Back to homepage

Privacy policy

This website (jacvault.de) · As of: July 2026

This is an English courtesy translation. In case of any discrepancy, the German version prevails. The applicable law remains the GDPR and the German Federal Data Protection Act (BDSG).

This privacy policy applies to the website jacvault.de. For use of the application at app.jacvault.de (registration, account, creation of application documents), the separate privacy policy linked there applies.

1. Controller

The controller within the meaning of the GDPR is:
Alexander Vitanyi
Pettenkoferstr. 10, 10247 Berlin, Germany
Email: support@jacvault.de

2. Hosting

This website is hosted by, or delivered via the content delivery network of, Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you access the website, Cloudflare processes technical access data, in particular the IP address of the requesting device, the date and time of access, the address requested, and browser and operating system information. This is technically necessary in order to deliver the website and ensure its security and stability (protection against attacks). The legal basis is Art. 6(1)(f) GDPR.

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Insofar as data is transferred to the USA, this takes place on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework), under which Cloudflare is certified, and additionally on the basis of standard contractual clauses. Further information: Cloudflare’s privacy policy.

3. Analytics (PostHog)

With your consent, we use PostHog (PostHog, Inc.) to analyze, in pseudonymized form, how our website is used (e.g. pages viewed, approximate region based on the shortened IP address, device type, time spent). The processing takes place via PostHog’s EU infrastructure within the European Union. In doing so, cookies or comparable identifiers are set in your browser’s local storage.

The legal basis for setting the identifiers and the subsequent analysis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Without your consent, no analytics takes place. You can withdraw your consent at any time with effect for the future — via the “Cookie settings” link in the footer. A data processing agreement pursuant to Art. 28 GDPR is in place with PostHog. The data collected is deleted after 12 months at the latest.

4. Cookies and local storage

To store your decision about analytics, we place a single entry in your browser’s local storage (“jac-cookie-consent”). This is technically necessary in order to respect your choice, contains no personal data and is not transmitted to third parties (Art. 6(1)(f) GDPR). Any further cookies — in particular those requiring consent — are only set after your consent (see section 3).

5. Fonts

The fonts used on this website are served locally from our server. There is no connection to third-party servers (e.g. Google Fonts), and no personal data is transmitted to third parties for this purpose.

6. Contacting us

If you contact us by email, we process your details (email address, name, content of the message) solely to handle your inquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is deleted once your inquiry has been conclusively dealt with and no statutory retention obligations prevent this.

7. Browser extension (JACVault extension)

The optional JACVault browser extension (Chrome) helps you capture job postings and import your own professional profile. It is an add-on to the web app and requires a JACVault account.

  • Data processed: Only upon your active action (clicking “Capture”) does the extension read the visible text of the page you currently have open — for a job posting: title, company, location and posting text. For the profile import we process the profile PDF you exported yourself from LinkedIn. There is no silent background reading.
  • Transmission: Captured data is transmitted solely to our backend (app.jacvault.de) into your personal JACVault account, authenticated via your existing session. No sharing with third parties, no selling, no tracking.
  • Permissions: Access to a website is granted by you per page at runtime, not at installation. A session token is stored locally in your browser so the extension stays connected to your account.

The legal basis is Art. 6(1)(b) GDPR (provision of the function you requested). You can uninstall the extension at any time without giving reasons.

8. Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw a given consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please contact support@jacvault.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, BlnBDI).

9. Currency and changes

This privacy policy is dated July 2026. We reserve the right to amend it if our website, the services we use, or legal requirements change. The version available here at any given time applies.