Join the waitlist

Privacy notice

Datenschutzerklärung

Version privacy-v6, 20 October 2026. The target city and job role paragraph was added after the check of 20 October 2026 (docs/grund/city-role-grund-result-2026-10-20.md).

Who is responsible (Verantwortlicher). Edwin IV Saulog, c/o Online-Impressum 11414, Europaring 90, 53757 Sankt Augustin, Germany. Email: [email protected].

Age. Sikap is for people aged 18 or older. If we learn an account belongs to someone younger, we delete it.

No tracking. No analytics, no advertising, no tracking pixels. Fonts and scripts load from Sikap's own domain. Cloudflare processes your IP address to deliver the pages (Art. 6(1)(f) GDPR).

The plan builder. Your answers stay in your browser. We never receive them. Clear the site data to delete them (§ 25(2) TDDDG).

Login. We store your email address in a Cloudflare database set to EU jurisdiction. We use it to send you a 6-digit code and to log you in. If you ticked a newsletter or waitlist box, we also use it to send the emails that box asked for. We create your account only when you enter the code. We keep the code only as a hash (a one-way scrambled value), for 10 minutes. Five wrong tries cancel the code. One strictly necessary cookie keeps you logged in for 30 days (§ 25(2) Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, the German digital services data protection act). Our basis for the login is Art. 6(1)(b) GDPR: we need the address to provide the account you asked for. If you ticked a newsletter or waitlist box, entering the code also confirms it. As proof of consent we log the request, mail and entry times, and your IP address and browser at entry. We delete your account 12 months after your last login.

Waitlist. We collect your email address; which boxes you ticked and when; your IP address and browser (user agent) at signup and confirmation, as proof of consent. If you tick the report box and answer: citizenship, country and permit, degree, field, graduation month, target countries, languages, years of work experience. All optional.

Profile answers. After sign-up, eight optional questions: the city you want to work in (a city name, up to 60 characters), your job role (picked from the ISCO-08 list of the International Labour Organization: a 4-digit code and its title), country of study, degree level, field of study, partner (none, unmarried partner, married or registered), children (none, under 18, 18 or older) and age group (18 to 24, 25 to 29, 30 to 34, 35 or older). Partner, children and age group each have a "Prefer not to say" answer. A family answer is a category, never a name or a date, and we never ask who your partner is. We store the answers only if you tick "Use my answers to order which countries and cities are researched." (Art. 6(1)(a) GDPR). We count everyone's answers together to choose what to research next. Answers given under the older box "Use my answers to filter the routes on my profile" stay under it and are not used or counted until you tick the new box; that filter is not live yet. City and role do not count toward your waitlist place. Withdraw on the Profile page: all answers are deleted at once.

Votes and place. You can vote for up to three countries to be researched. We store a vote because you asked us to count it (Art. 6(1)(b) GDPR). Once the six questions from country of study to age group are answered, the first vote counts twice until that country is researched or you remove it. Your waitlist place is counted from the time you confirmed; people who answered those six rank ahead. We use votes and place to order the research, to show you your place and, if you ticked the news box, to send the email below.

Country researched email. When a country you voted for or chose on the waitlist form is researched, we send one email, only if you ticked the news box in this wording: "Email me news about Sikap, including when a country I picked is researched."

Download and delete. The Profile page gives you one file (JSON) with everything we hold about you. To delete, type DELETE and enter a code we email you (6 digits, 10 minutes, five tries, five codes an hour). We then remove your account, answers, votes and waitlist signup at once. For 30 days we keep your address only as a hash (Art. 6(1)(f) GDPR), so that a restored backup cannot bring your data back. Then the hash is deleted too. Database backups roll over within 30 days.

Basis. Each box is its own consent (Art. 6(1)(a) GDPR). News: emails about Sikap and when a country you picked is researched. Report: your answers write your free country report. Profile: the answers above. Votes: Art. 6(1)(b). Proof of consent: Art. 7(1), 6(1)(f). No automated decisions.

Who receives it. Cloudflare hosts the site, the database and the Turnstile spam check, which receives browser data when you use the form. Mailjet sends the sign-up code and the emails you ticked, from the EU. Both are processors (Art. 28); access from outside the EU rests on standard contractual clauses (Art. 46).

How long.

Your rights. Access, correction, erasure, restriction, portability and objection. The link in any email withdraws the news and report consents together (Art. 7(3)); for only one of them, write to us. The Profile page withdraws the profile consent. Access, download (Art. 15, 20) and deletion (Art. 17) work on the Profile page; [email protected] answers within one month.

Complaints. Any EU data protection authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin commissioner for data protection), Alt-Moabit 59-61, 10555 Berlin.