Privacy policy

1. Controller

Campus90 is a brand of Medicon Personal GmbH. Controller: Medicon Personal GmbH, Q7 24, 68161 Mannheim. Tel. +49 621 8455332.

2. What data we process and why

Application and pre-qualification: name, nationality, date of birth, sex, university, study programme, semester break, availability, language skills, passport validity, driving licence, work experience, email and WhatsApp number. Purpose: checking the legal requirements for a holiday job and preparing an employment contract (Art. 6(1)(b) GDPR).

Documents and videos you upload (passport, enrolment certificate, university declaration, driving licence, visa, insurance). Purpose: application to the German Federal Employment Agency (ZAV), employment contract, payroll and fulfilment of legal obligations (Art. 6(1)(b) and (c) GDPR).

Information about future offers by email or WhatsApp only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Meta Pixel only after your consent in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

3. Automatic checks and AI

During pre-qualification we automatically check the legal requirements (nationality, age, availability within the semester break, university recognition). If a requirement is not met you will see the reason immediately. You can contact us at any time to have your case reviewed by a person and to state your point of view. Answers of rejected applicants are not stored.

Uploaded documents are read with an AI service (Anthropic) to detect errors. The AI only marks findings; every selection and approval is made by a person.

4. Recipients

German Federal Employment Agency (ZAV) for the placement confirmation; the client company where you will work (name, period, job); our payroll office; service providers acting on our behalf under data processing agreements: Supabase (database and storage, Frankfurt), Vercel (hosting), Anthropic (document reading), Resend (email), Meta (WhatsApp Business).

Some providers are based in the USA. Transfers are based on the EU adequacy decision for the EU-US Data Privacy Framework or on EU standard contractual clauses.

5. Storage period

Data of applicants who are rejected or withdraw is deleted automatically after a fixed period. Employment records are deleted after the statutory retention periods have expired.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time with effect for the future. You can lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection of Baden-Württemberg.