Privacy
Information about how personal data is processed. Last updated: September 2026.
Data controller
Stefan Janzen · B:REX Recruiting Enablement Excellence
Sangeallee 7, 10318 Berlin, Germany
stefan.janzen@brex-recruiting.com
+49 1520 1945829
Contact form and email delivery
When you select “Send enquiry”, your name, email address, optional company name, topic and message are sent to the website server. After validating your entries, the server passes the enquiry to the email service Brevo, which forwards it to our business inbox. Your email address is used as the reply-to address. A confirmation on the website means that the email service has accepted your message; it does not confirm delivery to the inbox.
The website does not maintain its own permanent database of these messages. The email delivery service and email provider process your message for delivery and handling. Information from the delivery service: Brevo privacy policy. Delivery logs are automatically deleted after the currently configured period of one month; deletion may take up to a further 24 hours. New message previews are not stored. The message remains in our business inbox so that we can handle your enquiry. You will not be subscribed to a newsletter.
Form protection
The server checks the origin, format and length of submissions. To limit repeated requests, the IP address supplied by the hosting service is combined with a secret server key to generate a pseudonym specific to a time window. A database stores this pseudonym, a counter and the end of the ten-minute time window. A shared daily counter is also maintained. The database does not store messages, names, email addresses or unencrypted IP addresses. Expired counters are deleted on the next valid form submission; if no further enquiries are submitted, they may remain for longer. This processing serves our legitimate interest in preventing misuse under Article 6(1)(f) GDPR.
Handling enquiries
We use your contact details and message to respond to your enquiry. For enquiries about a potential working relationship, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is our legitimate interest in responding to contact requests under Article 6(1)(f) GDPR. Our business email account is provided through Microsoft 365.
Messages are retained for as long as they are needed to handle the enquiry and, where applicable, the subsequent working relationship. Where statutory retention obligations apply, the retention period depends on the nature and content of the correspondence.
Hosting and access
This website is hosted through OpenAI Sites. Processing serves the delivery and security of the website based on our legitimate interest under Article 6(1)(f) GDPR. The hosting and access service processes technical data for delivery, sign-in and security; this may include your IP address, the address requested, the time of access and technical browser information. The infrastructure includes Cloudflare. Further information: OpenAI privacy policy and Cloudflare privacy policy.
Data processing agreements and international transfers
The services are provided under the applicable data processing agreements with the providers involved. OpenAI Sites is covered by the Sites Data Processing Addendum or the agreement for the business account in use. Processing is not restricted exclusively to the EU. For transfers to third countries, the agreements provide in particular for adequacy decisions or EU Standard Contractual Clauses. Brevo’s data processing agreement forms part of its terms of use; Microsoft 365 is subject to the applicable Microsoft data protection agreement.
Local content and external links
Font files and images are served with this website. No analytics or marketing tools of our own are embedded in the website code. Technical processing by the hosting and access service must be considered separately. External websites, such as LinkedIn, are only accessed when you open a link.
Your rights
Subject to the applicable legal conditions, you may request access to your data, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you have the right to object on grounds relating to your particular situation. You may also lodge a complaint with a data protection supervisory authority, such as the Berlin Commissioner for Data Protection and Freedom of Information. If you have any questions, please use the contact details above.