Privacy Policy

Last Updated: April 24, 2025

1. Data Controller Information

The data controller responsible for processing your personal data is:

Our Data Protection Officer can be contacted at: [email protected]

2. Data We Collect

We collect and process the following categories of personal data:

2.1 Account Information

When you register with JetJobs, we collect:

• Full name
• Email address
• Password (stored in encrypted form)
• Profile information you choose to provide
• Account preferences and settings

2.2 Resume/CV Data

When you upload or paste your resume, we collect information contained within it, which may include:

• Professional experience and work history
• Educational background
• Skills and qualifications
• Contact information
• Professional certifications
• Languages spoken
• Other career-related information you choose to include

2.3 Job Application Data

Information related to jobs you've applied for through our platform, including:

• Job application history
• Application status
• Cover letters or additional documents
• Communication with potential employers through our platform
• Notes and reminders you create regarding applications

2.4 Usage Data

Information about how you interact with our website, including:

• Pages visited and features used
• Time spent on pages
• Clickstream data
• Job search queries
• Saved searches and job alerts
• User activity and preferences

2.5 Technical Data

Technical information about your device and internet connection, including:

• IP address
• Browser type and version
• Operating system
• Device information
• Time zone setting and location
• Cookies and similar tracking technologies
• Log data (date/time of access, features used)

3. Legal Basis for Processing

Under the GDPR and German data protection law, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR);
• Legitimate Interests: Processing necessary for our legitimate interests or those of a third party, except where such interests are overridden by your fundamental rights and freedoms (Article 6(1)(f) GDPR);
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent (Article 6(1)(a) GDPR);
• Legal Obligation: Processing necessary for compliance with a legal obligation to which we are subject (Article 6(1)(c) GDPR).

4. How We Use Your Data

We use your information for the following purposes and corresponding legal bases:

Purpose	Legal Basis
To create and manage your user account	Contract Performance
To process your resume with AI tools to extract relevant job information	Contract Performance, Consent
To match you with relevant job opportunities	Contract Performance, Legitimate Interests
To improve and personalize your experience	Legitimate Interests
To communicate with you about service updates and job opportunities	Legitimate Interests, Consent
To ensure security and prevent fraud	Legitimate Interests, Legal Obligation
To analyze website usage and improve our services	Legitimate Interests
To comply with legal obligations	Legal Obligation

5. Resume Processing and AI Technology

When you upload your resume, our AI technology processes it to extract relevant information such as your skills, experience, and education. This processing is essential to provide our core job-matching services.

5.1 How Resume Data is Processed

Our AI-powered resume analysis involves:

• Text extraction from uploaded documents
• Automated information categorization (skills, experience, education, etc.)
• Creation of a structured profile based on extracted information
• Matching your profile with relevant job listings
• Generation of personalized job recommendations

5.2 Security Measures for Resume Data

Your resume data is treated with the highest level of security:

• All uploaded documents are stored with encryption at rest
• Access to resume data is strictly controlled and logged
• Regular security assessments of our AI processing systems
• Data is only used for the purposes described in this policy

6. Data Sharing

We do not sell your personal data to third parties. We may share your information in the following circumstances:

6.1 Service Providers

We share data with trusted service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Analytics services
• Email and communication service providers
• Customer support services
• AI and machine learning service providers for resume processing

All service providers are bound by data processing agreements that ensure they handle your personal data in accordance with applicable data protection laws.

6.2 Potential Employers

When you apply for jobs through our platform, we share your application details, including your resume, with the potential employer. This sharing only occurs with your explicit consent at the time of application.

6.3 Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., court order, government request).

6.4 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal data.

7. International Data Transfers

JetJobs primarily processes and stores data within the European Economic Area (EEA). However, some of our service providers may be located outside the EEA. When we transfer personal data outside the EEA, we ensure that appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Binding corporate rules, where applicable
• Other legally valid transfer mechanisms

For transfers to the United States, we work only with service providers who provide strong data protection guarantees and, where applicable, have certified under frameworks recognized by European authorities.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are small files placed on your device that allow us to provide features and functionality.

8.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential cookies	Necessary for the website to function properly. They enable core functionality such as security, network management, and account access.	Session to 2 years
Preference cookies	Enable the website to remember your preferences, such as language selection or region.	Up to 1 year
Analytics cookies	Help us understand how visitors interact with our website by collecting and reporting information anonymously.	Up to 2 years
Authentication cookies	Identify you when you log in to our website and remember your login status.	Session to 2 weeks

8.2 Managing Cookies

You can control cookies through our cookie consent banner when you first visit our website. You can also manage cookies through your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Please note that disabling certain cookies may limit the functionality of our website.

9. Google Analytics

We use Google Analytics to analyze the use of our website. Google Analytics is a web analytics service provided by Google LLC ("Google") that uses cookies to collect information about website use.

9.1 Data Collected by Google Analytics

The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. We have activated the IP anonymization feature, which means your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area before transmission to the US.

9.2 Purpose of Google Analytics

Google will use this information on our behalf for the purpose of:

• Evaluating your use of the website
• Compiling reports on website activity
• Providing other services relating to website activity and internet usage

9.3 Opting Out of Google Analytics

You can prevent Google Analytics from tracking you by:

• Using our cookie consent banner to decline analytics cookies
• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your browser settings to reject cookies

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security measures include:

• Data encryption in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular security training for all staff
• Physical security measures for our facilities
• Regular backups and disaster recovery procedures
• Incident response plans

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

11. Your Privacy Rights

As a data subject in the European Union, you have specific rights under the GDPR, including:

• Right to Access: You have the right to request information about your personal data that we process, including what data we have and how we process it.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing or processing based on legitimate interests.
• Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

11.1 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

11.2 Complaints

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority. The supervisory authority in Estonia is:

12. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

12.1 Retention Periods

Data Category	Retention Period
Account information	For the duration of your account plus 6 months after closure
Resume/CV data	For the duration of your account plus 6 months after closure
Job application data	3 years from last application
Usage data	Up to 2 years
Technical data	Up to 1 year

12.2 Criteria for Determining Retention Periods

In determining the appropriate retention period for personal data, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the data
• Whether we can achieve those purposes through other means
• Legal, regulatory, tax, accounting, or other requirements

13. Children's Privacy

Our service is not intended for individuals under the age of 16, and we do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information as quickly as possible.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page. If we make material changes to how we treat your personal data, we will notify you through a notice on the website homepage or by email.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

If you have any questions or concerns about our Privacy Policy or our practices regarding your personal data, please contact us at: