Privacy Policy

1. CONTROLLER

The controller responsible for data processing on this website is:

wamayana GmbH
Unterreut 6
76185 Karlsruhe
Germany

Email: contact@eaststream.eu

Website: https://eaststream.eu

2. GENERAL INFORMATION ON DATA PROCESSING

Protecting your personal data is important to us. Personal data means any information relating to an identified or identifiable natural person.

We process personal data only insofar as this is necessary to provide this website, communicate with you, process applications, assess professional opportunities, initiate or facilitate employment opportunities, or where another legal basis for processing applies.

The respective purposes and legal bases for processing are explained below.

3. HOSTING AND SERVER LOG FILES

Our website is hosted by IONOS SE.

Provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

When you access our website, the hosting provider processes technical information required for operation. This may include in particular:

• referrer (previously visited website)
• requested website or file
• browser type and browser version
• operating system used
• device type used
• time of access
• IP address in anonymised form

The processing is carried out in particular to ensure the security and stability of the website and to provide the website technically.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and uninterrupted operation of our website.

According to IONOS, the relevant visitor data is stored for a period of eight weeks. IONOS states that this visitor data is not disclosed to third parties and is not transferred to third countries outside the European Union.

Where IONOS processes personal data on our behalf, this takes place under a data processing agreement pursuant to Article 28 GDPR.

4. CONTACTING US

If you contact us by email or via another contact method provided by us, we process the personal data you provide in order to handle your enquiry and any necessary follow-up questions.

This may include in particular:

• name
• email address
• telephone number or other contact details
• content of your message

The legal basis depends on the purpose of the contact.

If the contact relates to the initiation of a contractual or employment relationship, the processing is carried out in particular on the basis of Article 6(1)(b) GDPR or Section 26 BDSG.

In other cases, processing may be based on our legitimate interest in responding to enquiries addressed to us pursuant to Article 6(1)(f) GDPR.

5. APPLICATIONS VIA OUR WEBSITE

You can submit your application or professional profile to us via our website. For this purpose, we provide an electronic application form.

As part of an application, the following personal data may in particular be processed:

• first and last name
• email address
• telephone number or Telegram contact details
• current place of residence
• desired professional field
• information about German language skills
• information about education and professional experience
• content of your personal message
• CV
• references and certificates
• other application documents and information voluntarily submitted by you

We process this data in order to handle your application, assess your professional profile, contact you and examine suitable employment or placement opportunities.

Where the application concerns employment with us, processing is carried out in particular on the basis of Section 26(1) BDSG.

Where we process your data in order to initiate an employment or placement opportunity with another company, the legal basis depends on the specific processing activity. In particular, Article 6(1)(b) GDPR and, where required, your consent pursuant to Article 6(1)(a) GDPR may apply.

6. VOLUNTARY INFORMATION AND SPECIAL CATEGORIES OF PERSONAL DATA

Please provide us only with personal data that is necessary for processing your application and assessing professional opportunities.

In individual cases, application documents may also contain special categories of personal data within the meaning of Article 9 GDPR. This may include, for example, information concerning health, disability, religion or other specially protected personal information.

Special legal requirements apply to the processing of such data.

We therefore ask you to provide such information only where it is necessary for your application.

7. DISCLOSURE OF APPLICANT DATA TO POTENTIAL EMPLOYERS

An essential purpose of our service is to assess suitable professional opportunities with employers in Germany for applicants.

For this purpose, it may be necessary to transfer selected applicant data or application documents to potential employers.

Your applicant data and application documents are disclosed to potential employers on the basis of your consent pursuant to Article 6(1)(a) GDPR. This consent is obtained as part of the application form. You may withdraw your consent at any time with effect for the future.

The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.

The data transferred may include in particular:

• name and contact details
• professional qualifications
• language skills
• education and professional experience
• CV
• references and certificates
• other information relevant to the respective employment opportunity

The respective potential employers receive the data solely for the purpose of assessing whether an employment or other professional opportunity exists for you.

Your personal data will only be disclosed beyond this where there is a legal basis for doing so.

8. APPLICATION FORM AND CONTACT FORM 7

We provide an electronic application form on our website for the submission of applications.

We use the WordPress plugin Contact Form 7 to provide the application form technically.

The information you enter into the application form and the files you upload are processed in order to receive your application, forward it to the responsible persons and subsequently process it.

This includes in particular the data listed under “Applications via our website” as well as the CVs, references and certificates uploaded by you.

The processing is carried out for the purpose of handling your application and assessing suitable professional opportunities.

The data is made available only to those persons within our company who are involved in processing the application or assessing suitable professional opportunities.

9. SPAM AND ABUSE PROTECTION

We use technical protection measures to protect our publicly accessible forms against spam, automated submissions and other forms of misuse.

For this purpose, we use, among other things, the WordPress plugin WP Armour – Honeypot Anti Spam. This uses form fields that are invisible to regular visitors. Automated programs can thereby be detected and corresponding form submissions can be blocked.

According to the provider, WP Armour does not use tracking cookies for this function and does not transfer data to external servers for the honeypot check.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the protection of our website, our IT systems and, in particular, our publicly accessible application forms against spam, automated misuse and abusive file uploads.

10. CLOUDFLARE TURNSTILE

We use Cloudflare Turnstile to protect our forms against automated access, spam and misuse.

The provider is:

Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA

Cloudflare Turnstile is used to determine whether a form submission is made by a human or by an automated program. For this purpose, technical information may be processed, including in particular the IP address, information about the browser and device, and technical information about interaction with the website.

We use Turnstile solely to detect and prevent automated or abusive form submissions.

In the configuration we use, the so-called Pre-Clearance function is disabled. Accordingly, we do not use a Cloudflare clearance cookie generated through this function.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the protection of our website and, in particular, our publicly accessible application forms against spam, automated attacks, abusive form submissions and unwanted file uploads.

As Cloudflare is based in the USA, personal data may also be processed in the USA. Where necessary, transfers to third countries are carried out in accordance with the applicable data protection requirements and appropriate safeguards.

Further information on the processing of personal data by Cloudflare can be found in Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.

11. EMAIL COMMUNICATION AND TRANSMISSION OF APPLICATIONS

We use the services of the following provider for our email communication:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

If you contact us by email or submit an application via our application form, the personal data you enter and the application documents you upload may be processed via the email systems we use.

This may include in particular:

• name and contact details
• content of your message
• information from the application form
• CV
• references and certificates
• other application documents submitted by you

The processing is carried out for the purpose of transmitting, receiving and processing your application or enquiry.

Where IONOS processes personal data on our behalf, this takes place under a data processing agreement pursuant to Article 28 GDPR.

12. RETENTION PERIOD FOR APPLICANT DATA

We store applicant data only for as long as is necessary to process the application and assess suitable employment or placement opportunities.

If no employment or placement relationship is established, applicant data will generally be deleted no later than six months after completion of the respective application or placement process, unless statutory retention obligations, the establishment, exercise or defence of legal claims, or other legally permissible reasons prevent deletion.

Longer storage may take place if you have expressly consented to our retaining your data for future employment or placement opportunities.

You may withdraw such consent at any time with effect for the future.

If an employment, placement or other contractual relationship is established, the personal data required for this purpose may continue to be processed and stored in accordance with the applicable legal requirements.

13. RECIPIENTS OF PERSONAL DATA

Within our company, personal data is generally made available only to those persons who require the data for the respective processing purposes.

In addition, personal data may in particular be transferred to the following categories of recipients:

• hosting and IT service providers
• email and communication service providers
• service providers involved in processing applications, where such providers are used
• potential employers on the basis of your consent or where another legal basis applies
• providers of security and spam protection services, insofar as this is necessary for the technical protection of the website
• authorities or other public bodies where there is a legal obligation to disclose the data

Any further disclosure will take place only where there is a legal basis for doing so.

14. DATA PROCESSING ON OUR BEHALF

Where we use external service providers that process personal data on our behalf, they are engaged in accordance with the legal requirements applicable to data processing on behalf of a controller.

We use IONOS for hosting and email services.

Where processing on our behalf takes place, this is based on Article 28 GDPR.

15. TRANSFER OF DATA TO THIRD COUNTRIES

Personal data is transferred to recipients outside the European Union or the European Economic Area only where the legal requirements for such transfers are met.

Where service providers used by us process personal data outside the European Union or the European Economic Area, we take into account the applicable data protection requirements. This may in particular be based on an adequacy decision of the European Commission or appropriate safeguards such as standard contractual clauses.

This may in particular be relevant when using Cloudflare Turnstile, as Cloudflare is based in the United States of America.

The mere fact that an applicant accesses the website from a country outside the European Union or the European Economic Area, or submits personal data to us from such a country, does not necessarily constitute a transfer of personal data by us to a third country.

16. COOKIES AND LOCAL STORAGE

Our website uses technically necessary cookies and comparable storage technologies.

Cookies are small text files that are stored on your device and may contain certain information.

Technically necessary cookies may in particular be used for the administration, security and technical operation of WordPress.

Where services are used that employ cookies or comparable technologies that are not technically necessary, such services are used only in accordance with the applicable data protection requirements and, where required, after obtaining prior consent.

Language selection using Polylang

We use the WordPress plugin Polylang to provide our website in multiple languages.

Polylang may set the cookie pll_language. This cookie stores the selected or used language so that the website can be displayed in the corresponding language during subsequent page views.

The cookie is used solely to provide the language version of the website requested by the user. The storage period is up to one year.

The storage is based on Section 25(2) TDDDG insofar as it is necessary to provide the language function requested by the user.

17. EMBEDDED CONTENT AND EXTERNAL SERVICES

Where content or services from external providers are embedded on our website, accessing such content may establish a connection to the servers of the respective provider.

In this context, the IP address and technical information about the browser and device used may in particular be processed or transferred to the respective provider.

Where consent is required for the use of such services, the corresponding content or services will be activated only after the necessary consent has been given.

18. SSL/TLS ENCRYPTION

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content.

You can recognise an encrypted connection, among other things, by the fact that the website address begins with “https://”.

The encrypted connection is used in particular to protect information and application documents that you submit to us via our application form.

19. RIGHTS OF DATA SUBJECTS

Subject to the applicable legal requirements, you have in particular the following rights:

• right of access to the personal data processed by us pursuant to Article 15 GDPR
• right to rectification of inaccurate personal data or completion of incomplete personal data pursuant to Article 16 GDPR
• right to erasure of personal data pursuant to Article 17 GDPR
• right to restriction of processing pursuant to Article 18 GDPR
• right to data portability pursuant to Article 20 GDPR, where the legal requirements are met
• right to object to processing pursuant to Article 21 GDPR, where the legal requirements are met

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.

To exercise your rights, you may contact us at:

wamayana GmbH
Unterreut 6
76185 Karlsruhe
Germany

Email: contact@eaststream.eu

20. RIGHT TO OBJECT

Where we process your personal data on the basis of Article 6(1)(f) GDPR due to a legitimate interest, you have the right under Article 21 GDPR, subject to the conditions set out therein, to object to such processing on grounds relating to your particular situation.

To exercise your right to object, it is sufficient to send a notification to:

contact@eaststream.eu

21. RIGHT TO LODGE A COMPLAINT WITH A DATA PROTECTION SUPERVISORY AUTHORITY

You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.

For our company, which is based in Baden-Württemberg, the competent supervisory authority is in particular:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Lautenschlagerstraße 20
70173 Stuttgart
Germany

Within the framework of the applicable legal provisions, you may also contact another competent data protection supervisory authority.

22. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this privacy policy if the services we offer, the technical systems we use, our application process or the applicable legal requirements change.

Last updated: September 2026