Data protection at Jobmaps: What happens under the hood

Applications contain personal data — names, contact details, sometimes CVs and references. Jobmaps takes the handling of this data seriously. Over the past months, several measures have been introduced that enforce data protection at a technical level — not as a checkbox, but as an integral part of the product.

Jobmaps follows a clear principle: as little data as necessary, as controlled as possible.

The questionnaire comes before the CV by design. Employers ask the relevant questions first — a CV is only requested when truly needed. This reduces the amount of stored personal data from the start.

With the roles and permissions system, team members only see applications assigned to them. Those not responsible have no access.

Rejected and withdrawn applications are automatically deleted after 7 days. Archived applications after 180 days. Documents, attachments, and conversation threads are fully removed. Employers don't need to manage this — the system handles it.

The same applies to email notifications: no application documents as attachments. CVs and files stay in the system and don't end up in email inboxes where they could persist uncontrolled.

Storing applications in a talent pool means processing personal data over extended periods. Jobmaps ensures that participants actively consent. After five months, an automatic reminder is sent. Without re-confirmation within 30 days, the entry is closed.

Users can delete their account themselves. This archives listings, deletes applications, anonymises messages, and cancels subscriptions. For organisations with multiple members, the process runs through the admin.

All data is hosted in the EU — at Hetzner in Frankfurt, with disk-level encryption. There is no AI-based processing and no automated profiling.

Learn more about employer features: jobmaps.ch/en/for-companies