Privacy Policy

1. Controller and Contact Information

The controller responsible for data processing on jobsmatch.ch and related services is:

We have not appointed a Data Protection Officer as we are not legally required to do so under the Swiss Federal Act on Data Protection (nDSG). For all data protection inquiries, please contact us at the email address above.

2. Scope and Purpose of This Policy

This Privacy Policy explains how Interactive Foundry AG ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our job matching platform JobsMatch ("Service"), accessible via jobsmatch.ch and jobsmatch.me.

This policy applies to all users of our Service, including visitors to our website and registered users who upload CVs and use our job matching features.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance (Art. 6(1)(b) GDPR / Art. 31(1) nDSG): Processing necessary to provide our job matching services as requested by you.
• Consent (Art. 6(1)(a) GDPR / Art. 6(6) nDSG): Where you have given explicit consent, particularly for the AI-based analysis of your CV data.
• Legitimate Interests (Art. 6(1)(f) GDPR / Art. 31(1) nDSG): Processing necessary for our legitimate interests in improving our services, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
• Legal Obligation (Art. 6(1)(c) GDPR / Art. 31(1) nDSG): Processing necessary to comply with legal requirements.

4. Categories of Personal Data We Collect

4.1 Data You Provide Directly

• Account Data: Name, email address, contact information.
• CV/Resume Data: Work experience, education, skills, certifications, career history, professional qualifications.
• Profile Preferences: Job preferences, desired locations, salary expectations, career goals.
• Communications: Messages, feedback, and support requests you send us.

4.2 Data Collected Automatically

• Usage Data: Pages visited, features used, interaction patterns (collected via Plausible Analytics).
• Technical Data: Browser type, device type, approximate geographic region (no precise IP tracking).

4.3 Special Category Data

Your CV may contain sensitive personal data such as information revealing racial or ethnic origin, health conditions, or trade union membership. We process such data only with your explicit consent provided when you upload your CV. We minimize collection of sensitive data and do not use it for profiling purposes.

5. How We Use Your Data

• Service Delivery: To analyze your CV using AI technology and match you with relevant job opportunities.
• Notifications: To send job alerts and service notifications.
• Service Improvement: To improve our matching algorithms and user experience based on aggregated, anonymized data.
• Employer Matching: To match your profile with employer job requirements and, with your explicit consent, share your profile with interested employers.
• Security: To protect against unauthorized access, fraud, and ensure platform integrity.
• Legal Compliance: To comply with applicable laws and respond to lawful requests.

6. Automated Processing and AI Technology

Our Service uses artificial intelligence (AI), including large language models and machine learning algorithms, to analyze your CV and generate job match recommendations. We believe in transparency about how this technology works.

6.1 What Automated Processing We Perform

We use AI technology to extract and analyze information from your CV, including skills, experience levels, and career progression.

We automatically compare your profile with available job opportunities to generate match scores and recommendations.

We may also use automated processing to identify your profile as a potential match for employer job requirements. You will always be notified and asked for consent before any of your data is shared with an employer.

6.2 Nature of Our Recommendations

Our AI-generated job matches are provided as recommendations and suggestions only. You retain full control over which opportunities to consider and pursue. All hiring decisions are made solely by employers. Our Service does not make any decisions that produce legal effects or similarly significant effects concerning you.

6.3 How Our Matching Works

Our matching algorithm considers factors including skills alignment, experience level, career trajectory, location preferences, and language capabilities. We use a hybrid approach combining semantic analysis (understanding meaning, not just keywords) with structured matching against job requirements.

7. Recipients of Your Data

7.1 Service Providers

We engage trusted third-party service providers to help operate our Service. These providers act as data processors under our instruction and are contractually bound to protect your data:

Employers: If you opt-in to our employer matching service, we may share your profile data with employers seeking candidates. We will always notify you and obtain your explicit consent before sharing any data with a specific employer. You can accept or decline each request individually.

7.2 What We Do NOT Do

• We do NOT sell your personal data to third parties.
• We do NOT share your CV with employers or recruiters without your explicit consent.
• We do NOT use your data for third-party advertising.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside Switzerland and the European Economic Area (EEA), particularly the United States, through our use of service providers such as OpenAI, Google, and JotForm.

For transfers to the United States, we rely on the EU-US Data Privacy Framework (where the recipient is certified) and/or Standard Contractual Clauses (SCCs) approved by the European Commission and recognized under Swiss law. These safeguards ensure that your data receives an adequate level of protection comparable to that in Switzerland and the EU.

You may request a copy of the relevant safeguards by contacting us at contact@jobsmatch.me.

9. Data Retention

• Active Accounts: We retain your data for as long as your account is active and you continue using our Service.
• Inactive Accounts: If your account is inactive for 24 months, we will notify you before deleting your data.
• After Deletion Request: Upon your request, we delete your personal data within 30 days, except where retention is required by law.
• Legal Requirements: Certain data may be retained longer to comply with legal obligations (e.g., accounting records for 10 years under Swiss law).

10. Your Rights

Under the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access (Art. 25 nDSG / Art. 15 GDPR): You may request confirmation of whether we process your data and obtain a copy of your personal data.
• Right to Rectification (Art. 32 nDSG / Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 32 nDSG / Art. 17 GDPR): You may request deletion of your personal data under certain circumstances.
• Right to Data Portability (Art. 28 nDSG / Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests (GDPR only).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, for EU residents, your local supervisory authority.

To exercise your rights, contact us at: contact@jobsmatch.me. We will respond within 30 days.

11. Cookies and Tracking Technologies

We use Plausible Analytics, a privacy-friendly web analytics service based in the European Union (Estonia). Plausible does not use cookies, does not track individuals across websites, and does not collect personal data. All analytics data is aggregated and cannot identify individual users.

We may use essential cookies strictly necessary for the functioning of our Service (such as session cookies). These do not require consent under applicable law. We do not use any marketing, advertising, or third-party tracking cookies.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, regular security assessments, and contractual obligations on our service providers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

13. Children's Privacy

Our Service is intended for individuals aged 18 and older who are seeking employment. We do not knowingly collect personal data from children under 16 (or under 13 in jurisdictions where this is the applicable threshold). If you believe a child has provided us with personal data, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The "Last Updated" date at the top indicates when the policy was last revised. Continued use of our Service after changes constitutes acceptance of the revised policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: