Privacy Policy

Last updated: July 01, 2026

The German version is legally binding; translations are provided for informational purposes only.

Overview

Protecting your personal data matters to us. This policy explains which data Job.bo processes, for what purpose, and on what legal basis. Job.bo processes as little data as possible and deliberately uses no tracking and no advertising or analytics services.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Jack Fuchs. For any privacy-related questions, you can reach us at j@ck.gg.

Jack Fuchs
Am Dreisberg 3
57520 Niederdreisbach
Deutschland

Hosting

Job.bo is hosted on a virtual server operated by the provider OVH. When you access the site, technically necessary server logs are generated (such as the IP address, time of the request, and the resource accessed), which serve the delivery, security, and stability of the service. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Cookies and session

Job.bo only sets technically necessary cookies for sign-in and session management (jw_access and jw_refresh). They contain a signed, short-lived session token and a random re-authentication key, respectively, and are required to operate the signed-in area. No tracking, advertising, or analytics cookies are set; a consent banner is therefore not required. The legal basis is Section 25 (2) TDDDG and Art. 6(1)(b) GDPR.

Registration and account

For an account, we process your email address and a password, which is stored exclusively as a cryptographic hash. To confirm your email address, we send a verification code. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR).

Application profile and CV

You can create an application profile and upload a CV (PDF, DOCX, or text). From the uploaded document, we extract text as well as details such as work experience, qualifications, and skills in order to fill in your profile and find matching jobs. You provide this information voluntarily; the legal basis is Art. 6(1)(b) GDPR.

AI-powered processing

To analyze your CV, extract skills, and generate cover letters, we use language models from the provider Anthropic. To compute semantic similarities (vector embeddings), we use a service from OpenAI. For this purpose, the content required in each case (such as your CV text) is transmitted to and processed by these providers; processing may also take place on servers outside the EU, including in the United States. The legal basis is Art. 6(1)(b) GDPR.

Location and distances

To assign coordinates to locations in your profile and in job listings and to calculate distances, we use the Photon geocoding service (operated by komoot) as well as data and services from OpenStreetMap. Location details, such as your place of residence or a job location, are transmitted to these services. The legal basis is Art. 6(1)(b) GDPR.

Email delivery

We send transactional emails, such as verification codes, notifications, and job applications, via the service provider Postmark. For this purpose, the email address and the respective message content are transmitted to the provider. The legal basis is Art. 6(1)(b) GDPR.

Public profiles

Your application profile is only publicly accessible if you explicitly set its visibility to “public”. In that case, the profile details you have released can be accessed by third parties at your profile address and indexed by search engines. Sensitive contact details and salary information are only shown if you release them separately. As long as your profile is not public, it cannot be accessed by third parties. You can change the visibility at any time in the settings.

Push notifications

With your consent, we send you web push notifications, for example about new matching jobs. For this, we store the push subscription provided by your browser. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via your browser or app settings.

Data retention

We store your data for as long as your account exists and as long as it is necessary for the purposes described. When you delete your account, the associated data is deleted, unless statutory retention obligations require otherwise.

Your rights

Under the GDPR, you have the right to access the data stored about you (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). You can withdraw any consent you have given at any time with effect for the future.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

Contact for privacy matters

To exercise your rights or for any privacy-related questions, please contact j@ck.gg.