Privacy policy

Last updated: 17 October 2026 – draft, legal review pending

1. Controller

Öcal Uğurel Kashem Kollar GbR
Crellestraße 35, 10827 Berlin, Germany
represented by the partners Melodi Öcal, Emily Kashem, Annalena Kollar, Gülsevim Uğurel
Phone: +49 179 4366647
E-mail: info@trymeup.de

2. What this is about

TRYME connects law students with law firms for internships. Students and law firms each fill in a questionnaire. We compare the answers and suggest suitable contacts ("matching").

3. Data we process

Students: name, university, field of study, semester, expected graduation, language skills, areas of interest, previous experience and skills, preferences regarding law firm, location, timing, duration and work model, and contact details (e-mail; optionally phone and LinkedIn).

Law firms: firm name, website, contact person and their position, e-mail, phone, office locations, areas of law, and information about the internship and requirements for interns.

We also store when and in which version you gave your consent.

Contact form: name, e-mail address and your message, in order to answer your enquiry.

We receive your details directly from you. Providing them is voluntary; without the required details and your consent, however, we cannot include you in the matching.

4. Purposes and legal bases

• Matching and placement: based on the consent you give in the questionnaire (Art. 6(1)(a) GDPR).
• Sharing your profile and contact details with a matching law firm or person: only if you have agreed to this (optional consent in the questionnaire) and only after review by our team (Art. 6(1)(a) GDPR).
• Communication about your request and match suggestions: Art. 6(1)(b) GDPR (pre-contractual measures).
• Contact form: Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).
• Spam protection: The forms contain an invisible field that lets us recognise automated submissions. No additional data is collected.

5. AI-assisted analysis

We use an AI-assisted system for matching. It only receives a pseudonymised profile – without name, e-mail address, phone number or LinkedIn profile. Free-text answers are cleaned of recognisable contact details beforehand.

Sent to the AI service: a random ID, areas of law, types of work, preferred firm type and size, countries and cities, timing, duration, work model, field of study, semester, language skills and the cleaned free-text answers (e.g. experience and skills, or the firm's requirements).
Never sent to the AI service: name, e-mail address, phone number, LinkedIn profile, website, firm name and name of the contact person. The link between the ID and your contact details stays with us.

Only submissions with consent are processed.

The AI only produces suggestions. Every suggestion is reviewed by a member of our team before anything is shared; no decision based solely on automated processing within the meaning of Art. 22 GDPR takes place.

AI service used: Anthropic Ireland, Limited (contracting party in the EU) with the AI model "Claude". Processing may also take place at Anthropic PBC in the USA. This transfer is covered by the EU standard contractual clauses (Art. 46(2)(c) GDPR) that form part of Anthropic's data processing addendum. Under Anthropic's terms, the data transmitted may not be used to train AI models.

6. Recipients and hosting

• Website hosting and storage of questionnaires: Verimgo Sunucu ve Bilişim Hizmetleri, Turkey [address to be requested from the host]. The servers are located in Istanbul (Turkey). Turkey is a third country without an adequacy decision of the EU Commission. [Basis for the transfer (e.g. EU standard contractual clauses with Verimgo, Art. 46(2)(c) GDPR) is still being agreed]
• E-mail: The details from the questionnaires and the contact form are also sent by e-mail to our mailboxes (info@trymeup.de, cv@trymeup.de). E-mail provider: STRATO GmbH, Berlin. Notifications are sent from our web server at Verimgo to the mailboxes at STRATO.
• AI service: see section 5 (pseudonymised profiles only).
• Law firms in Germany and Turkey, or students, in the event of a match – only with your approval and after review by our team. The transfer to law firms in Turkey is based on your explicit consent (Art. 49(1)(a) GDPR). Please note: there is no adequacy decision of the EU Commission for Turkey, so the level of data protection there does not correspond to that of the EU. No appropriate safeguards such as EU standard contractual clauses apply to this transfer, and it may be harder to enforce your rights there. You can withdraw your consent at any time with effect for the future.

We conclude data processing agreements (Art. 28 GDPR) with service providers who process data on our behalf.

7. Storage period

We store your details until you withdraw your consent, but no longer than 12 months after your last activity. The data is then deleted unless statutory retention obligations apply.

8. Your rights

• Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
• Objection to processing based on our legitimate interests (Art. 21 GDPR), e.g. server log files.
• Withdrawal of your consent at any time with effect for the future (Art. 7(3) GDPR), e.g. by e-mail to info@trymeup.de.
• The right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR): the authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

9. Visiting the website

Server log files: When you visit the website, the host processes technically necessary data (e.g. IP address, time, page requested, browser). The legal basis is Art. 6(1)(f) GDPR (secure operation of the website). Storage period: log files are archived monthly and deleted at the end of the following month, i.e. after about two months at most. The hosting control panel creates access statistics from them that only we can see.

Session cookie: We use a technically necessary cookie (PHPSESSID) to remember your selected language. It is deleted when you close your browser.

Fonts: Fonts are loaded directly from our own server. No connection to Google or other third parties is made.

The German version is legally binding.