givemework.de logogivemework.de

Privacy Policy

Last updated: 1 May 2026

We designed givemework.de with privacy in mind. This page explains, in line with the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG, formerly TTDSG), what data we process and why.

Data controller

Responsible for data processing on this website under Art. 4 (7) GDPR is:

Johannes Winkler
Bachstraße 29
84489 Burghausen
Deutschland

E-Mail: j.winkler@apps4.ai

What we collect

Only the messages you send in chat and the language you select. We do not ask for your name, address, passport or residence permit. No account, no registration.

How long we keep it

Chat messages are stored on our EU-based servers for up to 90 days, then automatically and permanently deleted by a daily cleanup job.

No chat history

Your chat lives only in your browser tab. Reloading the page or closing the tab starts a fresh chat — old chats cannot be recovered.

AI processing

Your messages and voice recordings are sent to Google (Gemini API) for reply generation and transcription. Do not share sensitive personal documents, passport data or health data in chat.

Legal bases

We process your data on the following legal bases: Art. 6 (1) lit. b GDPR (performance of the chat service you requested), Art. 6 (1) lit. f GDPR (legitimate interest in operation, IT security, abuse prevention and anonymous audience measurement) and § 25 (2) no. 2 TDDDG for storage in your device that is strictly necessary (e.g. your language choice). We only obtain consent under Art. 6 (1) lit. a GDPR if non-essential features are activated — currently this is not the case.

Purposes of processing

We process your data exclusively to (1) answer your questions in the anonymous chat, (2) query job, course, coaching, training and salary data from the Federal Employment Agency (Bundesagentur für Arbeit) on your behalf, (3) transcribe voice messages into text, (4) keep the service available and secure, (5) prevent abuse and attacks, and (6) anonymously measure usage to improve the website.

Categories of personal data

(a) Chat content: messages you type or record, plus AI replies. (b) Technical metadata: anonymous chat ID (UUID), timestamp, selected UI language, optionally your stated German level. (c) Server logs: anonymized request data for security. (d) Anonymous audience data: page views, referrer, approximate region, device class — no cookies, no profiling. We do not collect names, email addresses, full IP addresses, advertising IDs or device fingerprints.

Voice messages

When you use the microphone, the audio recording is sent solely for transcription to Google (Gemini API). The recording is not stored permanently after transcription; only the recognized text becomes part of your chat and is subject to the 90-day deletion rule.

AI processing in detail

Both reply generation and speech-to-text transcription run on the Google Gemini API (Google Ireland Ltd.) using the Gemini Flash model. Content of your requests is processed under Google's terms. We use API endpoints under which Google does not train its models on your data. Even so: do not enter sensitive third-party personal data, health data, passport or residence documents into the chat.

Federal Employment Agency data

Job offers, German courses, coaching, training and salary information are queried in real time via the open APIs of the Bundesagentur für Arbeit (BA). Your search terms (e.g. occupation, location) are transmitted to the BA. No personal data about you is sent to the BA.

Audience measurement

To improve the website we use a cookieless, privacy-friendly audience measurement provided by our hosting (Lovable Analytics). Only aggregated, anonymous data is collected: page views, referrer domain, approximate geographic region (country) and device class. No cookies are set, no full IP address is stored, and no cross-device profile is built. Identification of individuals is not possible. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in data-minimised statistics); consent under § 25 TDDDG is not required because no non-essential information in your device is accessed.

Recipients / processors

Hosting, database, audience measurement and edge functions: Lovable AB (Stockholm, Sweden) on top of Supabase and Cloudflare — servers in the EU. AI processing (replies and voice transcription): Google Ireland Ltd. (Gemini API). Subject-matter data: Bundesagentur für Arbeit (public APIs). No data is sold and no advertising tracking takes place. Data Processing Agreements under Art. 28 GDPR are in place with all processors, or we use only interfaces whose providers have entered into corresponding obligations.

International data transfers

AI requests to the Gemini API are primarily processed in EU data centres. Transfer to third countries (e.g. USA) by Google within its infrastructure may occur. Google is certified under the EU-US Data Privacy Framework; in addition, the EU Standard Contractual Clauses apply (Art. 46 (2) lit. c GDPR).

Retention

Chats and messages: up to 90 days, then automatically deleted by a scheduled cleanup job. Voice recordings: not permanently stored (only the transcript, then treated like chat). Server logs: typically max. 14 days, exclusively for security and abuse prevention. Audience data: aggregated, with no personal reference, per the hosting provider's terms.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future. Because the service is anonymous, identifying your chat usually requires the chat ID stored in your browser tab. Send requests to the email address listed in the imprint.

Right to lodge a complaint with a supervisory authority

You may lodge a complaint with a data protection supervisory authority at any time — in particular in the EU member state of your residence, place of work or the place of the alleged infringement. Competent authority for our seat: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Cookies and local storage

We do not set tracking, analytics or advertising cookies. We use only strictly necessary local storage (web storage) under § 25 (2) no. 2 TDDDG: your selected language, your acknowledgement of this notice, and — during the session — the chat ID so your chat works inside the tab. These entries remain in your browser and are not transmitted to third parties.

Protection of minors

The service is intended for adults. Persons under 16 should only use the chat with the consent of a parent or guardian. We deliberately do not collect age information and cannot actively detect minors.

Security

Data is transmitted exclusively encrypted via HTTPS/TLS. Access to stored chats is restricted technically and organisationally to the operator and the named processors. We use Row-Level Security in the database, rate limits and abuse detection.

No automated individual decisions

No automated decision-making within the meaning of Art. 22 GDPR takes place. AI replies are non-binding information and do not replace advice from the Federal Employment Agency, lawyers or other professional bodies.

Changes to this policy

We may update this privacy policy when the service, the processors used or legal requirements change. The version published on this page applies.