Privacy Policy
Translation for information purposes – legal review pending. This English version is a translation of the German Datenschutzerklärung; in case of discrepancies, the German version prevails. The German original is itself still a draft that must be reviewed manually before publication. Details still to be confirmed are explicitly marked; no completed legal review is claimed.
1. Controller
REXPERTS – recruiting experts
Owner: Özgür Özen
Peterstraße 88, Urbanum
47798 Krefeld
Germany
Phone: +49 (0) 2150 707047 0
Email: info@rexperts.de
2. Provision of the website and technical logs
When you access the website, technically necessary connection data, in particular your IP address and the requested resources, are transmitted to the delivering systems. The website and the storage of contact requests are provided via Lovable. Whether and to what extent the providers involved store access logs is still to be confirmed. In the event of technical errors, the application may log error messages and error context.
The provision and security of the service is based on our legitimate interest in a functional and secure website (Art. 6(1)(f) GDPR).
[To be reviewed before publication: add the full legal names and addresses of the hosting, delivery and database providers and subprocessors, processing locations, actual log data and its deletion periods, data processing agreements and, where applicable, transfers to third countries including legal basis and safeguards.]
3. Contact form
If you contact us via the form, we process your name, your company, your business email address, the selected hiring needs and, where provided, your phone number and message. This information is used to handle your request and to contact you. Phone number and message are optional. Name, company, email address and hiring needs are requested in order to classify and respond to the request.
Accepted requests are stored in the connected database with a technical identifier and a time of receipt. The information is not publicly accessible. For newly stored requests, an internal email notification to info@rexperts.de via Resend has been set up. Sending requires a sender domain verified with Resend; the sending test was rejected because the domain has not yet been verified. No automatic confirmation email is sent to the person making the request. The confirmation on the website means that the request has been stored; it does not confirm that an email was sent.
Insofar as the request is aimed at a contract with you or pre-contractual measures, Art. 6(1)(b) GDPR applies. For other requests, in particular on behalf of a company, processing is based on our legitimate interest in handling business enquiries (Art. 6(1)(f) GDPR).
The data is to be deleted as soon as it is no longer required for processing, unless statutory retention obligations or other permissible reasons prevent this. No automatic deletion is currently set up for the form.
[To be reviewed before publication: define and add authorised persons, the actual handling and deletion process, applicable retention obligations and specific storage periods including backups; complete the database provider details as per section 2.]
4. Contact by email or phone
If you send us an email or call us, we process the contact and content data you provide in order to handle your request. The legal bases and retention principles described in section 3 apply. An email link opens your own email program; it does not automatically send a message via this website.
[To be reviewed before publication: add the email and telephone providers actually used, recipients, processing locations, storage periods and, where applicable, data processing agreements or third-country transfers.]
5. Protection against automated form submissions
The form uses a verification field that is invisible to normal visitors and the time at which the form was opened in order to reject automated or unusually fast entries. This verification data is transmitted to the website server but is not stored in the database with the contact request. A technical identifier prevents a repeated transmission of the same form from creating a second request. No external CAPTCHA service is integrated. The purpose is to protect the form against misuse; the legal basis is Art. 6(1)(f) GDPR.
6. Cookies and local storage
The visible pages do not offer registration or login and, in the anonymous visit we checked, do not set any cookies or local storage entries of their own. When the form is submitted, a technical session check may access existing login data in the local browser storage; an anonymous form request does not require a login. In the Lovable editing preview, the platform may additionally process technical session and error data.
[To be reviewed before publication: check the actual cookies, local storage and scripts added by the hosting platform on the published domain; if present, add purposes, providers, durations and the required legal basis under the GDPR and Section 25 TDDDG and, where necessary, obtain consent before access.]
7. Fonts
The Manrope and Sora fonts are served locally from our own web server. No connection to Google Fonts or any other external font provider is established when the page is accessed.
8. External links
The website links to the REXPERTS LinkedIn company page and to Özgür Özen's personal recommendations. The recommendation excerpts shown are locally embedded text; no LinkedIn plugin or embedded LinkedIn content is installed. Only when you open a link do you visit LinkedIn; the provider's privacy notices apply there.
9. Your rights
Subject to the statutory requirements, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
Where processing is based on Art. 6(1)(f) GDPR, you may object under Art. 21 GDPR on grounds relating to your particular situation. To exercise your rights, please contact the address given above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the place of your habitual residence, your place of work or the place of the alleged infringement. For our registered office in Krefeld, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW) may be competent.
10. Recipients and service providers used
The website is provided via the Lovable platform. Contact requests are stored in a database based on Supabase, operated via Lovable Cloud. Beyond this, we only pass on your information insofar as this is necessary to handle your request or required by law. No newsletter, analytics or marketing services, applicant tracking system or embedded social media content are used on this website.
For the internal contact notification, name, company, email address, phone number and message (where provided), hiring needs and time of receipt are transmitted server-side via the Lovable connection to Resend. Processing serves to handle the request on the legal bases stated in section 3. No sending credentials are transmitted to the browser.
[To be reviewed before publication: verify the Resend sender domain; confirm the legal operator and address of the sending service, processing locations, subprocessors, log and email storage periods, data processing agreement and possible third-country transfers including safeguards. Successful sending and the conclusion of a data processing agreement are not claimed.]
[To be reviewed before publication: confirm the full company names and addresses of the providers, actual server locations, subprocessors (e.g. content delivery network), the existence and content of data processing agreements under Art. 28 GDPR and safeguards for transfers to third countries (e.g. EU Standard Contractual Clauses or the EU-US Data Privacy Framework). The conclusion of such agreements is not claimed here.]
11. Encryption
The website is delivered via an encrypted connection (HTTPS/TLS). You can recognise this by "https://" in your browser's address bar.
12. Obligation to provide data and automated decision-making
Providing your data in the contact form is neither legally nor contractually required. Without the mandatory information, however, we cannot process your request via the form; alternatively, you can reach us by email or phone. No automated decision-making, including profiling (Art. 22 GDPR), takes place.
13. Data protection officer
No data protection officer has currently been appointed.
[To be reviewed before publication: whether there is an obligation to appoint one under Art. 37 GDPR and Section 38 BDSG (e.g. generally at least 20 persons permanently engaged in the automated processing of personal data, or extensive processing of applicant data as a core activity). The owner, as controller, cannot at the same time be his own data protection officer.]
Last updated: November 2026