Privacy policy

Working draft, awaiting review by a lawyer. It describes the website as it currently runs.

Who is responsible

InterfaceLab OÜ, see the legal notice. Contact: contact@careerbahn.com.

The readiness check

The readiness check runs in your browser. Your answers are not sent to us unless you ask for your plan by email (see below). If you close the page without doing that, they are gone.

Hosting and server logs

The website is hosted by Vercel Inc. When you open a page, the hosting service processes technical data such as your IP address and browser type to deliver the page and protect it against abuse (Art. 6(1)(f) GDPR). We do not use these logs to identify visitors.

Fonts

Our Latin fonts are served from our own website. The Urdu fonts are served through the website build as well; no font requests go to Google from your browser.

Cookies

We set one small functional cookie that remembers your language choice. See the cookie notice.

Statistics (only with your consent)

If you click "Accept statistics" in the cookie banner, we load the tools below to see which pages are used and where visitors get stuck. If you reject, or do nothing, they are not loaded at all. Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). You can withdraw it at any time through "Cookie settings" at the bottom of every page.

Google Analytics 4 (Google Ireland Limited, Dublin). Collects usage data such as pages viewed, device and browser type, approximate location and the readiness-check stage reached (never your answers or contact details). Data may be transferred to Google LLC in the USA under the EU–US Data Privacy Framework. Advertising features are switched off. Google's privacy policy.

Microsoft Clarity (Microsoft Ireland Operations Limited, Dublin). Records how pages are used (clicks, scrolling, page structure) to show where the site is confusing; text you type into fields is masked. Data may be transferred to Microsoft Corporation in the USA under the EU–US Data Privacy Framework. Microsoft's privacy statement.

Email sign-up (readiness plan and updates)

If you ask for your plan by email, we store your first name (optional), your email address, your readiness-check answers, the result, the date, and which version of the consent text you saw. We send you a confirmation link first (double opt-in); nothing else is sent until you click it. Legal basis: your consent (Art. 6(1)(a) GDPR).

We use Brevo (Sendinblue SAS, Paris, France) to send emails and Supabase (database, servers in Frankfurt, Germany) to store the data, both under data processing agreements. Brevo records whether emails are opened and links clicked, so we can see which guides help.

How long: if you never confirm, your data is deleted after 30 days. If you unsubscribe (one click in any email), your contact details are deleted 90 days later; we keep only anonymous statistics. Proof of your consent is kept as long as we need to be able to show it.

Links to other websites

We link to YouTube, Instagram and official government websites. When you follow a link, the other site's privacy policy applies.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and you may complain to a data protection supervisory authority. We answer requests within one month.