Privacy Policy

Last updated: July 01, 2026

The German version is legally binding; translations are provided for informational purposes only.

Overview

Protecting your personal data matters to us. This statement explains what data Job.bo processes, for what purpose, and on what legal basis. Job.bo processes as little data as possible and uses no advertising services. Our analytics run entirely on our own server in the EU using self-hosted, cookieless software — no Google, no third parties, and therefore no cookie banner either.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Jack Fuchs. For any privacy-related questions, you can reach us at support@job.bo.

Jack Fuchs
Am Dreisberg 3
57520 Niederdreisbach
Deutschland

Hosting

Job.bo is hosted on a virtual server operated by the provider OVH. When you access the site, technically necessary server logs are generated (such as the IP address, time of the request, and the resource accessed), which serve the delivery, security, and stability of the service. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Cookies and session

The cookies used for sign-in and session management (jw_access and jw_refresh) are technically necessary. They contain a signed, short-lived session token and a random re-login key, respectively, and are required to operate the signed-in area. jb_ctx (your most recently used workspace) is also technically necessary. The legal basis for this is Section 25 (2) of the German TDDDG together with Art. 6 (1) (b) and (f) GDPR. We do not use any cookies for analytics — see the following section for details.

Analytics (self-hosted, no cookies)

We measure which pages and searches are used in order to improve search, matching, and page performance. This runs entirely on our own server in the EU — using a self-hosted instance of the open-source software Umami. No Google, no third parties, no cookies, and no other access to your device; that's why Job.bo doesn't need a cookie banner. For each page view we record: the page visited, language and page type, triggered events (such as searches, filters, or clicks), the referring page, device and browser category, screen size, and the country of origin. When you open a job listing on the provider's site, our server additionally counts this event as an anonymous click — it forms the basis of our compensation from job partners. Your IP address is used only transiently to determine the country of origin and to derive a daily-rotating, irreversible identifier; it is never stored. No one — not even we — can recognize you across days or attribute visits to you personally. Your name, email address, and profile contents are never part of the measurement. The legal basis is our legitimate interest in understanding how Job.bo is used (Art. 6 (1) (f) GDPR). Section 25 TDDDG is not affected, as nothing is stored on or read from your device. You can object to the measurement at any time: we automatically respect the “Do Not Track” and Global Privacy Control browser signals — or you can use the toggle below this section. It only places an opt-out flag in your browser's localStorage; its sole purpose is to honor your objection.

Opting out of analytics

…

Registration and account

For an account, we process your email address and a password, which is stored exclusively as a cryptographic hash. To confirm your email address, we send a verification code. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR).

Application profile and CV

You can create an application profile and upload a CV (PDF, DOCX, or text). From the uploaded document, we extract text as well as details such as work experience, qualifications, and skills in order to fill in your profile and find matching jobs. You provide this information voluntarily; the legal basis is Art. 6(1)(b) GDPR.

AI-powered processing

To analyze your CV, extract skills, and generate cover letters, we use language models from the provider Anthropic. To compute semantic similarities (vector embeddings), we use a service from OpenAI. For this purpose, the content required in each case (such as your CV text) is transmitted to and processed by these providers; processing may also take place on servers outside the EU, including in the United States. The legal basis is Art. 6(1)(b) GDPR.

Location and distances

To match locations in your profile and in job listings to coordinates and calculate distances, we use the geocoding service Photon (operated by komoot) as well as data and services from OpenStreetMap. In doing so, location details such as your place of residence or a job location are transmitted to these services. The legal basis is Art. 6(1)(b) GDPR. To determine the approximate location (country level) of anonymous visitors, we use the "DB-IP Lite" database locally (https://db-ip.com, licensed under CC BY 4.0) — no IP addresses are transmitted to third parties.

Email delivery

We send transactional emails, such as verification codes, notifications, and job applications, via the service provider Postmark. For this purpose, the email address and the respective message content are transmitted to the provider. The legal basis is Art. 6(1)(b) GDPR.

Public profiles

Your application profile is only publicly accessible if you explicitly set its visibility to “public”. In that case, the profile details you have released can be accessed by third parties at your profile address and indexed by search engines. Sensitive contact details and salary information are only shown if you release them separately. As long as your profile is not public, it cannot be accessed by third parties. You can change the visibility at any time in the settings.

Push notifications

With your consent, we send you web push notifications, for example about new matching jobs. For this, we store the push subscription provided by your browser. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via your browser or app settings.

Data retention

We store your data for as long as your account exists and as long as it is necessary for the purposes described. When you delete your account, the associated data is deleted, unless statutory retention obligations require otherwise.

Your rights

Under the GDPR, you have the right to access the data stored about you (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). You can withdraw any consent you have given at any time with effect for the future.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

Contact for privacy matters

To exercise your rights or for any privacy-related questions, please contact support@job.bo.