1. Who Is Responsible for Your Personal Data?
The data controller for JobsEU.work is:
PhasedConnect d.o.o.
Radnička cesta 50
10000 Zagreb, Republic of Croatia
OIB: 95815959734
VAT ID: HR95815959734
MBS: 081423956
Website: https://jobseu.work
Privacy contact: privacy@jobseu.work
This Privacy Policy explains how we process personal data when you use JobsEU.work.
2. Personal Data We Process
Depending on how you use the service, we may process the following categories of data.
Account information
- Email address.
- Account identifier and authentication information.
- Account preferences and settings.
- Account creation and status information.
CV and job-search information
- CVs, employment history and education.
- Skills, qualifications and professional experience.
- Job-search preferences, such as location, work mode and desired role.
- Cover letters and other documents you choose to create or upload.
- Job listings viewed, saved or matched, where those features are available.
CVs may contain personal information that you choose to include, such as your name, contact details, employment history or photograph. Please avoid providing sensitive personal information unless it is genuinely necessary for your intended use.
Subscription and billing information
We use Stripe to facilitate payments and subscription management.
Depending on the payment flow and Stripe configuration, we may process or receive:
- Subscription plan and billing interval.
- Payment and subscription status.
- Transaction identifiers and invoice information.
- Billing name and billing address, where collected.
- Limited payment-method information, such as the card brand and last four digits, where supplied by Stripe.
- Records of refunds, disputes and failed payments.
Full payment card details and card security codes are intended to be handled by Stripe or its payment components, not stored by JobsEU.work on our own servers.
Technical and usage information
Depending on the features and technical configuration, we may process:
- IP address and basic device or browser information.
- Security and diagnostic logs.
- Authentication events and timestamps.
- Service usage and error information.
- Cookie or similar technology identifiers, where applicable.
The exact data collected depends on the technical implementation and your cookie preferences.
3. Why We Process Personal Data
We process personal data for the following purposes and legal bases under the General Data Protection Regulation (GDPR).
- Purpose
- Create and manage your account
- Typical legal basis
- Performance of a contract
- Purpose
- Generate CVs, cover letters and job matches you request
- Typical legal basis
- Performance of a contract
- Purpose
- Provide subscription features and customer support
- Typical legal basis
- Performance of a contract
- Purpose
- Process billing, renewals, refunds and payment disputes
- Typical legal basis
- Performance of a contract and, where applicable, legal obligations
- Purpose
- Maintain accounting and tax records
- Typical legal basis
- Legal obligation
- Purpose
- Protect the service and investigate abuse
- Typical legal basis
- Legitimate interests, where applicable
- Purpose
- Respond to privacy requests
- Typical legal basis
- Legal obligation
- Purpose
- Use optional analytics or advertising cookies, if implemented
- Typical legal basis
- Consent where required by law
- Purpose
- Send optional marketing communications, if introduced in the future
- Typical legal basis
- Consent or another legally permitted basis, as applicable
We do not currently intend to send marketing emails. We may send operational messages necessary for account management, billing, security and delivery of the service.
Where we rely on legitimate interests, we consider the impact on your rights and freedoms.
4. AI Processing
JobsEU.work uses external AI services to support features such as CV creation, document tailoring and job matching.
Depending on the feature, information you provide may be sent to an AI provider to generate a response. We aim to send only the information necessary for the requested task.
All AI processing runs through Amazon Bedrock, operated by Amazon Web Services EMEA SARL, in the European Union (Frankfurt, Germany). We do not send your data to AI services outside the EU. Through Amazon Bedrock we use:
- NVIDIA Nemotron to write tailored CVs and cover letters;
- Anthropic Claude to check generated documents against your CV and to explain and score job matches;
- Cohere Embed to compare your CV with job listings.
Before any AI request, we remove your name and contact details; they are added back only when your document is created. Date of birth, nationality, work permit, salary expectations, notice period and hobbies are never sent to an AI model. Under Amazon Bedrock's terms, the content of these requests is not used to train the models and is not shared with the model providers.
Do not assume that every AI provider has the same privacy terms. We will review applicable contractual terms, security measures, retention settings and any international data transfers.
AI-generated results may be inaccurate and should be reviewed by the user. JobsEU.work provides tools to assist job seekers; it does not submit applications to employers on their behalf.
5. Payments and Stripe
Stripe provides payment-related services for JobsEU.work.
Stripe may process personal data under its own privacy notice and applicable contractual arrangements. Its role can differ depending on the payment service and the processing activity; it should not be described as exclusively a processor unless that is accurate for the relevant activity.
We receive the payment and subscription information necessary to administer your account, reconcile transactions, provide support and meet our legal obligations.
For more information, consult Stripe's privacy notice:
JobsEU.work uses Stripe Checkout: you enter your payment details on a payment page hosted by Stripe, not on JobsEU.work. Stripe asks for your billing name and address, which we need for the invoice. We issue invoices through our accounting software, Minimax (Croatia), which receives your billing name, address and the payment amounts.
6. Who May Receive Personal Data?
We may disclose or make personal data available to the following categories of recipients when necessary:
- Hosting and infrastructure providers.
- AI service providers used for requested features.
- Stripe and relevant payment-service providers.
- Email delivery and transactional communication providers.
- Security, monitoring and technical support providers.
- Professional advisers, auditors and public authorities where legally required.
The providers we currently use are:
- Amazon Web Services (hosting, database, file storage and AI processing via Amazon Bedrock; servers in Frankfurt, Germany);
- Stripe (payments and subscriptions);
- Minimax (accounting and invoicing, Croatia);
- Amazon Simple Email Service (sending service emails, EU region), once email sending is enabled;
- Google, LinkedIn and Apple, only if you choose to sign in with one of them: they confirm your identity and share your email address with us.
We do not sell personal data to data brokers as part of the JobsEU.work service.
7. International Data Transfers
Some providers may process data outside the European Economic Area (EEA).
Where personal data is transferred internationally, we will use a lawful transfer mechanism where required, such as an adequacy decision or appropriate safeguards under GDPR, and apply any additional measures required by law.
Our servers, database, file storage and AI processing are located in the EU (Frankfurt, Germany). Some of our providers belong to groups based in the United States, namely Amazon Web Services, Stripe, and Google, LinkedIn and Apple if you use them to sign in. Where such a provider may access or transfer personal data outside the EEA, it relies on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
8. How Long We Keep Data
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements.
Our retention periods are:
- Account data: while your account is active. When you close your account, your account data, CVs and documents are permanently deleted within 30 days.
- CVs and generated documents: until you delete them or close your account.
- Billing and accounting records: invoices and accounting records are kept for 11 years, as required by Croatian accounting law (10 years for EU OSS VAT records). These records are kept separately and survive account deletion.
- Security logs: web server logs are kept for 14 days and application logs for 30 days.
- Support correspondence: for the period necessary to resolve the request and handle any related obligations.
Deleting an account may not immediately delete records that must be retained by law or are needed to establish, exercise or defend legal claims.
9. Your GDPR Rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- Access your personal data.
- Correct inaccurate or incomplete data.
- Request erasure.
- Restrict processing.
- Receive certain data in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent where processing relies on consent.
- Lodge a complaint with a supervisory authority.
To exercise your rights, contact privacy@jobseu.work. We may need to verify your identity before responding. You can also download a copy of your data and close your account yourself in your account settings.
You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):
10. Automated Processing and Job Matching
JobsEU.work may use automated analysis to compare information in your CV with job listings and to generate recommendations.
These results are intended to assist your own job search. They are not a guarantee of suitability or employment and should not replace your judgment.
We do not submit applications to employers on your behalf.
If the service's processing changes in a way that involves solely automated decisions producing legal or similarly significant effects, we will assess the applicable GDPR requirements and update our practices and disclosures as necessary.
11. Cookies and Similar Technologies
JobsEU.work may use cookies or similar technologies necessary for authentication, security and core functionality.
If optional analytics or advertising technologies are implemented, we will provide appropriate information and obtain consent where required by law. Users should be able to manage optional cookies through the applicable consent mechanism.
JobsEU.work currently uses only strictly necessary cookies, so no consent banner is needed:
- a session cookie, which keeps you signed in for up to 30 days (7 days without use) and protects forms on the site;
- a language cookie, which remembers the language you chose, for one year;
- a trusted-device cookie, set only if you choose to skip two-factor verification on a device, for 30 days;
- short-lived sign-in cookies used during Apple sign-in.
We use no analytics, advertising, session-replay or other third-party tracking scripts. Our fonts are served from our own servers. Stripe's payment page, which you reach only when you subscribe, sets its own cookies under Stripe's privacy notice.
12. Security
We use appropriate technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration or disclosure.
No internet service can guarantee absolute security. Users should protect their login credentials and avoid uploading information that is not necessary for the service.
13. Children's Data
JobsEU.work is designed for people seeking employment and is not directed at children. If we become aware that personal data has been collected in circumstances where this is unlawful, we will take appropriate steps.
14. Changes to This Policy
We may update this Privacy Policy when our service, providers or legal requirements change. We will publish the updated version and communicate material changes where required by law.
15. Contact
For privacy requests and questions:
For general support: