Privacy protection

Version 1.0 - effective from 1. 7. 2026

Privacy Policy

JOBSAI - PRIVACY POLICY

Privacy Policy

Version 1.0
Effective from: 1 July 2026

1. INTRODUCTION

Saleryon, s.r.o., Company ID No.: 19713169, with its registered office at Bedrníková 328, 250 84 Květnice, registered in the Commercial Register maintained by the Municipal Court in Prague (hereinafter "JobsAI", "the Operator", "we" or "the Controller"), respects the right to privacy of all users of the JobsAI platform and undertakes to process personal data transparently, securely and in accordance with the applicable legal regulations.

This Privacy Policy (hereinafter the "Privacy Policy") explains what personal data we process, why we process it, how long we retain it, to whom we may disclose it and what rights the persons whose data we process have.

Our aim is not only to meet the requirements of the legal regulations, but also to provide users with comprehensible information about how we use their data in the operation of the JobsAI platform.

This policy is drawn up in particular in accordance with:

Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
Act No. 110/2019 Coll., on Personal Data Processing,
the Civil Code,
the Digital Services Act regulation, where applicable,
other relevant legal regulations of the Czech Republic and the European Union.

This policy forms an integral part of the contractual relationship between the Operator and the user of the Platform and supplements the JobsAI General Terms and Conditions.

2. WHO WE ARE

The controller of personal data is:

Saleryon, s.r.o.

Company ID No.: 19713169

Registered office: Bedrníková 328
250 84 Květnice
Czech Republic

E-mail:
[email protected]

Website:
www.jobsai.cz

The Controller is responsible for the processing of personal data in the operation of the JobsAI platform.

If you have any questions concerning personal data protection or wish to exercise any of your rights under the GDPR, you can contact us through the contact details stated above.

3. WHO THESE POLICIES CONCERN

This policy applies in particular to:

job seekers (Candidates),
employers,
persons representing employers,
website visitors,
registered users,
persons communicating with JobsAI,
persons using the AI tools of the Platform,
other persons whose data is processed in the provision of the services.

This policy does not apply to the processing of personal data carried out by the employers themselves after a candidate's personal data has been made available to them through the Platform. In such a case, the employer acts as an independent controller of personal data and is responsible for its further processing.

4. BASIC TERMS

For the purposes of this document, the following terms have this meaning.

Platform

The JobsAI internet portal operated by Saleryon, s.r.o., including all of its websites, mobile versions, applications, API interfaces and related services.

Candidate

A natural person seeking employment or another work opportunity through the Platform.

Employer

A legal entity or self-employed natural person using the Platform for the purpose of searching for employees or publishing job listings.

User

Every person using the Platform, regardless of whether they are registered.

Personal data

Any information about an identified or identifiable natural person within the meaning of Article 4 GDPR.

Processing

Any operation carried out with personal data, for example its collection, storage, use, disclosure, alteration, erasure or anonymisation.

AI services

Functionalities of the Platform using artificial intelligence technologies, in particular for:

recommending job positions,
recommending candidates,
creating CVs,
analysing professional profiles,
explaining the match between a candidate and a job position,
other supporting tools published on the Platform.

5. ALLOCATION OF RESPONSIBILITY FOR THE PROCESSING OF PERSONAL DATA

The protection of personal data within the JobsAI Platform is based on a clear allocation of responsibility among the individual entities.

JobsAI as controller

JobsAI acts as a controller of personal data, in particular in the case of:

the registration of users,
the management of user accounts,
the operation of the Platform,
the provision of AI functions,
the security of the Platform,
the handling of enquiries,
billing,
the running of customer support,
the fulfilment of legal obligations.

JobsAI is solely responsible for this processing.

The employer as an independent controller

As soon as a Candidate sends their response to a job listing or otherwise provides their personal data to a specific employer through the Platform, the employer becomes an independent controller of that personal data.

From that moment, the employer is responsible in particular for:

the further retention of the CV,
the conduct of the selection procedure,
communication with the candidate,
the conclusion of the employment relationship,
the fulfilment of the information obligation under the GDPR,
compliance with retention periods,
the security of personal data.

JobsAI is not responsible for the further processing of personal data carried out by the employer after it has been made available.

Service providers (processors)

To ensure the operation of the Platform, JobsAI may use trusted service providers who process personal data on behalf of JobsAI on the basis of a personal data processing agreement under Article 28 GDPR.

JobsAI selects only such processors as provide sufficient guarantees of personal data protection and have adopted appropriate technical and organisational security measures.

6. WHAT PERSONAL DATA WE PROCESS

The scope of the personal data processed depends on the manner in which the User uses the Platform. JobsAI observes the principle of data minimisation under Article 5 GDPR and processes only data that is necessary for the provision of the services, the fulfilment of legal obligations or the protection of legitimate interests.

6.1 Data on Candidates

If a Candidate creates an account or uses the services of the Platform, we may process in particular the following data:

Category of data	Examples
Identification data	first name, surname, title
Contact data	e-mail address, telephone number, residential address (if stated)
Professional data	work experience, employers, job positions, length of practice
Education data	schools, fields of study, level of education attained, certifications
Professional skills	language knowledge, expert knowledge, IT skills, driving licence
Documents	CV, cover letter, portfolio, attachments uploaded by the User
Employment preferences	required location, salary, type of employment relationship, fields of interest
Communication	messages between the Candidate and the Employer through the Platform
AI outputs	CV drafts, job position recommendations, explanations of the candidate's match with a listing
Technical data	IP address, date of registration, login, device identifiers, security logs

As a standard, JobsAI does not request special categories of personal data under Article 9 GDPR (for example data on health status, political opinions, religious belief or biometric data). If a Candidate voluntarily states such data in their CV or another document, it will be processed only to the extent necessary for the provision of the service and made available only to the entities to which the Candidate knowingly provides the data.

6.2 Data on Employers

Upon registration and use of the services of the Platform, we process in particular:

Category of data	Examples
Company identification data	business name, Company ID No., Tax ID No., registered office
Contact persons	name, job position, e-mail, telephone
Billing data	billing address, payment details, order history
Data on job listings	published positions, requirements for candidates, internal designation of positions
Communication	communication with customer support, business communication
Technical data	IP addresses, login, audit logs, account change history

The Employer is responsible for the correctness of the data entered into the Platform.

6.3 Data of website visitors

Upon a visit to the JobsAI website, the following may be automatically processed in particular:

IP address,
date and time of access,
type of internet browser,
language settings,
operating system,
type of device,
pages visited,
source of the visit,
technical identifiers of cookies and similar technologies.

This data serves primarily to ensure the security of the Platform, the correct functioning of the website, the analysis of traffic and the improvement of the user environment.

6.4 Data arising from the use of AI functions

When using functions based on artificial intelligence, JobsAI may also process data arising during the use of these functions, for example:

text entered into an AI tool,
the content of the CV being edited,
the professional preferences of the Candidate,
information needed to create a recommendation,
an assessment of the relevance of job listings,
an explanation of the match between a candidate and a job position,
feedback provided by the User.

We use this data exclusively for the purpose of providing the requested AI service, ensuring its correct functionality, increasing the quality of the services and securing the Platform.

If some AI functions were to use external artificial intelligence models, this fact will always be transparently stated and the processing will take place in accordance with the relevant contractual and statutory requirements.

7. PURPOSES OF PROCESSING AND LEGAL BASES

JobsAI processes personal data only for clearly defined purposes and always on the basis of one of the legal grounds set out in Article 6 GDPR.

Purpose of processing	Legal basis	Typical data
Registration and management of the user account	Performance of a contract (Art. 6(1)(b) GDPR)	identification and contact data
Provision of the services of the Platform	Performance of a contract	professional data, communication
AI recommendation of job listings	Performance of a contract and legitimate interest	professional profile, preferences
AI creation and editing of a CV	Performance of a contract	content of the CV
Mediation of contact between the Candidate and the Employer	Performance of a contract	contact and professional data
Handling of enquiries and customer support	Performance of a contract or legitimate interest	communication
Protection of the Platform and fraud prevention	Legitimate interest	IP address, logs, security data
Fulfilment of accounting and tax obligations	Compliance with a legal obligation	billing data
Sending of marketing communications	Consent or legitimate interest (in accordance with legal regulations)	e-mail address
Analytics and improvement of services	Legitimate interest or consent (cookies)	technical data

JobsAI never processes personal data in a manner incompatible with the purposes for which the data was originally obtained.

For every new purpose of processing, we assess its lawfulness, necessity and proportionality and apply the principles of data minimisation and purpose limitation under the GDPR.

8. USE OF ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

8.1 Responsible use of artificial intelligence

JobsAI uses artificial intelligence technologies (hereinafter "AI") for the purpose of providing modern recruitment services, improving the user experience and facilitating the connection between candidates and employers.

Artificial intelligence is used on the Platform exclusively as a supporting tool whose aim is to help Users use the services of the Platform more effectively. AI does not replace human decision-making, expert assessment or the responsibility of employers or candidates.

In the development and use of AI systems, JobsAI proceeds from the principles of lawfulness, transparency, accountability, security and the protection of the fundamental rights of individuals.

8.2 The purposes for which we use AI

The Platform may use AI in particular for the following purposes:

recommending suitable job listings to Candidates,
recommending suitable Candidates to Employers,
analysing professional profiles,
creating and editing CVs,
drafting cover letters,
explaining the degree of match between a Candidate's profile and a job listing,
personalising the content of the Platform,
improving the relevance of searches,
detecting manifestly fraudulent or abusive behaviour,
increasing the quality of the services provided.

The scope of the AI functions may change in the future depending on the further development of the Platform. Users will be informed of significant changes in an appropriate manner.

8.3 What data may be used by AI

For the provision of AI functions, the following data in particular may be processed, which the User voluntarily provides when using the Platform, for example:

data stated in the professional profile,
work experience,
education attained,
expert skills,
language knowledge,
work preferences,
the content of the CV,
the content of the cover letter,
text entered into AI tools,
job listings,
information about preferred fields,
anonymised statistical data on the use of the Platform.

JobsAI does not process special categories of personal data through AI.

8.4 How AI creates recommendations

Recommendations of job listings or candidates arise on the basis of a combination of various factors, for example:

professional experience,
education,
work preferences,
requirements stated by the employer,
expert skills,
language knowledge,
location,
other parameters entered by the User.

The result is a recommendation of likely relevant work opportunities or candidates.

AI does not assess the personality of a Candidate or their human qualities and does not predict future work performance.

8.5 Automated decision-making

JobsAI does not make automated individual decisions that would have legal effects or similarly significantly affect the rights or obligations of Candidates or Employers within the meaning of Article 22 GDPR.

AI recommendations constitute only supporting information.

Decisions on:

inviting a candidate to an interview,
rejecting a candidate,
concluding an employment relationship,
an offer of employment,

are always made by the relevant Employer through an authorised natural person.

JobsAI does not carry out the automatic acceptance or automatic elimination of candidates.

8.6 Human oversight

All AI functions of the Platform are designed with emphasis on the principle of human oversight.

AI does not replace the decision-making of employers or Candidates.

Users are obliged always to reasonably assess and verify the results created by AI before using them.

JobsAI recommends not using AI outputs as the sole basis for significant decisions.

8.7 Limitations of AI

Although AI technologies are continuously being improved, they may contain inaccuracies or create results that are not entirely correct, complete or up to date.

AI may, in particular:

incorrectly evaluate the relevance of a job listing,
recommend a less suitable position,
create a stylistically unsuitable text,
omit certain information,
create an inaccurate draft of a CV or cover letter.

The User is responsible for the final use of all documents created or edited using AI.

8.8 Improvement of AI services

JobsAI may use aggregated, anonymised or statistical information arising from the use of the Platform for the purpose of:

increasing the quality of AI recommendations,
improving the accuracy of algorithms,
eliminating errors,
developing new functions,
increasing the security of the Platform.

This information is not used in a manner that would allow the identification of a specific natural person.

If personal data were to be used for a purpose other than that described in this Policy, the User will be transparently informed of such processing in advance and, where required by a legal regulation, their consent will be requested.

8.9 External AI technologies

Some AI functions of the Platform may be provided through trusted technology partners.

JobsAI uses only such providers as provide appropriate contractual, technical and organisational guarantees of personal data protection.

If, in the use of external AI technologies, personal data is transferred outside the European Economic Area, this takes place only under the conditions set out in the GDPR, in particular through an adequacy decision or standard contractual clauses.

8.10 Transparency

JobsAI strives for maximum transparency in the use of artificial intelligence.

Every User has the right to obtain information about:

whether AI was used in the provision of the service,
for what purpose the AI was used,
what role the AI played in the provision of the service,
how they can request a human assessment, where this is relevant given the nature of the service.

Transparency, the responsible use of AI and the protection of the rights of Users constitute the fundamental principles of the operation of the JobsAI Platform.

9. RECIPIENTS OF PERSONAL DATA

JobsAI discloses personal data to third parties only where this is necessary for the provision of the services of the Platform, the fulfilment of legal obligations or the protection of the legitimate interests of the Operator. In all cases, we ensure that the scope of the data transferred is limited to the minimum necessary to achieve the specific purpose.

Personal data may be disclosed in particular to the following categories of recipients:

a) Employers

If a Candidate expresses interest in a specific job listing or otherwise provides their data to an employer through the Platform, the relevant personal data will be disclosed to that employer.

The scope of the disclosed data depends on the Candidate's settings and the manner of use of the Platform.

From the moment the data is disclosed to the employer, the relevant employer is responsible for its further processing as an independent controller of personal data.

JobsAI is not responsible for the subsequent processing of data carried out by the employer.

b) IT service providers

The operation of the Platform is ensured through expert providers of technical services.

These are in particular providers of:

cloud infrastructure,
hosting,
backup,
monitoring,
security services,
e-mail delivery,
payment services,
customer support,
analytical services.

These providers process personal data exclusively according to the instructions of JobsAI and on the basis of a personal data processing agreement concluded under Article 28 GDPR.

c) Providers of AI technologies

If an external provider of artificial intelligence technology is used for the provision of an AI function, only such data is processed as is necessary for the provision of the specific AI service.

Before using any provider, JobsAI assesses in particular:

the level of security,
the contractual guarantees,
the conditions of processing,
the place of processing,
compliance with the GDPR.

JobsAI does not sell personal data to third parties.

d) Public authorities

Personal data may be disclosed to public authorities only in the cases set out by legal regulations or on the basis of a binding decision of the relevant authority.

10. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

JobsAI primarily seeks to use service providers who process personal data within the European Union or the European Economic Area.

In some cases, however, it may be necessary to transfer personal data outside the European Economic Area.

Such a transfer takes place only where at least one of the following conditions is met:

the European Commission has issued an adequacy decision,
Standard Contractual Clauses have been concluded,
other appropriate safeguards under the GDPR have been adopted,
the transfer is permitted by one of the exceptions set out in the GDPR.

JobsAI continuously evaluates the risks of international transfers and adopts reasonable measures to protect the rights of data subjects.

11. RETENTION PERIOD OF PERSONAL DATA

We retain personal data only for the period strictly necessary to fulfil the purposes for which it was obtained, or for the period required by legal regulations.

Overview of retention periods

Type of data	Retention period
User account	for the duration of the registration
Professional profile	for the existence of the account or until erasure by the user
CV	until removal by the Candidate or cancellation of the account
Communication	generally 3 years
Invoices	in accordance with accounting and tax regulations
Security logs	for the period necessary for the security of the Platform
Marketing consents	until the withdrawal of consent
Cookies	in accordance with the individual categories of cookies

After the relevant period has elapsed, the data is securely removed or anonymised, unless a legal regulation provides otherwise.

12. SECURITY OF PERSONAL DATA

The protection of personal data represents one of the fundamental priorities of JobsAI.

In the operation of the Platform, we adopt reasonable technical and organisational measures corresponding to the nature, scope and purpose of the processing of personal data.

These measures include in particular:

the management of access permissions,
the authentication of users,
the protection of user accounts,
the encryption of communication using the TLS protocol,
regular backups,
audit records,
the monitoring of security incidents,
protection against unauthorised access,
protection against data loss,
the regular updating of systems,
the management of security vulnerabilities.

Access to personal data is available only to persons who need it for the performance of their work activity or the provision of contractually agreed services.

JobsAI regularly evaluates the effectiveness of the security measures adopted and adapts them to technological development and current security risks.

In the event of a security incident, JobsAI proceeds according to internal security procedures and, in the cases set out by legal regulations, informs the relevant supervisory authority and the persons concerned.

13. RIGHTS OF DATA SUBJECTS

JobsAI respects the rights of all persons whose personal data it processes. In accordance with the GDPR and the relevant legal regulations, you have the right to exercise the rights set out below at any time.

13.1 Right to information

You have the right to be informed in a comprehensible manner about:

what personal data we process,
for what purpose we use the data,
on what legal basis we process the data,
to whom the data may be disclosed,
how long the data will be retained,
what rights you have in connection with the processing.

We provide this information in particular through this Privacy Policy.

13.2 Right of access

You have the right to obtain confirmation of whether we process personal data about you.

If we do, you have the right to obtain in particular:

a copy of the personal data processed,
information about the purpose of the processing,
information about the categories of data,
information about the recipients,
information about the retention period,
information about the source of the data, if it was not obtained directly from you.

We provide the first copy free of charge. In the case of repeated or manifestly unfounded requests, we are entitled to charge a reasonable fee for administrative costs or to refuse the request to the extent permitted by legal regulations.

13.3 Right to rectification

If you find that certain data is not correct or complete, you have the right to request its rectification or completion.

You can adjust a number of items of data yourself directly in your user account.

13.4 Right to erasure ("the right to be forgotten")

You have the right to request the erasure of personal data, in particular where:

it is no longer needed for the purpose for which it was obtained,
you withdraw consent and there is no other legal ground for the processing,
you successfully object to the processing,
it has been processed unlawfully,
erasure is required by a legal regulation.

The right to erasure is not absolute. JobsAI may continue to retain certain data where this is required by a legal regulation or is necessary for the protection of legal claims.

13.5 Right to restriction of processing

You have the right to request that JobsAI temporarily restrict the processing of personal data, for example where:

you dispute its correctness,
the processing is unlawful,
we no longer need the data, but you require it for the establishment, exercise or defence of legal claims,
an objection has been raised against the processing.

For the duration of the restriction, the data will be retained but will be processed only to the extent set out by legal regulations.

13.6 Right to data portability

You have the right to obtain the personal data that you have provided to us in a structured, commonly used and machine-readable format, where:

the processing is based on consent or a contract,
the processing takes place by automated means.

Where it is technically possible, you can also request the direct transfer of the data to another controller.

13.7 Right to object

You have the right to object at any time to the processing of personal data based on the legitimate interest of JobsAI.

In the case of a justified objection, we will cease the processing, unless we demonstrate compelling legitimate grounds for continuing the processing or unless the processing is necessary for the establishment, exercise or defence of legal claims.

If the data is processed for the purposes of direct marketing, we will cease processing it for this purpose without undue delay after the objection is raised.

If the processing is based on your consent, you can withdraw this consent at any time.

The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

13.9 Automated decision-making

JobsAI does not make automated individual decisions under Article 22 GDPR that would in themselves have legal effects or similarly significantly affect the rights of Users.

The AI tools of the Platform serve only as supporting means in the provision of the services and do not replace human decision-making.

13.10 Exercise of rights

You can exercise your rights at any time through the contact details stated in Chapter 15 of this Policy.

JobsAI will handle the request without undue delay, at the latest within one month of its receipt, unless a legal regulation provides otherwise.

In exceptional cases, this period may be extended by a further two months, of which you will be informed in good time.

14. COOKIES AND SIMILAR TECHNOLOGIES

The Platform uses cookies and similar technologies for the purpose of:

ensuring the correct functionality of the website,
securing the Platform,
remembering user settings,
analysing traffic,
improving the services provided,
personalising content,
measuring the effectiveness of marketing campaigns, where relevant.

Detailed information about the cookies used, their purpose, retention period and the options for managing consents is set out in the separate Cookies Policy document, which is available on the JobsAI website.

In cases where legal regulations require it, non-mandatory cookies are used only on the basis of the User's prior consent.

15. CONTACT AND EXERCISE OF RIGHTS

If you have any questions concerning personal data protection or wish to exercise your rights under the GDPR, you can contact us:

Saleryon, s.r.o.
Bedrníková 328
250 84 Květnice
Czech Republic

E-mail: [email protected]

If you believe that the processing of your personal data infringes legal regulations, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, or with another relevant supervisory authority according to the place of your habitual residence.

16. CHANGES TO THIS POLICY

JobsAI is entitled to reasonably change this Privacy Policy, in particular for reasons of:

a change in legal regulations,
a change in the services provided,
an expansion of the functionalities of the Platform,
the introduction of new AI tools,
changes in security measures,
a change of service providers.

Registered Users will be informed of material changes through the Platform or by electronic mail with reasonable advance notice.

The current wording of this Policy is always available on the JobsAI website.

FINAL PROVISION

This Privacy Policy takes effect on the date stated in its header and replaces all previous wordings.

JobsAI undertakes to continuously review its personal data processing procedures and to update this document so that it corresponds to the development of legal regulations, technologies and the services provided.