Privacy Policy

Last updated: August 30, 2026

The German version is legally binding; translations are provided for informational purposes only.

Overview

Protecting your personal data matters to us. This statement explains what data Job.bo processes, for what purpose, and on what legal basis. Job.bo processes as little data as possible and uses no advertising services. Our analytics run entirely on our own server in the EU using self-hosted, cookieless software — no Google, no third parties, and therefore no cookie banner either.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Jack Fuchs. For any privacy-related questions, you can reach us at support@job.bo.

Jack Fuchs
Am Dreisberg 3
57520 Niederdreisbach
Deutschland

Hosting

Job.bo runs on dedicated servers from the provider OVH that are used exclusively for this project. When you access our pages, technically necessary server log data is generated (such as the IP address, time of the request, and the resource accessed), which serves to deliver the service and ensure its security and stability. The legal basis is our legitimate interest in operating the service securely (Art. 6(1)(f) GDPR).

Cookies and session

The cookies used for sign-in and session management (jw_access and jw_refresh) are technically necessary. They contain a signed, short-lived session token and a random re-login key, respectively, and are required to operate the signed-in area. jb_ctx (your most recently used workspace) is also technically necessary. The legal basis for this is Section 25 (2) of the German TDDDG together with Art. 6 (1) (b) and (f) GDPR. We do not use any cookies for analytics — see the following section for details.

Analytics (self-hosted, no cookies)

We measure which pages and searches are used in order to improve search, matching, and page performance. This runs entirely on our own server in the EU — using a self-hosted instance of the open-source software Umami. No Google, no third parties, no cookies, and no other access to your device; that's why Job.bo doesn't need a cookie banner. For each page view we record: the page visited, language and page type, triggered events (such as searches, filters, or clicks), the referring page, device and browser category, screen size, and the country of origin. When you open a job listing on the provider's site, our server additionally counts this event as an anonymous click — it forms the basis of our compensation from job partners. Your IP address is used only transiently to determine the country of origin and to derive a daily-rotating, irreversible identifier; it is never stored. No one — not even we — can recognize you across days or attribute visits to you personally. Your name, email address, and profile contents are never part of the measurement. The legal basis is our legitimate interest in understanding how Job.bo is used (Art. 6 (1) (f) GDPR). Section 25 TDDDG is not affected, as nothing is stored on or read from your device. You can object to the measurement at any time: we automatically respect the “Do Not Track” and Global Privacy Control browser signals — or you can use the toggle below this section. It only places an opt-out flag in your browser's localStorage; its sole purpose is to honor your objection.

Opting out of analytics

…

Registration and account

For an account, we process your email address and a password, which is stored exclusively as a cryptographic hash. To confirm your email address, we send a verification code. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR).

Application profile and CV

You can create an application profile and upload a CV (PDF, DOCX, or text). From the uploaded document, we extract text as well as details such as work experience, qualifications, and skills in order to fill in your profile and find matching jobs. You provide this information voluntarily; the legal basis is Art. 6(1)(b) GDPR.

AI-powered processing

To analyze your CV, extract skills, and generate cover letters, we use language models from the provider Anthropic. To compute semantic similarities (vector embeddings), we use a service from OpenAI. For this purpose, the content required in each case (such as your CV text) is transmitted to and processed by these providers; processing may also take place on servers outside the EU, including in the United States. The legal basis is Art. 6(1)(b) GDPR.

Location and distances

To match locations in your profile and in job listings to coordinates and calculate distances, we use the geocoding service Photon (operated by komoot) as well as data and services from OpenStreetMap. In doing so, location details such as your place of residence or a job location are transmitted to these services. The legal basis is Art. 6(1)(b) GDPR. To determine the approximate location (country level) of anonymous visitors, we use the "DB-IP Lite" database locally (https://db-ip.com, licensed under CC BY 4.0) — no IP addresses are transmitted to third parties.

Email delivery

We send transactional emails, such as verification codes, notifications, and job applications, via the service provider Postmark. For this purpose, the email address and the respective message content are transmitted to the provider. The legal basis is Art. 6(1)(b) GDPR.

Public profiles

Your application profile is only publicly accessible if you explicitly set its visibility to “public”. In that case, the profile details you have released can be accessed by third parties at your profile address and indexed by search engines. Sensitive contact details and salary information are only shown if you release them separately. As long as your profile is not public, it cannot be accessed by third parties. You can change the visibility at any time in the settings.

Push notifications

With your consent, we send you web push notifications, for example about new matching jobs. For this, we store the push subscription provided by your browser. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via your browser or app settings.

Job emails and their measurement

If you enable job emails when setting up your profile or in Settings, we send you suitable new jobs by email — daily or immediately when there are strong matches, and only when there are matches. The sender is “Julia von Job.bo”, a display name used by our system delivery via Postmark. To improve the quality of the matches, these emails contain a small image that is loaded by Postmark when the email is opened, as well as links that pass through our server when clicked. This tells us whether an email was opened and which job was clicked. We store only the time and number of openings for each email, as well as the jobs that were clicked; when the image is loaded, Postmark processes technical data about the request as our processor. If your email program does not load images, no opening is recorded. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future: in Settings by selecting “Off” or via the unsubscribe link in every email.

Data retention

We store your data for as long as your account exists and as long as it is necessary for the purposes described. When you delete your account, the associated data is deleted, unless statutory retention obligations require otherwise.

Your rights

Under the GDPR, you have the right to access the data stored about you (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). You can withdraw any consent you have given at any time with effect for the future.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.

Contact for privacy matters

To exercise your rights or for any privacy-related questions, please contact support@job.bo.