Privacy Policy

Jobtalix UG (haftungsbeschränkt), Iggelhorst 28, 44149 Dortmund, Deutschland. Registered at the Amtsgericht Dortmund under HRB 38623. Managing directors: Abderrahman Bouzian, Hatim Bouzian, Yassine Rachachi.

Questions about data protection and about exercising your rights: privacy@jobtalix.com. General contact: info@jobtalix.com, +49 (0) 231 9998 9280.

Data protection officer: not appointed at present.

It covers the Jobtalix Talent app (iOS and Android), the web app at app.jobtalix.com and the website talent.jobtalix.com.

We are responsible for your talent account, the talent pool and the matching. If a company uploads your CV to Jobtalix, or you apply through a company's career page, that company is usually the controller and we process the data on its behalf. The company's privacy policy then applies.

Required for a profile:

• First and last name, email address, phone number, country of residence
• Details on language skills, desired jobs, interests and driving licences, where they apply to you
• Your confirmation that you are at least 16 years old

Optional details you can add: date of birth, gender, address, LinkedIn profile, career goals, salary expectation, earliest start date, willingness to relocate, maximum commute, preferred employment types, work authorisation, education with grades, work experience, practical experience, volunteering, further skills, and files such as your CV and certificates.

Video answers, if you record them (camera and microphone), and answers to assessments you fill in.

Sign-in data: you sign in with email and password or through Apple or Google. A provider for sign-in and user accounts handles the sign-in.

Data derived from your details: qualification tags, a vector of your profile (embedding), an estimated market value and matching results (see section 5).

Technical data: a push token if you allow notifications, device model, operating system and app version in error reports, and connection data such as the IP address when you reach our servers.

We do not collect your GPS location. We do not analyse faces or voices in videos.

• Providing your account, profile, video answers, assessments, invitations and notifications: performance of a contract, Art. 6(1)(b) GDPR.
• AI processing (reading your CV, profile vector, matching, market value): your consent, Art. 6(1)(a) GDPR. If your CV contains data under Art. 9 GDPR, the consent covers it as well, Art. 9(2)(a) GDPR.
• Error logs, security and operation of the services: legitimate interest, Art. 6(1)(f) GDPR.
• Matching a request to a rejection within the AGG time limit (see section 8): legitimate interest, Art. 6(1)(f) GDPR.

We use AI in these steps:

• Your CV is read with AI to fill in your profile.
• Your profile becomes a vector that we use to compare profiles and jobs.
• In matching, AI models assess your profile against the requirements of a job and write an assessment for the company.
• Your market value is estimated with AI. Only you see it, no company does.

A person at the company always makes the final decision. No application is rejected automatically. Your video answers are not analysed by AI.

The AI models come from an AI provider in France. We use its EU endpoint.

You can withdraw your consent at any time, in the web app in your profile or by email to us. Withdrawing deletes your profile vector, your qualification tags, your market value and the stored CV analysis. Your account, profile, videos and invitations stay usable. Without consent, the AI features and the matching are not available to you. Processing up to the withdrawal remains lawful.

We explain how the assessment works at https://app.jobtalix.com/en/ai-transparency.

Companies: if you are suggested to a company for a job or you apply, its recruiting team sees the professional details of your profile in the match view, for example name, address, languages, education, work experience, salary expectation, availability, LinkedIn profile and uploaded files, as far as you provided them. So that it can invite you, it also sees your email address and phone number there. Career goals, date of birth and gender are not shown. Only recruiters of companies you are suggested to see your video. No company sees your market value.

Service providers we use on our behalf:

• Database and backend provider (database, file storage, server functions). Region: USA.
• Hosting provider (hosting of the web app and the websites). The server functions run in the USA.
• Provider for sign-in and user accounts (sign-in and user directory, USA).
• AI provider with processing in the EU, without storing the inputs (AI processing, France).
• Email delivery service (sending email through servers in Ireland, provider based in the USA).
• Provider for push notifications and app updates. Push texts contain no names.
• Our server for error logs, hosted at a hosting provider in Germany.
• Protection and proxy service (in front of the server for the error logs, USA).
• A geocoding service we operate (geo.jobtalix.de) for place and address search.
• An IT service provider in Germany (technical operation and administration, processing on our behalf under Art. 28 GDPR).

We use processors with whom contracts under Art. 28 GDPR exist or are being concluded.

If you sign in with Apple or Google, that provider handles the sign-in under its own privacy policy.

We name the specific recipients on request (Art. 15 GDPR).

Some providers are based in the USA or run servers there (see section 6). We base the transfer on Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR). The hosting provider and the protection and proxy service are also certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

You can get a copy of the safeguards at privacy@jobtalix.com.

We keep your data while your account exists.

Video answers: We do not delete them automatically. They stay stored until you delete your account. If you want a video removed earlier, write to us.

You can delete your account in the app or in the web app. Then:

• Your access is blocked at once and all sessions end.
• We delete your profile, files (CV, certificates), videos, profile vector, push token, market value, CV drafts and your sign-in account at the provider for sign-in and user accounts. If you also have a company access, it stays and only loses the talent role.
• Details in matches, processes, invitations and notes are redacted (names become “[Name]”) and then deleted. What remains are counts per job without a link to a person (groups of fewer than 5 people are merged) and an empty placeholder without profile details (technical ID, creation time, month of deletion).
• An irreversible checksum of your email address stays for 6 months after a rejection or a withdrawal, so that we can match requests about that rejection within the AGG time limit.
• Logs of the AI assessments are deleted 24 months after your deletion request.
• We keep the record of your consent in pseudonymised form.
• If a company uploaded your CV itself, the file stays with the company. We only remove the link to your profile.
• If you signed in with Apple, also remove the app at Apple: Settings, your name, Sign in with Apple, Jobtalix, Delete.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw a consent at any time (Art. 7(3)).

Write to us at privacy@jobtalix.com. We provide an export of your data and access on request; the app has no function for it yet.

You can complain to a data protection authority. For us this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

The website talent.jobtalix.com sets no cookies and contains no analytics or advertising trackers. If you close the app notice, we remember that for 30 days in your browser's local storage.

The web app app.jobtalix.com sets only cookies it needs to run: the sign-in session cookie, your chosen language and, if you arrive through a referral link, the referral code. Form drafts and the state of an introduction are kept in your browser's local storage and do not leave your device. These accesses are necessary for the service you asked for, section 25(2) no. 2 TDDDG.

The app stores your credentials in your device's secure storage. It asks for the camera and microphone (for video answers) and for notifications. It does not ask for your location.

When errors occur, the web app and the app send an error report to a server we operate in Germany, which is used for fixing errors. The report contains device model, operating system and app version. We do not send user data, cookies, request contents or console messages, and addresses are shortened and stripped of identifiers. The basis is Art. 6(1)(f) GDPR.

Using the service requires that you are at least 16 years old.

If our processing changes, we update this policy. The current version is at talent.jobtalix.com/privacy.