We, as the provider of the recruiting platform under recruiteroo.de, recruiteroo.net, recruiteroo.org, the-roo.de, the-roo.net, the-roo.org (also referred to as the "Website" or "Platform"), are the Controller within the meaning of applicable data protection law, in particular the General Data Protection Regulation ("GDPR"), for the personal data of the user ("you") of this app.
Below, we provide you with a clear overview of our information obligations (Art. 13 et seq. GDPR), explaining which data is processed when you use our app and on what legal basis this occurs. You will also receive information about your rights vis-à-vis us and the competent supervisory authority.
Recruiteroo GmbH
Ludwigshafener Straße 55
67141 Neuhofen
Germany
Email: info@recruiteroo.de
When you access our website merely to visit it, so-called log files are processed and automatically recorded by our system.
The following information is automatically logged as part of the log files:
The log files contain your IP address and possibly other personal data. Therefore, it is generally possible to associate them with you. However, we store your data only temporarily and, in particular, not together with other personal data.
Processing the above-mentioned data is necessary to provide our website. We also store the data for the purpose of securing our IT systems. These purposes also constitute our legitimate interest in processing the data on the legal basis of Art. 6(1)(f) GDPR. The log files, including your IP address, are deleted or anonymized immediately once they are no longer required for the aforementioned purposes, but no later than after three months.
Our website is hosted on the "Azure" hosting solution provided by Microsoft Deutschland GmbH, Walter-Gropius-Strasse 5, 80807 Munich, Germany (hereinafter the "Hosting Provider"), with servers located in Germany. This means that the data we collect when you visit and use this website is stored by our hosting provider.
The legal basis for processing your personal data is Art. 6(1)(f) GDPR, as it is in our legitimate interest to use professional service providers to securely and efficiently provide our website.
You have the option to contact us via email. The personal data you transmit to us in this way will be stored. The data is processed exclusively to properly handle your inquiry, which constitutes our legitimate interest. The legal basis for processing your personal data is Art. 6(1)(f) GDPR. The data will be stored until it is no longer necessary to achieve the purpose of the conversation and your inquiry has been fully resolved.
If your inquiry aims to conclude a contract with us, the legal basis for processing your personal data is Art. 6(1)(b) GDPR. This data will be stored as long as it is necessary for the performance of the contract or pre-contractual measures. Beyond that, we store your data only to comply with legal obligations (e.g. tax obligations) pursuant to Art. 6(1)(c) GDPR.
You may notify us at any time (see Clause 1 above) that you wish for the data provided during the conversation to be deleted. In this case, all personal data from the conversation will be deleted, to the extent permitted, and the conversation cannot be continued.
To subscribe to our newsletter, we require your consent and your email address.
We will only send you the newsletter once you have confirmed your subscription via a confirmation email sent to you for this purpose by clicking the designated link. This ensures that only you can subscribe to the newsletter. Your confirmation must be received promptly after the confirmation email is sent; otherwise, your subscription will be automatically deleted from our database.
The legal basis for sending the newsletter and processing any additional voluntary information is Art. 6(1)(a) GDPR. By submitting the newsletter subscription form, you consent to the processing of your data by us.
Additionally, we store the date and time of your data submission and your IP address during the newsletter registration process. This processing is based on our legitimate interest under Art. 6(1)(f) GDPR to ensure system security and prevent misuse. For the confirmation email, we also store the date and time of the click on the confirmation link and your IP address to trace any potential misuse of your email address.
Your data is processed exclusively in connection with the newsletter. The purpose of processing your email address is to enable us to send you the newsletter. Additional data collected during registration serves to personalize the newsletter, provide it in another language, or ensure the security of our services and prevent misuse.
Your data will be stored only as long as necessary to fulfill the purpose. Your email address will be stored for the duration of your active newsletter subscription, provided your consent is given. Automatically collected data (IP address, date, and time) will be deleted at the latest when you unsubscribe.
We use the email delivery tool provided by Mailchimp to send our newsletter. This means that the aforementioned information (email address, time of registration and confirmation, IP address, and any other voluntary information) is stored on Mailchimp’s servers.
The processing of your data by Mailchimp is based on a data processing agreement pursuant to Art. 28 GDPR, which we have concluded with Mailchimp.
Our newsletter contains a “web beacon” or “tracking pixel” (a one-pixel-sized file) that allows us to determine whether the newsletter has been opened (open rate). This is done by loading the image from the server when the email is opened. This image request is tracked and enables analysis of the open rate.
We can also determine whether links or buttons in the newsletter have been clicked (click rate). This is done by briefly redirecting the recipient through our newsletter service provider’s server before forwarding to the target address.
We can also analyze the unsubscribe rate and bounce rate (percentage of undeliverable emails relative to the total number of emails sent). These metrics help us assess the quality of our newsletters.
Technical information (e.g. IP address, browser type, time of access and newsletter opening) is also collected and statistically evaluated. The data is collected exclusively in pseudonymized form and is not linked to your other personal data. Direct personal identification is excluded. We receive aggregated statistics automatically generated by our service provider.
These statistics are used solely for the statistical analysis of newsletter campaigns and may help us tailor future newsletters to the interests of recipients. If you wish to object to this data analysis for statistical purposes, you must unsubscribe from the newsletter.
Analysis of your user behavior is carried out only if you have consented to receiving the newsletter and the associated personalized data analysis. The legal basis for this data processing is your consent pursuant to § 25(1) TTDSG and Art. 6(1)(a) GDPR.
Right of Withdrawal / Unsubscribing from the Newsletter
You may unsubscribe from our newsletter at any time. A separate withdrawal of your consent to newsletter tracking is unfortunately not possible. If you object to newsletter tracking, you must also unsubscribe from the newsletter. A link to unsubscribe is included at the end of each newsletter. You may also unsubscribe at any time by sending a message to us (Clause 1).
By unsubscribing, you withdraw your consent with future effect and object to further use of your data for newsletter delivery and tracking. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is legally permitted and explained in this policy.
Withdrawal of your consent does not affect the lawfulness of processing carried out based on your consent before its withdrawal.
You have the option to create a user account on our website using your personal data. The required information depends on whether you register as a recruiter, company, or charitable/social organization.
If you register as a Recruiter, you must provide the following information:
If you register as a Company, you must provide the following information:
After registration, we will send you a confirmation email to verify your email address. This ensures that only you can register using your email address. Your confirmation must be received promptly; otherwise, your registration request will be automatically deleted from our database.
Once your email address is confirmed, you can log in with your credentials and use the website’s features. After successful activation of your account, you will receive another email explaining the next steps for using the platform.
If you wish to register as a charitable/social organization, please contact us via email (Clause 5). Direct registration via the website is currently not possible. You must provide:
The data you provide during registration is processed to manage your account and provide related features, such as forwarding job offers (for recruiters) or displaying job offers (for companies). The legal basis for storing your account data is Art. 6(1)(b) GDPR or, if you register on behalf of a contractual partner, Art. 6(1)(f) GDPR.
We process your data as long as your account is active. If you update your information, the old data is deleted and only the updated data is stored. Beyond that, we store your data only to comply with legal obligations (e.g. tax obligations) under Art. 6(1)(c) GDPR. In such cases, your data is restricted to necessary processing only.
You may request deletion of your account at any time (e.g. via email to the address in Clause 1).
Please note: If you register as a Recruiter, and receive remuneration of EUR 2,000.00 or more per calendar year, we are legally obligated under the Platform Tax Transparency Act to report certain income-related information to the German Federal Central Tax Office (BZSt). To fulfill this obligation, we collect the following information before reaching the above threshold:
The legal basis for collecting this data is Art. 6(1)(c) GDPR in conjunction with the reporting obligations under the Platform Tax Transparency Act. For more details on data transmission to the BZSt, see Clause 19
As a Recruiter, you have the option to forward job postings published on our website to individuals known to you. For this purpose, a so-called “Unique Link” is generated for the respective job posting, which you can share with the intended recipient. To generate the Unique Link, we process the user ID assigned to your profile and the job ID assigned to the job posting in order to create a one-time link. If the recipient (hereinafter also referred to as "Applicant") clicks the link, the job posting opens. Within the job posting, your first and last name will be displayed to the Applicant so they can identify who recommended the job.
The described referral function is a core feature of our website. The legal basis for processing your data is Art. 6(1)(b) GDPR. Displaying your first and last name to the Applicant is additionally based on our legitimate interest under Art. 6(1)(f) GDPR, enabling Applicants to identify which Recruiter recommended a particular job.
If you receive a Referral Link for a job posting on our website (see Clause 10.1), you are free to decide whether or not to click the link. As long as you do not click the Referral Link, we do not receive any data from you.
If you access a job posting via a Referral Link, the provisions of Clauses 1 to 5 apply accordingly. Registration is not required to apply for the referred job.
You are free to decide whether to apply for the referred position. If you choose to apply, you must first provide the following contact information:
You may also voluntarily submit additional documents, such as certificates or a cover letter.
Pre-screening of application documents by the Recruiter:
If the Recruiter has opted to conduct a pre-screening of your application documents before sending the Referral Link, your documents will first be forwarded to the Recruiter before being sent to the company you wish to apply to. The Recruiter then has five days to review the application and decide whether to forward it to the company. In both cases, you will be informed by email. If no review is conducted within five days, the application will automatically be forwarded to the company. You will also be informed of this by email.
We point out that if the Recruiter has opted for pre-screening, we are not responsible for any further processing of your personal data by the Recruiter.
Forwarding of application documents to the advertising company:
Your application documents (possibly subject to successful pre-screening by the Recruiter, see above) will be forwarded to the company to which you are applying. The company is solely responsible for further processing of your personal data during the application process. For information on how the company processes your personal data, please refer to the company’s own privacy policy.
If your application process is successfully completed, the recommendation made by the referring Recruiter is considered successful. In this case, the Recruiter accrues a commission (see Clause 11). The Recruiter can view the status of your application on the website, where it is indicated whether the application process has been successfully completed, is still pending, or has been rejected.
The legal basis for forwarding your data to the company is Art. 6(1)(b) GDPR, as the processing enables you to apply for the respective job posting and thus constitutes pre-contractual measures.
The legal basis for forwarding your data to the Recruiter is Art. 6(1)(f) GDPR, as it is in the legitimate interest of Recruiters to review application documents before forwarding them to the company in order to maximize their chances of earning a commission. It is also in the legitimate interest of Recruiters to be informed about the status of the application process to determine whether a commission-triggering placement has occurred.
We process your data as long as the application process is ongoing. Upon your request (e.g. via email), all personal data related to the application will be deleted, unless a longer retention period is required to protect our legitimate interests and your interests do not override this (Art. 6(1)(f) GDPR).
In addition to the data you voluntarily submit with your application, we may receive the timestamp (date and time) of your data submission. Processing this data is based on our legitimate interest (Art. 6(1)(f) GDPR) to ensure system security and prevent misuse. This data will be deleted once it is no longer needed, at the latest after the application process is completed.
We forward your personal data related to the application to the Recruiter and the company at your request. We have no influence over and are not responsible for how your application documents are processed by the Recruiter or the company. Their processing of your data is subject to their respective privacy policies.
As a Recruiter, you receive a commission from the advertising company for each job offer you successfully refer. Payment is processed via the external provider Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (hereinafter "Stripe") using the “Stripe Connect” feature. You must first create a user account with Stripe.
The personal data collected by Stripe during the creation of your user account remains with Stripe. We only query the payment status from Stripe. We have no influence over and are not responsible for Stripe’s processing of your data. For information on how Stripe processes your data, please refer to: https://stripe.com/en-de/privacy
Stripe, through its service providers, may use information from infoscore Consumer Data GmbH to verify the identity of Stripe Business Users in Germany. For information about infoscore Consumer Data GmbH, please refer to: https://www.experian.de/icd-infoblatt
The legal basis for processing the data is Art. 6(1)(b) and (f) GDPR. Data is stored as long as necessary for payment processing and to fulfill our obligations under any website user agreement with you. It is in our legitimate interest to enable you to track your current and past earned commissions on our website. Beyond that, we store your data only to comply with legal obligations (e.g. tax obligations) pursuant to Art. 6(1)(c) GDPR. In such cases, your data is restricted to necessary processing only.
As the operator of a digital platform, we are obligated under the Platform Tax Transparency Act to report certain personal data of our users to the German Federal Central Tax Office (BZSt). This concerns information about income earned by Recruiters on our platform, provided that a remuneration of at least EUR 2,000 has been credited to them within a calendar year. This applies to both Recruiters residing in Germany and those residing in other EU countries. The BZSt forwards the received information to the competent German tax offices or – in the case of EU-based Recruiters – to the relevant European authorities.
The transmission of information is carried out electronically via a data interface. We are legally obligated to transmit the following information to the BZSt:
The legal basis for processing your data for the aforementioned purposes is Art. 6(1)(c) GDPR in conjunction with the reporting obligations under the Platform Tax Transparency Act.
The aforementioned data will be deleted once it is no longer required. Beyond that, we store this data only to comply with legal obligations (e.g. tax obligations; retention obligations under the Platform Tax Transparency Act) pursuant to Art. 6(1)(c) GDPR. In such cases, your data is restricted to necessary processing only.
Social media plugins from social networks (Facebook, Instagram, LinkedIn) are integrated into our Platform. However, data is not transmitted to the respective social media platforms immediately upon visiting our website, but only when you actively click the respective share button (Shariff function).
If you are already logged into the social media platform at the time of clicking the button, a window will appear allowing you to confirm whether you want to share the content on the respective platform. If you are not logged in, a login window will appear for the respective platform.
To obtain and document user consent for the cookies and tools we use, we employ the cookie consent tool provided by Orest Bida.
Orest Bida sets a technically necessary cookie to store your cookie consents. This cookie stores the consents you have given when accessing the Platform. If you wish to revoke these consents, simply delete the cookie in your browser. When you revisit or reload the Platform, you will be asked again for your cookie consent. For more information, please refer to our cookie information.
The legal basis for using Orest Bida is Art. 6(1)(f) GDPR, as it is in our legitimate interest to use the services of a professional provider to manage and document user cookie consents.
When we process your data, you are a “data subject” within the meaning of the GDPR. You have the following rights:
Below are details on each right:
You have the right to request confirmation from us as to whether we process your personal data. If we do, you have the right to access information about the processing purposes, categories of personal data, recipients or categories of recipients, and, if applicable, the storage duration.
SYou have the right to have inaccurate or incomplete personal data corrected or completed. We will do so without undue delay.
Under certain conditions, you have the right to request restriction of the processing of your personal data. For example, if you contest the accuracy of your data, we may restrict processing while we verify it. Another example is if we no longer need your data, but you require it for legal claims.
You have the right to request the immediate deletion of your personal data under certain circumstances, e.g. if the data is no longer needed for its original purpose or was unlawfully processed. This right may not apply if we are legally obligated to retain the data or need it for legal claims.
If you exercise your right to rectification, erasure, or restriction of processing, we are obligated to inform all recipients to whom we disclosed your personal data, unless this is impossible or involves disproportionate effort.
Under certain conditions, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller. You may also request that we transmit the data directly to another controller, where technically feasible and where this does not adversely affect the rights and freedoms of others.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
If we process your personal data for direct marketing, you have the right to object at any time. This also applies to profiling related to direct marketing. If you object, we will no longer process your data for these purposes.
You have the right under Art. 7(3) GDPR to withdraw your consent at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority, without prejudice to other administrative or judicial remedies. You may exercise this right in the Member State of your residence, workplace, or the place of the alleged infringement if you believe that the processing of your personal data violates the GDPR.
A list of data protection authorities and their contact details can be found here:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
Effective date: September 2025
We use cookies on our website. Cookies are text files sent by our web server to your browser during your visit and stored on your device for later retrieval. Cookies are sent to our server with each request or page view. This allows your browser to be identified when you revisit the website.
Some features on our website also use Web Storage Objects, which function similarly to cookies but are stored in your browser and generally not transmitted to the server.
There are session cookies, which are deleted when the browser is closed, and persistent cookies, which remain stored until their expiration date or until manually deleted. Web Storage Objects include Local Storage Objects (which never expire) and Session Storage Objects (which are deleted when the browser is closed).
Cookies are categorized as:
You can configure your browser to block or allow cookies and similar technologies. You can also view and delete stored cookies. Blocking all cookies may limit website functionality.
Revocation and Removal Options
As mentioned above, you can manage cookie settings in your browser. Stored cookies and Web Storage Objects can be deleted at any time. Restricting or disabling cookies may affect website functionality.
Cookies and Web Storage Objects Used on Our Website:
Technically Necessary:
| Name | Purpose | Storage Duration |
|---|---|---|
| Stripe | Management of finances and transactions | Duration of use |
| Management of Google login functionality | Duration of use | |
| Local Storage | Storage of logged-in user information | --- |
Optional:
| Name | Purpose | Storage Duration |
|---|---|---|
| - | - | - |
September 2025