Privacy Policy

As EUROPE GROUP CONSULTANCY DOO ("WerdeJob", "we", "our"), we consider the protection of personal data of all users ("you", "user", "candidate", "employer") who use the werdejob.com platform as our highest priority. This Privacy Policy explains how your personal data is collected, for what purposes it is processed, with whom it may be shared, how it is protected, and your rights in this regard.

1 Data Controller

The data controller ("Data Controller" under GDPR / "Veri Sorumlusu" under KVKK) within the scope of this Privacy Policy is the following legal entity:

• Company Name: EUROPE GROUP CONSULTANCY DOO BELGRAD
• Trade Registry No: 22158104
• Tax ID No: 115438890
• Registered Address: Bulevar Milutina Milankovića 9Ž, Novi Beograd, 11070 Beograd, Republika Srbija
• Germany Office: Hammer Straße 19, 40219 Düsseldorf, Deutschland
• Email: info@werdejob.com

2 Personal Data Collected

The following categories of personal data may be collected during your use of our platform:

2.1. Identity and Contact Information

• Name, surname, date of birth, nationality
• Email address, phone number
• Residential address, postal code, city, country

2.2. Professional and Educational Information

• Profession group (healthcare, engineering, education, law)
• Diplomas and certificates, educational background, graduation year, university name
• Professional experience duration and details
• Foreign language levels (German, English, etc.)
• CV (resume) and motivation letters

2.3. Service Process Data

• Diploma recognition (Anerkennung) application information and process status
• Visa application information, passport number (if shared)
• Job applications, preferred positions, and employer matching data
• Eligibility test results
• Consulting meeting notes and appointment records

2.4. Financial Information

• Purchased service packages and payment history
• Invoice information (name, address, tax number)

Credit card information is not stored directly by WerdeJob; payment transactions are processed through PCI-DSS compliant third-party payment infrastructures.

2.5. Technical and Usage Data

• IP address, browser type and version, operating system
• Browsing data on the platform, page view durations
• Cookie data and session information
• Device information and screen resolution

2.6. Profile Images

• Profile photo uploaded by the user

3 Purposes of Data Processing

Your personal data is processed for the following legitimate purposes:

• Account Management:Creation of your user account, authentication, session management
• Service Delivery:Providing diploma recognition consulting, visa process management, job matching, language training referral, and settlement support services
• Job Matching:Evaluating and matching your profile with employers in Germany
• Communication:Updates on your service processes, appointment reminders, status updates
• Legal Obligations:Compliance with tax legislation, commercial law, and international regulations
• Platform Development:Anonymous statistical analysis to improve our service quality
• Security:Fraud detection, ensuring platform security, preventing unauthorized access
• Marketing:Informational emails about our services with your explicit consent (with opt-out option at all times)

4 Legal Bases for Data Processing

We process your personal data based on the following legal grounds:

• Performance of Contract (GDPR Article 6(1)(b)):Fulfillment of the service packages and consulting processes you have registered for
• Legal Obligation (GDPR Article 6(1)(c)):Legal obligations under tax, commercial, and immigration law
• Legitimate Interest (GDPR Article 6(1)(f)):Platform security, fraud prevention, service improvement
• Explicit Consent (GDPR Article 6(1)(a)):Marketing communications, cookie usage, profile photo sharing

5 Data Sharing

Your personal data may be shared with third parties under the following conditions:

• Employers:Within the scope of job matching services, your profile and CV may be shared with registered employers in Germany with your consent
• Recognition Authorities:During the diploma recognition process, required documents may be submitted to relevant German authorities (Anerkennungsstelle)
• Visa and Consulate:During the visa application process, necessary information sharing may be made with the relevant consulate and foreigners office (Ausländerbehörde)
• Service Providers:Under data processing agreements with technical infrastructure (hosting, email, payment) providers
• Translation Offices:Within the scope of document translation services, relevant documents may be forwarded to sworn translators
• Legal Requirements:With authorized institutions as required by court order, prosecution request, or legal regulation

6 International Data Transfer

WerdeJob operates in Serbia and Germany. Due to our services, your personal data may be transferred within the European Economic Area (EEA) or to countries whose adequacy has been confirmed by the European Commission. When data transfer outside the EEA is required, Standard Contractual Clauses (SCC) under GDPR Article 46 apply.

7 Cookies

The following types of cookies are used on our platform:

• Essential Cookies:For basic functions such as session management, CSRF protection, and language preference. The platform cannot function properly without these cookies.
• Analytics Cookies:To anonymously collect platform usage statistics (with your consent).
• Preference Cookies:To remember user settings such as theme and notification preferences.

You can manage or delete cookies from your browser settings. Disabling essential cookies may affect platform functionality.

8 Data Retention Periods

• Account Information:As long as your account is active + 30 days from account deletion request
• Service Process Data:During the legal retention obligation period after service completion (typically 5-10 years)
• Financial Records:10 years as required by tax legislation
• Communication Records:3 years
• Technical Logs:12 months
• Cookie Data:1 day — 12 months depending on cookie type

9 Data Security Measures

We implement the following technical and administrative measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data communications
• Database encryption and regular backups
• Password hashing (bcrypt algorithm)
• Role-based access control (RBAC) — authorized personnel access only
• CSRF, XSS, and SQL injection protections
• Regular security audits and software updates
• Physical server security (data centers hosted in Europe)
• Employee confidentiality agreements and data protection training

10 User Rights

Under GDPR and KVKK, you have the following rights:

• Right to Information:To learn which personal data of yours is being processed
• Right of Access:To request a copy of your processed data
• Right to Rectification:To request correction of your inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten):To request deletion of your data under certain conditions
• Right to Restriction of Processing:To request temporary suspension of processing of your data
• Right to Data Portability:To receive your data in a structured, commonly used, and machine-readable format
• Right to Object:To object to data processing for legitimate interest or marketing purposes
• Right to Object to Automated Decision-Making:To object to decisions based solely on automated processing, including automated profiling
• Right to Withdraw Consent:To withdraw your consent at any time (withdrawal does not affect the legality of processing prior to withdrawal)

11 Children's Privacy

The WerdeJob platform is intended for individuals aged 18 and over. We do not knowingly collect or process personal data of individuals under 18. If such a situation is detected, the relevant data will be immediately deleted.

12 Right to Complaint

You can submit your complaints regarding the processing of your personal data to the following authorities:

• Serbia:Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti (www.poverenik.rs)
• Germany:Data Protection Supervisory Authority of the relevant state (Datenschutzaufsichtsbehörde)
• Turkey:Personal Data Protection Authority — KVKK (www.kvkk.gov.tr)

13 Policy Changes

This Privacy Policy may be updated from time to time. When significant changes are made, a notification will be sent to your registered email address and an announcement will be posted on the platform. Continuing to use the updated policy means you accept the changes.

14 Contact

For any questions, requests, or complaints regarding our privacy policy:

• Email: info@werdejob.com
• Germany Office: Hammer Straße 19, 40219 Düsseldorf, Deutschland
• Phone: +90 850 532 2524