Skip to content
Hedge Fund Interview
This site also has Practice questions →

Legal

Privacy Policy

Last updated: June 1, 2026

Hedge Fund Interview is an independent editorial publication. We collect as little personal data as possible. This policy explains what we process, why, the legal basis, how long we keep it, and your rights under the GDPR / DSGVO.

1. Data Controller

HAREMO IT Solutions GmbH, Wellingsbütteler Landstr. 193, 22337 Hamburg, Germany. For privacy inquiries: info@hedgefundinterview.com. We have not appointed a Data Protection Officer, as we are not required to under Art. 37 GDPR (no large-scale or systematic monitoring, no special-category processing).

2. What We Collect

  • Technical/server data: when you visit, our hosting provider processes your IP address, browser/user-agent, requested URL and timestamps in standard server logs, to deliver the site securely.
  • Practice account (optional): if you create an account in the Practice area, we collect the email address and password you enter, and a display name derived from your email. The password is stored only as a salted hash by our authentication provider; we never see or store the password itself. We also record which questions you have answered and your resulting progress, so the account can show it back to you. You can practise without an account, and we do not buy or scrape email addresses.
  • Marketing email: only if you ask for a free resource and confirm via double opt-in. Creating a practice account does not sign you up for marketing, and we do not send marketing to an account email unless you separately opt in.
  • We do NOT collect: CV/document uploads, payment data, or special-category data. We do not run advertising trackers.

3. Legal Basis (GDPR Art. 6)

  • Art. 6(1)(f) legitimate interests — operating and securing the website (server logs, abuse prevention).
  • Art. 6(1)(b) performance of a contract — creating and operating a practice account you asked for: authenticating you, keeping you signed in, and storing your answer history so the account does what it says.
  • Art. 6(1)(a) consent — sending a requested free resource and occasional related updates, only after you confirm via double opt-in. You can withdraw consent at any time.

4. How We Use Your Data

To serve the site reliably and securely, to detect and prevent abuse, and — where you have opted in — to send the resource you requested and occasional related career tips. We do not use your data for automated decision-making or profiling.

5. Data Retention

  • Server logs: kept for up to 30 days, then deleted or anonymised.
  • Unconfirmed requests: the confirmation link expires 48 hours after it is sent, and nothing is added to any list if it goes unused.
  • Confirmed requests: retained no longer than the point you withdraw consent; the stored consent record is deleted at the same time (see section 8).
  • Practice accounts: kept while the account exists. Ask us to delete it and the account, its email address and its answer history are removed; write to the address in section 9.

6. Processors & International Transfers

We use Vercel Inc. for two things: hosting and content delivery (serving the site to you), and Vercel Web Analytics, a cookieless, aggregate analytics tool built into that same hosting. Vercel Web Analytics does not set cookies, does not use persistent device identifiers, and does not build a profile of individual visitors: it only reports aggregate figures like page views and referrers. For the optional email resources we also use Resend (Resend, Inc.) to send transactional and double-opt-in emails. We use Supabase (Supabase, Inc.) as our database and authentication provider: it holds practice-account data (your email address, the hash of your password and your answer history) and, where one is stored, a consent record. These providers process data in the EU and the US; transfers to the US are covered by EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework. You may request a copy of the relevant safeguards from us.

7. Cookies

The site is privacy-light and does not set advertising or cross-site tracking cookies. If you sign in to a practice account we set one strictly necessary cookie to keep you signed in; it is removed when you sign out. See our Cookie Policy for details. Any non-essential cookies (e.g. if analytics is added in future) are set only with your prior consent.

8. Free Resources

The hedge-fund CV template and the recruiting tracker are marked coming soon and are not downloadable today — there is no form on this site asking for an email address. The interview readiness check is live now and grades itself in your browser; the answers you select are never sent to us. We do not currently run an email list or send marketing messages of any kind. If the CV template or tracker later ships with an email capture, it will be double opt-in in line with German UWG — nothing goes out until you click a confirmation link — and we will revise this page before that happens, not after. We do not sell email addresses and we never send messages for a third party.

9. Your Rights Under the GDPR

You have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21), and to withdraw consent (7(3)). To exercise any of these, email info@hedgefundinterview.com. We respond within one month. You also have the right to lodge a complaint with the supervisory authority: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (datenschutz-hamburg.de).

10. Security

The site is served exclusively over HTTPS/TLS, and we apply appropriate technical and organisational measures to protect data against unauthorised access, alteration or loss.

11. Changes

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.