The job platform that understands you
CareerMatch LogoFind your next dream job with personal matching.
Updated: 15 May 2025

Privacy Policy

Information on the processing of personal data in accordance with the GDPR.

We only process personal data to the necessary extent, for specific purposes and in a transparent manner. These notes explain which data we collect, for which purposes we use it and what rights you have.

Which data we currently process

a) Visiting the website (server logs)

When you visit our website, our hosting provider automatically processes technical data, e.g.:

  • IP address (shortened where possible)
  • date and time of access
  • pages/files accessed
  • browser type and version, operating system
  • referrer URL (the page you came from)

b) Contact (email / contact form)

If you contact us by email or via the contact form, we process:

  • your email address and the content of your message
  • if applicable your name and any other contact details you provide

c) Surveys & matching

When you participate in surveys we process:

  • your answers to career orientation questions
  • technical usage data (e.g. timestamp, session reference)

d) Analytics with Umami

We use Umami as a lightweight, self-hosted analytics tool without cookies and without third-party tracking. It records for example:

  • pages viewed
  • approximate region (derived from the IP address, where enabled)
  • device type and browser
  • referrer URL (if present)

e) Cloudflare (CDN & security)

We use Cloudflare (CDN & security, provider: Cloudflare, Inc.) to protect our website against attacks and speed up delivery. In particular, the IP address, requested content and technical access data are processed.

Purposes and legal bases

Providing the website & security

(server logs, technical data, Umami without personal profiles) → legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR (interest: secure, stable operation of the website).

Responding to requests

(email/contact form) → pre-contractual measures and/or legitimate interest pursuant to Art. 6 para. 1 lit. b and f GDPR.

Running surveys & matching

→ performance of the service you requested (Art. 6 para. 1 lit. b GDPR) and legitimate interest (Art. 6 para. 1 lit. f GDPR) in improving the offering.

Optional features based on consent

If we introduce optional features that require separate consent (e.g. newsletter), processing will be based on Art. 6 para. 1 lit. a GDPR.

Storage duration

  • Server logs are generally deleted after no more than 12 months unless longer retention is necessary to fend off or investigate attacks.
  • We store contact data from requests only as long as necessary to handle your enquiry and provided no statutory retention obligations prevent deletion.
  • Survey data is stored as long as required for analysis, improving our offering and documenting the matching process. Afterwards it is deleted or anonymised.

Recipients and data sharing

We do not share personal data with third parties unless:

  • this is necessary to fulfil our contractual or legal obligations
  • you have expressly consented, or
  • we are legally obliged to do so

To provide the website and server infrastructure we use external service providers (e.g. hosting providers) as processors under Art. 28 GDPR. The servers are operated in a data center within the European Union.

Your rights

  • Right of access to the personal data we process
  • Right to rectification of inaccurate data
  • Right to erasure unless retention obligations apply
  • Right to restriction of processing
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interests (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future
  • Right to lodge a complaint with a supervisory authority

Exercising your rights

You can exercise your rights at any time by emailing [email protected]. We will respond promptly and within the statutory time limits.

Right to complain

You have the right to lodge a complaint with a data protection authority if you believe the processing of your personal data violates the GDPR. In Austria this is in particular:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
https://www.dsb.gv.at/

Changes to this privacy policy

We will update this privacy policy whenever our offering or the underlying legal bases change (e.g. introduction of user accounts, recruiter features or additional tracking technologies). The current version is the one published on this page.