PlaceholderPlaceholder — replace with reviewed legal texts before launch. This text is not legal advice and not legally binding.
Privacy policy
This privacy policy explains which personal data we process when you visit and use Jobriese, on which legal basis this happens and which rights you have.
1. Controller
Controller for data processing on this website: [Placeholder: company name, address, email, phone] Data protection officer (if appointed): [Placeholder]
2. Overview of processing activities
Jobriese is a B2B marketplace where companies post jobs with a fixed placement budget and recruiters submit candidates. We process data of user accounts (companies and recruiters), of candidates submitted by recruiters, and technical data when the website is visited. [Placeholder: complete description of processing activities]
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When pages are accessed, Vercel processes technically necessary data (including IP address, time of access, user agent) in server logs. A data processing agreement is in place with Vercel; transfers to third countries are safeguarded via EU standard contractual clauses. [Placeholder: verify details and retention periods]
4. Database and authentication (Supabase, EU region)
We use Supabase for the database, authentication and file storage. Data is stored in an EU region. A data processing agreement is in place with Supabase. Processed data includes account data, organisation data, job and mandate data, and candidate documents submitted by recruiters (e.g. CVs). [Placeholder: add DPA details]
5. Transactional emails (Resend)
We use Resend to send system emails (e.g. registration confirmation, notifications). This involves processing the email address and the content required for the respective message. A data processing agreement is in place with Resend. [Placeholder: verify third-country transfers and safeguards]
6. Cookies and local storage
Jobriese only uses technically necessary cookies, in particular for login (session) and the language setting. No marketing or tracking cookies are set; a cookie banner is therefore not required. The legal basis is Art. 6 (1) (f) GDPR and Section 25 (2) TDDDG. [Placeholder: update if additional services are introduced]
7. Registration and user accounts
During registration we process name, email address, password (encrypted) and organisation data (e.g. company name, location, recruiter type). The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). [Placeholder: add retention periods]
8. Candidate data
Recruiters submit candidate profiles and CVs on Jobriese. Candidates' contact details are only disclosed to the company after a confirmed hire. Candidates can exercise their rights via our GDPR request form even without an account. [Placeholder: have controller/processor roles and Art. 14 GDPR information duties reviewed by legal counsel]
9. Retention periods
We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. CVs of rejected or withdrawn candidates are deleted after the internal retention period expires. [Placeholder: add specific periods]
10. Your rights as a data subject
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). [Placeholder: name the competent supervisory authority]
Exercise your rights — no account needed
You were proposed as a candidate via Jobriese and want to know what data we hold about you, or request its deletion? Use our form — no account required.
Go to the GDPR request form