Privacy Policy

1. Data Controller

The data controller for personal data collected through EU Jobs Alert (eujobsalert.com) is:

941 Ventures
KvK (Chamber of Commerce): 97247960
1217 Hilversum, Netherlands
Email: [email protected]

2. What We Collect

We collect and process the following personal data:

• Email address — provided when you create an account (via magic link login) or subscribe.
• Name — provided if you use Google OAuth sign-in, or entered during Stripe checkout.
• Subscription status — whether you have a free or premium account, and your billing period.
• Alert preferences — your saved searches and job alert settings.
• Payment information — processed by Stripe. We store your Stripe customer ID but never your card details.
• Session data — a secure cookie to keep you signed in.
• Analytics data — page views, feature usage, and device information collected via PostHog and Google Analytics.

3. How We Use Your Data

• Account management — creating and maintaining your account, authenticating sign-ins.
• Payment processing — managing subscriptions, processing payments via Stripe, handling invoices.
• Email communications — sending magic link sign-in emails, subscription confirmations, and job alert digests you opt into.
• Service improvement — analytics to understand usage patterns and improve the product.
• Security — fraud prevention, detecting abuse, and protecting the service.

4. Lawful Bases for Processing

Under the GDPR, we process your data on the following legal bases:

• Contract performance (Art. 6(1)(b)) — account management, subscription processing, delivering job alerts you requested.
• Legitimate interest (Art. 6(1)(f)) — analytics to improve the service, fraud prevention, service security. You can object to processing based on legitimate interest at any time.
• Consent (Art. 6(1)(a)) — marketing emails (job alert digests you opt into). You can withdraw consent at any time without affecting the lawfulness of prior processing.

5. Third-Party Processors

We use the following third-party services that process data on our behalf:

Service	Purpose	Location	Safeguard
Stripe	Payment processing	US	EU-US Data Privacy Framework
Brevo	Email delivery	EU (France)	EU-based
Cloudflare	Hosting, CDN, security	US	EU-US Data Privacy Framework
PostHog	Product analytics	US	EU-US Data Privacy Framework
Google	Tag Manager, Analytics, OAuth	US	EU-US Data Privacy Framework

6. International Data Transfers

Some of our processors are based in the United States. For these transfers, data is protected by the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Cookies

We use the following cookies:

• Session cookie (essential) — keeps you signed in. Set when you log in, cleared when you sign out. Secure, HttpOnly, SameSite=Lax.
• Analytics cookies (PostHog, Google Analytics) — help us understand how the site is used. These are set via our analytics providers.

We do not use advertising cookies or sell data to advertisers. You can block analytics cookies using your browser settings or a browser extension without affecting site functionality.

8. Data Retention

• Account data — retained for as long as your account is active.
• After deletion — personal data is deleted promptly upon account deletion or request.
• Financial records — invoices and payment records are retained for 7 years in accordance with Dutch tax law (Algemene wet inzake rijksbelastingen).
• Analytics data — anonymized and retained according to our analytics providers' retention policies.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate personal data.
• Right to erasure — request deletion of your personal data.
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Children

EU Jobs Alert is not intended for users under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact

For questions about this privacy policy or your personal data, contact us at:

[email protected]
941 Ventures
1217 Hilversum, Netherlands