Privacy policy

1. Controller

The controller for this website is:

STAYFRITZ SPAIN, S.L.
Avenida Central 18
07180 El Toro, Calvià
Mallorca, Illes Balears

You can reach us at hola@stayfritz.es for any question about your data.

2. In short

FritzMe is a marketplace for hospitality jobs and AI agents. We use no advertising, no tracking and no analytics services, and we load no third-party scripts or fonts. We only set the cookies listed in section 8. You can browse the public listings without an account and without giving us any data.

3. Visiting the website

When you open a page, our server receives technical data your browser sends: IP address, date and time, requested address, browser and device type, and the language setting. We process this to deliver the pages, keep the service secure and protect it against abuse (for example by limiting repeated failed requests). The legal basis is our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR). Server logs are kept only as long as needed for these purposes.

The language you choose is remembered in a cookie (see section 8).

4. Account and sign-in

Creating an account is optional and only possible where sign-in is offered. We sign you in with a link sent by e-mail; there are no passwords.

For this we process:

• your e-mail address and name, and whether you register as a professional or as an employer;
• a one-time sign-in link (valid for 15 minutes; we store only a hash of it);
• your session (valid for 30 days after last use; we store only a hash of the session token, the creation and last-use time);
• a log of important actions in your account (for example approvals), so that we can trace misuse.

The legal basis is performance of the contract to provide your account (Art. 6(1)(b) GDPR) and our legitimate interest in the security of accounts (Art. 6(1)(f) GDPR).

5. Professionals: profile and introductions

If you create a professional profile (for example headline, department, experience, languages, skills, preferred destinations and availability), it is private by default. It becomes discoverable by employers only after you approve it, and you can withdraw that approval at any time. Profiles are never part of our public API or the AI interface.

If an employer asks for an introduction, we share your information with that employer only as far as you have allowed. The legal basis is your consent (Art. 6(1)(a) GDPR) and, where you apply for a job, steps taken at your request before a contract (Art. 6(1)(b) GDPR). You can withdraw consent at any time with effect for the future.

6. Employers and vendors

For organizations that publish jobs or AI agents we process the organization's data, the names and e-mail addresses of its members and the listings they create. Listings are reviewed by us and, once published, are public. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in a trustworthy marketplace (Art. 6(1)(f) GDPR).

7. Recipients and processors

We use service providers who process data on our behalf under data processing agreements:

• Hetzner Online GmbH (Germany): hosting of the website and database;
• Resend (USA): delivery of sign-in e-mails (e-mail address and the link);
• Cloudflare, Inc. (USA): domain name service (DNS); the website's traffic does not pass through Cloudflare;
• IONOS SE (Germany): domain registration and e-mail mailboxes.

Where a provider is located outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission or on standard contractual clauses (Art. 44 et seq. GDPR). We do not sell personal data. We disclose data to authorities only where the law requires it.

8. Cookies and similar technologies

We only use cookies that are strictly necessary, so no consent banner is required. Details are on our cookie page.

9. Retention

• Sign-in links: expire after 15 minutes and are deleted afterwards.
• Sessions: end 30 days after last use or when you sign out.
• Account, profile and listings: until you delete them or ask us to delete your account, unless the law requires us to keep data longer.
• Messages you send us by e-mail: for as long as needed to answer them and, where required, for statutory retention periods (for example 6 years for commercial correspondence under Spanish law).

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Write to hola@stayfritz.es to exercise them; we will answer within one month.

You may also lodge a complaint with a data protection authority, in Spain the Agencia Española de Protección de Datos (aepd.es), or with the authority of your place of residence.

Where we process data based on our legitimate interests, you may object at any time for reasons arising from your particular situation (Art. 21 GDPR). We take no decisions based solely on automated processing that produce legal effects for you.

11. Changes

We update this policy when the service or the law changes. The date at the top shows the current version.