PRIVACY POLICY

The controller responsible for data processing on this website is: Jennefer Rahman Heusenstammer Weg 69 63067 Offenbach am Main Germany Email: info@findjob.cloud

We collect and process the following personal data: For Jobseekers: — Username (chosen by user, not real name) — Email address — Password (stored as bcrypt hash, never in plain text) — Desired countries of employment — Job titles / professional categories — About Me text (optional) — Work experience (optional) — Availability status and date (optional) For Employers: — Company name — Email address — Password (stored as bcrypt hash) — Stripe customer ID and subscription status Technical data (automatically collected): — IP address (processed by Vercel infrastructure) — Browser type and version — Date and time of access

We process your data on the following legal bases under GDPR: — Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract (account creation, platform usage) — Art. 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation — Art. 6(1)(f) GDPR: Processing is necessary for the purposes of legitimate interests (platform security, fraud prevention) — Art. 6(1)(a) GDPR: Consent, where explicitly given

We use your data exclusively for the following purposes: — Creating and managing your account — Enabling employers to discover jobseeker profiles — Sending job offers between employers and jobseekers — Processing subscription payments (employers only) — Sending transactional emails (welcome, offer notifications) — Maintaining platform security and preventing abuse — Enforcing our activity and strike system — Complying with legal obligations

We share your data only with the following trusted service providers, strictly necessary for platform operation: Supabase (Database & Authentication) Supabase Inc., 970 Toa Payoh North, Singapore Purpose: Secure storage of user data and authentication Privacy Policy: supabase.com/privacy Stripe (Payment Processing) Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA Purpose: Processing employer subscription payments Stripe processes payment data under their own privacy policy. Privacy Policy: stripe.com/privacy Vercel (Hosting & Infrastructure) Vercel Inc., 340 Pine Street, Suite 900, San Francisco, CA 94104, USA Purpose: Website hosting and deployment Privacy Policy: vercel.com/legal/privacy-policy Resend (Transactional Email) Resend Inc. Purpose: Sending transactional emails (welcome emails, offer notifications) Privacy Policy: resend.com/privacy We do not sell, rent, or trade your personal data to any third parties for marketing purposes.

Some of our service providers (Supabase, Stripe, Vercel, Resend) are based in the United States. Data transfers to these providers are safeguarded by: — Standard Contractual Clauses (SCCs) approved by the European Commission — The providers' compliance with applicable data protection frameworks We ensure that all third-party providers offer an adequate level of data protection.

We retain your personal data only as long as necessary: — Active accounts: Data is retained for the duration of the account — Deleted accounts: Data is deleted within 30 days of account deletion — Payment records: Retained for 10 years as required by German tax law (§ 147 AO) — Offer and message history: Deleted upon account deletion — Banned accounts: Username and email retained to prevent re-registration You may request deletion of your account at any time via info@findjob.cloud.

As a data subject, you have the following rights: — Art. 15 GDPR: Right of access — you may request a copy of your personal data — Art. 16 GDPR: Right to rectification — you may correct inaccurate data — Art. 17 GDPR: Right to erasure ("right to be forgotten") — Art. 18 GDPR: Right to restriction of processing — Art. 20 GDPR: Right to data portability — Art. 21 GDPR: Right to object to processing — Art. 77 GDPR: Right to lodge a complaint with a supervisory authority To exercise any of these rights, contact us at: info@findjob.cloud You also have the right to lodge a complaint with the supervisory authority in your country. In Germany: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.

We take the security of your data seriously: — All passwords are stored as bcrypt hashes (never in plain text) — All data is transmitted via HTTPS/TLS encryption — Database access is restricted via Supabase Row Level Security (RLS) — Payment data is never stored on our servers — handled entirely by Stripe — We do not have access to your full payment card details

FindJob uses minimal cookies: — Session cookies: Required for authentication (Supabase Auth) — No advertising cookies — No third-party tracking pixels — No Google Analytics or similar tracking tools Session cookies are deleted when you close your browser or log out. You can disable cookies in your browser settings, but this may affect platform functionality.

FindJob is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us at info@findjob.cloud and we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The date of the last update is shown at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests: Jennefer Rahman Email: info@findjob.cloud Website: findjob.cloud