Privacy Policy

1Controller

The controller responsible for data processing on www.cityjobs.info is:

Leadsleader Marketing UG (haftungsbeschränkt)
Erkrather Str. 401, 40231 Düsseldorf, Germany
Managing directors: Christian Hollmann, Oliver Godolt
Commercial register: HRB 102233, Local Court Düsseldorf
Email: support@cityjobs.info

We have not appointed a data protection officer, as we are not legally required to do so. For all data protection questions, please contact support@cityjobs.info.

2Overview

Cityjobs.info is a free job board. Employers create an account and publish job ads. Job seekers can read all job ads without an account and apply directly with the employer. Cityjobs.info does not receive or store applications, CVs or other applicant documents.

We do not use analytics or advertising cookies, tracking pixels, Google Analytics or similar services. Fonts and icons are stored on our own server, so visiting our pages does not connect you to Google Fonts or other content delivery networks.

3Hosting and server log files

Our website, database and email system are hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on servers in Germany. We have concluded a data processing agreement with ALL-INKL.COM in accordance with Art. 28 GDPR.

When you visit our pages, the server automatically records technical information in log files: IP address, date and time, the page requested, the referring page, browser and operating system. This is necessary to deliver the website securely and to detect attacks. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in the secure operation of the website). The log files are stored by our hosting provider for a short period and then deleted.

4Employer account and job ads

To publish job ads, employers create an account. We process:

• Login data: email address and password.
• Company profile: company name, description, address, city, country, website, career page, logo, contact person and contact email.
• Job ads: title, description, location, salary, benefits, application link or application email, start date and expiry date.

The company profile and job ads are publicly visible on Cityjobs.info. The application link or email address you provide is shown to job seekers so they can apply to you directly. Legal basis: Art. 6(1)(b) GDPR (performance of the user agreement).

A technically necessary session cookie keeps you logged in. It is deleted when you close your browser. When you register, we store the time you accepted our terms of use and send you an email to activate your account.

Protection against login attacks. After failed login attempts we store the IP address and the email address used, together with the time, for 15 minutes to block automated attacks. Legal basis: Art. 6(1)(f) GDPR.

Sign in with Google. You can optionally create an account or log in with your Google account. You are then redirected to Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), which transmits your email address, name and profile picture to us. We only store your email address; name and profile picture are used for the current session only. We do not receive your Google password and have no ongoing access to your Google account. Legal basis: Art. 6(1)(b) GDPR. Google’s processing is governed by Google’s privacy policy.

We store account data as long as the account exists. Expired job ads remain in your account until you delete them. You can ask us to delete your account at any time; we will then delete your account and all your job ads.

Inactive accounts. If an account has not been used for more than 12 months (no sign-in, no profile change, no new job ad) and has no job ad online, we inform you by email and delete the account and its job ads after at least four weeks, unless you sign in before then. Legal basis: Art. 6(1)(c) and Art. 5(1)(e) GDPR (storage limitation).

Confirming your company and automatic checks. You may optionally confirm your company by entering an email address at your company domain; we send a one-time code to it. We store this address, the confirmed domain and the time of confirmation. In addition, we automatically check new job ads for missing or unusual information, for example whether a free email address is used and the company has not yet been confirmed. If the check finds open points, you receive an automatic notice by email. The decision to publish or remove a job ad is always made by a member of our team. The legal basis is our legitimate interest in a platform without fake jobs (Art. 6(1)(f) GDPR).

5Job seeker accounts

Job seekers can optionally create a free account to save jobs. We process your email address, your password (stored only as a secure hash), the jobs you save and the time of your last activity. Name, country, the kind of job you are looking for and your preferred language are optional. If you sign in with Google, Google transmits your email address, name and profile picture; we store the email address and, if available, your first name.

Cityjobs.info still does not receive applications or CVs; you apply directly with the employer. Legal basis for the account: Art. 6(1)(b) GDPR. You can delete your account at any time in your profile; this immediately deletes all saved jobs, your application list and your profile including the photo. Inactive accounts are handled as described for employer accounts.

Profile for employers (only with your consent). You may optionally create a profile with your first name, country, the job you are looking for, work experience, languages, a short introduction and a photo. Only if you explicitly agree in your profile and confirm that you are at least 18 years old, employers whose approved jobs you save can see this information and invite you to apply. Your email address, last name and phone number are never shown to employers. We store photos in reduced size and without embedded metadata (such as location); they are not publicly accessible. The legal basis is your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future by unticking the box in your profile. Under our terms, employers may use the information only to fill the vacancy concerned.

Invitations. If an employer invites you to apply, we store the message (up to 300 characters), the date and your response (seen, accepted, declined). You receive a short email notification. If you report an invitation, we review the message and the employer’s account to prevent misuse (Art. 6(1)(f) GDPR). Invitations are deleted together with your account.

6Transmission of job ads to search engines

To make job ads visible, we notify search engines when a job ad is published, changed or removed:

• Google Indexing API (Google Ireland Ltd. / Google LLC, USA)
• IndexNow (Microsoft Bing and other participating search engines)

We only transmit the web address (URL) of the job ad, no personal data of visitors. The job ad page also contains structured data (company name, location, salary, application method) that search engines read and may display, for example in Google for Jobs. Legal basis: Art. 6(1)(b) and (f) GDPR (the purpose of a job board is to make job ads visible).

7Views and apply clicks

To show employers how their job ads perform, we count views of job ad pages and clicks on the “Apply” button. For each view or click we store only the job ID, the time, the website the visitor came from (for example “google.com”) and, for clicks, the application method (link, email or contact details).

We do not store IP addresses, do not set cookies and do not store any information on your device for this purpose. Automated visits by search engine bots are not counted. This data does not allow us to identify you. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in measuring the reach of job ads). Individual entries are deleted after 13 months at the latest.

8Contact form

If you use our contact form, we process your salutation, first name, last name, company (optional), email address, your concern and your message. We use this data only to answer your request. Your message is sent to us by email; you receive a confirmation email. The form is protected against abuse by a simple calculation task and a security token, which use a technically necessary session cookie.

Legal basis: Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries). We delete your messages when they are no longer needed, at the latest after two years, unless statutory retention obligations apply.

9Emails to employers

Service emails. We send employers emails relating to their account and job ads, for example if required information is missing from the company profile, when a job ad goes online, needs changes, is about to expire or has expired. Legal basis: Art. 6(1)(b) GDPR. Expiring job ads can be extended with a secure one-click link.

Information and news. We only send information about new features and occasional news if you have given your consent in the dashboard. We store the time and IP address of your consent as proof. You can withdraw your consent at any time via the unsubscribe link in every email or in the dashboard. Legal basis: Art. 6(1)(a) GDPR.

For each email sent we record the recipient, type, subject and time to avoid duplicate emails. If emails to an address cannot be delivered, we note this and may take the related job ads offline. Email records are deleted after 24 months; proof of consent is kept for three years after withdrawal of consent.

10Review of job ads and fraud prevention

To protect job seekers from fake job ads and fraud, every new job ad is reviewed by us before publication. An internal tool highlights possible warning signs, for example a private email address combined with the name of a well-known company, duplicate ads or requests for fees. The decision is always made by a person; there is no automated decision within the meaning of Art. 22 GDPR.

If we remove a job ad or close an account because of fraud, spam or a violation of our rules, we store the email address, company name, reason and date to prevent repeated misuse. Legal basis: Art. 6(1)(f) GDPR (protection of job seekers and of our platform). These entries are deleted after three years.

11Links to social networks

Our pages contain simple links to Facebook, LinkedIn and other networks, as well as share buttons on job ads. These are ordinary links: no data is transmitted to these networks when you visit our pages. Data is only transmitted when you click a link and visit the respective network.

12Recipients and transfers outside the EU

We do not sell personal data. Data is processed by our hosting provider ALL-INKL.COM in Germany. Publicly visible job ads can be viewed worldwide by anyone. When notifying search engines, only web addresses are transmitted to Google (USA) and Microsoft; Google LLC is certified under the EU-U.S. Data Privacy Framework.

13Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future. Please contact support@cityjobs.info.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

14Changes to this privacy policy

We update this privacy policy when our services or legal requirements change. The current version is always available on this page.