Politika zasebnosti
1. Who processes your data
This Privacy Policy is issued by StartupJobs.com s.r.o., Company ID No. 29153786, VAT No. CZ29153786, with its registered office at Šostakovičovo náměstí 1515/5, 155 00 Prague 5-Stodůlky, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 204709 (“we”, “us”, the “Controller”). It applies to StartupJobs at https://www.startupjobs.si.
We always process personal data in accordance with this Policy. In doing so, we follow the principles set out in Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”) and the national law implementing it, together with other applicable data protection laws.
We have not appointed a data protection officer. You can reach us about anything in this Policy at [email protected].
2. What we process and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Job alert: your email address, the language you chose, the search the alert runs on, a hashed record of your IP address and the version of the consent text you agreed to | To send you new jobs matching that search, once a week | Your consent, Art. 6(1)(a) GDPR | Until you unsubscribe. An alert you never confirm is deleted after 7 days. |
| Application: your name, email address, phone number if you give one, your message and the document you attach | To pass your application to the company whose job you applied for | Steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR | 90 days from sending, then the record and the file are deleted |
| Order: company name, VAT identification number if given, country, and the email address of the person ordering | To publish the job, issue the invoice and keep accounting records | Performance of a contract, Art. 6(1)(b), and compliance with a legal obligation, Art. 6(1)(c) GDPR | For as long as accounting and tax law requires |
| Company profile editing: the email address the editing link was sent to | To let the company edit its profile without an account or a password | Our legitimate interest in providing the service without forcing people to create accounts, Art. 6(1)(f) GDPR | For as long as the profile exists |
| Logging in: your email address, the language you used, when and how many times you asked for a login link, and when you last logged in | To send you a login link and let you post and manage your jobs without a password | Steps taken at your request prior to entering into a contract and performance of that contract, Art. 6(1)(b) GDPR | For as long as you use it. Write to us and we delete it, together with anything that is not an accounting record |
| Claiming or removing a company: the work email address you enter, the language you used and when you confirmed | To check that you work for the company (the address must be at its domain), to send you the link to its company page, and to remove the company when you ask | Our legitimate interest in letting companies manage or remove their listing without an account, Art. 6(1)(f) GDPR | For as long as you manage the company page. After a removal we keep only the company domain, so that we do not list it again |
| Company contact address: a general business address that a company publishes on its own website (such as careers@ or hello@ at its domain), and the page where we found it | To tell the company that its jobs are listed here, and to offer it the choice to manage the listing, promote a job or have the company removed | Our legitimate interest in informing companies about how their public jobs are listed, Art. 6(1)(f) GDPR. We only use general role addresses, never the address of a named person, and we never guess addresses | Until the company is removed or asks us to stop writing. After that we keep only the address in a do-not-contact list, so that we never write to it again |
| Outgoing email: the address a message is sent to, together with its subject and body | To actually deliver the emails described above: alerts, confirmations, forwarded applications, invoices | The same basis as the message it carries | Deleted 30 days after the message is sent. If a message to an address bounces permanently or is marked as spam, we keep only that address in a do-not-send list, so that we never write to it again |
| Messages you send us | To answer you | Our legitimate interest in replying to people who write to us, Art. 6(1)(f) GDPR | As long as the matter is open, and then for as long as we may need it as evidence |
We do not create candidate accounts, we do not keep a candidate database, and we do not profile you or make automated decisions about you.
3. What we deliberately do not collect
- We do not store your IP address. Where we need to tell one visitor from another (to stop abuse of a form), we store a one-way hash of the address, from which the address cannot be recovered.
- We do not set advertising or analytics cookies, and we do not embed any third-party tracker. See the Cookie notice at https://www.startupjobs.si/cookies.
- We do not collect the email addresses of people from company websites. The only address we take from a company website is a general business address the company publishes itself, as described in the table above. Every other email address we hold is one that people have given us themselves.
- Job listings and company profiles collected from public career pages contain information about companies, not about individuals. Where a listing names a person, we remove it.
4. Who else sees your data
- The company you applied to. Your application, including the attached document, is forwarded to the company that published the job. From that point the company decides how it handles it, and it is responsible for that as a separate controller. What we may and may not do with applications on behalf of companies is set out in the Terms.
- Our processors. We use a small number of providers who process personal data only on our instructions and under a contract meeting Art. 28 GDPR: our hosting and object storage provider, our email delivery provider, the provider we use to send messages to companies, the provider of the language model we use to write short company descriptions and job summaries from company websites and job listings, our content delivery and security provider, and our payment provider for orders. Payment card details never reach us; they are handled by the payment provider.
- Nobody else. We do not sell personal data and we do not pass it to advertisers.
5. Transfers outside the European Economic Area
Our servers are in the European Union. Where a processor transfers personal data outside the EEA, that transfer is covered by the European Commission’s standard contractual clauses or by an adequacy decision.
6. Your rights
You have the following rights in relation to the personal data we hold about you. To exercise any of them, write to [email protected].
- Right of access. You may request confirmation from us as to whether personal data concerning you is being processed, and if so, you may obtain further information about such processing. Your right of access shall be exercised in accordance with applicable laws. If your requests are manifestly unfounded, excessive, or repetitive, we may either charge a reasonable fee, taking into account the administrative costs of complying with the request, or refuse to act on the request.
- Right to rectification. You have the right to request that we rectify inaccurate or incomplete personal data concerning you without undue delay.
- Right to erasure (“right to be forgotten”). You have the right to request that we erase personal data concerning you without undue delay, and we are obliged to delete such data without undue delay if the relevant conditions under the GDPR are met.
- Right to restriction of processing. You have the right to request restriction of the processing of your personal data.
- Right to object. You may object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of our legitimate interest.
- Right to data portability. You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us.
- Right to withdraw consent. Where processing is based on consent, you may withdraw your consent at any time. For job alerts, the link in every message is enough; withdrawal takes effect immediately and does not affect the lawfulness of processing before it.
7. Complaints
If you believe that your personal data has been processed unlawfully, please write to us first at [email protected]. It is usually the fastest way to fix it.
You also have the right to lodge a complaint with a supervisory authority: under Art. 77 GDPR, the one in the country of your habitual residence, of your place of work, or of the alleged infringement, whichever you prefer. The European Data Protection Board keeps the list of them at edpb.europa.eu. If you are outside the European Economic Area, the authority in your own country may also be competent.
8. Changes to this Policy
We may change this Policy. The current version is always published at https://www.startupjobs.si/privacy with the date from which it applies. If a change materially affects you and we have your email address, we will tell you.
This Policy is effective from 2026-09-21.
Vprašanja o tem dokumentu: [email protected]