Privacy Policy

Last updated: 9 October 2026

1. Controller

The controller responsible for the processing of personal data in connection with Deeptech Insider Jobs at jobs.deeptechinsider.com is:

Deeptech Insider
E. Buerger
Waldenburger Weg 4
40627 Düsseldorf
Germany

Email: contact@deeptechinsider.com

(“Deeptech Insider”, “we”, “us” or “our”)

This Privacy Policy explains how we process personal data when you visit or use Deeptech Insider Jobs, create or use an employer account, submit a job posting, subscribe to communications or otherwise interact with the platform.

2. Hosting and platform provider

Deeptech Insider Jobs is operated using the job-board software provided by Cavuno, operated by Wollemia Pty Ltd, Australia.

Cavuno provides the technical infrastructure required to operate the job board and processes personal data on our behalf where it acts as our processor. Depending on the functionality used, this may include hosting, databases, authentication, storage, email delivery, search functionality, consent management, analytics, security and other technical services.

Cavuno may engage subprocessors to provide parts of this infrastructure. Processing may therefore also take place outside the European Economic Area (“EEA”). Further information is provided under Sections 8 and 10 below.

3. Personal data we process

The categories of personal data processed depend on how you use the platform.

3.1 Visiting and using the website

When you access the website, technical information may automatically be processed, including:

• IP address;
• date and time of access;
• requested pages and resources;
• browser type and version;
• operating system and device information;
• referring URL;
• technical request and response information; and
• information required to maintain the security and availability of the website.

This processing is necessary to deliver the website, ensure its technical operation, detect misuse and security incidents and maintain the stability and security of the service.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of the platform.

Server access logs containing IP addresses are retained for up to 30 days for security and abuse prevention purposes.

Optional analytics data is processed only after the visitor has given consent, as explained in Sections 5 and 6.

3.2 Employer accounts

When an employer creates or uses an account, we may process:

• name;
• business email address;
• password or authentication information;
• company affiliation;
• company profile information;
• account and user identifiers;
• account activity; and
• communications relating to the account.

The data is processed to create and administer the employer account, authenticate users, provide employer functionality and communicate regarding the service.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary to perform a contract or take steps at the user's request prior to entering into a contract. Where the user acts on behalf of a company rather than as a contractual party personally, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the administration and performance of our business relationship with the represented company.

3.3 Company profiles

Employers may provide information relating to their company, including:

• company name;
• company website;
• company description;
• logo and other company images;
• company location;
• contact information; and
• other information submitted for the company profile.

Company information is generally intended for publication. Where such information contains personal data, we process it for the operation of the employer profile and job-board services.

The legal basis is Art. 6(1)(b) GDPR or, where applicable, Art. 6(1)(f) GDPR.

3.4 Job postings

When an employer submits a job posting, we process information required to create, review, administer and publish the listing. This may include:

• company information;
• contact details;
• job title and description;
• employment type;
• workplace arrangement and location;
• salary information;
• application URL or application email address;
• technology and job classification information;
• education and experience requirements;
• language and travel requirements; and
• other information provided through the job-posting form.

Job postings submitted through the platform may be subject to manual review before publication.

The legal basis is Art. 6(1)(b) GDPR and, where appropriate, Art. 6(1)(f) GDPR.

Employers are responsible for ensuring that job descriptions and other submitted content do not unnecessarily contain personal data of third parties.

3.5 Billing information and paid job postings

When an employer books a paid job posting, we may process:

• legal company name;
• street and house number;
• postal code;
• city;
• country;
• VAT identification number, where provided;
• selected job-posting product;
• price and order information;
• invoice contact person;
• invoice email address; and
• other information necessary for invoicing and accounting.

We use this information to process the order, verify the booking, issue invoices and fulfil statutory accounting and tax obligations.

The legal bases are Art. 6(1)(b) GDPR for processing required to fulfil the order and Art. 6(1)(c) GDPR for processing required to comply with statutory tax, commercial and accounting obligations. Where a contact person acts on behalf of a company, Art. 6(1)(f) GDPR may also apply.

Billing and transaction records may be retained for the periods required under applicable German commercial and tax law even after an account or job posting has been deleted.

No payment-card information is currently collected through the Deeptech Insider Jobs job-posting process where orders are invoiced manually.

Billing information associated with a job posting is used for internal administration and invoicing and is not intended for publication on the public job listing.

3.6 Communications and support requests

If you contact us, we process the information you provide, including your contact details and the content of your enquiry.

The legal basis is Art. 6(1)(b) GDPR where the communication relates to a contract or pre-contractual measures. In other cases, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and maintaining business communications.

3.7 Job seekers and applications

Deeptech Insider Jobs allows visitors to browse job listings and directs candidates to the application website, applicant tracking system or application contact provided by the respective employer.

We do not currently offer candidate accounts or collect, store or manage CVs and job applications through the platform.

Where an application link redirects you to an external employer website, applicant tracking system or other third-party service, Deeptech Insider does not control the subsequent processing of your application data. The respective employer or service operator is responsible for that processing and its own privacy information applies.

Technical information about redirects through application links, submitted applications recorded by the platform or application eligibility checks may be processed for operational purposes. According to Cavuno, these server-side counts do not contain analytics session identifiers and do not require analytics cookies.

With your consent, Cavuno Analytics may additionally record clicks on job application links to measure engagement and job-board performance, as described in Section 6.

A recorded click or redirect does not necessarily establish whether an application was ultimately submitted.

3.8 Job alerts and email subscriptions

If you subscribe to optional email communications, we process your email address and, where applicable, job-search preferences.

Where the communication constitutes an optional subscription or marketing communication, processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Where required, subscriptions are activated using a confirmation procedure.

You may withdraw your consent at any time with effect for the future, including by using the unsubscribe link provided in the relevant emails.

Transactional emails necessary for an employer account, job booking or other requested service are processed on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR, as applicable.

4. Automated job imports and publicly available information

Deeptech Insider Jobs may display job listings and company information obtained from publicly available company career pages, feeds or other permitted sources.

Such information primarily concerns companies and publicly advertised professional positions. Where imported content nevertheless contains personal data, for example the name or professional contact information of a company representative, processing may be based on Art. 6(1)(f) GDPR.

Our legitimate interests are operating a specialised European deep-tech job directory, making publicly advertised employment opportunities discoverable and maintaining accurate company and job information.

Where personal data has not been obtained directly from the data subject, the information requirements of Art. 14 GDPR apply, subject to the applicable statutory exceptions.

Affected persons may contact us at any time regarding correction or removal of personal information contained in imported listings.

5. Cookies, local storage and similar technologies

Deeptech Insider Jobs uses cookies, local storage and similar technologies to provide essential website functionality, remember privacy preferences and, with consent, analyse website usage and performance.

5.1 Technically necessary technologies

The platform may use technically necessary cookies or comparable technologies to provide requested functionality, maintain authentication sessions, protect the platform against abuse and remember essential settings.

The first-party cookie cavuno_cookie_consent stores the visitor's choice regarding analytics cookies. It is used to remember and apply the visitor's privacy preferences.

Where access to or storage of information on a user's device is strictly necessary to provide a digital service expressly requested by the user, such access may take place without consent in accordance with Section 25(2) TDDDG.

The associated processing of personal data is based on Art. 6(1)(f) GDPR or another applicable legal basis, depending on the purpose of the processing.

5.2 Optional analytics cookies

Cavuno Analytics uses the following first-party cookies only after the visitor has accepted analytics cookies:

• session-id: Contains a randomly generated identifier used to group page views and interactions within one visit. It expires after 30 minutes of inactivity and may be renewed during the visit. The identifier is not derived from personal information or device characteristics and is not linked by Cavuno to user accounts or email addresses.
• cavuno_audience_<key>: Stores information about the source of a visit, including traffic channel, referring website, UTM parameters, operating system, browser, device type and country. It expires after 30 minutes. If a visitor creates an account or subscribes to job alerts during the visit, the traffic-source information may be associated with the newly created record.

These cookies are not set before a visitor makes a consent choice or after the visitor selects “Decline”.

The legal basis for consent-based analytics is Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

5.3 Consent management

Visitors can accept or decline optional analytics cookies through the cookie banner.

Cavuno records each consent decision for compliance purposes. A consent record contains a randomly generated consent identifier, the visitor's choice, the banner version, the time of the decision and the relevant job board.

According to Cavuno, consent records do not contain IP addresses or analytics session identifiers. They are retained for two years.

The processing of consent records is based on Art. 6(1)(c) GDPR, where necessary to demonstrate compliance with applicable legal obligations, and Art. 6(1)(f) GDPR, where applicable, for the documentation and management of privacy preferences.

You may withdraw previously given consent at any time with effect for the future by reopening the available cookie preferences or consent settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Further information about cookies and similar technologies is available in our Cookie Policy.

6. Analytics

Deeptech Insider Jobs uses Cavuno Analytics, the built-in analytics functionality provided by the Cavuno platform, to understand how visitors use the job board, measure engagement and monitor website performance.

6.1 Consent requirements

Cavuno Analytics is activated only after a visitor has selected “Accept” in the cookie banner.

Before a visitor makes a consent decision, and after selecting “Decline”, Cavuno Analytics does not load, set analytics cookies or transmit analytics events.

This consent requirement also applies to technical website performance measurements, including Web Vitals. These measurements are part of Cavuno Analytics and are not treated as a separate essential analytics service.

6.2 Data collected

With the visitor's consent, Cavuno Analytics may process the following event types:

• page_hit: Page views, including navigation within the job board.
• engagement: Information about engagement with a page, recorded at most once per page view.
• web_vital: Technical performance measurements, including Cumulative Layout Shift (CLS), First Contentful Paint (FCP), Largest Contentful Paint (LCP), Time to First Byte (TTFB) and Interaction to Next Paint (INP).
• job_apply_click: Clicks on job application links.

Depending on the event, the information processed may include:

• event type and timestamp;
• page path and URL information;
• navigation information;
• referring website;
• traffic-source information, including relevant UTM parameters;
• operating system, browser and device information;
• country;
• website performance metrics; and
• a randomly generated analytics session identifier.

Cavuno removes URL fragments and generally excludes query-string parameters from stored page URLs, except for the five standard UTM parameters. Referring URLs are stored without their query strings.

6.3 Session identifiers and IP addresses

The analytics session identifier is a random value generated in the browser and stored in the first-party session-id cookie.

It is used to group events within one visit and expires after 30 minutes of inactivity. A visitor returning after that period receives a new session identifier.

According to Cavuno, the identifier is not derived from the visitor's device or personal information and is not linked to accounts or email addresses.

Analytics events are stored without the visitor's IP address.

When an analytics event is received, the IP address may be processed temporarily for rate limiting but is not stored with the analytics event. Country information is derived from information supplied by the content delivery network.

Separate server access logs may contain IP addresses for security and abuse prevention purposes, as described in Section 3.1.

6.4 Server-side operational counts

Certain operational events may be counted directly on Cavuno's servers independently of analytics consent, including application-related submissions, redirects through application links and application eligibility checks.

According to Cavuno, these counts do not contain analytics session identifiers and do not read or set analytics cookies.

Where such processing involves personal data, it is carried out for the operation and administration of the platform on the basis of Art. 6(1)(f) GDPR or another applicable legal basis.

6.5 Legal basis and retention

The legal basis for Cavuno Analytics is the visitor's consent pursuant to Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Analytics events and session records containing session identifiers are automatically deleted 13 months after collection.

Aggregated daily statistical totals without session identifiers may be retained for as long as the job board exists.

Visitors who do not consent to analytics are not included in the corresponding consent-based analytics measurements.

Further information is available in Cavuno's documentation:

https://cavuno.com/docs/analytics/cavuno-analytics-data

7. Bot and abuse prevention

The platform provider may use technical measures to detect and prevent spam, automated submissions, fraud and other abuse.

Where used, technical connection and device information, including IP address and browser characteristics, may be processed for this purpose.

The legal basis for the processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interests are protecting the platform, our users and our systems against automated abuse, fraudulent activity and security threats.

The platform uses Cloudflare infrastructure for certain content delivery and security-related functions.

According to Cavuno, Cloudflare's Web Analytics performance beacon is no longer loaded for visitors in the European Union.

Where access to information on the user's terminal equipment falls within Section 25 TDDDG, the applicable requirements of that provision are observed.

8. Recipients and service providers

We disclose personal data only where this is necessary for the purposes described in this Privacy Policy, where required by law, or where another legal basis permits the disclosure.

Personal data may be processed by or disclosed to the following categories of recipients and service providers:

• Cavuno / Wollemia Pty Ltd – provider of the job-board platform and associated technical services, including hosting infrastructure, databases, authentication, storage, email delivery, search, consent management, analytics and security functionality, depending on the features used;
• service providers engaged by us where necessary for the operation and administration of Deeptech Insider Jobs, including professional advisers, tax advisers and accounting providers;
• public authorities, courts or other recipients where disclosure is required by law or necessary for the establishment, exercise or defence of legal claims.

Cavuno may engage subprocessors to provide parts of its technical infrastructure and platform functionality.

According to information provided by Cavuno, its subprocessors may include Convex, Supabase, Hetzner, Cloudflare, Resend, PostShiba, Tinybird, Mapbox, Qdrant, Voyage AI and other providers used for specific platform functionality.

These services may support infrastructure, databases, file storage, content delivery, security, transactional email, location services, search, analytics and AI-supported functionality.

Not every service or subprocessor identified by Cavuno is necessarily used in connection with every interaction with Deeptech Insider Jobs. The actual processing depends on the functionality enabled and used.

Where service providers process personal data on our behalf as processors, such processing is subject to the applicable requirements of Art. 28 GDPR.

Cavuno maintains information about its subprocessors at:

https://cavuno.com/subprocessors

Information regarding international data transfers is provided in Section 10 below.

9. Artificial intelligence and automated processing

The Cavuno platform may provide AI-supported functionality, including content enrichment, structured extraction, semantic search and other platform features.

Where such functionality is enabled or used in connection with Deeptech Insider Jobs, relevant data may be processed by AI or machine-learning service providers engaged by Cavuno. The categories of data processed and the providers involved depend on the specific functionality used.

AI-supported functionality may assist with the technical processing, structuring, enrichment or retrieval of platform content.

Deeptech Insider Jobs does not currently provide AI-based candidate screening, CV evaluation or automated applicant selection.

We do not use AI-supported functionality to make automated decisions about individuals that produce legal effects or similarly significantly affect them.

We do not carry out automated decision-making within the meaning of Art. 22 GDPR in connection with Deeptech Insider Jobs.

10. International data transfers

Some of the service providers involved in operating the platform are located outside the EEA or process data in third countries, particularly the United States.

Cavuno states that data processed on behalf of job-board operators is currently processed primarily in the United States and that it does not currently offer EU-only data residency.

Where personal data is transferred to a country outside the EEA for which the European Commission has adopted an adequacy decision, the transfer may be based on that decision, subject to its applicable conditions.

Where no adequacy decision applies, transfers must be based on an appropriate safeguard under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses, supplemented where necessary by additional safeguards.

Information regarding applicable safeguards may be requested from us using the contact details above.

Further information about Cavuno's processing activities and subprocessors is available at:

https://cavuno.com/privacy-policy
https://cavuno.com/subprocessors

11. Storage and deletion

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law.

In particular:

• Employer account information: Generally retained for the duration of the account and subsequently where necessary for contractual, security or legal purposes.
• Job-posting information: Retained while required to provide and administer the relevant listing and for an appropriate period thereafter.
• Billing and accounting information: Retained in accordance with applicable statutory retention obligations.
• Support communications: May be retained for as long as necessary to process the enquiry and establish, exercise or defend legal claims.
• Cavuno Analytics events and session records: Automatically deleted 13 months after collection.
• Aggregated analytics data: Daily statistical totals without session identifiers may be retained for as long as the job board exists.
• Cookie consent records: Retained for two years.
• Server access logs: Retained for up to 30 days for security and abuse prevention purposes.

Where data is no longer required and no statutory retention obligation or other legal basis applies, it will be deleted or anonymised.

12. Security

We and our service providers use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include encrypted transmission, access controls, authentication mechanisms, security monitoring and other technical and organisational safeguards appropriate to the risks involved.

No internet-based service can, however, guarantee absolute security.

13. Your rights

Subject to the conditions provided by applicable law, you have the following rights regarding your personal data:

• Right of access – Art. 15 GDPR;
• Right to rectification – Art. 16 GDPR;
• Right to erasure – Art. 17 GDPR;
• Right to restriction of processing – Art. 18 GDPR;
• Right to data portability – Art. 20 GDPR;
• Right to object – Art. 21 GDPR;
• Right to withdraw consent – Art. 7(3) GDPR; and
• Right to lodge a complaint with a supervisory authority – Art. 77 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.

We will then cease processing the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

To exercise your rights, please contact:

contact@deeptechinsider.com

We may request appropriate information to verify your identity before fulfilling a request.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

Telephone: +49 211 38424-0
Fax: +49 211 38424-999
Email: poststelle@ldi.nrw.de

You may also lodge a complaint with another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

15. Obligation to provide data

Certain information is required in order to create an employer account, submit a job posting, enter into a paid job-posting agreement or comply with legal billing requirements.

Where information is marked as mandatory, failure to provide it may mean that we cannot provide the requested service or conclude the relevant transaction.

Optional information, such as a VAT identification number where not applicable, does not have to be provided unless required for the relevant transaction or by law.

16. External links and employer websites

Job listings may contain links to external employer websites, applicant tracking systems or other third-party websites.

Once you follow an external link, the respective third party is responsible for the processing of personal data on its website.

We encourage you to review the privacy information of the relevant employer or service provider before submitting personal data.

17. Children

Deeptech Insider Jobs is a professional employment platform intended for users aged 18 or older.

Employer accounts and paid job-posting services are available only to persons aged 18 or older who are legally capable of acting on behalf of an organisation.

The platform is not specifically directed at children, and we do not knowingly collect personal data from children for the purpose of providing employer account or paid job-posting services.

18. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to the platform, our processing activities, service providers or applicable legal requirements.

The current version is available at jobs.deeptechinsider.com/privacy-policy.

The date of the most recent revision is stated at the beginning of this Privacy Policy.