Joberos Privacy Policy

The company Joberos (hereinafter “the Company”) demonstrates due diligence for the protection of the privacy of every individual. Your visit to this platform, app.joberos.com, is subject to the terms set forth herein, as well as to the Terms of Use. This Privacy Policy is disclosed in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and Law 4624/2019. This Privacy Policy describes how the Company processes your Personal Data, and in particular the type of data it collects, the way in which it uses them based on the purposes of processing, and with whom it shares them. It also describes the measures taken by the Company to protect your data, the rights granted to you in relation to such processing, and the way you may exercise them.

1. Personal Data “Personal Data” means information and data that relate to an identifiable natural person, i.e., a person whose identity can be determined directly or indirectly, mainly by reference to an identifying element, such as, for example, full name, date of birth, gender, home address, work experience, image, telephone number, IP address, email address, business name, VAT number, registered office, etc.

2. Collection and Use of Data The collection of personal data takes place during your visit and use of the platform. The personal data we process are provided voluntarily either directly by you or automatically through the platform. To create your personal account, it is necessary to provide or enter specific personal data. The voluntary provision of such data, by checking a relevant box as a positive action of the data subject, constitutes an explicit indication of consent to processing. The Company collects and processes only the Personal Data which are necessary, appropriate, relevant, and essential in accordance with the purpose pursued each time by their processing. Therefore, it is clear that the data collected and processed by the Company from each user may differ, depending on whether the user is a job seeker, an employer (natural or legal person), a partner who wishes to promote his/her activity within the platform, or a simple visitor. If the user is a job seeker, the Company, for the purpose of creating an account, collects data such as full name, email address, mobile phone number, date of birth, home address and desired place of work, the sector of intended employment and related preferences, work experience, and any skills. If the user chooses to create an account using an existing account on other platforms or media, the Company collects all data resulting from such linking of accounts. Furthermore, during the profile setup, the job seeker may provide additional personal data such as photo and gender. He/she may also choose to communicate with potential employers via messages within the platform, either on his/her own initiative or initiated by employers (if the job seeker is active on the platform in a way that, according to the Company’s criteria, is consistent with a person seeking employment), thereby accepting the disclosure of the necessary data (e.g. name, mobile number) for the purposes of such communication, as well as receiving job offers from employers. The same applies to communication with Company partners who promote services within the platform relevant to the candidate’s interests, based on the information entered by the candidate. The job seeker may also choose to receive notifications via SMS, email, or other “information society services” under Article 4(25) GDPR (e.g., Viber, WhatsApp, Messenger, etc.) regarding account activity, as well as the promotion of the Company’s and partners’ services. If the user is an employer, the Company, again for the purpose of creating an account, collects data such as the business name, VAT number, contact telephone, and email address, while further details are required for completeness, such as headquarters and workplace location, possibility of remote work, business type and size, and optionally a company photo. Employers may also specify employee skills sought, required work experience, etc. Employers may also choose to receive notifications in the aforementioned ways (SMS, email, Viber, WhatsApp, Messenger, etc.), and, as mentioned, they can communicate directly with job seekers within the platform, accepting disclosure of their own necessary data (name, mobile number). Communication with Company partners is also possible, who may promote services relevant to them based on the data entered. If the user is a partner advertising within the platform, at registration they provide details such as VAT number, name, telephone, email, and logo, and may also provide a description of their business activity and promotional text with an accompanying image. For more effective ad targeting, they may be asked to provide audience characteristics such as ideal customer age, gender, residence, interests (if addressing individuals), or company size and location (if addressing businesses). If the user is a visitor (without creating an account), data collected are limited to what results from such visits, provided that they consent to processing of non-essential cookies (see Company’s Cookie Policy). Additionally, the Company uses tools that allow it to analyze, monitor, and evaluate the operation of the platform by observing user navigation, with the aim of improving the product. These tools are PostHog and OneSignal, which use personal data entered into the platform by job seekers and employers exclusively during and for the duration of use. The Company does not intend to collect sensitive data (special categories of personal data) such as ethnic or racial origin, sexual preferences, political, religious, or philosophical beliefs, trade union membership, genetic or biometric data, health data, etc. Finally, in the context of communication with the Company through the website form or any other form available through another medium, website, group, or social network, the data collected may include name, surname, email, telephone number, and job position of interest. Visitors subscribing to newsletters provide their email address, confirming acceptance of the Terms of Use and Privacy Policy.

3. Purposes of Processing The processing of Personal Data is strictly related to the purpose pursued each time, such as: Provision of services requested by the user and management/technical support of their account. Charging employers and partners for the Company’s services. Optimization and personalization of platform operation (via tools). Communication between job seekers and employers, or between them and partners, to achieve collaboration. Sending notifications to inform about services and promote the Company’s and partners’ services. Responding to contact requests and sending newsletters. Compliance with applicable law, judicial decisions, and Company compliance policies. Protection against and prevention of criminal acts against the Company, including risk management and detection of potential hackers or unauthorized users.

4. Legal Basis for Processing Processing is based on a specific legal basis depending on the case: For job seekers and employers: execution of a contract/service provision, with their consent. For partners: cooperation with the Company, or communication within the platform. For cookies and tools: user consent. For contact requests and newsletters: user consent. For exercising legal data rights: compliance with legal obligations. In certain cases: legitimate interests of the Company, unless overridden by the user’s rights and freedoms.

5. Recipients of Personal Data Personal Data of job seekers may be disclosed to: Employers in the relevant field, under service agreements with the Company. Processing by such employers is subject to their own privacy policy, for which the Company is not responsible. Employees, associates, or subcontractors processing data under Company instructions. Third-party service providers (e.g., IT system maintenance). Competent supervisory, public, or judicial authorities if required by law or court order. Third parties in the event of transfer of ownership, assets, or corporate restructuring of the Company.

6. Transfer to Third Countries Personal Data are processed only within the EU. If processing outside the EU is required, this will occur only with your explicit consent, in accordance with applicable law.

7. Cookies This platform uses cookies to provide the best browsing experience. For more details, see the Company’s Cookie Policy.

8. Data Retention Period Personal Data are kept for as long as necessary to fulfill the purposes collected. Unless otherwise required by law (e.g., tax obligations), account data are kept for up to three (3) years of inactivity (defined as last login). After three years of inactivity, the account and personal data are deleted. Users may request deletion of their data or account at any time. Data collected for contact requests are kept only as long as necessary to complete the communication and related obligations.

9. Data Subject Rights Every platform user, as a data subject, may exercise the following GDPR rights (Articles 12–23): Right to information and access Right to restriction of processing Right to rectification or erasure (“right to be forgotten”) Right to object to processing Right to data portability These rights can be exercised free of charge by emailing the Company at the address below. Users may also correct their data directly by logging into their account. If processing is based on consent, the user may withdraw it at any time with effect for the future. The Company will take all measures to satisfy any request within one (1) month. Identification may be required to ensure that data indeed belong to the requesting person. Data Controller: Joberos OOD, headquartered in Sofia, Bulgaria (Lyulin 9, 954, et. 8, ap. 32, 1324 Sofia, Bulgaria), VAT: BG207898603. Contact Email: support@joberos.com

10. Changes to this Policy This Policy is periodically updated to reflect changes required by applicable Data Protection Law or changes in the Company’s practices. Users are encouraged to check the website regularly for updates. Last updated: 16/09/2025