Privacy Policy

1. Controller and Contact Information

The controller responsible for data processing on findmyjobs.ch and related services is:

We have not appointed a Data Protection Officer as we are not legally required to do so under the Swiss Federal Act on Data Protection (nDSG). For all data protection inquiries, please contact us at the email address above.

2. Scope and Purpose of This Policy

This Privacy Policy explains how Interactive Foundry AG ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our job matching platform FindMyJobs ("Service"), accessible via findmyjobs.ch.

This policy applies to all users of our Service, including visitors to our website and registered users who upload CVs and use our job matching features.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance (Art. 6(1)(b) GDPR / Art. 31(1) nDSG): Processing necessary to provide our job matching services as requested by you.
• Consent (Art. 6(1)(a) GDPR / Art. 6(6) nDSG): Where you have given explicit consent, particularly for the processing of special category data (sensitive information that may appear in your CV).
• Legitimate Interests (Art. 6(1)(f) GDPR / Art. 31(1) nDSG): Processing necessary for our legitimate interests in improving our services, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
• Legal Obligation (Art. 6(1)(c) GDPR / Art. 31(1) nDSG): Processing necessary to comply with legal requirements.

4. Categories of Personal Data We Collect

4.1 Data You Provide Directly

• Account Data: Name, email address, contact information.
• CV/Resume Data: Work experience, education, skills, certifications, career history, professional qualifications.
• Service Preferences: Settings and preferences you configure within the Service.
• Communications: Messages, feedback, and support requests you send us.

4.2 Data Collected Automatically

• Usage Data: Pages visited, features used, clicks, interaction patterns, and navigation flows within the Service.
• Product Analytics Data: Session recordings (visual replays of how you interact with the Service, with sensitive fields such as CV content masked), feature adoption metrics, and user journey analysis. This data is linked to your account to help us understand and improve the Service.
• Technical Data: Browser type, device type, screen resolution, approximate geographic region.

4.3 Special Category Data

Your CV may contain sensitive personal data such as information revealing racial or ethnic origin, health conditions, or trade union membership. We process such data only with your explicit consent provided when you upload your CV. We minimize collection of sensitive data and do not use it for profiling purposes.

5. How We Use Your Data

• Service Delivery: To analyze your CV using AI technology and match you with relevant job opportunities.
• Notifications: To send job alerts and service notifications.
• Service Improvement: To improve our matching algorithms and user experience based on aggregated, anonymized data.
• Security: To protect against unauthorized access, fraud, and ensure platform integrity.
• Legal Compliance: To comply with applicable laws and respond to lawful requests.

6. Automated Processing and AI Technology

Our Service uses artificial intelligence (AI), including large language models and machine learning algorithms, to analyze your CV and generate job match recommendations. We believe in transparency about how this technology works.

6.1 What Automated Processing We Perform

We use AI technology to extract and analyze information from your CV, including skills, experience levels, and career progression.

We automatically compare your profile with available job opportunities to generate match scores and recommendations.

Your CV data is processed by third-party AI services for extraction, analysis, and matching purposes. The specific providers we use are listed on our Sub-Processors page .

6.2 Nature of Our Recommendations

Our AI-generated job matches are provided as recommendations and suggestions only. You retain full control over which opportunities to consider and pursue. All hiring decisions are made solely by employers. Our Service does not make any decisions that produce legal effects or similarly significant effects concerning you.

6.3 How Our Matching Works

Our matching algorithm may consider factors such as skills alignment, experience level, career trajectory, location preferences, and language capabilities. We use a hybrid approach combining semantic analysis (understanding meaning, not just keywords) with structured matching against job requirements.

7. Recipients of Your Data

7.1 Service Providers

We engage trusted third-party service providers ("sub-processors") to help operate our Service. These providers act as data processors under our instruction and are contractually bound to protect your data. We require all sub-processors to maintain appropriate technical and organizational security measures and to process data only for the purposes we specify.

Our sub-processors fall into the following categories:

• Cloud Infrastructure: Hosting, database, file storage, and authentication services.
• AI Processing: Large language models and machine learning services used for CV analysis, extraction, and job matching.
• Email Delivery: Transactional email services for notifications and job alerts.
• Website Analytics: Privacy-friendly, aggregated website analytics (no personal data collected).
• Product Analytics: User behavior analysis, session recordings, and feature usage tracking to improve the Service. Sensitive content is masked.

A complete list of our current sub-processors, including their names, purposes, and locations, is available on our Sub-Processors page . We will notify registered users by email when sub-processors are added or replaced.

7.2 What We Do NOT Do

• We do NOT sell your personal data to third parties.
• We do NOT use your data for third-party advertising.

8. International Data Transfers

Your primary data storage and processing occurs in Switzerland and the European Economic Area (EEA). Some sub-processors may transfer data to the United States or other countries with adequate data protection as recognized by the European Commission or Swiss authorities.

For transfers to countries without an adequacy decision, we rely on the EU-US Data Privacy Framework (where the recipient is certified) and/or Standard Contractual Clauses (SCCs) approved by the European Commission and recognized under Swiss law. These safeguards ensure that your data receives a level of protection comparable to that in Switzerland and the EEA.

You may request a copy of the relevant safeguards by contacting us at contact@findmyjobs.ch .

9. Data Retention

• Active Accounts: We retain your data for as long as your account is active and you continue using our Service.
• Inactive Accounts: If your account is inactive for 12 months, we will notify you 30 days before deleting your data. You can prevent deletion by logging in during the notice period.
• After Deletion Request: Upon your request, we delete your personal data within 30 days, except where retention is required by law.
• Legal Requirements: Certain data may be retained longer to comply with legal obligations (e.g., accounting records for 10 years under Swiss law).
• Job Listing Data: Non-personal job listing data scraped from public sources is retained for service operation and is not subject to individual deletion requests.

10. Your Rights

Under the Swiss Federal Act on Data Protection (nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access (Art. 25 nDSG / Art. 15 GDPR): You may request confirmation of whether we process your data and obtain a copy of your personal data.
• Right to Rectification (Art. 32 nDSG / Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 32 nDSG / Art. 17 GDPR): You may request deletion of your personal data under certain circumstances.
• Right to Data Portability (Art. 28 nDSG / Art. 20 GDPR): You may request your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests (GDPR only).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, for EU residents, your local supervisory authority.

To exercise your rights, contact us at: contact@findmyjobs.ch . We will respond within 30 days.

11. Cookies and Tracking Technologies

11.1 Website Analytics

Our marketing website uses Plausible Analytics, a privacy-friendly analytics service based in the EU (Estonia). Plausible does not use cookies, does not track individuals across websites, and does not collect personal data. All website analytics data is aggregated and cannot identify individual users.

11.2 Product Analytics

Our web application uses product analytics tools to understand how users interact with the Service. This includes tracking feature usage, navigation flows, and session recordings (visual replays of your interactions). Sensitive content such as CV text, personal details, and form inputs are masked in session recordings.

Product analytics data is linked to your account and is used solely to improve the Service. We do not use this data for advertising, profiling, or any purpose unrelated to service improvement. The legal basis for this processing is our legitimate interest in improving the Service (Art. 6(1)(f) GDPR), balanced against your rights through data minimization and sensitive-field masking.

11.3 Cookies

We use essential cookies strictly necessary for the functioning of our Service (such as authentication session cookies) and functional cookies for product analytics. We do not use any marketing, advertising, or third-party tracking cookies. You can disable non-essential cookies in your browser settings, though this may affect our ability to improve the Service based on usage patterns.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, regular security assessments, and contractual obligations on our service providers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

13. Children's Privacy

Our Service is intended for individuals aged 18 and older who are seeking employment. We do not knowingly collect personal data from children under 16 (or under 13 in jurisdictions where this is the applicable threshold). If you believe a child has provided us with personal data, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top indicates when the policy was last revised.

14.1 Non-Material Changes

For non-material changes (corrections, clarifications, formatting), we will update the policy on our website. No action is required from you.

14.2 Material Changes

For material changes that affect how your personal data is processed, we will notify you by email and require your explicit re-acceptance before you can continue using the Service. You will be presented with the updated policy upon your next login and must actively accept it to proceed. Your data will be preserved while the re-acceptance is pending, but no further processing will occur until you have accepted the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: