1. Controller
Martin Schmied Drorygasse 8 1030 Vienna Austria
Email: info@bewerbradar.de WhatsApp: +66956685329
2. Scope
This policy applies to BewerbRadar Copilot at copilot.bewerbradar.de. Application documents may contain sensitive personal information. Only upload data that is necessary for your application and that you are legally permitted to process.
3. Website access and technical operation
When the website is accessed, IP address, time, URL, referrer, browser, operating system, device information and status codes may be processed. This supports delivery, stability, troubleshooting and abuse prevention.
The legal basis is our legitimate interest in a secure and functional service under Article 6(1)(f) GDPR. Security and access logs are kept only as long as needed for operation and abuse prevention. Relevant data may be retained longer for a specific security incident.
4. Account and sign-in
We process email address, name, profile image, internal user identifier, authentication method and session information. Google sign-in supplies profile data released by the user. Email sign-in uses the email address and a time-limited token.
Processing is required to operate the account under Article 6(1)(b) GDPR. Essential authentication cookies secure the session.
5. Resumes, application data and editor
We store resumes, sections, contact details, work history, education, skills, settings and other account content for editing, storage, preview and export.
Uploaded PDF and image files are processed in memory for import and are not permanently stored as original files. Extracted content is stored as resume data after confirmation.
The legal basis is Article 6(1)(b) GDPR. Data generally remains until the relevant content or account is deleted. Deletion requests may be sent to info@bewerbradar.de. Statutory retention duties remain unaffected.
6. AI features
For imports, writing assistance, cover letters, job matching, translation, mock interviews and other AI features, required content is sent to the selected AI provider. Server-funded features use Google Gemini. A personal API key can select providers such as Google Gemini, OpenAI or Anthropic.
Depending on the feature, resume text, job descriptions, instructions, interview content or images may be processed. API keys are stored in the browser and transmitted through our server for the request. They are not stored in our database.
The legal basis is Article 6(1)(b) GDPR. AI output is assistance only. BewerbRadar does not make decisions producing legal or similarly significant effects about users.
7. Analysis history and mock interviews
Job analyses, grammar checks, chats, interview questions, answers, scores and reports may be stored so results can be reopened. They remain until the related content or account is deleted.
8. Public share links
Eligible users can share resumes through a public link and may add password protection. Anyone with the link and, if applicable, the password can access the data. Views may be counted. The user controls activation, content and recipients and can disable sharing.
9. Subscriptions and Stripe
Stripe processes payments and subscriptions. Contact, payment, transaction, invoice, customer and subscription data may be sent to Stripe. BewerbRadar does not store full card details.
Legal bases include Article 6(1)(b), (c) and (f) GDPR. Tax and billing records may be retained for up to seven years or longer while proceedings remain pending.
10. Email, phone and WhatsApp contact
When you contact us, we process contact details and message content under Article 6(1)(b) or (f) GDPR.
WhatsApp is also subject to its provider privacy terms. Do not send resumes, API keys, payment details or other highly confidential information through WhatsApp. Prefer email for such matters.
11. Cookies, browser storage and analytics
Essential cookies and browser storage support sign-in, security, language, display, settings and initiated actions. Personal API keys and provider settings remain in the browser but are transmitted to our server when an AI request is made.
Google Tag Manager manages technical tags. Optional usage analytics is activated only after consent. Advertising storage and personalised advertising remain disabled. Consent can be changed through Cookie Settings. Optional analytics relies on Article 6(1)(a) GDPR.
12. Recipients and processors
Depending on the feature, data may be processed by the following recipients:
- Hostinger for VPS hosting, infrastructure and email delivery
- Google for sign-in, Gemini AI, Google Tag Manager and consented analytics
- Stripe for payments, subscriptions, invoices and fraud prevention
- OpenAI or Anthropic when selected with a personal API key
- Authorities, courts or advisers where required by law or needed for legal claims
13. International transfers
Providers or subprocessors may process data outside the EEA, particularly in the United States. Where required, transfers rely on an adequacy decision, the EU-US Data Privacy Framework, EU Standard Contractual Clauses or another permitted safeguard.
14. Retention and deletion
We retain data only as long as required for the account, contract, functions, security and legal obligations. Account content generally remains until deleted by the user or a deletion request is made. Data may temporarily remain in backups until overwritten in the normal cycle.
A deletion request does not automatically cancel a Stripe subscription. The subscription must also be cancelled through the billing portal. Data subject to statutory retention is restricted until the period expires.
15. Your rights
Subject to the GDPR, you have rights including access, rectification, erasure, restriction, portability and objection. Consent may be withdrawn at any time for the future. Contact info@bewerbradar.de.
You may complain to a data protection authority. The Austrian authority is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.
16. Security and changes
We use technical and organisational safeguards. No online service can guarantee absolute security. This policy will be updated when functions, providers or applicable law materially change.