Privacy & data protection
Last updated: 2026-08-25
We store the information you provide in order to manage mentorships and internships. This notice explains what we process, why, who can see it, how long we keep it, and your rights (GDPR Arts. 13–15).
Who is responsible
The controller for the personal data processed here is Mehmet Erşahin, the operator of this InternshipCRM instance. The postal address and any further contact details are published in the imprint.
What we use your data for
To operate the platform: matching mentees with mentors and companies, tracking the internship/hiring pipeline, logging interactions, scheduling and communication.
Legal basis
Processing relies on your consent (Art. 6(1)(a)) and on the legitimate interest of running the mentorship programme (Art. 6(1)(f)). Optional processing, such as AI-assisted CV reading, always requires separate consent.
Who can see your data
Depending on your role: a mentee’s profile, CV and interaction history are visible to their assigned mentor and to administrators, and — once placed — to the linked company and the referral source. Mentors and companies see only their own mentees/candidates. We never sell your data. Extracted CV text is sent to an AI provider only if you separately enable AI-assisted CV reading. On the public home page, and only after you accept marketing cookies, the live chat is loaded from tawk.to — it receives your IP address and whatever you type into the chat. Decline, or leave the chat alone, and nothing is sent to them.
AI-assisted features
Four features can send text to an AI provider, and only where they apply to you: AI-assisted reading of your CV, written feedback on your CV, a summary of your mentor’s interaction log about you, and interview preparation. A fifth, mentor matching, sends skills and interests with no name or identifier on either side. Reading your CV and CV feedback need your separate consent; the interaction summary needs the mentee’s separate consent. Both can be withdrawn at any time under Account → Privacy, and the feature then stops. We send extracted text, never the file itself, and neither the text sent nor the text generated is stored. What each feature sends, what it deliberately withholds and who the provider is are set out in full on the AI page.
How long we keep it
We keep your data while your account is active and no longer than necessary for the purposes above. You can delete your account at any time from settings.
Your rights
You have the right to access, rectify, erase, restrict and object to processing, and to data portability. You can download all your data and delete your account from your account settings at any time.
Contact
For any data protection request, write to kontakt@ersah.in. The operator’s full details, including the postal address, are in the imprint.
Where processing is based on consent, you may withdraw it at any time (e.g. in Account → Privacy), without affecting processing carried out beforehand.
You have the right to lodge a complaint with a data protection supervisory authority — in Germany, the authority of your federal state (Land) or the Federal Commissioner for Data Protection (BfDI).