Privacy notice
As of November 2026. The German version prevails.
Controller
Jan Veder (private individual), Address visible after sign-in, email jan.veder@edu.hochschule-schaffhausen.ch. HSSH Circle is a pilot by Jan Veder and not a service of Hochschulinstitut Schaffhausen.
Purpose
Mutual help among HSSH doctoral students and alumni: collecting offers and requests, suggesting matches, brokering contact, preparing the request round in the colloquium. Data are never used for executive search, recruiting or other purposes of Options Group and are not linked to other data sets.
Data
Name, email, language; answers to the onboarding and the question of the month; offers, requests, messages and thank-you cards; for the optional LinkedIn analysis only totals and encrypted identifiers of company names (the file never leaves your browser, contact names are never transferred); sign-in log (time, IP address).
Legal basis
Your consent (Art. 6(1)(a) GDPR; for the transfer to the USA Art. 49(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by deleting your profile.
Visibility
All members see offers. You can post requests without your name: the platform then shows your name to nobody, not even moderators or the operator, until you accept help. Technically the request is linked to your account in the database. Email addresses become visible only when both sides of a contact agree.
Recipients
Hosting: IONOS SE (operator's server). Email: Jan Veder's Options Group SMTP account via IONOS; no copy is stored in the mailbox, emails contain only notices and links, never message texts. AI matching: Anthropic PBC, USA (Claude model) receives free texts of offers and requests without names or contact details to suggest matches. For guest sign-ins Jan receives a Telegram notice with the name.
Retention
Your profile remains until you object or delete it (My profile, bottom). Sign-in links and the mail queue are deleted after 30 days.
Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent; complaint to a data protection authority.