Privacy Policy (GDPR)

Protecting your personal data is important to us. This Privacy Policy explains, in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR), how SHB Personalservice GmbH processes personal data on this website ferienjob26.de.

1. Data Controller

SHB Personalservice GmbH
Stockholmer Platz 1 · 70173 Stuttgart · Germany
Phone: +49 (0)711 252 558 90 · Email: info@shb.agency

2. Data We Collect

Personal data are processed when you contact us via the contact or application form on this website.

Identification and contact details (name, email address, phone number)
Uploaded documents (CV, passport copy, certificates)
Communication content and technical metadata (e.g. IP address, timestamp)

3. Purpose of Processing

Your data are used to respond to your inquiry, to prepare employment or internship offers, and to organize administrative steps (e.g. visa or document processing).

4. Legal Basis

Art. 6 (1) (a) GDPR – your consent (in particular when submitting the form and activating optional services such as the voice/chat assistant).
Art. 6 (1) (b) GDPR – performance of a contract or pre-contractual measures in the context of job or internship placement.
Art. 6 (1) (f) GDPR – our legitimate interest in ensuring the security, stability and technical operation of this website (e.g. server log files, error analysis).

5. Services Used on This Website

5.1 Contact Form 7 and AFI (Advanced Form Integration)

The contact and application forms are implemented using Contact Form 7. Submitted form data are technically processed via the AFI plugin, which transfers form fields to our internal systems. Data are processed only after you actively submit the form.

Legal basis: Art. 6 (1) (a) and (b) GDPR

5.2 Google Workspace (Sheets, Drive and Docs)

We use Google Workspace to store and manage form submissions and related documents. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing takes place within the EU; transfers to the USA may occur under EU Standard Contractual Clauses (SCCs).

Privacy Policy: policies.google.com/privacy

5.3 ElevenLabs Voice AI (Chat and Audio Agent)

This website offers an interactive voice and chat assistant provided by ElevenLabs Inc., 41 Corsham Street, London N1 6DR, United Kingdom. When you activate the agent, audio and text inputs are transmitted to ElevenLabs servers (UK / USA) for the purpose of providing interactive, AI-generated answers and supporting communication regarding your application. The service will only start after your explicit consent via the cookie banner (Art. 6 (1) (a) GDPR).

Privacy Policy: elevenlabs.io/privacy

6. Subsequent Data Processing (After Form Submission)

After you submit your data, SHB Personalservice GmbH uses secure EU-based automation and AI services to process your application internally. This includes in particular:

Make (Celonis s.r.o., Czech Republic) – workflow automation for document handling, task management and notifications.
OpenAI (ChatGPT) – AI-assisted document and text processing to support communication, summarisation and drafting of documents without automated individual decision-making within the meaning of Art. 22 GDPR.

Both providers act as processors pursuant to Art. 28 GDPR on the basis of data processing agreements and, where relevant, EU Standard Contractual Clauses (SCCs) for data transfers to third countries.

7. Hosting and Security

Our website is hosted within the European Union. Server log files are used solely for error analysis and security purposes.

8. Retention Period

Data are stored only as long as necessary to fulfil the purpose or legal obligations and will then be deleted or anonymised.

9. Your Rights (Articles 15–22 GDPR)

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to withdraw consent at any time (Art. 7 (3))

To exercise your rights, please contact us at info@shb.agency.

10. Data Transfers to Third Countries

Where personal data are transferred to recipients in third countries (in particular the United Kingdom and the USA), this is done exclusively on the basis of appropriate safeguards in accordance with Art. 44 et seq. GDPR (e.g. EU Standard Contractual Clauses, technical and organisational measures such as encryption and data minimisation).

11. Cookie Banner and Consent Management

We use Real Cookie Banner (by devowl.io) to manage cookie consents. Your consent decisions are stored securely to comply with documentation requirements under Art. 7 (1) GDPR.