Privacy Policy
Last update: 05 June 2025
I. Introduction
The administrator of the personal data collected pursuant to this Policy is Jobref Ltd. of Wallington, Unit 7 Vulcan House, Restmor Way Wallington, England, SM6 7AH, Company number 09088350, Tax Identification Number GB189 3913 58.
II. Definitions
For purposes of this Policy, the following definitions mean:
- Administrator/ Jobref - means Jobref Ltd. of Wallington, Unit 7 Vulcan House, Restmor Way Wallington, England, SM6 7AH, Company number 09088350, Tax Identification Number GB189 3913 58, e-mail: [email protected]
- Personal data - means any information about an identified or identifiable natural person (''data subject''); an identifiable natural person is one who can be identified, directly or indirectly, in particular on the basis of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person;
- Contact Form - means a form provided on the Website that allows an Advertiser to express interest in a given advertisement by submitting the Jobref's contact information in order to make it available to the Advertiser to whom the Contact Form pertains.
- Newsletter - means an online newsletter, sent out systematically to Users who have agreed to it.
- Announcer - means an individual who (i) expresses his/her willingness to hire himself/herself as an employee and submits a job application to the Service or is redirected to the Announcer's pages to submit a job application or (ii) creates an account on the Service or (iii) sends a Contact Form through the Service
- Advertiser - means an individual, legal entity or organizational unit that is not a legal entity conducting business, who wants to hire an employee and submits a job advertisement on the Website or creates an account.
- Referrer - means an individual who, with the help of the Service, sends another person potentially interested in an advertisement published on the Service information about this advertisement - a referral.
- Recommended Person - means an individual to whom the Referrer, with the help of the Service, sends information about an advertisement published on the Service.
- Profiling - means any form of automated processing of personal data that involves the use of personal data to evaluate certain personal factors of an individual, in particular to analyze or forecast aspects of that individual's performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movement.
- Processing of Personal Data - means an operation or set of operations performed on personal data or sets of personal data in an automated or non-automated manner, such as collecting, recording, organizing, structuring, storing, adapting or modifying, downloading, viewing, using, disclosing by sending, distributing or otherwise making available, matching or linking, limiting, deleting or destroying.
- General Terms and Conditions of Services - means the terms and conditions for the provision of services electronically on the Site operated at: www.jobref.com and through the mobile application called "Jobref" available for download via the "App Store".
- Regulation or RODO - means Regulation 2016/679 of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
- Service/Jobref Platform - means the website operated by Jobref at www.jobref.com, the mobile application called "Jon Ref" available for download via the "App Store" and the Admin panel for employers at dashboard.jobref.com.
- User, Users - means any person who uses the services offered by the Website.
- Trusted Partners - means entities cooperating with the Administrator, whose content is directed to Users, i.e.
- Google Analytics; Google Ireland Limited
- Facebook Pixel; Facebook Inc.
- Customer.io; Peaberry Software, Inc.
- Intercom; Intercom R&D Unlimited Company
- Hotjar; Hotjar Ltd.
- PostHog; PostHog, Inc.
III. General principles
- Jobref respects the right to privacy and protection of the Personal Data of Advertisers, Advertisers, Referrers and Recommended Person, which is processed in compliance with the provisions of the RODO and in accordance with this Policy.
IV. Scope of collection of Personal Data
- Jobref shall take all necessary measures to ensure that Personal Data is processed in accordance with applicable laws and regulations and is duly protected against loss, destruction, unauthorized disclosure, access by unauthorized persons or misuse. Jobref guarantees the confidentiality of any data provided to it, using adequate and effective technical and organizational measures to ensure the security and integrity of Personal Data. In the event that you suspect a breach of the protection of your Personal Data or find that your Personal Data is inadequately secured, please contact us immediately at Jobref's email address.
- Each time, the purpose, scope and recipients of the Personal Data processed by Jobref result from the User's consent or legal regulations, and are further specified as a result of actions taken by the User on the Website or through other channels of communication with the User.
V. Purpose of processing of Personal Data - general provisions
- Providing Personal Data is a prerequisite for using the services of the Website, including creating an account and accessing the advertisers' offers. The scope of Personal Data required for the performance of individual services is specified each time in the Service and in the Regulations. Failure to provide the required data may result in inability to use the services provided through the Service.
- Possible purposes for the collection and processing of Users' Personal Data by Jobref:
- Conclusion and execution of the contract for the provision of services of the Service (e.g., account) and acceptance and processing of complaints:
- The primary purpose of Jobref's processing of Personal Data and other information is to provide services to Users, administer the Website and ensure its safe and efficient operation. Users have the option to create an account on the Website by completing the registration form available on the website.
- In addition to the data marked "mandatory", the provision of other data is voluntary.
- The data of a user with an account on the Website will be processed for the duration of the user's use of the account, and in the case of its liquidation, expiration or termination of the contract for the provision of electronic services, no longer than 5 years and than it is necessary for the purpose of handling complaints and claims related to the use of services provided by Jobref.
- The Recommended Person’s and the Announcer's data contained in his or her resume in terms of consistency with the advertisement for the job he or she has applied for will be scanned using AI to create a scoring of the compatibility of skills and experience with the Announcer's advertisement. The Announcer will have access to the score and description of the scoring, while the Referrer will have exclusive access to the overall score in percentage terms (0-100%).
- execution of financial settlements:
- In order to make financial settlements, Jobref processes Users' Personal Data to the extent necessary to make settlements, such as issuing an invoice.
- Data in this regard will be processed until the date of limitation of claims under the concluded contracts. In addition, all issued accounting documents, e.g. invoices, are included in the accounting records maintained by Jobref, and will be processed in this regard for the period of time required by generally applicable laws.
- claims security:
- Jobref for the purpose of establishing, investigating and enforcing claims may process certain Personal Data provided by the User, in particular name, contact data (e-mail address, telephone number), data on the use of services/Service and other data that will be necessary to prove the existence of a claim, its enforcement and defense against claims in proceedings before courts and other state authorities.
- creation of statistics on the use of the pages of the Website and profiling:
- Jobref monitors the quality of its services by keeping statistics on the use of individual functions and sub-sites of the Website using internal analytical tools, and statistical tools provided by partners providing analytical services.
- In order to realize this purpose, data on the User's activity on the Website (e.g. pages and subpages of the Website visited by the User, amount of time spent on the Website) are processed.
- In order to develop the services offered, the Administrator may, in some cases, use profiling to better tailor the service it offers to the individual preferences and interests of the User.
- Marketing
- The Administrator processes Users' Personal Data in order to carry out marketing activities, which may include:
- Displaying marketing content to the User that corresponds to the User's interests (behavioral advertising);
- in the case of consent of the User, carrying out other types of analytical and statistical activities and activities related to direct marketing of services (sending commercial information electronically)
- Newsletter
- The User may give the Administrator permission to process his/her Personal Data in the form of e-mail address and telephone number for the purpose of direct marketing of the Administrator's services, during and after the provision of services. Giving consent for data processing is voluntary.
- Providing Personal Data is necessary for the User to use the Newsletter service.
- The User may cancel the Newsletter service at any time by revoking his/her consent. For this purpose, it is sufficient to send information to the contact information indicated in section "I Introduction"
- Communication:
- The Administrator may communicate with the User by means of system information, notifications, e-mail, messages in social media channels, chat tools on the Website, telephone or letters and packages.
- At any time the user has the opportunity to contact the Administrator directly by sending an appropriate message in writing, by e-mail to the Administrator's address or by telephone contact.
VI. Cookies
- The Administrator declares that it processes data regarding the connection of the terminal device of the Advertiser, Advertiser, Referrers and Recommended Person to the technical infrastructure of Service and uses "Cookies" (cookies). This data is aggregate and anonymous - it does not contain characteristics that identify specific individuals.
- Cookies are IT data, in particular text files sent by Jobref to Users' terminal equipment and stored there. Cookies can be read only by Jobref.
- During a User's visit to the Website, data regarding the visit may be automatically collected, in the form of the domain name of the website from which the User was referred to the Website, browser type, operating system type, IP address, User ID, other information transmitted via the http protocol. In addition, Jobref may process usage data or information about the location of the device used to access the Website.
- Cookies allow Jobref, among other things, to ensure the proper functioning of the Website, improve the speed and security of the use of the Website pages, improve the functions used the User and use marketing tools.
- Jobref informs that restrictions on the use of cookies may affect some of the functionalities available on the Website or prevent the use of the Website.
- Jobref declares that the use of Cookies by Jobref does not cause any configuration changes in the Users' terminal devices or software installed in their devices.
- The Administrator or its Trusted Partners is the administrator of the personal data collected through Cookies.
- The Administrator uses the following Cookies: essential, performance, personalization, functional and advertising.
- The Administrator uses Necessary Cookies mainly to provide the Service Users with the services and functionalities they want to use. Necessary Cookies may be installed through the Website by the Administrator. These Cookies are necessary for the functioning of the Website and cannot be disabled on the Website.
- The Administrator uses functional Cookies in order to remember and customize the Service according to the User's choices. These Cookies make it possible to provide greater functionality and personalization of the services provided.
- The Administrator uses performance and personalization Cookies to obtain information regarding the number of visits and sources of traffic on the Website. These Cookies are processed in order to improve the performance of the Website, to develop, test and improve the services provided and to test new products and features, and to solve related problems.
- The Administrator also uses advertising Cookies that allow it to tailor the content displayed to the User's interests through the Website. These Cookies may be used to build a profile of the User's interests and display relevant advertising on other sites.
- The Administrator also processes Personal Data of Users visiting profiles maintained on social media. This data is processed solely in connection with the operation of the profile, including for the purpose of informing Users about Jobref activities and promoting various events, services and products.
- The User can grant consent to Cookies using the Cookies settings. Using the "Accept All" or "Customize" buttons, the User can grant the appropriate consents and also manage their preferences.
- The user may revoke the granted consents at any time.
VII. Purpose of processing of Personal Data
- Advertiser - processing of Personal Data
- Jobref informs that it processes the Personal Data of the advertiser and its employees participating in the provision of the service by Jobref to the extent necessary to operate the service provided, including the transmission of job applications.
- The advertiser or his employees may give their consent to the processing of their data - e-mail address and telephone number for the purpose of direct marketing of Jobref services during and after the service. Giving consent to data processing is voluntary.
- The consent given by the Advertiser or its employees for the processing of Personal Data is voluntary and they are entitled to revoke the consent given by sending a revocation to Jobref.
- The personal data of the Advertiser and his/her employees will not be shared by Jobref with third parties, except for the transfer of data to the company handling payment for the service.
- Announcer
- Jobref informs that it processes the Advertiser's personal data to the extent necessary to operate the services provided, in particular to maintain the account on the Website, forward job applications to the Advertiser.
- Jobref will process the following Personal Data of the Announcer:
- provided during registration/logging in the Service, including through the social network, while only the data used for logging in/logging out will be processed,
- provided in the application form (e.g. name, surname, contact information: phone number, e-mail address, link to linkedin profile, CV)
- provided in the Contact Form (name, surname, e-mail address).
- given in the command form (name, surname, e-mail address),
- recorded in the Announcer's Account:
- email address
- name,
- Address data: street, building number, apartment number, postal code, city,
- preferred language of contact,
- data recorded in the Announcer's Profile:
- Contact information (phone number, link to linkedin profile, other links: e.g., portfolio, link to home page)
- Data describing the profile (e.g., job sought, job location, expected salary, foreign languages)
- data in the resume saved in the account (in particular: name, contact details: email address, phone number, link to Linkedin profile, other contact details: e.g. portfolio, link to home page, experience information),
- The processing of the Announcer's Personal Data will be terminated by deleting it no later than 2 years from the date the job application was submitted or the Contact Form was sent. Backups containing the data shall be deleted within 5 years from the submission of the application.
- Jobref further informs that submission of contact information to the Advertiser by the Advertiser via the Contact Form involves providing the Advertiser with the indicated personal information of the Advertiser.
- The advertiser, to whom Jobref makes available the data of the advertisers left via the Contact Form or within the framework, determines on its own the purposes and means of processing of the provided data (the advertiser is a separate Administrator of this personal data of the advertiser), and is therefore obliged to perform its information obligation to the advertiser.
- The processing of the Personal Data Po entered by the Announcer into the profile under the account will be terminated by permanently deleting it upon termination of the account, subject to Part "V" of the Policy.
- Jobref further informs that submitting a job application via the Site by the Advertiser to the Advertiser may involve sharing with the Advertiser all the Advertiser's personal data contained in the submitted application documents (including image), as well as personal data and information that the Advertiser has published on its profile on the Site. The Administrator of the submitted applications is the Advertiser, subject to Section 6.
- The Announcer may at any time limit the visibility of his/her published personal data in the account by editing the profile visibility settings. In this case, data marked as classified will not be made available to the Announcer.
- Referral
- A prerequisite for sending a referral using the Service is that you consent to the processing of Personal Data to the extent necessary to support the services provided, including the execution of the service of sending a referral and information about any referrals.
- The Referrer's personal data will be shared with the Announcer and the Recommedned Person, who may be based outside the European Union.
- Recommended Person
- Jobref informs that it processes the Recommended Person’s Personal Data to the extent necessary to carry out the referral sending service and the Referrer's rights to the extent necessary to operate the services provided, including the execution of the referral sending service and information about any referrals.
- The Recommended Person’s personal data will be shared with the Announcer and the Referrer, who may be based in the European Union.
- The Recommended Person is entitled to submit a written, reasoned request to stop processing his/her data due to his/her particular situation or to object to the transfer of his/her Personal Data to another Data Controller.
VIII. Possible recipients of Users' Personal Data
- In order to maintain the User's account, provide requested services and ongoing maintenance, the User's data may be transferred to specialized entities for processing. In particular, the data may be entrusted to:
- IT service providers,
- entities that process and coordinate payment processing,
- Data analytics service providers,
- consultants, lawyers, accountants and other professional service providers,
- entities affiliated with the Controller personally and by equity, which help the Controller provide services or perform data processing tasks on the Controller's behalf,
– whereby such entities process data on the basis of a contract concluded with the Administrator with and only in accordance with the Administrator's instructions.
- Based on the User's voluntary consent for processing, the User's Personal Data may also be shared with Trusted Partners
- The Administrator also provides Users' data to authorized state authorities if they request the Administrator in connection with their tasks.
IX. Transfer of data to third countries (outside the European Economic Area)
- In the course of the Administrator's use of tools to support its day-to-day business operations, Personal Data, if necessary, and with adequate protection, may be transferred outside the European Economic Area (EEA). If this situation occurs, Personal Data will be transferred only to recipients who guarantee the highest data protection and security, including by:
- Use of standard contractual clauses issued by the European Commission,
- application of binding corporate rules approved by the relevant supervisory authority,
- Cooperation with processors of personal data in countries for which a relevant decision of the European Commission has been issued regarding the determination of ensuring an adequate level of protection of Personal Data.
X. Period of storage of personal data
- The Administrator guarantees that the Personal Data will be kept only for the time necessary to fulfill the purposes for which the data was collected, not more than 5 years.
- Data will be kept as long as it is needed by the Administrator to provide services and deliver services to Users or until the User deletes the account, whichever occurs first, subject to Part "V" of the Policy.
- The storage period for Personal Data is determined individually and depends on, among other things, the nature of the data, the reason for its collection and processing. After this time, the data is deleted or anonymized in such a way that it is not possible to determine the identity of the User.
- Personal data will be processed until there is a basis for processing, i.e.:
- if consent has been given until revoked, restricted, or other actions on the part of the User limiting such consent,
- in the case of the necessity of the data for the performance of the contract, for the duration of its performance and until the expiration of the statute of limitations for claims under this contract (3 years or 6 years). The beginning of the period is calculated from the date of maturity of the claim,
- where the basis for data processing is the legitimate interest of the Administrator, until the User raises an effective objection,
- for tax and accounting purposes to the extent and for the duration consistent with applicable regulations.
XI. Inspection and correction of stored Personal Data
- In connection with the Administrator's processing of Personal Data, Users have the following rights:
- The right to request access to your Personal Data, rectification, deletion or restriction of processing,
- The right to object to processing,
- The right to portability of Personal Data,
- The right to withdraw consent to the processing of Personal Data for a specific purpose, if the User has previously given such consent,
- The right to lodge a complaint with a supervisory authority in connection with the Administrator's processing of the User's Personal Data.
- The Administrator allows the User to self-manage and the consents given within the framework of the maintained Account.
XII. Risks associated with the use of services provided electronically
- The Personal Data Administrator would like to inform Users that by using services provided electronically when they take inadequate care of the security of their data, they put themselves at risk, among other things:
- Interference with User data by unauthorized persons who may view, copy, modify and delete User data,
- receiving unsolicited e-mail,
- phishing for User data,
- Interference by third parties in the transmission of information between the User's system and the Administrator's system,
- Forged protocols and security certificates.
- To minimize the risks indicated in paragraph 1:
- Do not give your password and login to anyone,
- Use always up-to-date software versions,
- Check the certificate before logging into the Service
XIII. Security
- The Administrator shall apply technical and organizational measures to ensure the protection of the processed Personal Data appropriate to the risks and categories of protected data, and in particular shall protect the data from being made available to unauthorized persons, from being processed in violation of applicable regulations, and from being altered, lost, damaged or destroyed, such as, among others:
- securing the dataset against unauthorized access,
- SSL certificate on the pages of the Website where Users' data is provided,
- Access to the account only after providing an individual login and password,
- Encryption of data used for User authorization.
- Encryption of user files (resume, video) and database.
XIV. Final Provisions
- For matters related to the Policy, please contact us at Jobref.
- Jobref reserves the right to change the Policy in the future - this may occur, among other things, for the following important reasons:
- changes in applicable regulations,
- development of electronic functionality or services dictated by advances in Internet technology, including the use/implementation of new technological or technical solutions, affecting the scope of the Policy.
- To the extent not regulated in the Policy, the provisions of the RODO and the mandatory laws of the Republic of Poland shall apply.
- The Policy has been prepared in two language versions: Polish and English. In case of discrepancies between the language versions, the Polish language version is binding.
- The competent court for disputes arising from the application of the Policy shall be the court in Poland having jurisdiction over the Poznań, Old Town, if exclusive jurisdiction does not apply.
