Privacy notice

In force from: September 2026. In short: we process very little, and only what you give us yourself. We never receive the data from your job application, we set analytics cookies only if you allow it, and we pass your email address to no one.

1. Who processes your data

The jobscan.nu website is operated by jobSCAN; jobSCAN is the data controller responsible for the processing described here.

For anything about your data — questions, access, deletion, complaints — write to hello@jobscan.nu. We reply within 30 days at the latest.

jobSCAN provides a platform and is not an employment agency: we do not select or recommend candidates, do not forward applications and do not contract to recruit. Contact happens directly between job seekers and advertisers (Legal notice, section 1).

2. What we process, why, and for how long

2.1 Subscribing to the job email

Data: email address; interface language (Hungarian, Polish, Romanian, English); your area of interest, if you give one; the page you subscribed from; the time of consent and the version of the consent text; an irreversible check code derived from your IP address.
Why: so we can send you new job listings from the Netherlands once a week, and tell you when saved searches go live.
Legal basis: your consent (GDPR Article 6(1)(a); Dutch Telecommunicatiewet 11.7).
How long: until you unsubscribe. On unsubscribing your data is deleted — it does not move to a suppression list. If you do not confirm your subscription, the request deletes itself after 7 days. If you open none of our emails and click nothing in them for two years, we delete your subscription.

Subscribing takes two steps: we send an email to the address you gave, and you are only on the list once you click the confirmation link in it. That way nobody else's address can be subscribed. We do not store raw IP addresses — only a salted check code, which we use to filter automated abuse and from which your address cannot be reconstructed.

One click at the bottom of any of our emails unsubscribes you.

2.2 Measuring traffic

We measure on two levels. Our own aggregated statistics always run; Google Analytics runs only if you accept it in the cookie bar.

Our own statistics — data: daily totals — pages viewed, countries, referring pages. We do not store IP addresses and we build no profiles. Legal basis: legitimate interest (GDPR Article 6(1)(f)) — figures that cannot be linked to a person. How long: the aggregated totals indefinitely; technical identifiers are deleted within 30 days.
Google Analytics 4 — data: a random identifier placed in your browser (the _ga cookie), the pages viewed and time spent on them, the referring page, browser and device type, and an approximate location (country, city) derived from your IP address. Google does not store the IP address itself. We do not enable Google's advertising signals or personalisation — neither we nor Google use the data for advertising. Legal basis: your consent (GDPR Article 6(1)(a); Dutch Telecommunicatiewet 11.7a). How long: Google Analytics keeps visitor-level data for 2 months, after which only aggregates remain; you can withdraw your choice at any time as described in section 4.
Why: so we can see whether the site works, which pages are useful, and where visitors come from.

WhatsApp button: on listings from direct advertisers we count presses of the WhatsApp apply button as a number only, so the advertiser can see how many people clicked. We store no data about you for this; you send the WhatsApp message directly to the advertiser, and jobSCAN does not see it.

2.3 If you write to us

We keep your email and its contents for as long as handling the matter requires, then delete it within 12 months at the latest. Legal basis: legitimate interest, or preparation of a contract if you contact us as an advertiser.

2.4 User account

Data: name, email address, password (only in irreversible, salted form), interface language, the time the account was created and last logged in to. For advertiser accounts also the company details (for example company name, KvK number, address, logo), the contact person's name, phone number and email address, and — if you are a member of a company team — which company you belong to.
Why: so you can log in and use the services linked to your account — as an advertiser, managing your listings and your public company page. The company name, logo and the company contact details you enter appear publicly on your company page and your listings.
Legal basis: performance of a contract (GDPR Article 6(1)(b)).
How long: until you close your account. You can delete it yourself in your account settings; the data linked to the account is then deleted, except what the law requires us to keep (2.5). When an advertiser account is deleted, its listings go to the bin and are permanently deleted after 30 days, and the company page is removed.

If you change your email address, we send a confirmation link to the new address; the change only takes effect once you open the link.

2.5 Subscriptions and payment

Data: the chosen package, the status and period of the subscription, the customer and subscription identifiers held at Stripe, and the details on invoices (name, address, amount, date).
We do not see or store your full card number or bank account number — payments are handled by Stripe (section 5).
Why: to provide the package, collect the fee and issue invoices.
Legal basis: performance of a contract (GDPR Article 6(1)(b)); for keeping invoices, a legal obligation (point (c)).
How long: subscription data is deleted with the account; accounting records are kept for seven years, as Dutch law requires.

2.6 Advertisers: contact and advertiser newsletter

If you contact us as an advertiser before having an account, we process the contact person's name, email address, phone number and the company's details in order to prepare the contract (GDPR Article 6(1)(b)); the data of advertiser accounts and packages is described in sections 2.4 and 2.5.

Advertiser newsletter: if you subscribe in your account settings, we send information for advertisers to your email address. Legal basis: your consent (GDPR Article 6(1)(a)). How long: until you unsubscribe — one click at the bottom of every email or in your account settings.

3. What we do not do

We do not sell or pass on your data to third parties for marketing.
We do not process your job application data. Applications always happen at the original advertiser, on their own site or email address; your CV and your details never reach us.
We use no advertising cookies, and we give no data to advertising networks. Traffic measurement runs only with your consent, as described in section 4.
We send no personal data to artificial intelligence. A language model translates and structures the listing texts — what it processes is the text of the listing, not your data.
Subscribing does not create an account. You only have a user account if you register (2.4).

4. Cookies and data stored in your browser

jobscan.nu uses no advertising cookies; it sets analytics cookies only with your consent. What we use:

Strictly necessary cookies — language choice, login (if you have an account), security checks. This includes the jsc_meres cookie, which remembers the choice you made in the cookie bar (12 months if accepted, 6 months if declined).
Analytics cookies — only after you accept: the Google Analytics _ga and _ga_… cookies (lifetime 2 years). Until you decide, or if you decline, the Google measurement code is not even loaded, and no data is sent to Google.
Local storage (localStorage) for the subscription window: it remembers, in your browser only, that you have already seen or closed it, so it does not come back. That information never reaches us.

Strictly necessary cookies and local storage need no consent. You can withdraw your consent to measurement at any time by opening the cookie settings — when you decline, we delete the analytics cookies.

Payment takes place on Stripe's page, where Stripe uses its own cookies needed for payment and fraud prevention, under its own privacy rules.

5. Who sees your data

Only the providers without which the site would not run:

DigitalOcean — hosting the website and the database (Amsterdam, the Netherlands).
Google Workspace — sending and receiving email (EU data centres).
Google Analytics (Google Ireland Ltd.) — traffic measurement, only with your consent (sections 2.2 and 4). Google may also process the data in the United States; the transfer is based on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Stripe (Stripe Payments Europe Ltd., Ireland) — payments, subscriptions and invoicing (section 2.5). For part of the payment data — for example fraud prevention and meeting financial regulations — Stripe is an independent controller. Stripe may also process the data in the United States; the transfer is based on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

Beyond these, we disclose data only where the law requires it, for example on an official request.

6. Your rights

At any time you may ask us to show you what data we hold about you (access); correct inaccurate data; delete your data; restrict the processing; hand over your data in machine-readable form (portability); and you may object to processing based on legitimate interest.

You may withdraw your consent at any time — the unsubscribe link is a single click, and we delete afterwards. Withdrawal does not affect the lawfulness of processing carried out before it.

Write to hello@jobscan.nu. If our answer does not satisfy you, you can complain to the Dutch data protection authority: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you do not live in the Netherlands, you may also turn to the data protection authority of your own country.

If you have an account, you can change your name, email address and newsletter settings yourself in your account settings, and you can delete your account there too.

7. Automated decision-making

We make no automated decisions about you and we do not profile you. The order and filtering of listings follow the data of the listings, not any data held about you.

8. Changes

If this notice changes, we publish the new version on this page with a version number and a date. If the change affects your consent, we will also tell you by email.

Version 2.0 · 2026-09-27 · Changes: the platform's role (section 1); user account and account deletion (2.4); subscriptions and payment, Stripe (2.5, 4, 5); advertiser newsletter (2.6); counting WhatsApp clicks (2.2). · Version 1.1 · 2026-09-13 · Changes: traffic measurement with Google Analytics 4, strictly on the basis of consent (sections 2.2, 3, 4, 5). · Version 1.0 · 2026-09-12 · first release.