Privacy
Privacy Policy
1. Controller
The controller responsible for processing personal data on this website is:
Marie-Constance MunizGrünberger Str. 85
10245 Berlin
Germany
Email: [email protected]
2. General information
We process personal data only where necessary to operate this website, communicate with visitors, provide free or paid digital content, administer purchases, send requested emails or newsletters, analyse website usage, or comply with legal obligations. Depending on the activity, the legal basis may include consent, steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations, or our legitimate interests.
3. Hosting and infrastructure through Cloudflare
This website is hosted and delivered using services provided by Cloudflare, Inc. and affiliated Cloudflare entities. When you access the website, technical information may be processed, including IP address, date and time of access, requested URL, browser and device information, referrer information, connection data, and security or error logs.
Where processing is necessary for the secure and technically stable operation of the website, it is based on our legitimate interest under Art. 6(1)(f) GDPR. Where Cloudflare acts as a processor, we rely on the applicable data-processing terms and international-transfer safeguards provided by Cloudflare.
4. Cloudflare Web Analytics
We use Cloudflare Web Analytics to obtain statistical information about website use and technical performance. Cloudflare describes this service as privacy-focused and states that it does not use cookies or local storage for individual tracking and does not track individual users across sites. We use these statistics to understand general traffic and improve the website.
5. Google Analytics 4
With your consent, we use Google Analytics 4 to understand how visitors use this website. Google Analytics may process information such as pages viewed, interactions, session information, approximate location, device and browser information, referrer information, and online identifiers.
Google Analytics is activated only after you consent to analytics. The legal basis is Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, consent under Section 25(1) TDDDG. We use basic consent mode, meaning Google tags remain blocked before consent. You can withdraw consent at any time through Cookie Settings.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be processed by Google group companies outside the EEA subject to applicable transfer safeguards.
6. Contact forms through Formspree
We use Formspree to provide and process contact forms. If you submit a form, Formspree may process information such as your name, email address, company or organisation, message, submission date and time, and technical connection data.
If your inquiry concerns a possible purchase, collaboration, consulting engagement or other contractual relationship, processing is based on Art. 6(1)(b) GDPR. Other inquiries may be processed on the basis of our legitimate interest in receiving and responding to communications under Art. 6(1)(f) GDPR.
Formspree states that it uses infrastructure in the United States and relies on Standard Contractual Clauses for GDPR-related transfers where applicable. Form submissions should be deleted when no longer needed, subject to legal retention obligations.
7. Email delivery, free downloads and newsletters through Brevo
We use Brevo to send requested digital downloads and, where you separately consent, newsletters and email updates about new articles, guides, templates, checklists, products or related Career Operator content.
For delivery of a requested free resource, we process the email address and related delivery data necessary to send the requested material. If you separately subscribe to ongoing marketing emails, processing is based on your consent under Art. 6(1)(a) GDPR.
Newsletter subscriptions use a double opt-in process. After signup, you receive a confirmation email and are added to the marketing list only after confirming. You can withdraw your consent at any time using the unsubscribe link in each marketing email.
Brevo acts as a service provider / processor for email delivery. We maintain the appropriate data-processing terms with Brevo. Technical records relating to signup, confirmation, delivery, opens or clicks may be processed depending on your Brevo configuration.
8. Purchases through Lemon Squeezy
Paid digital products offered through The Career Operator are processed through Lemon Squeezy, which acts as Merchant of Record. When you complete a purchase, Lemon Squeezy may process information required for payment, order administration, invoicing, tax calculation and collection, fraud prevention, refunds, chargebacks, and transaction-related customer support.
We may receive order information necessary to provide the product, manage support, administer licences, and maintain legally required business records. Lemon Squeezy’s own terms and privacy information apply to the checkout transaction.
9. Third-party AI services
Some products are designed to be used with third-party AI services, including Claude by Anthropic. The Career Operator does not operate or control those services. If you use them, the provider’s own terms, privacy policy, data practices and technical limitations apply.
Users should not submit confidential employer information, third-party personal data, passwords, credentials or other sensitive information unless they are legally entitled to do so and understand the privacy and security implications.
10. External links and social links
This website may contain ordinary hyperlinks to external websites or social profiles. A normal hyperlink does not itself cause the third-party service to load on this website. Once you leave this website, the privacy rules of the destination provider apply.
11. Affiliate links
This website may include affiliate links in the future. If an affiliate program introduces tracking technologies that require consent, those technologies will be activated only after the applicable consent requirements have been met. Specific affiliate providers will be added to this Privacy Policy when used.
12. Retention
We retain personal data only for as long as necessary for the relevant purpose or required by law. Transaction and accounting records may be retained for statutory periods. Contact inquiries that do not lead to an ongoing relationship are deleted when no longer needed, unless a legal reason requires longer retention.
13. International data transfers
Some service providers may process data outside the European Economic Area. Where required, international transfers are carried out under an adequacy decision or appropriate safeguards such as Standard Contractual Clauses.
14. Your rights
- Access to your personal data
- Rectification of inaccurate data
- Erasure, where applicable
- Restriction of processing
- Data portability
- Objection to certain processing
- Withdrawal of consent with effect for the future
To exercise your rights, contact [email protected]. You also have the right to lodge a complaint with a competent data-protection supervisory authority.
15. Changes to this Privacy Policy
We may update this Privacy Policy when our services, providers, business model or legal obligations change. The current version always displays its most recent update date.
Cookie and analytics notice
Necessary technologies
Necessary technologies may be used to provide the website securely and to remember your privacy choices. They are not used for advertising or cross-site behavioural profiling.
Google Analytics
Google Analytics is optional. It remains blocked until you accept analytics. If you decline analytics, Google Analytics does not load. You can change your choice at any time through Cookie Settings in the footer.
Cloudflare Web Analytics
Cloudflare Web Analytics may be used for privacy-oriented aggregate traffic and performance statistics, configured consistently with Cloudflare’s current privacy-focused Web Analytics documentation.