Datenschutz

1. Controller

The controller responsible for data processing on this platform is the employer operating this JobLink instance. Contact details are available in the imprint.

2. Data we collect

• Account data: name, email, role, department, location
• Referral data: candidate name, email, phone, CV (if uploaded), referral status
• Gamification data: points, shop orders, badges
• Usage data: audit logs, anonymized click tracking

3. Purpose and legal basis

We process your data for the employee referral program based on your employment contract (Art. 6(1)(b) GDPR) and our legitimate interest in talent acquisition (Art. 6(1)(f) GDPR). Candidate data is processed based on consent (Art. 6(1)(a) GDPR).

4. Data retention

• Rejected candidates: 6 months after rejection
• Hired candidates: 24 months after hiring
• Account data: until account deletion
• Audit logs: 12 months

5. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21) under GDPR. You can exercise these rights via your profile settings or by contacting the data protection officer.

6. Data export & deletion

You can export all your data or request account deletion from your profile page. Data export provides a JSON file with all personal data. Account deletion anonymizes your data and deactivates your account.

7. Hosting & technical measures

This platform is hosted on Microsoft Azure in the EU (West Europe region). All data is encrypted in transit (TLS) and at rest. Access is protected by JWT-based authentication and role-based access control.