Privacy Policy
How JobMarkt24 processes your personal data
Last updated: 14 September 2026
Protecting your personal data is important to us. This Privacy Policy explains which personal data we process when operating the JobMarkt24 job platform (jobmarkt24.ch), for what purposes, and what rights you have.
The Swiss Federal Act on Data Protection (FADP) applies. Where persons in the European Union or the European Economic Area are concerned, we additionally take the General Data Protection Regulation (GDPR) into account. In case of discrepancies, the German version prevails.
Contents
- 1. Controller
- 2. Principles and legal bases
- 3. Which personal data we process
- 4. Purposes of processing
- 5. Disclosure to employers and visibility
- 6. Service providers and recipients
- 7. Cookies and local storage
- 8. AI-assisted features and automated decisions
- 9. Retention period
- 10. Data security
- 11. Your rights
- 12. Minors
- 13. Changes to this Privacy Policy
1. Controller
1.1The controller for data processing is Royal Döner AG, Holzwingertstrasse 42-44, 8409 Winterthur, Switzerland, e-mail: info@royaldoener.ch. For data protection enquiries you can reach us at this address or at support@jobmarkt24.ch.
2. Principles and legal bases
2.1We process personal data only to the extent necessary to operate the Platform, provide our services, comply with legal obligations or safeguard legitimate interests, or where you have given your consent.
2.2For persons in the EU/EEA we rely on Art. 6(1)(b) GDPR (performance of a contract: user account, applications, job postings, payments), Art. 6(1)(f) GDPR (legitimate interests: security, fraud prevention, further development), Art. 6(1)(c) GDPR (legal obligations, e.g. accounting) and Art. 6(1)(a) GDPR (consent, e.g. talent pool visibility, job alerts, push notifications). Consent can be withdrawn at any time with effect for the future.
3. Which personal data we process
3.1The data we process depends on how you use the Platform. Without an account, only technical access data is processed.
- Account data: name, e-mail address, password (stored only as a hash), role (candidate/employer), language setting, optionally phone number and profile picture
- Profile and application data (candidates): CV, work experience, education, skills, languages, salary expectations, availability, uploaded documents, cover letters, answers to employer questions, application status
- Company data (employers): company name, address, industry, size, logo, description, contact persons, job postings, notes and ratings on applications, interview appointments
- Communication data: messages between candidates and employers, notifications, support requests
- Payment data (employers): purchased packages, credits, invoices, payment status and the transaction ID provided by Stripe; complete card details are processed only by Stripe
- Usage and technical data: IP address, date and time of access, pages visited, browser and device type, views of job postings and profiles (for employer statistics in aggregated or pseudonymised form)
- Location data: locations you enter when searching for jobs or in your profile; when using the map feature and with your consent, the approximate device location
4. Purposes of processing
- Providing the user account and platform features (job search, applications, CV builder, job postings, messaging)
- Transmitting applications to employers and handling the recruitment process
- Suggesting suitable jobs or candidates (matching) and sending job alerts by e-mail, where activated
- Processing purchases, invoicing and accounting
- Sending transactional and system messages (e.g. confirmations, status changes, password resets)
- Security, prevention of misuse, error analysis and further development of the Platform
- Compliance with legal obligations and enforcement of our Terms of Service
5. Disclosure to employers and visibility
5.1When you apply for a job, the employer concerned gains access to the information you submit with the application as well as to your profile and the selected CV. The employer processes this data under its own responsibility for the recruitment process.
5.2Outside of an application, your profile is only visible to employers if you activate talent pool visibility or the "open to opportunities" option in your settings. You can change this setting at any time.
5.3Public CV links that you create and share yourself can be viewed by anyone with the link until you deactivate sharing.
6. Service providers and recipients
6.1To operate the Platform we use service providers that process personal data on our behalf and according to our instructions (processors). Corresponding contracts are in place with them. Beyond that, we only disclose personal data if you have consented or if we are legally obliged to do so.
| Service provider | Purpose | Location |
|---|---|---|
| Hosting provider (platform servers) | Operation of the application, database and file storage | Switzerland / EU |
| Stripe Payments Europe, Ltd. | Payment processing when purchasing packages | Ireland / USA |
| Resend, Inc. | Sending transactional e-mails (confirmations, notifications, job alerts) | USA |
| Google Maps Platform (Google Ireland Ltd.) | Address autocomplete and map display for location details | Ireland / USA |
| CARTO / OpenStreetMap (Nominatim) | Map tiles and geocoding of locations on the job map | EU / USA |
| AI providers (OpenAI, Groq), where activated | Matching of jobs and profiles, wording suggestions in the CV builder | USA |
For providers based in the USA, transfers are based on the Swiss-U.S. Data Privacy Framework or the EU Standard Contractual Clauses and supplementary measures. AI features are used only with the data required for the respective feature; providers may not use this data to train their models.
8. AI-assisted features and automated decisions
8.1JobMarkt24 may automatically compare job postings and profiles in order to display suitable suggestions ("matching") and may make wording suggestions in the CV builder. These features provide hints and rankings; they do not make decisions with legal effect or similarly significant impact. Decisions on invitations, rejections or hiring are made exclusively by the respective employer.
9. Retention period
9.1We retain personal data for as long as necessary for the stated purposes or as required by statutory retention obligations.
- Account, profile and application data: until you delete your account; applications can also be withdrawn individually
- Messages: until deleted by the participants or until the account is deleted
- Invoicing and payment data: 10 years in accordance with the retention obligations of the Swiss Code of Obligations
- Technical log data: as a rule no longer than 90 days, longer only to investigate security incidents
- Backup copies remaining after account deletion are overwritten as part of the regular backup cycle
10. Data security
10.1We take appropriate technical and organisational measures to protect your data, in particular encrypted transmission (TLS), storage of passwords only as hashes, optional two-factor authentication, access restricted to what is necessary and regular backups. No method offers absolute security; please choose a strong password and do not share your login credentials.
11. Your rights
11.1You have the right to information about the data processed about you, to rectification of inaccurate data, to erasure, to restriction of processing, to receive or transfer your data in a common format, and the right to object to processing and to withdraw consent you have given.
11.2You can exercise many of these rights directly in your account: edit your profile and CVs, withdraw applications, control visibility and notifications, export your data under "Settings" and delete your account.
11.3For other requests, contact info@royaldoener.ch. We may require proof of identity to process your request. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you reside in the EU/EEA, with the competent supervisory authority.
12. Minors
12.1The Platform is intended for persons aged 16 and over. We do not knowingly process data of younger persons. If we become aware of such data, we will delete it.
13. Changes to this Privacy Policy
13.1We may amend this Privacy Policy, in particular in the event of new features or changed legal requirements. The version published on the Platform applies. In the event of material changes, we will inform registered users by e-mail or at their next login.