Privacy Policy

Last updated: 10 August 2026

This Policy is an information notice, not a request for consent. Most of the processing described here is based on contract, legal obligation or legitimate interest. Where consent is required, it is requested separately and explicitly.

1. Data controller

The controller for processing carried out by Jobtimist is the sole proprietorship KOUNIOS ILIAS IRAKLIS, registered office at 6 Oidipodos Street, 542 49 Thessaloniki, Greece, VAT number 063691461, tax office Z' Thessaloniki.

For data protection matters and to exercise your rights, contact legal@jobtimist.gr. This address is a privacy contact point and is not designated as the address of a Data Protection Officer (DPO), unless a DPO is formally appointed following legal assessment.

2. Who this applies to

This Policy applies to visitors, candidates, employers, employer representatives, customers, recipients of communications, and persons who contact Jobtimist or submit a report.

3. Data we collect

Depending on how the service is used, we may process:

account details, such as name, username, e-mail, telephone and password in encrypted form;
candidate professional profile details, such as title, location, education, experience, skills, languages, links, photograph, CV and supporting files;
application details and communications with employers;
job preferences, saved searches and alerts;
employer, company, legal representation, vacancy and contact person details;
order, invoicing, VAT number, company name, address, amount, package and payment status details;
technical data, such as IP address, device identifiers, browser, operating system, date and time, log files and security events;
cookie and similar technology data in accordance with the Cookie Policy;
the content of support requests, complaints, reports of illegal content and rights requests;
records evidencing consent, acceptance of the Terms and changes to settings.

4. Special categories and unnecessary data

As a general rule, Jobtimist does not request data concerning health, religious or philosophical beliefs, political opinions, trade union membership, genetic or biometric data, data concerning sex life or sexual orientation, or data relating to criminal convictions.

Candidates should avoid submitting such information, as well as identity card or passport numbers, social security numbers, bank details or other unnecessary identifiers. If such data is submitted without being necessary, Jobtimist may remove it or request that the file be replaced.

5. Purposes and legal bases

5.1 Providing the service and performing the contract

creating and managing an account;
publishing and managing vacancies;
creating profiles and submitting applications;
saving searches and sending alerts requested by the user;
processing orders, packages and payments;
providing support.

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

5.2 Compliance with legal obligations

keeping tax and accounting records;
responding to lawful orders from authorities;
handling data protection rights and security incidents;
complying with e-commerce and digital services obligations.

Legal basis: Article 6(1)(c) GDPR (legal obligation).

5.3 Legitimate interests

preventing fraud, abuse and security breaches;
verifying employers and the quality of listings;
technical operation, debugging and improvement of the service;
establishing, exercising or defending legal claims;
basic measurement carried out without non-essential cookies.

Legal basis: Article 6(1)(f) GDPR (legitimate interest), following a balancing test.

5.4 Consent

sending optional newsletters and job alerts;
enabling non-essential cookies and analytics or marketing tools;
optionally making a candidate profile visible in searches by verified employers;
retaining details in an optional candidate pool beyond the original purpose, once this is implemented.

Legal basis: Article 6(1)(a) GDPR (consent). Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.

6. Sources of data

Most data is provided directly by the user. We may also receive:

technical data from the device and browser;
employer details from public professional or commercial registers for verification purposes;
payment status and limited transaction details from the payment provider;
information from a user reporting suspicious or illegal content.

7. Who receives the data

Data may be disclosed only to the extent necessary:

to the employer to whom a candidate submits an application;
to verified employers, only if the candidate has enabled searchability of their profile;
to providers of hosting, technical support, e-mail, security, backup, payment and accounting services, bound by contract;
to analytics, marketing or CAPTCHA tools only in accordance with consent choices and applicable law;
to public, judicial, supervisory or law enforcement authorities where there is a legal obligation or valid order;
to professional advisers, such as lawyers and accountants, under a duty of confidentiality.

We do not sell CVs or candidates' personal data.

8. Employers as independent controllers

When an employer receives candidate details through an application or an authorised profile search, that employer decides independently on the subsequent processing and must provide its own privacy notice. Questions about the employer's use of the data should also be addressed to them.

Jobtimist remains responsible for its own platform operations and is not released from its own obligations.

9. International transfers

We aim to use providers that process data within the European Economic Area. If data is transferred to a country outside the EEA, appropriate safeguards are applied, such as an adequacy decision, the European Commission's standard contractual clauses and, where required, supplementary technical or organisational measures.

10. Retention periods

How deletion works today. The periods below are maximum retention periods. Deletion takes place upon your request through your account settings or via legal@jobtimist.gr, as well as during routine data review. Automated periodic deletion is being implemented and, once operational, this section will be updated.

Data category	Maximum retention period
Candidate account and profile	While the account is active and up to 12 months from the last activity, following prior notice
CVs and attached files	While the account is active and up to 12 months from the last activity, or until deleted by the user
Applications and platform messages	Up to 12 months from the last related activity
Employer account and publication history	For the duration of the relationship and up to 5 years after the last transaction or use
Invoices, accounting and tax data	For the period required by law, as a rule at least 5 years
Support requests and complaints	Up to 12 months from closure of the request
Security and log files	As a rule up to 12 months, unless longer retention is required to investigate an incident
Evidence of acceptance of Terms and consents	Up to 5 years after the end of the relevant relationship or withdrawal
Data relating to a dispute or legal claim	Until final resolution and expiry of the relevant time limits

Data is deleted or anonymised when the corresponding period expires.

11. Your rights

You have, as applicable, the right:

to be informed and to access your data;
to rectification of inaccurate data;
to erasure;
to restriction of processing;
to object to processing based on legitimate interest or to direct marketing;
to data portability, where processing is based on consent or contract and carried out by automated means;
to withdraw consent;
not to be subject to a decision based solely on automated means that produces legal or similarly significant effects, where applicable.

Requests are submitted to legal@jobtimist.gr. Additional information may be requested for secure identity verification. A response is provided without undue delay and, as a rule, within one month.

You may also lodge a complaint with the Greek Data Protection Authority, 1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr.

12. Automated suggestions and artificial intelligence

Jobtimist may display suggested vacancies or candidates based on filters, categories, location, stated preferences or basic matching rules. These suggestions are not a guarantee of suitability and do not make hiring or rejection decisions.

If an artificial intelligence system is used in future for scoring, ranking, rejection or substantive assessment of candidates, this will be preceded by specific legal and technical assessment, an impact assessment where required, human oversight, and an update to this notice.

13. Security

We apply appropriate technical and organisational measures, such as access control, encryption where appropriate, backups, event logging, restriction of privileges and incident response procedures. No online service can guarantee absolute security.

In the event of a data breach, the obligations to notify the supervisory authority and, where required, to inform affected individuals are applied.

14. Commercial communications

Optional commercial communications are sent only where there is valid consent or another lawful basis permitted by Article 11 of Greek Law 3471/2006. Every message includes an easy and free means of unsubscribing.

Functional communications necessary for the account, security, an application, a purchase or a change to the Terms are not marketing and may be sent without optional consent.

15. Changes to this Policy

This Policy may be updated when services, providers or the legal framework change. The date of the last update appears at the top. Appropriate notice is given for material changes.