Privacy Policy
Last updated: January 21, 2026
1. Introduction
Deutsch Spot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. This policy complies with the EU General Data Protection Regulation (GDPR).
2. Information We Collect
We collect information that you provide directly to us:
- Account Information: Name, email address, password
- Profile Information: Educational background, work experience, language skills, relocation timeline
- Documents: Transcripts, certificates, CV, cover letters, identity verification documents
- Application Data: University preferences, job interests, visa requirements
- Communication Data: Feedback, support requests, chat messages
3. How We Use Your Information
We use the collected information for:
- Providing and maintaining the Service
- Personalizing your experience and recommendations
- Processing your applications and verifications
- Communicating with you about updates and features
- Improving our services and developing new features
- Ensuring security and preventing fraud
- Complying with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Consent: You have given explicit consent for specific purposes
- Contract: Processing is necessary to fulfill our service agreement
- Legitimate Interests: For improving our services and security
- Legal Obligation: To comply with applicable laws
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Cloud hosting, email services, analytics (e.g., Vercel, Upstash)
- Universities: When you apply to programs (with your consent)
- Employers: When you apply for jobs (with your consent)
- Legal Authorities: When required by law or to protect rights
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Secure cloud infrastructure
7. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Limit how we use your data
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact us at privacy@deutschspot.com
8. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. When you delete your account, we will delete or anonymize your data within 30 days, except where we must retain it for legal compliance.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your session and preferences
- Analyze usage patterns and improve the Service
- Provide personalized content
You can control cookies through your browser settings.
10. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
11. Children's Privacy
Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.
13. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us at:
Email: privacy@deutschspot.com
Data Protection Officer: dpo@deutschspot.com
14. Supervisory Authority
If you believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.