← Back to Home

Privacy Policy

Effective Date: March 2026

1. Data Controller

Uninext is the data controller for personal data processed through this platform, in compliance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Account Data: Name, email address, password (hashed), role (student/company).

Profile Data: Education, work experience, skills, certifications, languages, and career preferences.

Company Data: Company name, industry, size, website, location, and description.

Usage Data: Job applications, contracts, messages, and transaction records.

3. How We Use Your Data

We use your data to provide the recruitment platform services: matching students with companies, facilitating contracts, processing payments, and sending notifications.

4. Data Sharing

Student profiles marked as “public” are visible to verified companies. We share payment data with Stripe for transaction processing. We do not sell personal data to third parties.

5. Data Security

Passwords are hashed with bcrypt. Authentication uses HTTP-only JWT cookies. All data is transmitted over HTTPS. Messages between users are protected by anti-contact-sharing measures.

6. Your Rights (GDPR)

You have the right to access, rectify, delete, or export your personal data. You may withdraw consent at any time. To exercise these rights, contact privacy@uninext.de.

7. Data Retention

Account data is retained while your account is active. Expired verification tokens and refresh tokens are automatically cleaned up. You may request full account deletion.

8. Cookies

We use HTTP-only authentication cookies and a locale preference cookie. No third-party tracking cookies are used.

9. Contact

For privacy inquiries, contact privacy@uninext.de.