Privacy notice

Privacy notice Version prepared on 23 September 2026 for CareerFood and its optional newsletter. 1. Who is responsible Sven Bunkus, operating CareerFood, is the controller responsible for the processing described here. Postal address: CareerFood, c/o POSTFLEX PFX-112-294, Emsdettener Straße 10, 48268 Greven, Deutschland Email: contact@careerfood.info Business phone: +49 156 7917 6954 2. What this website does You can read CareerFood without creating a reader account, subscribing or buying anything. There is no public reader account registration, comments, payments or advertising. Newsletter signup is optional. Brevo and Cloudflare Turnstile are not loaded merely because you read an article: they connect only after you enter a valid email address, select newsletter consent and press Subscribe free. The editorial studio is a separate, restricted service, not a reader account system. 3. Website hosting and access records IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, hosts the website and processes technical information on our behalf under a data-processing agreement. A request necessarily transmits your IP address. Access records can include the requested page or file, referring page if supplied by your browser, time, browser and operating-system information, device type and an anonymised IP address. IONOS states that hosting visitor data is anonymised on collection, retained for eight weeks and not transferred outside the EU. We use this processing to deliver pages reliably, maintain security and investigate technical problems. Our legal basis is Article 6(1)(f) GDPR, reflecting these legitimate interests. You cannot receive a page without the network information needed to deliver it. We do not use hosting records to make decisions about your employment or assess your suitability for a role. 4. IONOS visitor statistics IONOS WebAnalytics also provides aggregate usage statistics for understanding which pages are useful and improving the site. For this website, the source is hosting access information. We have not installed a browser analytics script, tracking pixel, heatmap service or session-recording tool. IONOS states that WebAnalytics uses no cookies and anonymises the transmitted IP address before further statistical processing. Its documented measurements include requested pages, referrers, access times and browser, operating-system and device categories. We rely on Article 6(1)(f) GDPR for the processing of personal information needed to produce these statistics, based on our interest in operating and improving a useful publication, with anonymisation and no cross-site profiling as safeguards. Statistics that no longer identify a person are not treated as a personal browsing history. This server-side processing is not controlled by a cookie banner. We do not claim that clicking a consent switch prevents hosting records. The eight-week period above describes hosting records, not a promise that all anonymous statistical reports are deleted on the same schedule. 5. Cookies, local resources and external links CareerFood does not set application cookies or store a reader identifier for the public reading experience. The optional signup form connects to the providers described in section 8; do not interpret this statement as a promise about every request or browser-storage operation inside their form. Fonts, pictures and these legal pages are delivered by CareerFood's hosting service. We do not embed a third-party legal-document frame. Access to the private WordPress editor uses its own necessary sign-in cookies for authorised editors. Article reference numbers first take you to sources on the same page. Following an external source is optional and opens a new tab. If you do so, the other website receives connection information and its own privacy rules apply. A source is not loaded merely because its link is listed here. 6. Contacting CareerFood If you email, telephone or write to us, we process the contact details, message, attachments and related correspondence you provide so that we can respond. Email is handled through our IONOS mailbox; telephone and postal communication involve the relevant communications providers. Postal correspondence sent to the stated address is received through POSTFLEX for delivery to the operator. Only provide information needed for your enquiry. Please do not send health information, identity documents, application files or other sensitive personal records through a general reader enquiry. The legal basis is Article 6(1)(f) GDPR for responding to ordinary enquiries and keeping appropriate correspondence records. Article 6(1)(b) applies where the enquiry concerns steps you request before entering a contract or performing a contract. Where a legal duty requires a record, Article 6(1)(c) applies. We retain correspondence while needed to handle the matter, meet an applicable retention duty or establish, exercise or defend legal claims, then delete it. Duration depends on the subject and any legal duty rather than an unlimited default retention period. We do not automatically add an enquirer to a mailing list or share enquiries with careerStack for marketing. We do not sell reader contact data. Access is limited to the operator, service providers needed for the communication and recipients required by law. Ordinary email should not be treated as a confidential document-transfer system. 7. Your choices and rights Subject to the applicable conditions, you can ask for access to your personal data, correction, deletion or restriction, and data portability where processing is automated and based on consent or a contract. Where processing relies on consent, you may withdraw it for the future without affecting earlier lawful processing. Newsletter consent is voluntary. You can withdraw it using the unsubscribe link in any newsletter or by contacting us. Reading articles does not require newsletter consent. Advertising remains disabled. Where we rely on legitimate interests, you may object for reasons relating to your particular situation. We will stop that processing unless there are overriding compelling legitimate grounds or the data is needed for legal claims. An objection to direct marketing must be honoured without that balancing test. Contact contact@careerfood.info to exercise your rights. We may ask for proportionate information to establish that a request concerns your data. You can also complain to a data-protection supervisory authority, including in the EU country of your habitual residence, workplace or the alleged infringement. You do not need our permission or have to contact us first. We do not use solely automated decision-making with legal or similarly significant effects, including profiling, in this reading service. 8. Optional CareerFood newsletter CareerFood is a careerStack publication. The free weekly newsletter covers getting hired, growing at work and choosing your next move. It is sent by CareerFood from hello@news.careerfood.info; replies go to contact@careerfood.info. Signing up does not create a careerStack account or subscribe you to a separate careerStack mailing list. The visible signup form is hosted on our separate forms.careerfood.info subdomain at IONOS. Displaying it creates a hosting request as described in section 2, but does not load Brevo or Cloudflare scripts. Typing your email does not send it. Only after you enter a valid email, select newsletter consent and press Subscribe free do we connect to Brevo and Cloudflare Turnstile to protect and process the request. Connection and device information can include an IP address, browser details and the time of the request. If the spam check passes and your consent is still selected, the form submits your request to Brevo. You can cancel before submission; leaving the page does not undo a request already sent. The same form can be opened in a separate tab. Brevo manages the form, confirmation email, subscriber list, delivery and unsubscribe processing. When you submit it, Brevo receives your email address, your consent choice and the technical records associated with the request. The checkbox starts unchecked. We use double opt-in: a confirmation email asks you to verify the address, and you join the newsletter list only after using that link. If you did not request the message, ignore it. You will not receive the newsletter unless you confirm. Brevo states that its confirmation link is valid for 30 days; this is not a promise that every record is erased after 30 days. [1] Our legal basis for newsletter delivery is your consent under Article 6(1)(a) GDPR. We retain the records needed to demonstrate consent and honour withdrawal on the basis of our accountability duties and legitimate interest in preventing unwanted mail and addressing legal claims, under Article 6(1)(c) or (f), as applicable. We do not sell newsletter addresses or import a reader from another platform without an appropriate subscription basis. 9. Spam protection The form uses Cloudflare Turnstile to reduce automated and abusive submissions. It processes browser and connection signals to assess whether the request comes from a person. Cloudflare also acts as a controller when using Turnstile data to improve its detection service, as explained in its Turnstile Privacy Addendum. This protection is separate from consent to receive the newsletter. Our purpose is to protect the form and prevent misuse of email addresses, relying on Article 6(1)(f) GDPR. [2] 10. Email measurement Newsletter consent is separate from consent to individual reading tracking. Brevo's per-contact tracking consent control is enabled and configured not to track contacts whose tracking consent is unknown. This signup form does not ask you to consent to individual reading tracking. We do not treat your newsletter subscription as that consent. [3][6] Brevo also has anonymous email tracking enabled. This is not the same as switching measurement off: delivered messages may contain tracking images and rewritten links. Technical records can include delivery, bounce, confirmation and unsubscribe events and a last-open date used for delivery management. These operational records may identify the relevant address. We do not use individual open or click histories to score readers, make employment decisions or automatically send targeted follow-ups. [3][6] We use delivery and unsubscribe records to operate the newsletter and prevent unwanted mail. Individual reading analytics or personalised follow-ups would require a separate review and consent where required; they are not enabled by accepting the newsletter checkbox. 11. Keeping and removing newsletter records We keep the subscriber address and consent information while the subscription is active. Unsubscribing stops future newsletter delivery but does not erase every record immediately. A minimum suppression record may be needed to prevent accidental re-subscription; consent evidence, complaints and delivery records may be needed to demonstrate how a request was handled, meet a legal duty or address a claim. Retention depends on that purpose and any applicable obligation. You can request deletion using the contact details in section 1; we will explain any records that must be retained and why. Delivery and abuse-prevention records are kept separately from the active mailing list. Their retention depends on the record's purpose, the provider's retention controls, any unresolved delivery problem or complaint, and legal obligations or claims. Records no longer needed for those purposes should be removed; minimal suppression information is retained where needed to prevent another unwanted newsletter. You can ask us to review or remove your information using the contact address in section 1. Brevo's general email-event policy does not impose a fixed automatic deletion deadline at our current small event volume. Its transactional log controls are separate from campaign events, subscriber records, consent evidence, suppression records and provider backups. We do not promise a verified one-month automatic deletion rule or immediate erasure of all records on unsubscribe. Brevo explains its retention controls in the references below. [4][7] 12. Service providers and international processing Brevo provides newsletter services as a processor for subscriber information. Cloudflare provides Turnstile and has the additional controller role described above. These services can involve international processing, including outside the EEA. Their contractual safeguards and subprocessors are described in their data-protection documents. The safeguards do not make all international processing risk-free. You can contact us for further information about safeguards relevant to your data. [2][5] 13. Provider references and future features These references are optional reading. Listing them does not load the linked service on this page. [1] Brevo double opt-in: https://help.brevo.com/hc/en-us/articles/208733449-Double-opt-in-DOI-What-it-is-and-how-to-track-user-sign-ups [2] Cloudflare Turnstile privacy: https://www.cloudflare.com/turnstile-privacy-policy/ [3] Brevo anonymous tracking: https://help.brevo.com/hc/en-us/articles/11643306229906-Can-I-anonymize-the-tracking-of-opens-and-clicks-for-my-emails [4] Brevo event retention: https://help.brevo.com/hc/en-us/articles/19317424653586-FAQs-About-the-data-retention-policy-for-email-events [5] Brevo data protection: https://www.brevo.com/legal/privacypolicy/ [6] Brevo tracking consent: https://help.brevo.com/hc/en-us/articles/37113920427922-About-email-tracking-pixels-and-the-CNIL-recommendation-in-Brevo [7] Brevo transactional retention controls: https://help.brevo.com/hc/en-us/articles/4415743225746-Configure-a-custom-retention-period-for-your-transactional-logs-and-email-previews Advertising, paid services, a separate careerStack mailing list or additional tracking would require their own preparation and an updated notice, with consent where required. Reading this notice does not subscribe you or approve those future features.