1. Controller and contact details

The controller responsible for personal data processed through Jobaro is jobaro.online. Current operator details:

jobaro.online
Romania
contact@jobaro.online

Privacy questions and data-subject requests may be sent to contact@jobaro.online. Legal notices may be sent to contact@jobaro.online.

2. Personal data we may collect

Depending on how you use Jobaro, we may process account data such as name, username, email address, role and authentication information; Candidate data such as professional title, location, work preferences, experience, education, languages, skills, profile image and CV; Employer/company data such as company name, logo, industry, size, location, website, job listings and verification information; recruitment data such as applications, application status, invitations and CV-access requests; and technical data such as IP address, device/browser information, timestamps, security logs, cookie identifiers and service interactions. We also process communications sent to support, privacy or legal channels.

3. Public and private visibility

Public job listings, public company profiles, public Candidate fields and Looking for Work announcements may be visible to visitors and search engines according to visibility settings and indexing rules. Information marked private is not intended for public display. Users should not place information in public fields that they do not want publicly accessible.

4. Purposes and legal bases

We process data to create and administer accounts and profiles; publish and search listings; manage applications, invitations and CV permissions; provide employer verification; secure the service; prevent fraud and abuse; respond to users; comply with law; and improve reliability and usability. Depending on the activity, the legal basis may be performance of a contract or requested pre-contract steps, compliance with a legal obligation, our legitimate interests in operating and protecting the platform and preventing fraud, or consent for optional activities where consent is required.

5. Private CVs and application data

A Candidate’s private CV is not published in the public Candidate feed. An Employer may obtain access where the Candidate expressly approves a CV-access request or where the Candidate submits an application through a Jobaro flow that requires the relevant Employer to review the application and associated CV information. Jobaro may preserve an application-specific snapshot where needed to maintain the integrity of the recruitment record. Employers receiving Candidate data are responsible for their own subsequent processing under applicable law.

6. Recipients

Data may be disclosed to other users where necessary for the feature used, for example to an Employer receiving an application or approved CV access. We may use service providers supporting hosting, infrastructure, email delivery, security, backups, analytics or technical support under appropriate contractual and confidentiality obligations. Data may be disclosed to authorities or courts where required by law or necessary to establish, exercise or defend legal claims.

7. International transfers

Where personal data is transferred outside the European Economic Area and no adequacy decision applies, we use an appropriate lawful transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses together with supplementary safeguards where appropriate.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose, service security, legal obligations and resolving or defending claims. Retention criteria include the type of record, account status, recruitment activity, legal limitation periods and technical backup cycles. Data no longer needed is deleted, anonymised or isolated from normal use, subject to lawful backup and record-keeping requirements.

9. Cookies and similar technologies

Jobaro may use essential cookies or similar technologies for login, security, language preference and session continuity. Where non-essential analytics, advertising or similar technologies are used and consent is legally required, they should be activated only after the required choice and users must be able to withdraw consent. Technologies currently in use should be described in the cookie/consent interface where applicable.

10. Security

We use technical and organisational measures designed to protect personal data, including access controls appropriate to the feature concerned. Private CV files are intended to be served only through permission-controlled Jobaro flows. No internet service can guarantee absolute security.

11. Your privacy rights

Where the GDPR applies, you may have rights to access, correction, deletion, restriction, data portability and objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw consent at any time for the future. Requests may be sent to contact@jobaro.online. We may need to verify your identity before acting on a request.

12. Automated processing and recruitment decisions

Jobaro may use automated technical rules for security, spam prevention, search, filtering and ordering results. Jobaro does not make an Employer’s hiring decision and does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for Candidates.

13. Children and sensitive data

Jobaro is not designed primarily for children. Users must have the legal capacity required in their country or any legally required permission. We do not require Candidates to disclose special-category data such as health, religion, ethnicity, political opinions or trade-union membership and users should avoid uploading such data unless genuinely necessary and lawful.

14. Changes, complaints and contact

We may update this Privacy Policy to reflect changes in the service or law. The current version and effective date will remain on this page. Contact: contact@jobaro.online. Where applicable, you also have the right to lodge a complaint with the competent supervisory authority, including the authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.