GDPR & Data Protection Notice

The data controller for the processing described in this notice is Jobstoday World FZCO, a free zone company licensed by the International Free Zone Authority (IFZA), registration number 77536, registered at IFZA Property FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Contact: support@jobstoday.world.

Jobstoday World FZCO operates the website https://www.jobstoday.world (in English, Spanish, Polish and German) and the Jobstoday World mobile apps for iOS and Android.

• European Union and United Kingdom (GDPR and UK GDPR). Because we offer our services to people in the European Economic Area (EEA) and the United Kingdom and analyse how they use our website, the GDPR and the UK GDPR apply to that processing (Article 3(2) GDPR).
• United Arab Emirates. We are established in the UAE, in the IFZA free zone, which has no data protection law of its own. The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “UAE PDPL”) therefore applies to all personal data we process, wherever you are located.
• Other countries. Where you are in the United States, Latin America, Asia or elsewhere, the data protection law of your state or country may also give you rights. Our Privacy Policy explains these.

• Account, identity and contact details, including name, email address, telephone number, postal address, preferred language and login information, and the details we receive from Google or Apple if you sign in through them.
• Security data, such as optional two-factor authentication settings and whether you chose to have a device remembered for 30 days.
• A record of your registration: the date and time, your IP address, the city and country derived from it and the version of the terms you accepted.
• CV/resume, professional profile, work history, education, skills, qualifications, career preferences, salary expectations and the job you are looking for (Job Request) and, where a form asks for them, date of birth, gender, nationality, work-permit status and a photo.
• Files and text you give to the AI Resume Builder, including uploaded CVs (PDF, Word or photo) and your answers to its questions.
• Job searches, saved vacancies, applications, Job Requests, screening answers, match results, AI-assisted reviews, mailbox messages and recruitment communications with employers and recruiters.
• For employers and recruiters: company name, business contact details, vacancy details, the email addresses of team members who receive applications, company size, applicant management activity, and messages sent through our contact forms.
• When our recruitment team screens you for an employer (Recruitment Services): identity and right-to-work information and documents, licences and certificates, references, and notes from calls and first interviews.
• Purchases and payment references, including the plan, amount and the brand and last four digits of a payment card. Full card numbers are handled by the payment provider and are not stored by us.
• Technical, device, usage and security information generated when you use the website, apps or services, including IP address and approximate location, pages viewed, clicks on vacancies, recordings of how pages are used, opens and clicks of our emails, and cookies.
• In the mobile apps: with your permission, your device location while the app is in use, to suggest jobs near you, and a random device identifier generated by the app.
• For businesses and professionals we contact about our services: names and professional contact details that we obtain from business data providers, such as People Data Labs, and from contact lists we import.

• To create and administer your account and provide the service you request, including the candidate mailbox.
• To match your profile with relevant jobs and enable employers or recruiters to review applications or candidate profiles in accordance with your settings and actions.
• To search for vacancies and apply on your behalf where you use Job Request.
• To enable employers and recruiters to post jobs, receive and review applications, and see AI match scores and summaries.
• To provide our Recruitment Services to employers: searching for, calling and screening candidates, checking identity, right to work, references and documents, holding first interviews, sending shortlists with notes, and giving employers access to our Candidate Database. Only candidates who agree, when they fill in their details in an application, to the processing of their data and to sharing it with employers (by clicking to accept) are added to the Candidate Database. Candidates can withdraw this consent at any time by contacting support@jobstoday.world, and we then remove them from the database.
• To provide AI-assisted resume, matching, screening and recommendation features, using external AI providers that receive the content concerned, including CV text.
• To distribute employers’ vacancies to partner job boards and channels and to show jobs from partner job feeds.
• To communicate with you about your account, applications, payments, service updates and support requests.
• To measure and improve the service and our advertising, using analytics and, where you allow marketing cookies, advertising platforms.
• To protect the platform, prevent fraud and automated traffic, comply with legal obligations and establish or defend legal claims.
• To send job alerts, newsletters and marketing communications, and to contact businesses and professionals about our services, where permitted by law and, where required, with your separate consent.

Where the GDPR or UK GDPR applies, we rely on the following legal bases (Article 6 GDPR):

• Contract (Art. 6(1)(b)): running your account, Job Request, the AI Resume Builder, the candidate mailbox, applications and job posts, and payments.
• Legal obligation (Art. 6(1)(c)): tax and accounting records, and responding to lawful requests.
• Legitimate interests (Art. 6(1)(f)): keeping the platform secure, preventing fraud and automated traffic, analysing and improving how our pages are used (including heatmaps and session replay), screening candidates and checking references for employers who use our Recruitment Services, and contacting businesses and professionals about our services. You can object to this processing at any time, and always to direct marketing.
• Consent (Art. 6(1)(a)): adding you to our Candidate Database and sharing your profile with employers through it, the CV match check on partner vacancies, non-essential cookies, advertising, and marketing emails where consent is required.
• Legal claims: establishing, exercising or defending legal claims.

Where the UAE PDPL applies, we process your data with your consent or where an exception in Article 4 of the UAE PDPL applies, for example where processing is necessary to perform a contract with you or to take steps you ask for before a contract, to comply with UAE law, or to establish or defend legal claims.

Information necessary to create an account or deliver a feature is required to use that feature; if you do not provide it, we cannot provide that feature. Optional information and optional marketing choices are identified as such.

Consent is not used as a blanket substitute for other lawful bases. If we ask for consent for a specific optional purpose, you may refuse or withdraw that consent without affecting processing lawfully based on another ground.

Our application servers, the file storage that holds CVs, attachments and incoming mailbox emails (Amazon S3) and our mailbox email service (Amazon SES) run in the AWS Europe (Frankfurt) Region (eu-central-1), within the European Union. This identifies where that infrastructure is located; it should not be read as a guarantee that every category of personal data, backup, log, support record or third-party service is stored exclusively in that region. Our team in the UAE and in our other team locations may access data to run and support the service, and data is also processed in other locations by the service providers listed in the Privacy Policy, as described in section 7 of this notice.

Employers and recruiters. When you apply for a vacancy, the employer receives your application: contact details, CV, cover letter, screening answers and an AI-assisted review. A Job Request is a profile that employers and recruiters on the platform can view, including your contact details and attached CV, unless you choose the anonymous option, which hides your name, contact details, location and photo. Through our Recruitment Services, employers also receive our shortlists and screening notes, and employers with access to our Candidate Database can see the profiles and CVs of candidates who agreed to be included.

Referees. As part of our Recruitment Services, we may contact your referees to check your references.

Job-board partners. When you apply for a partner vacancy, we redirect you to the partner with a click identifier. We do not send the partner your CV, name or contact details.

Service providers. We use providers for hosting (Amazon Web Services), payments (Stripe, PayPal and the app stores), email (Twilio SendGrid and Amazon SES), AI functionality (OpenAI, Google and Anthropic), sign-in (Google and Apple), analytics and advertising (Google, Meta, LinkedIn, TikTok, X (Twitter), Quora, Analytics, Snitcher and affiliate networks), security (Cloudflare and Google reCAPTCHA), sales relationship management (Pipedrive) and platform operations. The Privacy Policy lists them and the data each receives.

International transfers. Because the Company is established in the United Arab Emirates, the service operates in more than 85 countries and several providers are based in the United States, data may be transferred across borders, including to the UAE and the United States. Where personal data from the EEA or the UK is sent to a country without an adequacy decision, we use a recognised safeguard, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum) or the EU–US Data Privacy Framework where the recipient is certified (Chapter V GDPR). Transfers of personal data subject to the UAE PDPL are made in line with Articles 22 and 23 of the UAE PDPL. You can ask for information about these safeguards at support@jobstoday.world.

Our AI features suggest matches, scores, summaries and resume content. They support people’s decisions; they do not make hiring decisions. We do not automatically reject an application because of an AI score. Employers and recruiters decide whom to contact, interview or hire. A match or score does not guarantee an interview, job offer or hiring outcome. Two automated checks can stop a redirect to an external vacancy: detection of automated (bot) traffic and a partner’s country restrictions; if you think either was applied to you in error, contact us. Our Privacy Policy explains these features in more detail.

We keep your account, profile, CVs, Job Requests, applications and mailbox messages while your account is open. Closing your account takes effect immediately but does not by itself erase your records; to have them erased, contact support@jobstoday.world, and we will erase or anonymise them unless we are required or entitled to keep them (for example invoices or records needed for legal claims). Payment records are kept for the period tax and accounting law requires; screening documents only as long as the related assignment needs; Candidate Database inclusion until you withdraw your consent; cookie choices and the visitor log for 365 days. The Privacy Policy gives the full list.

If you visit from the EU, EEA, UK or Switzerland, or we cannot tell your country, preference, statistics and marketing cookies stay off until you allow them. In other countries they are on by default and you can switch them off. A Global Privacy Control signal is treated as a refusal of marketing cookies. You can change your choice at any time through “Cookie Settings” (and, outside the EU, EEA, UK and Switzerland, “Do Not Sell or Share My Personal Information”) in the footer of the website. Details are in our Privacy Policy.

Under the GDPR and the UK GDPR you have the right to:

• access your personal data and receive a copy (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on legitimate interests, and to direct marketing at any time (Art. 21);
• not be subject to a decision based solely on automated processing that significantly affects you (Art. 22);
• withdraw your consent at any time, without affecting earlier processing (Art. 7(3)).

The UAE PDPL and other laws give similar rights. Contact support@jobstoday.world to submit a request. We may need to verify your identity. We respond within one week, or sooner where local law requires.

In your account you can edit your profile, make a Job Request anonymous, choose which emails you receive and close your account; cookie choices are changed through “Cookie Settings” in the website footer.

You may also complain to a data protection authority: in the EEA, the authority of the country where you live or work; in the UK, the Information Commissioner’s Office; in the UAE, the UAE Data Office (or its successor authority).

By selecting the required acceptance control during registration, you acknowledge that you have been given access to this GDPR & Data Protection Notice and the Privacy Policy. This acknowledgement does not itself constitute consent to every processing activity described in those documents.

We keep a signed record of the acknowledgement: the date and time, your IP address, the city and country derived from it and the version of the documents. The same notice applies, and the same record is kept, if you create your account by signing in with Google or Apple, or an account is created for you when you apply for a job.

Marketing emails are a separate, optional choice. It is not bundled with acceptance of the Terms and Conditions and is not a condition of using the core service.

You make this choice in your account under Settings, where there are two controls: “Receive new offers from Jobstoday” (personalised job offers and product updates) and “Newsletter” (a weekly digest). You can withdraw your consent at any time by switching them off, by using the unsubscribe link in a marketing email or by contacting support@jobstoday.world.