Privacy Policy

Information about protection of your personal data

1. Data Controller

The data controller for data processing on this website is:

ENLAPA GmbH

Radlkoferstr. 2

81373 München

Deutschland

Email: datenschutz@enlapa.de

2. Overview of Data Processing

Swipe to Work is a platform that helps you find suitable job offers and apply to them automatically. We process the following categories of personal data:

  • Contact data: Name, email address
  • Access data: Password (stored encrypted)
  • CV data: Work experience, education, skills, qualifications
  • Application data: Application history, application form data
  • Usage data: Interactions with the platform (swipes, matches)
3. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Art. 6(1)(a) GDPR (Consent): For processing your CV and automated job applications
  • Art. 6(1)(b) GDPR (Contract Performance): For providing our services and user account management
  • Art. 6(1)(f) GDPR (Legitimate Interest): For improving our services and security measures
4. Third-Party Services

We use the following third-party services to provide our platform. All providers are GDPR certified or have concluded appropriate standard contractual clauses with us.

OpenAI (GPT-5-mini)

Provider: OpenAI, L.L.C., San Francisco, USA

Purpose: Analysis of your CV, job matching, intelligent form filling for applications

Processed data: CV contents, job requirements, application form data

OpenAI Privacy Policy →

Amazon Web Services (AWS) - Cognito

Provider: Amazon Web Services EMEA SARL, Luxembourg

Purpose: User authentication and secure login

Processed data: Email address, password (encrypted), authentication tokens

AWS Privacy Policy →

Amazon Web Services (AWS) - Storage Services

Provider: Amazon Web Services EMEA SARL, Luxembourg

Purpose: Secure storage of your data (DynamoDB, S3)

Processed data: All user data, CVs, application history, application process screenshots

Location: EU (Frankfurt, eu-central-1)

Automated Applications

Technology: Playwright browser automation

Purpose: Automatic filling and submission of application forms on career portals

Processed data: CV data, personal information for application forms, temporary credentials for career portals

Note: Screenshots are created for documentation purposes and automatically deleted after 30 days.

5. Data Retention
  • User account: Until deletion by the user
  • CV data: Until deletion by the user
  • Application history: 2 years after last activity
  • Screenshots: 30 days
  • Log data: 90 days
6. Your GDPR Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR): You can request information about your stored data
  • Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data
  • Right to erasure (Art. 17 GDPR): You can request deletion of your data
  • Right to restriction (Art. 18 GDPR): You can request restriction of processing
  • Data portability (Art. 20 GDPR): You can receive your data in a machine-readable format
  • Right to object (Art. 21 GDPR): You can object to the processing of your data
  • Withdrawal of consent: You can withdraw your consent at any time

To exercise your rights, please contact us at: datenschutz@enlapa.de

7. Account Deletion

You can delete your account at any time in the settings. Upon deletion, the following data will be removed:

  • Your personal data and account information
  • All uploaded CVs
  • Your application history
  • All saved matches and swipes

Deletion occurs within 30 days. Certain data may be retained longer due to legal retention requirements.

8. Data Security

We implement the following technical and organizational measures to protect your data:

  • TLS/SSL encryption for all data transfers
  • Encrypted storage of sensitive data (passwords)
  • Regular security updates and audits
  • Access control and permission management
  • Server location in the EU (Frankfurt)
9. Cookies

We use only technically necessary cookies to provide our services:

  • Authentication cookies: To maintain your login session
  • Security cookies: For protection against Cross-Site Request Forgery (CSRF)

We do not use tracking or advertising cookies.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18

91522 Ansbach

www.lda.bayern.de

Last updated: November 2025

Privacy Policy - Swipe to Work