Privacy Policy
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.
Responsible Party
Nomado24 UG (haftungsbeschränkt)
Address: Donnersbergweg 1, 67059 Ludwigshafen am Rhein
Deutschland
Email: anton.petuchow@nomado24.de
Phone: +49 176 38445436
What Data Do We Collect?
1. Registration Data
- Name
- Email Address
- Password (stored encrypted)
- User Role (User/Company/Admin)
2. Application Data
- Resume (PDF files)
- Cover Letter
- Application Date
3. Automatically Collected Data
- IP Address (only temporarily for security purposes)
- Browser Type and Version
- Operating System
- Access Timestamp
Purpose of Data Processing
- Provision and operation of the job board platform
- Management of user accounts
- Matching applicants with companies
- Communication between applicants and companies
- Improvement of our services
- Ensuring IT security
Legal Basis
The processing of your personal data is based on the GDPR:
- Art. 6 para. 1 lit. b GDPR: Processing for contract fulfillment (e.g., use of the platform)
- Art. 6 para. 1 lit. a GDPR: Consent (e.g., newsletter subscription)
- Art. 6 para. 1 lit. f GDPR: Legitimate interests (e.g., IT security)
Data Storage and Security
Storage Location: Your account data is processed on servers of our hosting provider Microsoft Azure in data centres within the European Union. The website is delivered via Vercel (CDN).
Security Measures:
- SSL/TLS encryption for data transmission
- Password hashing with bcrypt
- JWT-based authentication
- Regular security updates
- Access restrictions at database level
Storage Duration: Your data is stored as long as you have an active user account. After deletion of your account, your data will be completely removed within 30 days.
Data Sharing
We only share your personal data in the following cases:
- To Companies: When you apply for a position, your application documents (name, CV, cover letter) are transmitted to the respective company
- To Service Providers (processors under Art. 28 GDPR): To provide our service we use carefully selected providers: Vercel (website hosting and delivery/CDN as well as Vercel Analytics), Microsoft Azure (backend hosting and database, EU region), Google Analytics (audience measurement), Google Maps (map display), Stripe (payment processing for coworking bookings), and Resend (sending transactional emails). These providers process data on our behalf and are contractually obligated to comply with the GDPR (processing under Art. 28 GDPR). In addition, we use HubSpot as a CRM and marketing platform for our customer communication and prospect management (including contact requests, the newsletter, and contact/lead data from sign-ups). Your data is only transferred to HubSpot on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
- Legal Obligations: For official requests when we are legally obligated to do so
Some of these services are operated by providers based in the USA, so personal data may be transferred to the USA. Such transfers take place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR) or — where the provider is certified — the EU-US Data Privacy Framework. Analytics and advertising cookies are only set with your consent.
Cookies
Our website uses technically necessary cookies to ensure functionality:
- Session Cookies: To maintain the login session
- Authentication Token: JWT token in LocalStorage for secure authentication
Analytics cookies (Google Analytics, HubSpot) are only set with your prior consent, which you give via our cookie banner and can withdraw at any time using the "Cookie settings" link in the footer.
Your Rights
You have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR)
You can request information about your stored data at any time.
Right to Rectification (Art. 16 GDPR)
You can request the correction of incorrect data.
Right to Erasure (Art. 17 GDPR)
You can request the deletion of your data ("Right to be Forgotten").
Right to Data Portability (Art. 20 GDPR)
You can receive your data in a structured, machine-readable format.
Right to Object (Art. 21 GDPR)
You can object to the processing of your data.
To exercise your rights, please contact us at: anton.petuchow@nomado24.de
Right to Complain
You have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data by us.
Competent Supervisory Authority
The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34, 55116 Mainz
Changes to Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply for your next visit.
Last updated: June 2026