Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Rock Media Advisory Ltd
71-75 Shelton Street, Covent Garden
London, WC2H 9JQ, United Kingdom
Email: hello@workingermany.io

See also our Impressum / Legal Notice.

2. What Data We Collect

We collect only what we need to provide the service:

• Account data — if you create an account, your email address and an encrypted password (managed by our authentication provider). You can use the free Readiness Score without an account.
• Readiness Score answers — by default your questionnaire answers are stored only in your browser (not sent to our server). If you are signed in and choose to save your result, your answers, score, and verdict are stored to your account.
• Newsletter email — if you subscribe to our newsletter.
• Purchase records — if you buy a product, we store which product you bought, the status, the date, and a payment reference. We never see or store your card details — these are handled directly by our payment processor (Stripe).
• Correspondence — the content of emails you send us, so we can reply and provide support.
• Server & usage data — standard hosting logs (IP address, browser, visited pages) retained for security and debugging, typically for up to 7 days, plus privacy-friendly, aggregated analytics (see Section 5).

3. Purpose of Processing

• Provide your account, dashboard, and saved Readiness Score
• Process and deliver the products you purchase, and send purchase confirmations
• Send the newsletter you subscribed to
• Respond to your emails and provide support
• Operate, secure, and improve the website

4. Legal Basis (Art. 6 GDPR)

• Consent (Art. 6(1)(a)) — newsletter subscription; saving your Readiness Score to your account
• Contract (Art. 6(1)(b)) — your account, and paid products you purchase (including payment processing and delivery)
• Legitimate interest (Art. 6(1)(f)) — securing the website, server logs, and aggregated, cookieless analytics to understand usage
• Legal obligation (Art. 6(1)(c)) — retaining invoicing/tax records where required by law

5. Tools & Third-Party Services

We use a small number of carefully chosen processors. Each acts on our instructions under a data processing agreement:

• Supabase(database & authentication) — stores your account, saved Readiness Score, newsletter email, and purchase records. EU-hosted. See supabase.com/privacy.
• Vercel(hosting & analytics) — serves this website (standard server logs apply) and provides aggregated, cookieless usage analytics that do not track individuals across sites or build advertising profiles. See vercel.com/legal/privacy-policy.
• Google Analytics 4 (usage analytics) — helps us understand how the site is used. It loads only if you accept analytics cookies in our consent banner; if you decline, it is not activated. Data may be processed by Google outside the EU/EEA under appropriate safeguards; IP addresses are anonymised. See policies.google.com/privacy.
• Stripe (payments) — processes card payments for paid products. Stripe receives the payment data you enter directly; we receive only a confirmation and reference. See stripe.com/privacy.
• Resend (transactional email) — sends purchase confirmations and service emails to your address. See resend.com/legal/privacy-policy.
• Zoho Mail (email) — hosts our hello@workingermany.io mailbox, so it processes the emails you send us. See zoho.com/privacy.
• Public job listings — job listings shown on this site are fetched from public sources and displayed for you. No personal data about you is shared with them.

6. International Data Transfers

The controller is established in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection. Some of our processors may process data outside the EU/EEA or UK. Where they do, transfers are safeguarded by appropriate measures such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) or an applicable adequacy decision.

7. Cookies

By default this website sets only essential cookies needed for basic functionality (such as keeping you signed in), and uses cookieless aggregated analytics. Google Analytics cookies are set only if you accept them in our consent banner — until then, and if you decline, no analytics cookies are stored. You can decline and still use everything on the site. We do not use advertising cookies.

8. Your Rights (GDPR / UK GDPR)

Under GDPR and UK GDPR you have the right to:

• Access — request a copy of your personal data (Art. 15)
• Rectification — correct inaccurate data (Art. 16)
• Erasure — request deletion of your data (Art. 17)
• Restriction — limit how we process your data (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Object — object to processing based on legitimate interests (Art. 21)
• Withdraw consent — at any time (e.g., unsubscribe from the newsletter)
• Complain — lodge a complaint with your local data protection authority (in the UK, the ICO; in the EU, your national authority)

To exercise any of these rights, email hello@workingermany.io.

9. Data Retention

Account data is kept while your account is active and deleted on request. Newsletter emails are kept until you unsubscribe. Purchase and invoicing records are kept as long as required by law (usually up to 6 years for tax records). Server logs are kept for a short period for security and debugging.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the updated date below.