GDPR & Privacy Notice

Privacy Notice

1. Controller

The data controller is JobDropper Consulting SRL, TIN 43210375, Bucharest, Romania. Contact: office@jobdropper.com.

2. What data we process

• Account data: name, email address, login status, password hash, professional field and account preferences.
• Profile, job and talent card data: titles, descriptions, professional details, location, availability, company information, skills, salaries or rates where voluntarily provided.
• User content: images, videos, CVs, documents, portfolio materials, comments, messages and attachments uploaded or sent by users.
• Assessment data: answers, scores, technical test attempts, AI-assisted summaries and matching indicators.
• Communication data: contact forms, chat metadata, notification preferences and email delivery status.
• Technical and security data: IP address, device/browser data, cookies, session identifiers, logs, anti-abuse signals, error reports and audit information.

3. Why we process data

• To create and manage accounts, login sessions and user security.
• To publish, display, search, recommend and manage job and talent cards.
• To enable messaging, networking, groups, notifications and contact requests.
• To process uploads, thumbnails, videos, documents and technical attachments.
• To provide technical tests, AI-assisted assessments and platform insights.
• To prevent fraud, spam, scraping, abuse, unauthorized access and security incidents.
• To comply with legal obligations and defend legal claims.
• To improve the platform using aggregated or consent-based analytics where applicable.

4. Legal bases

• Contract or pre-contractual steps for account creation, card publication, messaging and platform use.
• Legitimate interests for security, fraud prevention, moderation, platform improvement and service administration.
• Consent for optional cookies, optional marketing communication or other consent-based processing.
• Legal obligation where processing is required by applicable law.

5. AI-assisted features

JobDropper may provide AI-assisted summaries, professional assessments, suggestions or matching indicators. These features are intended to support users and should not be treated as the only basis for hiring, rejection, employment or other significant decisions. Employers and users remain responsible for their own decisions and for complying with employment, equality and data protection laws.

6. Cookies and similar technologies

Essential cookies are used for login, session security, CSRF protection, consent storage and core functionality. Optional analytics or marketing cookies are used only where enabled by consent. Users can change their preferences through the cookie banner or the Cookie settings link in the footer.

7. Retention

We keep personal data only as long as needed for the purposes above. Account and card data is generally kept while the account is active. Messages, uploads, logs, backups and security records may be retained for reasonable operational, legal, security or limitation periods. When data is no longer needed, it is deleted, anonymized or restricted.

8. Recipients and processors

Data may be processed by infrastructure, hosting, storage, database, email, monitoring, security, search, analytics or support providers used to operate the platform. Data may also be disclosed to authorities where legally required. Where processors are used, appropriate contractual and security safeguards should be maintained.

9. International transfers

If personal data is transferred outside the European Economic Area, JobDropper should rely on appropriate safeguards such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

10. Security

We use technical and organizational measures such as authentication, access controls, encrypted transport, upload validation, logging, backups, monitoring and abuse prevention. No online service can guarantee absolute security, so users should avoid uploading unnecessary sensitive information.

11. Your rights

• Access your personal data.
• Request correction of inaccurate data.
• Request deletion where legally available.
• Request restriction or object to certain processing.
• Request portability where applicable.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the competent data protection authority.

12. Contact

For privacy requests, contact office@jobdropper.com. To protect accounts and personal data, we may need to verify identity before responding to requests.