Your candidates' data, handled the way Datatilsynet expects
You are the data controller for your candidates; we process the data on your behalf under a data processing agreement. Here is what that means in practice.
- Where the data lives
- Servers and database at netcup GmbH in Germany (EU). Off-site backups in Google Drive with access limited to LynBro ApS.
- 6 months by default
- Applications and everything attached to them are deleted 6 months after the hiring ends. A candidate can agree to a longer period; a talent pool needs a separate consent.
- Data processing agreement
- The DPA is part of the terms for companies and can be signed as a PDF. It lists every sub-processor.
- Separation between companies
- Every query is limited to your company, with tests that one company cannot see another's data. External candidates never enter the jajob CV database.
- Security measures
- HTTPS everywhere, passwords stored only as hashes, two-factor sign-in, SSH keys only on servers, firewall, rate limiting and bot protection, daily backups.
- Audit log
- A record of who did what, and when, in your company account.
Sub-processors
The authoritative list is Annex B of the data processing agreement. We notify you at least 30 days before adding or replacing a sub-processor.
| Company | What for | Where |
|---|---|---|
| netcup GmbH | Servers and database | Germany (EU) |
| Contabo GmbH | Mail server for service emails | Germany (EU) |
| Google Ireland Ltd. | Off-site backup | EU; group companies in the USA (DPF) |
| OpenAI Ireland Ltd. | AI assistance; data is not used for training | Ireland (EU); processing in the USA (DPF / SCC) |
| Stripe Payments Europe Ltd. | Subscription payments (company billing details only) | Ireland (EU); group companies in the USA (DPF) |
Deletion and closing your account
- Applications: deleted 6 months after the hiring ends, unless the candidate agreed to more.
- Closed company account: everything is deleted 30 days after closing.
- A candidate can ask you to delete their data at any time. Delete the candidate, and the files go with it.
jah.dk sets no tracking cookies. We count visits on the server, without cookies.
See it with your own data in ten minutes
Click through the demo first, or create a free account and post your first job.