Privacy Policy

Last updated: March 2025

1. Introduction

Job-Bridge.hr (“we”, “us”, “our”) operates a pan-European workforce platform connecting blue-collar workers with employers. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Croatian Personal Data Protection Act (Zakon o provedbi Opće uredbe o zaštiti podataka, OG 42/18).

2. Data Controller

The data controller is Job-Bridge.hr. For any request regarding your personal data, you may contact us at privacy@job-bridge.hr or via the Contact section below.

3. Personal Data We Collect

  • Account and profile data: name, email, phone number (E.164), preferred language, role (candidate or employer).
  • Candidate profile: skills, work experience, education, languages, work authorisation, location, and other information you provide.
  • Company profile: company name, industry, location, job postings, and related data.
  • Authentication and security: OTP codes (processed transiently), session and token data.
  • Verification data: identity and document verification results via our verification provider (e.g. iDenfy/Shufti), in line with our legitimate interest and legal obligations.
  • Payment and subscription data: necessary for processing subscriptions and payments (e.g. via Revolut).
  • Usage data: logs and analytics necessary for security, fraud prevention, and improving the service.

4. Purposes of Processing

  • Providing and operating the Job-Bridge.hr platform and matching candidates with employers.
  • User authentication (including OTP), account and profile management.
  • Identity and document verification to ensure platform integrity.
  • Processing payments and managing subscriptions.
  • Communicating with you (e.g. support, notifications, service-related messages).
  • Complying with legal obligations and defending our rights.
  • Improving our services and security (e.g. analytics, fraud prevention), where based on legitimate interest.

5. Legal Basis

We process your personal data on the following legal bases under GDPR:

  • Performance of a contract: to provide the platform, matching, and related services you have requested.
  • Consent: where you have given clear consent (e.g. marketing, non-essential cookies).
  • Legitimate interests: to operate, secure, and improve our platform, prevent fraud, and communicate about the service, where not overridden by your rights.
  • Legal obligation: where required by applicable law (e.g. tax, anti-fraud, or data retention rules).

6. Data Retention

We retain your data only for as long as necessary to fulfil the purposes above, including legal, tax, or regulatory requirements. Account and profile data are retained while your account is active and for a reasonable period after deletion for backup and legal purposes. Verification and payment-related data may be retained as required by law or our service providers’ terms.

7. Recipients and Transfers

We may share your data with:

  • Service providers (processors) that help us run the platform: hosting, SMS/OTP (e.g. Twilio), identity verification (e.g. iDenfy/Shufti), payments (e.g. Revolut), and support tools. They act on our instructions and under data processing agreements.
  • Employers (for candidates): profile information you choose to share when applying or being matched to jobs.
  • Candidates (for employers): only as necessary in the context of job applications and matching.
  • Authorities: when required by law or to protect our rights.

8. Your Rights

Under GDPR and Croatian law, you have the right to:

  • Access: obtain confirmation as to whether we process your data and a copy of that data.
  • Rectification: have inaccurate personal data corrected.
  • Erasure: request deletion of your data in the cases provided by law.
  • Restriction: request restriction of processing in certain situations.
  • Data portability: receive your data in a structured, machine-readable format where the processing is based on contract or consent.
  • Object: object to processing based on legitimate interest; we will cease unless we demonstrate compelling legitimate grounds.
  • Withdraw consent: where processing is based on consent, withdrawal does not affect the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the Croatian supervisory authority, Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia (azop.hr).

9. Contact

For any questions about this Privacy Policy or to exercise your rights (including requests for access, rectification, erasure, or data portability), please contact us via the contact form on our website or by email at privacy@job-bridge.hr.

privacy@job-bridge.hr

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when changes are made. We encourage you to review this page periodically.