Skip to content
Finance AI Careers

Legal

Privacy Policy

Last updated: September 14, 2026

Finance AI Careers is an editorial publication. We collect as little personal data as possible. This policy explains what we process, why, the legal basis, how long we keep it, and your rights under the GDPR / DSGVO.

1. Data Controller

HAREMO IT Solutions GmbH, Wellingsbütteler Landstr. 193, 22337 Hamburg, Germany. For privacy inquiries: info@financeaicareers.com. We have not appointed a Data Protection Officer, as we are not required to under Art. 37 GDPR or § 38 BDSG (no large-scale or systematic monitoring, no special-category processing).

2. What We Collect

  • Technical/server data: when you visit, our hosting provider processes your IP address, browser/user-agent, requested URL and timestamps in standard server logs, to deliver the site securely.
  • Analytics: we use Vercel Web Analytics, which sets no cookies, to see which pages get read. For each page view or custom event, Vercel records the page URL, the route, filtered query parameters, the referring page, a timestamp, your location to city level, and your operating system, browser and device type. The only custom event today records that the interview readiness check was completed and the overall score it gave, never your individual answers (see section 8). To tell visits apart, Vercel derives a hash from your IP address and user agent, which it discards after 24 hours. It does not build a profile of you and does not use any cross-site identifier. See section 5 for retention and section 6 for the processor.
  • Email address: not collected. No sign-up form appears anywhere on the Site, and the endpoint that would accept an address is switched off: it answers every request with an error, without reading or storing what was sent. If we ever turn it on, an address would be taken only when you enter it yourself and confirm via double opt-in, and this policy will describe that here before it happens. We do not buy or scrape email addresses.
  • Messages you send us: if you email us, we process your email address and the content of your message to reply. The legal basis is our legitimate interest in answering (Art. 6(1)(f) GDPR). See section 5 for how long we keep it.
  • We do NOT collect: CV/document uploads, payment data, account profiles, or special-category data. We do not run advertising trackers.
  • You are under no legal or contractual obligation to provide personal data; without the request data your browser sends, the Site cannot be delivered.

3. Legal Basis (GDPR Art. 6)

  • Art. 6(1)(f) legitimate interests: operating and securing the website (server logs, abuse prevention) and understanding aggregate readership through cookieless analytics (Vercel Web Analytics), which does not identify individual visitors.

4. How We Use Your Data

To serve the site reliably and securely, and to detect and prevent abuse. We do not use your data for automated decision-making or profiling, and we currently send no email of any kind, so there is no mailing use to describe.

5. Data Retention

  • Server logs: kept for one day, the log retention period of our hosting plan (Vercel Pro).
  • Analytics: kept for a 12-month reporting window on our Vercel plan. Vercel states that it may store analytics data for longer than that window. The hash that tells visits apart is discarded after 24 hours.
  • Messages you send us: deleted once the matter is settled, unless a statutory retention duty requires us to keep them longer.

6. Processors & International Transfers

We use Vercel Inc. for two things: hosting and content delivery (serving the site to you), and Vercel Web Analytics, an analytics tool built into that same hosting. Vercel Web Analytics sets no cookies and stores nothing on your device. It records the data points listed in section 2 for each page view or custom event, and tells visits apart by a hash of your IP address and user agent that Vercel discards after 24 hours; we see only aggregate figures. Vercel processes data in the EU and the US. Transfers to the US rest on Vercel’s certification under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); the EU Standard Contractual Clauses in Vercel’s data processing agreement apply as the fallback (Art. 46(2)(c) GDPR). You may request a copy of the relevant safeguards from us. We use no other processor today: no email service and no database hold any data from this Site, because the Site collects none to hold. If that changes, this section will name the processor before it receives anything.

7. Cookies

The Site sets no cookies and writes nothing to your browser’s local or session storage. Our analytics script (Vercel Web Analytics) reads your browser’s user agent, whether the browser reports that automation software is controlling it, the address of the page and the referring page, and sends the page URL, route, referrer, a timestamp and custom events to Vercel; it stores nothing on your device. See our Cookie Policy for details. Any non-essential cookies we might add in future are set only with your prior consent.

8. Quizzes and the Readiness Check

The interview readiness check and the quizzes in the guides are scored inside your browser, and your individual answers are never transmitted to us. When you finish the readiness check, the Site records, without identifying you, that the check was completed and the overall score it gave: a custom analytics event that carries none of your answers. The quizzes in the guides send nothing. Nothing on the Site asks for an email address, and we do not run a mailing list. If we ever add one, it will require double opt-in under German UWG, meaning you would have to click a confirmation email before anything is sent, and this page will describe that before it goes live, not after. We do not sell email addresses, and we never send on behalf of a third party.

9. Your Rights Under the GDPR

You have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20) and to withdraw consent (7(3)), and the right to object (21), set out separately in section 10. To exercise any of these, email info@financeaicareers.com. We respond within one month. You also have the right to lodge a complaint with the supervisory authority: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-hamburg.de).

10. Right to object (Art. 21 GDPR)

All processing described in this policy rests on our legitimate interests under Art. 6(1)(f) GDPR. You have the right to object to it at any time, on grounds relating to your particular situation. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. To object, email info@financeaicareers.com.

11. Security

The site is served exclusively over HTTPS/TLS, and we apply appropriate technical and organisational measures to protect data against unauthorised access, alteration or loss.

12. Changes

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.