Effective Date: March 2026
1. Data Controller
Uninext is the data controller for personal data processed through this platform, in compliance with the EU General Data Protection Regulation (GDPR).
2. Data We Collect
Account Data: Name, email address, password (hashed), role (student/company).
Profile Data: Education, work experience, skills, certifications, languages, and career preferences.
Company Data: Company name, industry, size, website, location, and description.
Usage Data: Job applications, contracts, messages, and transaction records.
3. How We Use Your Data
We use your data to provide the recruitment platform services: matching students with companies, facilitating contracts, processing payments, and sending notifications.
4. Data Sharing
Student profiles marked as "public" are visible to verified companies. We share payment data with Stripe for transaction processing. We do not sell personal data to third parties.
5. Data Security
Passwords are hashed with bcrypt. Authentication uses HTTP-only JWT cookies. All data is transmitted over HTTPS. Messages between users are protected by anti-contact-sharing measures.
6. Your Rights (GDPR)
You have the right to access, rectify, delete, or export your personal data. You may withdraw consent at any time. To exercise these rights, contact privacy@uninext.de.
7. Data Retention
Account data is retained while your account is active. Expired verification tokens and refresh tokens are automatically cleaned up. You may request full account deletion.
8. Cookies
We use HTTP-only authentication cookies and a locale preference cookie. No third-party tracking cookies are used.
9. Contact
For privacy inquiries, contact privacy@uninext.de.