This is a non-binding translation for convenience. The German version is the legally authoritative one.
Privacy Policy
Here, in plain language, we explain what data Jonder processes, why, for how long, and what rights you have.
Last updated: 28 September 2026
1. Controller
Jonder Deutschland GmbH
Offenbacher Landstraße 405a
60599 Frankfurt am Main
Germany
Represented by: Ahmet Onur Yilmaz
Email: hallo@jonder.jobs
2. Data Protection Officer
We have not appointed a data protection officer, because the requirements of Art. 37 GDPR (Datenschutz-Grundverordnung) and Section 38 of the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) are currently not met in our case. For any questions about data protection, you can reach us at the address given above.
3. In brief
- Professionals create an anonymous profile. Companies initially see neither name nor contact details, only profession, experience, skills, region and salary expectations.
- Name, contact details, photo and documents only become visible once the professional releases them themselves during a conversation.
- Companies with the Equal Rights Seal search in blind mode: without name, photo, free-text fields, personality type or dates.
- Professionals use contact rules to determine who is even allowed to write to them.
- The data is stored on a server in Germany. There are no advertising or tracking cookies.
4. Data Processed, Purposes and Legal Bases
| Data | Purpose | Legal basis |
|---|---|---|
| Account: email, password (stored only as a hash), role, sign-up time | Access, security of the login | Art. 6(1)(b) GDPR (contract) |
| Professional's profile: professional field, role, experience, skills, education, region and radius, salary expectations, availability, voluntary details such as free-text fields, photo or personality type | Displaying the profile in search, matching with suitable companies | Art. 6(1)(b) GDPR; voluntary details additionally Art. 6(1)(a) GDPR (consent) |
| Name, contact details, resume and other documents | Disclosure to a company after explicit release by the professional | Art. 6(1)(b) and (a) GDPR |
| Company data: company name, address, industry, size, contact persons, plan, job postings, gallery | Operating the company account, presentation to professionals | Art. 6(1)(b) GDPR |
| Messages, appointment requests, calendar entries and shared documents | Communication between professional and company, record of the exchange | Art. 6(1)(b) GDPR |
| Contact rules and visibility settings | Enforcing your requirements as to who may contact you | Art. 6(1)(b) GDPR |
| Invoicing and payment data of companies, and proof of upgrade purchases | Billing, bookkeeping | Art. 6(1)(b) and (c) GDPR (Secs. 147 of the German Fiscal Code (Abgabenordnung, AO), 257 of the German Commercial Code (Handelsgesetzbuch, HGB)) |
| Server logs: IP address, timestamp, page accessed, browser | Operation, troubleshooting, defense against attacks | Art. 6(1)(f) GDPR (security of the service) |
| Inquiries via the contact form or support | Processing your inquiry | Art. 6(1)(b) and (f) GDPR |
| Newsletter, if subscribed | Sending updates | Art. 6(1)(a) GDPR, revocable at any time |
5. Anonymity and Release
Profiles are shown to companies in anonymized form. Only once you, as a professional, release your name, photo or a document in chat does the company receive that data. The release always applies to that individual conversation. Companies with the Equal Rights Seal additionally see no free-text fields, no personality type and no dates, only the duration of professional positions.
6. Recipients
- Companies on Jonder that write to you or that you have released data to. They are independently responsible for their further processing and have committed to complying with the GDPR.
- Hosting: STRATO GmbH, Berlin. The servers are located in Germany. Data processing agreement under Art. 28 GDPR.
- Email delivery: World4You Internet Services GmbH, Austria, for sending notifications, invitations and password links.
- Payments: Stripe Payments Europe Ltd., Ireland, for card payments, Apple Pay and Google Pay. You enter card details directly with Stripe; we never see them. Data may be transferred to the US; Stripe relies on the European Commission's Standard Contractual Clauses for this. During the test phase, payments are simulated.
- Video appointments: A video appointment via "Jonder Video" is handled via meet.jit.si. Connection data is transmitted to the operator of this service. You may instead choose Microsoft Teams, Zoom, Google Meet, phone, or an in-person appointment.
- Authorities, insofar as we are legally obliged to do so.
We do not pass on data for advertising purposes. We do not sell data.
7. Cookies and Local Storage
Jonder uses a technically necessary cookie for logging in. Without this cookie, login does not work. The settings of the accessibility menu and the notice about new updates are only stored locally in your browser and are not transmitted to us. No tracking, analytics or advertising cookies are used, which is why there is no cookie banner.
8. Retention Period
| Data | Duration |
|---|---|
| Profile and account | until deleted by you; the data is then removed |
| Messages, appointments and shared documents | until the account is deleted, for a maximum of three years after the last contact |
| Invoices, receipts and accounting data | ten years, due to tax and commercial law retention obligations |
| Server logs | generally seven days |
| Backups | fourteen days, after which they are overwritten |
After deletion, data may briefly remain in backups. It is not used further there and expires along with the backup.
9. Automated Decisions and Search Ranking
The search ranks profiles based on how well they match the search criteria as well as any booked visibility upgrades such as "Highlight" or "Boost". No automated decision within the meaning of Art. 22 GDPR that produces legal effects concerning you takes place. Any contact, invitation or hiring decision is always made by humans.
10. Your Rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), as well as the right to object to processing based on legitimate interests (Art. 21 GDPR). You can revoke any consent given at any time with effect for the future. You can exercise many of these rights directly in the app: edit your profile, change visibility, export data or delete your account. Otherwise, a message to hallo@jonder.jobs is sufficient.
You can also lodge a complaint with a supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), P.O. Box 3163, 65021 Wiesbaden, Germany.
11. Obligation to Provide Data
We need an email address and password for an account, and the professional details for a profile. Without this data, we cannot provide the service. All other information, such as a photo, free-text fields or personality type, is voluntary.
12. Security
Data is transmitted in encrypted form via HTTPS. We store passwords exclusively as hashes. Access to the systems is limited to a small number of people, and backups are made daily.
13. Changes to This Policy
We adapt this policy whenever the service or the legal situation changes. The version published here always applies.
More information: Legal Notice · Terms · Accessibility Statement