Privacy Policy

Last updated: January 15, 2026

1. Controller

The data controller for services provided under stackoverjobs.com is:

StackOverJobs GmbH
Mainzer Landstraße 27
60329 Frankfurt am Main, Germany
Email: privacy@stackoverjobs.com

2. Data Protection Officer

Our Data Protection Officer can be reached at dpo@stackoverjobs.com.

3. Data We Collect

3.1 Account Data

When you register for our services, we collect: name, email address, billing address, and payment information. This data is necessary for contract performance (Art. 6(1)(b) GDPR).

3.2 Email Data

We process email messages (headers, body, attachments) solely for the purpose of delivering email services. We do not read, analyse, or mine email content for advertising or profiling purposes.

3.3 Log Data

Our mail servers generate technical logs including IP addresses, timestamps, sender/recipient addresses, message IDs, and delivery status. These logs are retained for 30 days for troubleshooting and abuse prevention (Art. 6(1)(f) GDPR).

3.4 Website Data

When visiting our website, we collect: IP address, browser type, referring URL, pages visited, and timestamp. We do not use third-party tracking cookies or analytics services.

4. Purpose and Legal Basis

We process personal data for the following purposes:

• Service delivery — Art. 6(1)(b) GDPR (contractual necessity)
• Abuse prevention — Art. 6(1)(f) GDPR (legitimate interest)
• Legal obligations — Art. 6(1)(c) GDPR (e.g., tax retention)
• Security monitoring — Art. 6(1)(f) GDPR (legitimate interest)

5. Data Storage and Location

All data is stored in Tier-III data centres located in Frankfurt (Germany), Amsterdam (Netherlands), and Helsinki (Finland). Data never leaves the European Economic Area.

6. Data Retention

• Account data: Duration of the contract + 10 years (German tax law, § 147 AO)
• Email data: Deleted within 30 days of account termination
• Server logs: 30 days rolling retention
• Billing records: 10 years (§ 147 AO, § 257 HGB)

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Lodge a complaint with a supervisory authority (Art. 77)

To exercise any of these rights, contact us at privacy@stackoverjobs.com.

8. Sub-Processors

We use the following sub-processors, all located in the EU:

• Hetzner Online GmbH (Gunzenhausen, Germany) — Infrastructure hosting
• Stripe Payments Europe, Ltd. (Dublin, Ireland) — Payment processing

A Data Processing Agreement (DPA) is in place with each sub-processor.

9. Security Measures

We implement appropriate technical and organisational measures including: TLS encryption for all data in transit, AES-256 encryption at rest, role-based access controls, regular penetration testing, and employee security training.

10. Cookies

Our website uses only strictly necessary cookies for session management. We do not use tracking, analytics, or advertising cookies.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.

12. Contact

For any privacy-related enquiries:
privacy@stackoverjobs.com

Supervisory authority:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany