Privacy Policy

1. Who we are

SkillIA ("we", "us") is an employment matching service currently being founded in Munich, Germany. Until registration is complete, the data controller is: [Legal entity name and registered address: fill in after incorporation]. You can reach us at hello@contact.skill-ia.de.

2. What data we collect

• Contact form: your name, email address, company, role, and the content of your message.
• Application form: your name, email address, phone number, location, job preferences, salary expectations, your CV, and any notes you add.
• Candidate profile: information derived from your CV and our interview — such as your skills, seniority level, desired role and salary, and availability — together with a strength/suitability evaluation produced by our matching engine. We store this in our CRM to run the matching and to introduce you to the companies that need your skills.
• Technical data: the page from which you submitted a form and basic request metadata (such as IP address) used for security and abuse prevention.

3. Why we process it (legal basis)

• To answer your contact request: based on your consent and our legitimate interest in responding to you (Art. 6(1)(a) and (f) GDPR).
• To run our recruitment matching service: processing your application, interviewing you, and matching your profile with companies, based on your consent and pre-contractual steps taken at your request (Art. 6(1)(a) and (b) GDPR).
• To keep your profile for future opportunities: only if you ticked that option, based on your consent, which you can withdraw at any time.

4. Where your data is stored

Form submissions are stored in our customer-relationship system and, for applications, in a dedicated applications database. Our processors include our hosting and infrastructure providers (e.g. Vercel, our database providers, and our email delivery provider). Where providers process data outside the EU/EEA, we rely on appropriate safeguards such as EU Standard Contractual Clauses.

5. Who we share it with

We share candidate profiles with potential employers only as part of the matching process, and only to the extent needed to evaluate a match. We never sell your data.

6. How long we keep it

Contact requests are kept as long as needed to handle your request. Application data is kept for the duration of the matching process; if you consented to future matching, we keep your profile until you withdraw consent. You can request deletion at any time.

7. Your rights

Under the GDPR you have the right to access, rectify, delete, and receive a copy of your data, to restrict or object to processing, and to withdraw consent at any time with effect for the future. To exercise any right, email hello@contact.skill-ia.de. You also have the right to lodge a complaint with a supervisory authority, in Bavaria the BayLDA (Bayerisches Landesamt für Datenschutzaufsicht).

8. Cookies & Google Analytics

Our website works without profiling cookies. Where analytics cookies are used, they are only set after you consent via the cookie banner.

We use Google Analytics 4 (Google Ireland Ltd.) to understand, in aggregate, how our website is used. It runs with Google Consent Mode set to "denied" by default, so no analytics cookies are set and no analytics data is collected until you accept "Analytics" in the cookie banner. IP addresses are shortened/anonymised by GA4 by design. Legal basis: your consent (Art. 6(1)(a) GDPR), withdrawable at any time via the cookie settings. Google may process data on servers in the USA; such transfers are covered by the EU-US Data Privacy Framework and, where applicable, EU Standard Contractual Clauses. We do not send Google any data that directly identifies you.

9. Website visit tracking (known contacts)

If you are already in contact with us (for example, you received an email from us), links in that email may carry a non-identifying token. When you follow such a link and browse our website, and only if you have accepted analytics in the cookie banner, our website reports the pages you view back to our CRM, linked to your existing contact record. This lets us understand your interest and follow up relevantly.

• What is stored: the pages/URLs you visit, the referring page, your browser's user agent, and the time of the visit — associated with your contact record via the token in the link.
• Anonymous visitors are not identified. No token means no tracking; we do not attempt to identify unknown visitors.
• Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner. You can withdraw it at any time via the cookie settings, which stops tracking and clears the token from your browser.
• Retention: visit records are kept with your contact record and deleted when your data is deleted (see section 6), or earlier on request.

10. Changes

We will update this policy as our service evolves, for example once our legal entity is registered. The date at the top always reflects the latest version.