Privacy Policy.

YOSHITA (“we”, “us”) operates the website yoshita.co and connects Indonesian candidates with vocational training (Ausbildung) and employment opportunities in Germany. For the purposes of the EU General Data Protection Regulation (GDPR) and applicable Indonesian data protection law, we are the controller of the personal data described in this policy.

You can reach us with any privacy question through the contact page on this website.

Candidate applications: full name, email address, phone number, WhatsApp number, age, highest qualification, profession, years of experience, German language level, area of interest and any message you choose to send us.

Employer enquiries: company name, contact name, email address, phone number, industry, positions required, number of workers needed, preferred location, target start date and your message.

Accounts: if you create an account, we store your name, email address, chosen role (candidate or employer), password (securely hashed — we never see it) and authentication method. If you sign in with Google, we receive your name and email address from Google.

Usage data: like most websites, our hosting provider may process technical data such as IP address, browser type and pages visited to deliver and secure the site.

To handle your application or enquiry and assess your eligibility for pathways to Germany (performance of a contract or steps before entering into a contract, Art. 6(1)(b) GDPR).

To operate your account and the application portal (performance of a contract, Art. 6(1)(b) GDPR).

To send you service communications about your application or account. Marketing emails are only sent with your consent (Art. 6(1)(a) GDPR).

To keep the website secure and improve our services (legitimate interests, Art. 6(1)(f) GDPR).

With your knowledge, we may share relevant parts of your candidate profile with prospective German employers and training partners as part of the matching process. We never sell your personal data.

We use a small number of service providers to operate this website — hosting, authentication, database and email delivery. These providers process data on our behalf under data processing agreements.

Your data may be processed in Indonesia, the European Union and other countries where our service providers operate. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

We keep application and enquiry data for as long as needed to process your application and, if you proceed, throughout your placement journey. If your application is unsuccessful, we delete it within 24 months unless you ask us to keep it longer or delete it sooner. Account data is kept until you delete your account.

You have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You also have the right to lodge a complaint with a data protection authority.

To exercise any of these rights, contact us via the contact page. We respond within 30 days.

We keep things minimal. We store your language preference (English, Bahasa Indonesia or German) in your browser's local storage, and authentication essentials in cookies when you are signed in. We do not use advertising or tracking cookies.

We protect your data with encryption in transit, access controls and role-based permissions inside our team. No system is perfectly secure, but we design our processes to minimise what we collect and who can see it.

We may update this policy as our services evolve. The date at the top of this page shows the latest version. Significant changes will be communicated to account holders by email.