Privacy policy

Last updated: 14 November 2026

This is a translation. The German version (Datenschutzerklärung) is the one that counts.

1. Who is responsible

The controller for personal data on this website and in the Easybildung app is:

[NAME OR COMPANY]
[STREET AND NUMBER]
[POSTCODE AND CITY]
Deutschland

Send questions about your data, objections and requests to [E-MAIL].

2. What this is about

Easybildung helps people who look for an Ausbildung (vocational training) in Germany (“applicants”): we prepare their application, send it in their name by e-mail to matching training companies, and forward the companies’ replies to them. This policy describes the data we process: of visitors to this website, of people using the app, and of the companies that receive applications.

3. This website

Hosting

The website and the app run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

Server logs

When you open a page, the server processes technically necessary data: IP address, date and time, the address opened and your browser’s identifier. We need it to deliver the page and to protect it against attacks (Art. 6(1)(f) GDPR). We use it for nothing else and delete it once it is no longer needed for that.

No cookies, no tracking

This website sets no cookies and uses no analytics or advertising services. Fonts load from our own server. Whether you chose the light or the dark design is stored only in your browser (local storage); it never reaches us.

4. The app: account and sign-in

You sign in with a code we send to your e-mail address, or with your Google account. For this we process your e-mail address and, with Google, the name in your Google account. Sign-in, database and files are run for us by Supabase Inc. (USA) on servers in Frankfurt am Main. Sign-in with Google is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and is only used if you choose it.

The app only sets technically necessary cookies: for signing in and for the language you chose (§ 25(2) no. 2 TDDDG). The legal basis for the account is Art. 6(1)(b) GDPR.

5. The app: your applications

What we process

• The cover letter you upload (PDF) and everything in it. Please only upload what companies should see: some applications contain a photo, a home address or other personal details.
• Your name, the profession you want, your German level, your earliest start, the federal states you chose, the number of applications a day and the companies you exclude.
• The application adapted for each company, and your application address (for example firstname.l@bewerbung.easybildung.de).
• The companies’ replies with attachments, your answers to companies, results you report and your requests to our team.
• Your messages to the assistant in the app.

Purpose and legal basis

We process this data to provide our service (Art. 6(1)(b) GDPR). In the last step of the setup you also give your explicit consent (Art. 6(1)(a) GDPR): that applications are sent in your name, that replies are stored, sorted and forwarded to your e-mail address, and that an AI service reads your documents and the replies. You can withdraw any consent at any time for the future: pause applying in the app, delete your account or write to us. What happened until then stays lawful (Art. 7(3) GDPR).

Artificial intelligence

To read details from your cover letter, adapt it for each company, sort and summarise replies, and for the assistant, we send texts to DeepInfra Inc. (USA), which processes them on our behalf.

Sending and receiving e-mail

Applications, your answers and the copies to you are sent through Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, with servers in Stockholm (Sweden). The companies’ replies arrive there too; they are stored and checked for spam and viruses.

Sharing with companies

Your application (cover letter, name and application address) goes to the companies that match your choices. What a company does with your application after that is the company’s own responsibility.

6. Data of training companies

To deliver applications and forward replies, we process data of training companies: the company’s name and address, the e-mail address it published for applications, its website, the training professions it offers, and the content of its replies to applicants, including the names of contact persons.

The data comes from public sources: job ads for training places (for example from the job board of the Bundesagentur für Arbeit or the Lehrstellen-Radar of the chambers of crafts) and the companies’ career pages, websites and public business profiles.

The legal basis is Art. 6(1)(f) GDPR: applicants and we have a legitimate interest in sending applications to companies that offer training places. A company gets at most one application per profession from the same person.

Objection (Art. 21 GDPR): if you no longer want to receive applications through Easybildung, reply to an application with “Abmelden” or write to [E-MAIL]. We then stop sending applications to that address.

7. Recipients

These service providers process data on our behalf (Art. 28 GDPR):

• Hetzner Online GmbH (Germany): servers of this website, the app and the database of training offers.
• Supabase Inc. (USA), servers in Frankfurt am Main: sign-in, database, files.
• Amazon Web Services EMEA SARL (Luxembourg), servers in Stockholm: sending and receiving e-mail.
• DeepInfra Inc. (USA): AI processing.
• Google Ireland Limited (Ireland): sign-in with Google, only if you choose it.

8. Transfers outside the EU

Supabase Inc. and DeepInfra Inc. are based in the USA. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise on the Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

9. How long we keep data

• Account, documents, applications and messages: until you delete your account.
• Incoming e-mails in their original format: 90 days. Their text and attachments stay in the app until you delete your account.
• The application sent to a company (PDF): 180 days after the application is over.
• Messages to the assistant: 365 days.
• Data copies you ask for: 7 days.
• After you delete your account we keep, without content: which consents you gave and when (as proof, Art. 7(1) GDPR), a log of who did what when, and anonymous numbers. Your application address is never given to anyone else.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and you can withdraw a consent at any time (Art. 7(3)). In the app, under “Privacy”, you can ask for a copy of your data and delete your account; we handle requests within one month. You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the one of the federal state where you live.

11. No automated decisions

We make no decisions based solely on automated processing that have legal effects on you (Art. 22 GDPR). Which companies get your application follows from your choices; only the company decides about an interview or a training place.

12. What you have to provide

For the app we need your e-mail address and your application documents; without them we cannot send applications. You can use this website without giving any data.

13. Changes

We update this policy when our service changes. The version published here applies.