and support throughout your studies and show you how to start working for top companies during your studies and after you graduate. It doesn’t matter what you study or what sector you’d like to work in: We’ll connect you!

Protecting your data is incredibly important to us. All web activities are carried out in accordance with the applicable legislation on protecting personal data and data security, in particular, the GDPR (EU General Data Protection Regulation). That’s why we have compiled a list of answers to all frequently asked questions about data protection. If you’d like to know more about data protection at careerloft, please email us at: We’re happy to help.

1. Who is responsible for protecting my data?

TERRITORY CTR GmbH (formerly operating as Medienfabrik Gütersloh GmbH), EMBRACE Department, Carl-Bertelsmann-Straße 33, 33311 Gütersloh, Germany, is the responsible party as defined by data protection law, and the website provider is careerloft. This Privacy Policy provides you with information on how we handle the information collected during your visit to the careerloft website or your use of careerloft.

2. What data do you collect, and how long is it processed?

In general, you are able to use our website (on a limited basis) without registering with careerloft. In this case, we only collect and store the log files of your visit as specified in Section 2.5 for the length of time indicated there. For more information on the use of cookies and the analysis of surfing behavior, please see Sections 7 and 8 of this Privacy Policy.

Personal data is generally only collected if you provide it to us by registering, filling out contact forms, sending emails or as part of enquiries. We then record the information we received when you made contact with us. This includes, in particular, names and contact details, the date and the reason you contacted us. Personal data you enter is used to provide you with the information you request, or for the purpose of contact by careerloft or our partners in the framework of the Terms of Use that you accepted (legal basis: Art. 6 (1) 1 b) GDPR) or for other purposes for which you have granted your consent (legal basis: Art. 6 (1) 1 a) GDPR) and which are described in this Privacy Policy or were described when you granted your consent separately. For instance, in order to validate members’ qualifications for the Online Scholarship, we will request, store and process additional data, as needed, and forward this data to our partners.

If you cease to be a member of careerloft, we will retain the personal data we have collected about you for three years for administrative purposes (legal basis: Art. 6 (1) 1 f) GDPR) and, following the end of legally mandated retention periods, will delete the data during the next monthly cleanup (legal basis: Art. 6 (1) 1 c) GDPR, within ten years at the latest, calculated from the end of the year in which data was last saved), insofar as further processing of the data is not required for the assertion, exercise or defense of legal claims (legal basis: Art. 17 (3) e) GDPR).

Until the data is deleted, it is otherwise used only to respond to requests for information as provided for by law and for administrative purposes, such as for ensuring that financial support available to every user only once is not claimed twice following new registration. Processing of the stored data for any other use is restricted until the data has been deleted.

Posts and comments that were written by users on the careerloft website during their period of use shall not be deleted. The sender’s picture and name shall be anonymized, however.

2.1 Information required when registering

In order for you to be able to register with careerloft, we need you to provide the following information:

  • First and last name
  • Email address

In order for you to use and access careerloft, we also need the following information:

  • Student status
  • Field of study
  • Major
  • Area of specialization
  • Course of study (duration)
  • College/university
  • Expected degree

2.2 Optional information

In addition to the information required, you have the option to enter further information in your profile. For example, you can specify where you live, your grades or your job search preferences (e.g., companies, job titles, cities/regions). However, this information is not required for you to register with or use careerloft.

For the profile service that careerloft provides to its users at no charge, data is taken by our team from a resume uploaded to careerloft in PDF or Word format, for example, and transferred to the careerloft website in a structured form. In order to be able to use these features, users must send careerloft a document with the relevant information.

2.3 Overview

We’ve compiled a chart to give you another overview of what data we collect, use and store and whether such collection, use and storage involves required or optional information (including special cases).

Compulsory profile (members):

  • First name, surname, email address, (expected) degree, (anticipated) year of graduation, college/university

Optional profile:

  • Age (in years), gender, city, street address, zip code, college/university grades, full date of birth, job search preferences (e.g. companies, job titles, cities/regions, field, degree), profile photo (only visible to users)

Compulsory profile (scholarship holders):

  • First name, surname, email address, age (in years), (expected) degree, (anticipated) year of graduation, college/university, college/university grades

Additional contact details, for example, telephone (and/or cell phone) numbers, may be required in order to access individual support services (to schedule appointments, for instance). The phone number will then be used for this purpose only.

2.4 Social media channels

You can also register with careerloft using your Facebook, XING or LinkedIn profile. The data privacy policies of these providers apply in each instance. The following is a list of addresses for these providers, including URLs with their data protection information:

  • a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;; further information on data collection:,
  • b) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE;
  • c) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA;

The US providers Facebook and LinkedIn participate in the EU-US Privacy Shield framework: The legal basis for registration via your chosen social media platform is Art. 6 (1) 1 b) GDPR.

In this case, the following data is transmitted by Facebook, XING or LinkedIn:

  • First and last name
  • Email address
  • Gender
  • Profile picture

In return, Facebook, XING or LinkedIn will be notified that you have registered as a careerloft user. Additional data will not be sent to Facebook, XING or LinkedIn by careerloft. You can, of course, cancel the linking of your accounts at a later date. In order to do so, simply withdraw the corresponding access authorizations for “instant personalization” from the provider (Facebook, XING, LinkedIn).

For more information on this and logging in with other websites, please visit Facebook at

or XING at:

or LinkedIn at:

Using social media channels, you also have the option of sharing editorial articles.

2.5 Log files

Personal information is information that can be used to help identify a person, such as a name and email address, or surfing behavior on the Internet. In the event that you visit our website merely for informational purposes, and not for registration, we do not collect any personal data except the data transmitted by your browser to enable your visit to the website (log files, legal basis: 6 (1) 1 f) GDPR). Log files are a technical necessity for us to be able to send the website you requested to your computer to be displayed. They are deleted within seven (7) days of your visit to the website. Log files contain the following data:

  • IP address
  • Date and time of the visit
  • Time zone difference with respect to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Quantity of data transferred
  • Website from which the request originated
  • Browser
  • Operating system and its user interface
  • Language and version of browser software

The log files are also used for statistical analyses, to improve the website and to ensure its stability and security (legal basis: Art. 6 (1) 1 f) GDPR). By using the log files, for example, we can detect possible errors, such as incorrect links. When you use the website, the IP address of the computer you use is also recorded. Under certain circumstances, it may be possible to identify website users via their IP address. However, we do not analyze IP addresses recorded in log files for this purpose. The IP addresses are analyzed solely from a statistical point of view and in anonymized form.

3. Which of your data is visible to other registered users and partners?

3.1 Registered users

In the default setting, your data can be viewed by other registered users so that other members can see the progress of your studies and your interests and be able to contact you. You can change this setting in your profile.

If a user comments on a post on careerloft, their picture (profile picture) and name are visible to all users in connection with this comment. If the user deletes their careerloft account, their posts and comments are not deleted, but the picture and name of the poster is anonymized.

3.2 Partners

You can view careerloft’s current partners here. Affiliated companies of the partners only receive their own access to careerloft if they themselves register as partner companies.

As part of a graduated model, partners can view your profile and user data. If the use of actual, non-anonymized and unencrypted data is not necessary during the search for a candidate (not needed to identify its source, for instance, in the course of analyzing and selecting data according to the selection criteria provided by the partner), then personal data is processed in such a way that the data cannot be correlated with a specific data subject without drawing on additional information. This additional information is stored separately and subject to appropriate technical and organizational measures for ensuring data security. Non-anonymized, unencrypted data must be processed, for example, when a partner makes a job-related offer directly to specific users.

3.3 Online scholarship partners

When requesting financial support as part of our scholarship program or participating in a career event, additional data may be requested in order to be able to perform the requested service. This may include address details, for example, in order to send support by mail. This additional data is only shared with the online scholarship partner (and, where necessary, a logistics service provider) with your express consent, which must be granted separately, and only for the purposes of providing the respective service. If users subsequently enter information on a cooperation partner’s website, the respective company’s Terms of Use and Privacy Policy apply from that point onwards.

4. What is my data used for?

4.1 Use of and access to careerloft

We process the data you provide when registering and data provided through any further use of careerloft within the framework of the Terms of Use, which you must accept separately when registering. When you participate in careerloft, we subsequently use your data without collecting additional, separate consent for the following purposes:

Legal basis Art. 6 (1) 1 b) GDPR:

  • Logging in/registering with careerloft, and for the confirmation email sent after registering and, where necessary, a follow-up email for verification purposes;
  • Creating/managing your careerloft profile;
  • Communications between you and careerloft within the framework of the Terms of Use via email, for example, information on careerloft services and changes to them, current events, jobs and online scholarship services; if you have registered with careerloft using your social media profile (Sec. 2.4), notifications/posts will also be sent to you via your profile on the respective social media site;
  • Use of your profile data and your user behavior on the careerloft website for sourcing by careerloft and its partners, for the purpose of contacting you;
  • Direct contact by our partners

Legal basis Art. 6 (1) 1 f) GDPR:

  • Creating usage profiles and data analyses to appropriately tailor our online content using aggregated data, provided you do not object to this. Usage profiles for this purpose are not consolidated with your personal data.

In your profile, you can select (and change or cancel at any time) the type of notifications you wish to receive. With regard to networking, for example, you can select whether you want to receive information from careerloft only and/or from partners only. Regardless of those settings, however, careerloft may contact you for administrative purposes or to convey general information about its services and changes in services, since that is part of the purpose of being a member of careerloft (legal basis: Art. 6 (1) 1 b) GDPR).

With your express consent, given separately in each instance (in that case legal basis Art. 6 (1) 1 a) GDPR), your data may further be used for the following purposes and, where necessary, sent to partners or other third parties as specified by you:

  • Requesting support services from our online scholarship partners as part of our scholarship program
  • Participation in career events related to your future profession and organized by the companies on careerloft
  • Participation in other events organized by the companies on careerloft
  • Notifications/ads sent to you by careerloft about services offered by these third-party providers

Additional information on the collection and use of your data is provided directly each time you enter data, through notes provided on the respective input screen and as part of the respective declaration of consent.

4.2 Use of service providers

Your data (such as salutation, name, address or email address) are shared with and used by service providers hired by us (processors) in accordance with Art. 28 GDPR, whereby the legal bases specified in this Privacy Policy shall also apply to each of our service providers. Our service providers are only permitted to process or use your data for the purpose for which such data was shared with them, if necessary. If data is forwarded to third-party service providers, we have taken certain technical and organizational measures to ensure compliance with the requirements of data protection.

4.3 Security agencies

Please note that in particular cases, we are authorized, upon receiving orders from the relevant authority, to provide information about data to the extent this is necessary for purposes of law enforcement, for the prevention of threats by police agencies of the Bundesländer, for the fulfillment of the statutory duties of the authorities responsible for the protection of the constitution in the German Federal Government and the Bundesländer, of the German Federal Intelligence Agency (Bundesnachrichtendienst) or of the German Federal Armed Forces Counterintelligence Office (Militärischer Abschirmdienst), or for the assertion of intellectual property rights (legal basis: Art. 6 (1) 1 c) GDPR).

5. What security measures have been taken?

We implement the measures required according to Art. 32 GDPR to ensure a level of protection appropriate to the risk for the user data. We are involved in the Information Security Management System of Gruner + Jahr GmbH & Co KG and are subject to regular audits by the auditors of Bertelsmann SE & Co. KGaA.

6. Right of objection

You can object at any time with future effect to the processing of your personal data for advertising purposes (legal basis: Art. 6 (1) 1 f) GDPR). This applies as well to an evaluation of certain characteristics of the data, as in the case of a data analysis. You can revoke your consent to the use of personal data for advertising purposes can be informally via a link in the newsletter, for example, or by reaching us through our contact data provided on the website’s legal notice.

In addition, you have the right to object on grounds relating to your particular situation to the processing of your personal data for other purposes when such use results from a weighing of interests (legal basis: Art. 6 (1) 1 f) GDPR). In particular, this may be the case when the processing is not required within the framework of the careerloft Terms of Use. When you exercise your right to object to the processing of personal data, we ask that you specify the reasons why we should not process your personal data in the manner in question. After you provide the reasons for your objection, we will examine the circumstances and will either stop processing the data, adjust how we process the data or indicate our compelling, legitimate grounds for continuing to process the data.

7. Does careerloft store cookies on my computer?

We use cookies on certain pages in order to enhance the appearance of our website when you visit it and to enable the use of certain functions. Cookies are small text files that are stored on your computer. Some of the cookies we use are then deleted once your browser session has ended, i.e., when you close your browser (session cookies, legal basis: Art. 6 (1) 1 f) GDPR).

Other cookies remain on your computer and enable us to recognize your browser the next time you visit our website (persistent cookies, legal basis: Art. 6 (1) 1 f) GDPR). Persistent cookies are only used as long as is necessary for this purpose; they have a life span of a maximum of two (2) years. You can delete the cookies from the hard disk of your computer at any time using the privacy settings of your browser. In this case, the features and user-friendliness of the online content may be restricted.

Cookies that are not technically required for the performance of our service, such as third-party cookies, concerning which information is provided separately, are only used with your express agreement, which you may revoke at any time (legal basis: Art. 6 (1) 1 a) GDPR). By continuing to use the website, you consent to the use of cookies under the terms of this Privacy Policy. You can convey your agreement to us by adjusting your browser’s settings so that you are informed when a website wants to use cookies and they are only accepted when you provide your express confirmation. You may also adjust your settings such that the acceptance of cookies is prohibited, either in certain cases or in general. You can configure your browser settings according to your preferences and reject third-party cookies, for instance, or any and all cookies. Please note, however, that you may then be unable to use all the features of the website.

8. Use of Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA (“Google”). Google Analytics utilizes “cookies,” small text files that are stored on your computer and allow for analysis of your website use (more details at Section 7 of this Privacy Policy). The information generated by the cookie about your use of the website is typically transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, your IP address will first be shortened by Google within European Union member states or other member states of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and be shortened there. Google will use this information on instructions from the operator of this website to analyze your usage of the website, to compile reports on website activity and to provide other services relating to website activity and Internet usage for the operator of this website.

The IP address transmitted by your browser for the purposes of Google Analytics will not be consolidated with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to make use of the full functionality of this website.

You can also prevent Google from recording the data in the cookie related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link:

This website uses Google Analytics with the “_anonymizeIp()” extension. This allows IP addresses to be shortened before they are processed further, therefore preventing direct personal references. To the extent that the data collected about you contains any personal reference, that reference is therefore promptly eliminated and the personal data thus immediately deleted.

We use Google Analytics so that we can analyze the use of our website and make routine improvements. With the statistics available from Google Analytics, we can improve our content and make it more interesting to you as a user. For the exceptional cases in which personal data is transferred to the United States, Google participates in the EU-US Privacy Shield framework, The legal basis for the use of Google Analytics is Art. 6 (1) 1 f) GDPR.

Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use:, overview of data protection for Google Analytics:, Privacy Policy:

9. Are social networks integrated into this website (social plug-ins)?

No, social plug-ins from social networks are not used on our website, because we have no influence over the extent of data collection by social networks using a plug-in, and we want to ensure the highest possible level of data protection and data security on our website. Section 2.4 applies when registering via social media channels.

10. Does this Privacy Policy also apply to linked websites?

This Privacy Policy applies to the website The pages of this website may contain links to other providers, such as careerloft partner companies, to whom this Privacy Policy is not applicable. When it is not clear that these are external links, we will bring this to your attention. If you leave this website, we recommend that you first read the data protection guidelines of each website carefully.

11. What rights do I have, and how can I exercise them?

You can request information from us concerning your personal data, and you have the right to have erroneous data corrected, to have the processing of your data restricted and to have data deleted, provided careerloft is not legally required to retain the data for a further period of time. The right to have data deleted does not exist if further processing of the data is required for the assertion, exercise or defense of legal claims or rights, as in the case where a user objects to the use of personal data for advertising purposes, and careerloft complies with that preference. With regard to personal data that you have provided to us in an input screen or contact form, in the framework of providing consent to use your data, or to allow us to fulfill a contract between us, you have a right to data portability in a common, structured and machine-readable format. Concerning your right to object to the use of your data, please see Section 6 of this Privacy Policy.

As the operator of this website, TERRITORY CTR GmbH, is a subsidiary of Gruner + Jahr GmbH & Co. KG / Bertelsmann SE & Co. KGaA, please contact the Group’s data protection officers for questions regarding the processing of your personal data:

Bertelsmann SE & Co. KGaA / Gruner + Jahr GmbH & Co. KG

Corporate Data Protection

Carl-Bertelsmann-Str. 270

33311 Gütersloh, Germany


12. Can I request the content of any consent I have provided, and can I revoke this consent at any time?

We have recorded and stored all consent agreements you have agreed to when using our website (for example, when registering with careerloft). You may request the content of these consent agreements from us at any time. To do so, please get in touch with the contact persons for data protection specified above, e.g., via email, or use our contact data as published on the website.

To the extent that the processing of your data is based on your consent (legal basis: Art. 6 (1) 1 a) GDPR), you have the right to revoke your consent at any time without affecting the legality of the processing that occurred up until the revocation. Permissions provided for by law remain unaffected by a revocation of consent.

13. Further information pursuant to GDPR

There is no intention at careerloft to transmit your data to a recipient in a third country (not a member of the EU or the EEA) or to an international organization. Regarding the possibility that third-party providers in the United States will have access to your data, please see Sections 2.4 and 8 of this Privacy Policy.

You have the right to appeal to a data protection authority, such as the agency with supervisory authority over our work, the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW), Kavalleriestr. 2–4, 40213 Düsseldorf,

14. Can changes be made to this Privacy Policy?

We will always update this Privacy Policy in order to adjust it to any changes with respect to both website content and the law. Registered users will be informed of changes in a timely manner.

Privacy Policy last updated: May 2018