Privacy policy

Datenschutzerklärung · Last updated 19 October 2026

The short version

  • What you type into the form, including your CV, stays in your browser tab. It is never sent to us or to anyone else.
  • If you answer the three questions at the end, we store your answers without your name, CV or IP address.
  • If you tick the box, we store your email address separately from your answers, only to contact you about this project.
  • No cookies, no analytics, no tracking, no advertising. Fonts are served from this site, not from Google.

1. Who is responsible

The controller under the GDPR is Umer Mahmood, 98693 Ilmenau, Germany. Email: vantarlabs@gmail.com. See also the Impressum.

2. Visiting the site

This site runs on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which acts as our processor. To deliver the pages and protect them from attacks, Cloudflare processes technical data such as your IP address, the time of the request, the requested address and your browser's user agent. The legal basis is our legitimate interest in delivering the site securely and reliably (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, and its data processing addendum applies. We do not keep our own access logs.

3. What happens in your browser

The form on the start page (first name, email, target role, location, skills and CV) is processed only by a script in your browser. None of it is uploaded. It disappears when you reload or close the tab. We do not use cookies, local storage or similar technologies.

4. Your answers to the three questions

If you press "Send answers", we store the text of your three answers and the date. We do not store your name, email address, CV, IP address or device details with them. We use the answers to understand how people feel about AI in hiring, and we may publish summaries or short anonymous quotes. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by sending the answers.

Please do not write personal details about yourself or others into the answers. Because the answers are not linked to you, we usually cannot find them again. If you send us the date and the text, we will delete them. We keep answers until the project ends, at most 24 months after collection.

5. Your email address, if you choose to leave it

The email field on the start page is optional, and the address is not sent anywhere while you use the site. At the end you can tick a box to let us keep it. Only then do we store the address, the date and the wording of your consent. We use it only to contact you about this project, for example to share results. We do not send newsletters or advertising, and we do not pass it on.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to vantarlabs@gmail.com. We then delete your address. Withdrawal does not affect anything done before it. Otherwise we delete the address when the project ends, at most 24 months after collection. The address is stored in a separate table with no reference to your answers.

6. Preventing abuse

To limit automated submissions, the server counts how many answers arrive from one connection per day. For this it stores a one-way hash of your IP address combined with the date and a secret value. The hash is kept for the current day only and then deleted. The legal basis is our legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR).

7. Where data is stored

Answers and email addresses are stored in a Cloudflare D1 database operated by Cloudflare on our behalf. Data may be processed in the United States; Cloudflare is certified under the EU-US Data Privacy Framework.

8. Share buttons

The share buttons are plain links. Nothing is loaded from LinkedIn, X, Bluesky, WhatsApp or Facebook until you click one. After you click, that network's own privacy policy applies.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Write to vantarlabs@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the one in your country or the one responsible for us.

We do not use automated decision-making or profiling.

10. Changes

We will update this page if the way we handle data changes. The date at the top shows the current version.