Privacy Policy

1. Who is responsible?

The controller for the processing of personal data in connection with the jobmaps.ch platform is:

Jobmaps AG, Räffelstrasse 24, 8045 Zürich, Switzerland

Email: datenschutz@jobmaps.ch

This privacy policy applies to the jobmaps.ch website as well as to all white-label portals that use the Jobmaps backend (e.g. jobs.grav.ch, jobs.swissmarketing.ch, jobs.kmuswiss.ch).

2. What personal data do we process?

Jobmaps is a job platform. The processing of personal data depends on the role in which you use the platform.

2.1 As a visitor to the website

When you visit our website, technical data is collected:

• Date and time of access

• Pages visited and time spent

• Browser type and operating system

• IP address (truncated within the EU for analytics)

This data is processed on the basis of our legitimate interest in the secure and functional operation of the website.

2.2 As an applicant

When you apply to a job posting via Jobmaps, we collect the following data:

Legal basis: Performance of a contract (carrying out the application process) as well as your consent when submitting the application.

When you submit an application, you are informed how your data is used in the application process and how long it is stored (see Section 7).

2.3 As an employer

When you post a job as an employer, we process:

• Contact details (name, email, phone)

• Company data (name, address, commercial register number)

• Job postings and their content

• Communication via the platform messenger

Legal basis: Performance of a contract (provision of the platform service).

2.4 In the Talent Pool

An employer can add your application to their Talent Pool in order to consider you for future positions. We inform you about this:

• You receive an email informing you about the addition to the Talent Pool and the storage period.

• Your data remains for a maximum of 24 months from the time it is added to the Talent Pool.

• The employer must actively confirm continued retention at least every 6 months. If this confirmation is not provided, your data is removed from the Talent Pool.

• At the latest 24 months after being added, your data is removed from the Talent Pool in any case.

• You can withdraw your application or request the deletion of your data at any time.

Legal basis: The employer’s legitimate interest in maintaining a Talent Pool with a view to filling future positions, limited by the maximum retention period of 24 months as well as your right to object and to deletion at any time.

3. How do we communicate with you?

3.1 Platform messenger

Communication between applicant and employer takes place via an internal platform messenger. The messages remain on the platform.

3.2 Email notifications

We send email notifications about new messages or status changes. These notifications contain no application documents — no CVs, no documents, no attachments. To view application documents, the employer must log in to the platform.

3.3 Email delivery

To send emails, we use the SendGrid service (Twilio Inc., USA). SendGrid receives the recipient’s email address and the notification text. Application documents are not transmitted via SendGrid.

4. With whom do we share your data?

4.1 With employers

When you apply to a job posting, your application data is made available to the respective employer. Under data protection law, the employer is the controller for the processing of your application data. Jobmaps acts as a processor.

4.2 Access control at the employer

Within an employer account there is a role model:

• Administrators can view all job postings and applications.

• Users only see applications for job postings to which they are assigned.

4.3 To third-party portals (multiposting)

Employers can have their job postings automatically published on third-party portals (e.g. Jobchannel). Only job posting data is transmitted in the process — no applicant data.

4.4 To authorities

We disclose personal data to authorities when we are legally obliged to do so.

5. Which service providers do we use?

5.1 Hosting and infrastructure

5.2 Internal working environment

5.3 Tracking and analytics (only with your consent)

The following services are only activated after your explicit consent via our cookie consent banner. Without your consent, no tracking takes place.

Google Tag Manager We use Google Tag Manager, a service of Google LLC, USA. Google Tag Manager itself does not store any cookies and does not collect any personal data; it serves as a management interface for the services described below.

Google Analytics We use Google Analytics, a web analytics service of Google LLC, USA. Cookies are used to collect information about your behavior on our website and the device used to access it, e.g. details about your browser, the website from which you reached our website, the name of your provider, your IP address, the date and time of access, pages visited and time spent. Based on this information, we receive analyses from Google. Google stores this information in the USA; your IP address is truncated beforehand within the EU or EEA. Google may combine the collected data with data from other websites and use it for its own purposes. For more information, see Google’s privacy policy at https://policies.google.com/privacy. You can prevent the use of Google Analytics by installing a browser add-on available at https://tools.google.com/dlpage/gaoptout. This use is only possible with your consent.

Google Ads Conversion Tracking and Remarketing We use Google Ads conversion tracking and remarketing, services of Google LLC, USA. Cookies and similar technologies are used to measure the effectiveness of our advertisements on Google and to show you interest-based advertising. Google may combine the collected data with data from other websites and use it for its own purposes. The data is transmitted to the USA. For more information, see Google’s privacy policy at https://policies.google.com/privacy. This use is only possible with your consent.

Microsoft Bing UET (Universal Event Tracking) We use Universal Event Tracking (UET) by Microsoft Corporation, USA. A cookie is stored on your device to measure the effectiveness of our advertisements on Microsoft Bing and to show you interest-based advertising. Microsoft may combine the collected data with other information and use it for its own purposes. The data is transmitted to the USA. For more information, see Microsoft’s privacy policy at https://privacy.microsoft.com. This use is only possible with your consent.

PostHog We use PostHog for product analytics to understand and improve the use of our platform. In doing so, information about your usage behavior may be collected. This use is only possible with your consent.

6. Cross-border data transfer

Your application data is stored in Germany (Hetzner, Frankfurt) and generally does not leave the EU area.

The following service providers are located in the USA:

For data transfers to the USA, we rely on Standard Contractual Clauses (SCC) pursuant to Art. 16 para. 2 lit. d FADP or on an adequate level of data protection in the recipient country.

7. How long do we store your data?

We store your data only as long as it is necessary for the respective purpose. The following automatic deletion periods apply to application data:

Automatic deletion covers: application data, uploaded documents and messenger messages. The applicant’s name remains visible so that the employer can see that an application had been received — only when your account is deleted is the name also removed.

The 6-month inbox period is calculated from when the application is received (not from the last activity).

8. How can you delete your data?

8.1 Deleting your account (individuals)

You can delete your account yourself at any time via the settings on jobmaps.ch. Upon deletion:

• All your job postings are archived

• All applications (your own and those received) are deleted, including documents

• Messenger messages are anonymized (entries remain, content is deleted)

• All subscriptions are cancelled

8.2 Deleting an account (organizations)

Members of an organization cannot delete their account themselves. The organization’s administrator can remove members. To close an entire organization, please contact support@jobmaps.ch.

8.3 Deletion on request

You can request the deletion of your personal data at any time by contacting us at datenschutz@jobmaps.ch.

9. Cookies

9.1 Technically necessary cookies

We use technically necessary cookies that are required for the operation of the website (e.g. storing your language preference). No consent is required for these cookies.

9.2 Optional cookies (only with your consent)

For analytics and marketing cookies, we show you a cookie consent banner on your first visit. Without your consent, no optional cookies are set and no tracking is carried out.

You can withdraw your consent at any time by deleting the cookies in your browser settings. On your next visit, the cookie banner will be shown to you again.

10. How do we protect your data?

We take appropriate technical and organizational measures to protect your personal data:

Technical measures:

• Encryption of all connections (SSL/TLS)

• Hosting in the EU (Hetzner, Frankfurt, Germany) with disk-level encryption

• DDoS protection and web application firewall (Cloudflare)

• Role-based access control (employers only see applications assigned to them)

• Automatic data deletion after defined periods

• No application documents in email notifications

Organizational measures:

• Confidentiality agreements with employees

• Data processing agreements with service providers

11. What are your rights?

In connection with the processing of your personal data, you have the following rights:

To exercise your rights, contact us at datenschutz@jobmaps.ch.

12. Automated individual decisions

Jobmaps does not make any automated individual decisions within the meaning of Art. 21 FADP. There is no automated matching, scoring or profiling of applicants. The decision on an application is always made by the employer.

13. Changes to this privacy policy

We may amend this privacy policy at any time. The current version is available at jobmaps.ch/en/data-policy.

14. Contact

If you have any questions about data protection, you can reach us at:

Jobmaps AG, Räffelstrasse 24, 8045 Zürich, datenschutz@jobmaps.ch

Zürich, 15 June 2026