Privacy

Who is responsible

The controller for this platform is Marko Winter, Oberasbach, Deutschland, hallo@aschenbroedel.com. mappelink.de is the service used to create a digital job-application folder.

You decide what you write into the folder. You remain responsible for that content, even when we store it and show it to others at your request.

Which data is processed

For the account: email address, given name, family name, date of birth, whether the person is a school pupil, apprentice, or student, and a technical user id. We use the date of birth to refuse accounts under 16 and to set the price: under 21 every folder is free, and from 21 three new folders a month are free and further folders are paid through Stripe. The pupil, apprentice, or student statement does not change the price. We do not see card data.

In the folder: the text you enter, and optionally a photo, video, or PDF. Also visibility, creation and update times, and the key for a private link.

Technically: a session cookie after sign-in, a security cookie, and briefly the IP address to slow too many sign-in or upload attempts. The counter lasts only for that window and is then discarded. It does not build a profile. There are no marketing cookies and no trackers. We count page views ourselves: language, kind of page, and day. No cookie, no IP address, no profile.

Purpose and legal basis

The account, the email sign-in link, saving the folder, the PDF, and uploads perform the contract for using mappelink.de (Art. 6 (1) (b) GDPR). Rate limits and the security cookie protect the service (Art. 6 (1) (f) GDPR). The cookie notice stores your choice only in your browser.

AI help when creating

In the assistant “Create an application with AI help” you can speak, paste text, and upload documents, photos and an application photo. An AI writes a draft of the cover letter and CV from them. You use this feature voluntarily. It starts only after you tick your consent in the first step.

For this, your voice recordings, texts, files and the photo go to ElevenLabs. ElevenLabs turns speech into text, reads documents and pictures, and creates the draft. The photo is also checked for sharpness, light and framing. We do not use this data for advertising and do not pass it to anyone else.

On our side, the draft is saved only after you have read and accepted it. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time for the future by no longer using the feature or by writing to hallo@aschenbroedel.com. Whether and for how long ElevenLabs keeps recordings, files and conversations depends on the settings of our account there. We will tell you the current status on request.

The AI can be wrong. You check the draft yourself. There is no automated decision with legal effect. ElevenLabs may use servers outside the EU. The transfer note in the next section applies. Transmission to us and to ElevenLabs is encrypted (TLS). There is no end-to-end encryption here, because ElevenLabs has to read the content to process it.

Who else receives data

Supabase stores accounts, folders, and files. Brevo sends the sign-in links. If the site runs on Vercel, Vercel delivers the pages. Those are the technical providers. We do not publish data-processing agreements here and do not attach them to this website. We do not pass data on for advertising. Servers may be outside the EU. A transfer there rests only on safeguards actually agreed with that provider.

A published folder can be read by anyone with the link. Photos and certificates are shown through a link that expires after about an hour. Storage is not public. After that, this address no longer opens the file. Another account cannot turn the path inside the address into a new link.

How long, and security

We keep account data, folders, and files until you ask for deletion or we close the account. The sign-in link is valid for about one hour. The connection is encrypted (HTTPS), and the provider encrypts the disks. Folder text in the database is not end-to-end encrypted.

Your rights

You can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. Download a copy under “My applications”. Delete the account there, or email hallo@aschenbroedel.com. You may complain to a supervisory authority, in particular the Bayerisches Landesamt für Datenschutzaufsicht, lda.bayern.de.

As of 30 October 2026, mappelink.de. Terms: Terms.